This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/AfYQa_AeqZyT_D745iYo-ipvqNQ.roa File: AfYQa_AeqZyT_D745iYo-ipvqNQ.roa (raw, json) Hash identifier: VElVe9Ucy7PRgV1NvN3Jr2nRLj6iyjL30ouxZV5B+5w= Subject key identifier: 01:F6:10:6B:F0:1E:A9:9C:93:FC:3E:F8:E6:26:28:FA:2A:6F:A8:D4 Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019B7CEE04F6B36A9C51BD055B382CC9341E Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/AfYQa_AeqZyT_D745iYo-ipvqNQ.roa Signing time: Fri 02 Jan 2026 04:18:52 +0000 ROA not before: Fri 02 Jan 2026 04:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200202 IP address blocks: 81.29.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:04:f6:b3:6a:9c:51:bd:05:5b:38:2c:c9:34:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Jan 2 04:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01f6106bf01ea99c93fc3ef8e62628fa2a6fa8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ac:af:0a:7a:7a:df:66:a4:bd:8f:58:6a:0f: c3:4a:5c:ff:d7:9d:8c:2a:45:6d:25:b4:84:d8:ec: 84:c0:81:35:69:8f:f2:ff:95:ee:2a:a9:85:da:a0: 4f:64:8c:13:65:6c:91:48:60:27:00:a4:c2:2e:b9: ac:4f:2e:20:f4:60:f0:9d:e6:5c:7f:bf:13:e4:36: be:15:de:b1:1c:65:a3:2e:26:91:93:9d:89:92:d2: 20:a4:76:c6:da:b8:b6:52:2b:96:a9:0b:60:42:7a: f5:93:7c:c5:1b:7b:54:89:1b:82:68:82:79:c7:ed: aa:34:13:41:8a:82:cb:7a:15:38:61:0c:f6:e5:7b: 9d:6a:d6:d1:1b:af:c4:05:4c:3c:e5:68:40:02:81: 1c:82:26:fb:26:79:0a:50:26:d3:c6:4d:58:8e:ab: 8c:fa:48:5d:29:3e:54:a3:63:4f:1c:11:3b:b4:78: 3e:da:3a:bf:05:bd:6e:14:51:f3:42:1a:a0:6b:fb: bd:09:25:6a:1c:bf:c4:2b:ba:64:4d:99:06:ae:02: 82:05:50:5b:00:e4:6a:55:fe:68:52:bc:9c:85:e4: 6a:1f:95:46:8b:4c:eb:f0:c4:ea:b7:c6:c6:61:cb: 1e:53:24:9e:0f:2b:4a:1d:5d:1e:00:83:30:20:d2: db:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F6:10:6B:F0:1E:A9:9C:93:FC:3E:F8:E6:26:28:FA:2A:6F:A8:D4 X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/AfYQa_AeqZyT_D745iYo-ipvqNQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.29.151.0/24 Signature Algorithm: sha256WithRSAEncryption a0:3d:fa:78:0d:8e:29:3a:2c:dd:ce:e0:82:2f:f1:c1:b6:59: 22:86:36:8a:db:03:d4:db:46:9b:06:4e:b1:04:92:2d:12:ad: 9c:31:17:3e:6f:38:5f:c0:7d:9a:c2:31:2d:a2:c3:57:35:c5: e7:b7:be:8f:7b:cc:8a:07:68:18:76:00:e2:b1:a3:6a:53:1b: d4:82:21:48:99:89:da:f6:99:e3:e9:71:79:dd:fd:b0:dd:8b: 7e:05:b4:fc:2b:ef:74:e9:56:52:e0:8a:85:af:c6:97:ea:34: 7b:72:65:9f:34:f1:06:dd:da:cd:05:0b:25:99:4a:bc:82:b0: 4a:7d:48:02:62:b5:67:3f:ac:09:79:e5:80:30:0e:6a:8a:d6: 0a:4a:d3:f5:68:2e:9b:65:49:f7:02:09:02:db:c1:a3:fb:16: d0:fc:cf:bd:35:b9:3b:13:ee:4a:4e:71:0b:30:9d:6a:85:4e: cf:ed:9e:2a:d0:eb:a0:e9:28:17:9e:dd:4e:f8:ba:4a:1a:57: 82:3d:b7:9b:d2:91:54:41:19:12:71:d7:f9:34:fd:23:31:e4: de:81:d9:5a:48:5c:5f:b1:bf:3b:85:5e:c4:2f:de:a4:fa:17: cd:7f:d5:46:bf:6b:d7:5f:70:4d:96:43:fe:d9:32:4e:5a:5b: b9:b5:82:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gT2s2qcUb0FWzgsyTQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjYwMTAyMDQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWY2MTA2YmYwMWVhOTljOTNmYzNlZjhlNjI2MjhmYTJhNmZhOGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqyvCnp632akvY9Yag/DSlz/152M KkVtJbSE2OyEwIE1aY/y/5XuKqmF2qBPZIwTZWyRSGAnAKTCLrmsTy4g9GDwneZc f78T5Da+Fd6xHGWjLiaRk52JktIgpHbG2ri2UiuWqQtgQnr1k3zFG3tUiRuCaIJ5 x+2qNBNBioLLehU4YQz25XudatbRG6/EBUw85WhAAoEcgib7JnkKUCbTxk1YjquM +khdKT5Uo2NPHBE7tHg+2jq/Bb1uFFHzQhqga/u9CSVqHL/EK7pkTZkGrgKCBVBb AORqVf5oUrycheRqH5VGi0zr8MTqt8bGYcseUySeDytKHV0eAIMwINLbrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAH2EGvwHqmck/w++OYmKPoqb6jUMB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvQWZZUWFfQWVxWnlUX0Q3NDVpWW8taXB2cU5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR2XMA0G CSqGSIb3DQEBCwUAA4IBAQCgPfp4DY4pOizdzuCCL/HBtlkihjaK2wPU20abBk6x BJItEq2cMRc+bzhfwH2awjEtosNXNcXnt76Pe8yKB2gYdgDisaNqUxvUgiFImYna 9pnj6XF53f2w3Yt+BbT8K+906VZS4IqFr8aX6jR7cmWfNPEG3drNBQslmUq8grBK fUgCYrVnP6wJeeWAMA5qitYKStP1aC6bZUn3AgkC28Gj+xbQ/M+9Nbk7E+5KTnEL MJ1qhU7P7Z4q0Oug6SgXnt1O+LpKGleCPbeb0pFUQRkScdf5NP0jMeTegdlaSFxf sb87hV7EL96k+hfNf9VGv2vXX3BNlkP+2TJOWlu5tYJj -----END CERTIFICATE-----Generated at Tue Jan 20 06:05:27 2026 by rpki-client