This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/af2hi8V_6XBfDLcR66UImjT0iRs.roa File: af2hi8V_6XBfDLcR66UImjT0iRs.roa (raw, json) Hash identifier: kN5giEt8lpaRlzktqhTZf2jIXA6thsWMrbPgPzbcxSc= Subject key identifier: 69:FD:A1:8B:C5:7F:E9:70:5F:0C:B7:11:EB:A5:08:9A:34:F4:89:1B Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019B7E380F1BD8CE8806D8F6710BD95C5E00 Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/af2hi8V_6XBfDLcR66UImjT0iRs.roa Signing time: Fri 02 Jan 2026 10:19:21 +0000 ROA not before: Fri 02 Jan 2026 10:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210976 IP address blocks: 45.10.42.0/24 maxlen: 24 88.218.169.0/24 maxlen: 24 88.218.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0f:1b:d8:ce:88:06:d8:f6:71:0b:d9:5c:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Jan 2 10:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69fda18bc57fe9705f0cb711eba5089a34f4891b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:39:c0:6d:ea:3d:7f:75:06:85:c5:81:b3: 39:78:2c:d6:3f:b5:7f:9b:aa:80:53:2e:c9:9a:b8: dd:ce:17:b7:33:f6:dd:08:45:61:a9:76:46:68:31: c0:c1:75:2a:ce:49:cc:7d:d1:e4:d4:7f:dc:d1:83: 70:df:cb:0f:76:58:db:66:8a:c1:2e:f5:07:67:6b: aa:88:19:90:de:e0:10:32:ec:de:fe:39:91:72:26: 2f:77:a4:19:d8:8d:30:08:c2:8e:d8:76:3d:40:4f: 86:ed:2d:5a:17:e0:7f:94:6f:b4:7a:ef:5f:ce:fb: 59:77:b9:ad:fa:73:71:0a:f7:55:bf:0e:da:0c:f5: cd:2a:36:c9:c7:e9:ac:04:40:65:1e:91:05:81:fb: 6b:13:95:9e:3b:ac:b4:73:e5:41:eb:6f:e4:5c:eb: 94:a5:ff:78:0a:a9:4b:18:34:60:96:9c:cd:ca:09: 7f:72:e8:12:52:dd:c5:43:3d:c9:75:08:b5:86:86: 9e:5c:d2:b9:c1:a3:0c:95:8d:ee:3b:e5:7b:e7:b6: d8:4e:c6:2f:c1:20:7f:0b:33:f9:4e:9b:74:4a:56: 81:fa:ed:87:50:a1:0f:1c:58:f3:73:5f:d1:ab:cb: 53:e5:77:2d:a5:ea:7c:33:94:19:9d:73:d2:bd:5a: 15:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FD:A1:8B:C5:7F:E9:70:5F:0C:B7:11:EB:A5:08:9A:34:F4:89:1B X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/af2hi8V_6XBfDLcR66UImjT0iRs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.42.0/24 88.218.169.0/24 88.218.171.0/24 Signature Algorithm: sha256WithRSAEncryption 30:77:61:a2:49:49:c4:42:f3:19:b9:1b:70:05:45:f5:ef:98: 27:5f:13:9c:c4:e8:23:09:dd:f4:1b:78:19:37:59:98:21:8d: 60:a3:1d:ab:62:4b:97:65:3d:60:5d:42:83:ab:4c:d5:5a:20: 65:8a:aa:b1:10:4b:78:eb:fe:c5:5c:9a:75:f2:3f:f4:fb:e0: 86:6c:7b:24:d2:0c:00:3e:d9:b2:eb:3e:3e:e8:b1:31:88:ba: ac:cc:22:9c:8a:71:10:ea:29:0c:27:1f:49:0d:0a:1c:5f:3f: 19:bb:c7:80:31:25:a0:2b:d3:59:21:fe:80:31:6c:03:2f:66: d9:ce:48:a3:aa:c4:0f:06:ea:e6:81:4c:82:f6:fa:fa:9c:4a: fd:e4:3f:c0:ea:cd:af:9a:91:00:3c:fb:d6:33:1d:1e:22:f6: 56:21:ee:cb:c0:c1:a3:ce:62:42:84:7e:3b:38:74:6d:09:2b: 40:14:a1:a3:a8:bd:57:6d:40:21:bd:e4:c1:c0:f7:77:1e:c4: 01:f3:38:b3:91:29:c4:be:4a:b1:e4:af:09:5b:7b:ae:b9:f2: 07:9f:62:b7:19:62:ca:fe:e1:8c:5f:ec:1c:f0:a2:62:0d:62: 6b:6e:32:c3:7f:17:50:78:d3:82:b2:14:99:ed:43:5d:8b:e6: 05:76:52:5f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OA8b2M6IBtj2cQvZXF4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjYwMTAyMTAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWZkYTE4YmM1N2ZlOTcwNWYwY2I3MTFlYmE1MDg5YTM0ZjQ4OTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsus5wG3qPX91BoXFgbM5eCzWP7V/ m6qAUy7Jmrjdzhe3M/bdCEVhqXZGaDHAwXUqzknMfdHk1H/c0YNw38sPdljbZorB LvUHZ2uqiBmQ3uAQMuze/jmRciYvd6QZ2I0wCMKO2HY9QE+G7S1aF+B/lG+0eu9f zvtZd7mt+nNxCvdVvw7aDPXNKjbJx+msBEBlHpEFgftrE5WeO6y0c+VB62/kXOuU pf94CqlLGDRglpzNygl/cugSUt3FQz3JdQi1hoaeXNK5waMMlY3uO+V757bYTsYv wSB/CzP5Tpt0SlaB+u2HUKEPHFjzc1/Rq8tT5Xctpep8M5QZnXPSvVoVAwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGn9oYvFf+lwXwy3EeulCJo09IkbMB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvYWYyaGk4Vl82WEJmRExjUjY2VUltalQwaVJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALQoqAwQA WNqpAwQAWNqrMA0GCSqGSIb3DQEBCwUAA4IBAQAwd2GiSUnEQvMZuRtwBUX175gn XxOcxOgjCd30G3gZN1mYIY1gox2rYkuXZT1gXUKDq0zVWiBliqqxEEt46/7FXJp1 8j/0++CGbHsk0gwAPtmy6z4+6LExiLqszCKcinEQ6ikMJx9JDQocXz8Zu8eAMSWg K9NZIf6AMWwDL2bZzkijqsQPBurmgUyC9vr6nEr95D/A6s2vmpEAPPvWMx0eIvZW Ie7LwMGjzmJChH47OHRtCStAFKGjqL1XbUAhveTBwPd3HsQB8zizkSnEvkqx5K8J W3uuufIHn2K3GWLK/uGMX+wc8KJiDWJrbjLDfxdQeNOCshSZ7UNdi+YFdlJf -----END CERTIFICATE-----Generated at Tue Jan 20 17:06:29 2026 by rpki-client