This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/AqHz4ObObmJOHQBW4WCBWZfbmUg.roa File: AqHz4ObObmJOHQBW4WCBWZfbmUg.roa (raw, json) Hash identifier: efamkoeeFHOmwsuQJrPBuAqi8mcE7pwYzSUiql9ZCTM= Subject key identifier: 02:A1:F3:E0:E6:CE:6E:62:4E:1D:00:56:E1:60:81:59:97:DB:99:48 Certificate issuer: /CN=a64cdfa0160239170337ba60934ba06e45b8cd11 Certificate serial: 019B7B36BFA1B5FCC896FF4190D661C34CC4 Authority key identifier: A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/AqHz4ObObmJOHQBW4WCBWZfbmUg.roa Signing time: Thu 01 Jan 2026 20:19:04 +0000 ROA not before: Thu 01 Jan 2026 20:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205760 IP address blocks: 185.196.76.0/22 maxlen: 22 185.196.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:bf:a1:b5:fc:c8:96:ff:41:90:d6:61:c3:4c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a64cdfa0160239170337ba60934ba06e45b8cd11 Validity Not Before: Jan 1 20:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02a1f3e0e6ce6e624e1d0056e160815997db9948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:f5:e1:06:62:8b:d9:fa:da:c7:11:db:2f: 43:a8:f4:f6:9c:29:4a:1b:86:4b:a9:bb:8b:93:eb: 7d:c3:c8:63:8c:2b:85:56:2f:54:c7:f1:f3:64:12: bb:d5:dd:81:60:57:e7:d1:53:7a:4b:ee:01:36:18: df:05:69:94:72:1f:41:5b:9e:36:21:e2:d9:c3:2a: c3:5c:fd:32:36:4c:8a:02:81:84:38:47:eb:59:e1: e0:1c:1b:fb:80:3a:ec:18:05:bc:24:2a:57:e5:2e: fb:99:c4:b3:9b:86:79:eb:81:50:79:e5:51:8c:1e: 1f:cd:a1:44:28:f6:35:01:aa:0a:e9:96:92:d0:0e: df:c1:49:0e:14:34:2f:fb:b8:65:f5:f8:5c:20:90: 92:7e:66:5d:61:76:c5:6f:a5:7b:c1:ed:a5:2f:9e: 59:b4:96:8d:d9:8d:f4:a2:90:a9:ca:24:8b:31:20: a8:cb:e1:78:76:d4:04:69:26:06:05:55:7c:f2:39: ca:03:56:44:37:85:8c:cb:94:4d:8c:76:dd:42:85: 17:1e:ca:b0:09:61:4f:0a:d4:d4:33:46:01:75:fe: 47:47:ca:11:8d:49:13:7a:0c:45:c2:46:3c:8e:ca: f1:c1:2b:4a:02:07:69:3e:c7:2c:49:ad:22:91:b1: c1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A1:F3:E0:E6:CE:6E:62:4E:1D:00:56:E1:60:81:59:97:DB:99:48 X509v3 Authority Key Identifier: keyid:A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/AqHz4ObObmJOHQBW4WCBWZfbmUg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.76.0/22 Signature Algorithm: sha256WithRSAEncryption ad:69:a4:a2:c0:55:a2:38:c4:2d:24:94:80:8e:19:b8:f3:c3: 16:99:48:21:15:9f:5d:cb:2f:b4:45:89:fa:df:e8:6f:71:e2: 96:10:07:e0:cf:99:ac:24:ec:ff:ea:2f:d5:07:be:07:96:88: 67:f9:ba:4d:5f:c4:a7:fc:13:83:f7:87:41:1c:3d:61:6c:d8: 8d:b3:bc:f6:2c:04:fb:93:61:72:b6:5d:4a:09:a8:1a:b1:7d: a1:db:b8:98:ab:c9:77:31:ef:3c:ad:75:ef:7b:84:00:fc:01: ab:2e:1f:6e:b4:f0:cf:62:75:b8:de:b4:c1:ed:fb:5c:2e:8a: 81:08:ba:4f:99:dd:d1:b6:4e:52:b9:dd:e0:64:e8:c1:4e:5e: f2:16:27:35:b5:6b:b1:83:64:8a:f9:3a:3b:07:c7:78:6e:c8: 9e:06:96:60:0b:ac:8f:67:a8:2b:f7:9b:5e:a5:a1:0c:90:3b: b5:33:84:2e:94:55:06:66:bc:25:38:6a:4f:f3:94:b8:3b:f7: 93:fd:f1:ef:bc:bb:a1:49:07:75:c5:09:02:4c:60:2e:c3:90: 27:a9:e3:ce:e0:2c:d3:59:dd:7a:e2:f6:cb:06:e3:dd:20:c7: b0:55:6c:9d:f1:b1:bf:37:d8:bb:00:6e:94:45:ec:a5:95:11: af:f0:8c:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nr+htfzIlv9BkNZhw0zEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NGNkZmEwMTYwMjM5MTcwMzM3YmE2MDkzNGJhMDZlNDVi OGNkMTEwHhcNMjYwMTAxMjAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmExZjNlMGU2Y2U2ZTYyNGUxZDAwNTZlMTYwODE1OTk3ZGI5OTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYH14QZii9n62scR2y9DqPT2nClK G4ZLqbuLk+t9w8hjjCuFVi9Ux/HzZBK71d2BYFfn0VN6S+4BNhjfBWmUch9BW542 IeLZwyrDXP0yNkyKAoGEOEfrWeHgHBv7gDrsGAW8JCpX5S77mcSzm4Z564FQeeVR jB4fzaFEKPY1AaoK6ZaS0A7fwUkOFDQv+7hl9fhcIJCSfmZdYXbFb6V7we2lL55Z tJaN2Y30opCpyiSLMSCoy+F4dtQEaSYGBVV88jnKA1ZEN4WMy5RNjHbdQoUXHsqw CWFPCtTUM0YBdf5HR8oRjUkTegxFwkY8jsrxwStKAgdpPscsSa0ikbHBbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAKh8+Dmzm5iTh0AVuFggVmX25lIMB8GA1UdIwQY MBaAFKZM36AWAjkXAze6YJNLoG5FuM0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGt6Zm9CWUNPUmNETjdwZ2swdWdia1c0elJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83NTQzOWQtZmIwNi00YjYzLTg0YTMt OGJkM2M2YzcwNGRjLzEvQXFIejRPYk9ibUpPSFFCVzRXQ0JXWmZibVVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC83NTQzOWQtZmIwNi00YjYzLTg0YTMtOGJkM2M2YzcwNGRj LzEvcGt6Zm9CWUNPUmNETjdwZ2swdWdia1c0elJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucRMMA0G CSqGSIb3DQEBCwUAA4IBAQCtaaSiwFWiOMQtJJSAjhm488MWmUghFZ9dyy+0RYn6 3+hvceKWEAfgz5msJOz/6i/VB74Hlohn+bpNX8Sn/BOD94dBHD1hbNiNs7z2LAT7 k2Fytl1KCagasX2h27iYq8l3Me88rXXve4QA/AGrLh9utPDPYnW43rTB7ftcLoqB CLpPmd3Rtk5Sud3gZOjBTl7yFic1tWuxg2SK+To7B8d4bsieBpZgC6yPZ6gr95te paEMkDu1M4QulFUGZrwlOGpP85S4O/eT/fHvvLuhSQd1xQkCTGAuw5AnqePO4CzT Wd164vbLBuPdIMewVWyd8bG/N9i7AG6UReyllRGv8Ixh -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:30 2026 by rpki-client