This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/AF1tyftlYv-ZbB0gxGGiLbWN5Jw.roa File: AF1tyftlYv-ZbB0gxGGiLbWN5Jw.roa (raw, json) Hash identifier: +/pOacDToZziO6c0C1gllfCOdF0TRNPZR7yMX+Y+tz0= Subject key identifier: 00:5D:6D:C9:FB:65:62:FF:99:6C:1D:20:C4:61:A2:2D:B5:8D:E4:9C Certificate issuer: /CN=d04b6ea628179ca3a0e41bffaeea2d33a55461de Certificate serial: 019B7EA4C426A3095AC0F8656F86CAC2ACBB Authority key identifier: D0:4B:6E:A6:28:17:9C:A3:A0:E4:1B:FF:AE:EA:2D:33:A5:54:61:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/AF1tyftlYv-ZbB0gxGGiLbWN5Jw.roa Signing time: Fri 02 Jan 2026 12:18:05 +0000 ROA not before: Fri 02 Jan 2026 12:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50301 IP address blocks: 109.233.64.0/21 maxlen: 21 193.84.186.0/24 maxlen: 24 2a0c:4800::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:c4:26:a3:09:5a:c0:f8:65:6f:86:ca:c2:ac:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d04b6ea628179ca3a0e41bffaeea2d33a55461de Validity Not Before: Jan 2 12:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=005d6dc9fb6562ff996c1d20c461a22db58de49c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:39:f0:e1:6c:d5:96:a1:6c:63:37:f0:26:9d: 37:4f:62:9a:a4:fb:ef:b9:46:60:fa:33:a9:72:2b: 36:e5:bd:bd:6d:e4:62:98:6b:0a:da:0a:df:7d:20: cd:e4:3d:3d:01:fa:ee:41:96:5a:3d:fc:54:bd:da: 4d:b3:66:36:b8:52:95:95:fc:44:f2:cd:3a:8d:09: ce:77:97:44:04:a7:ea:40:c0:0d:ca:2b:86:8c:b4: a3:5f:e1:4c:bf:5f:57:62:8a:1b:a1:bd:3d:ea:1b: f1:6b:ec:3f:14:09:5e:d8:50:b8:65:d1:35:a5:0c: 79:fe:66:ea:97:a9:84:9b:6b:ca:04:6a:05:c6:e3: 3a:a5:fd:db:2b:e7:5b:a5:e9:8a:96:30:e1:5e:a0: 8d:75:af:75:62:b0:05:e8:80:f2:65:e6:80:13:1c: ce:db:1c:94:18:22:5d:b6:44:b8:c2:8c:69:07:f2: 9f:0a:88:6c:e6:17:cc:89:8b:4f:4e:9b:78:f7:9b: da:9f:37:ec:46:92:4d:b7:35:87:58:5b:2b:0c:ac: 51:ab:56:0c:f7:8b:2b:fb:f0:63:7c:2d:16:ea:ca: 1d:7c:62:3d:a0:77:29:35:70:61:3c:fe:d2:5b:77: c4:c7:d5:45:0c:41:a0:ac:ca:af:61:de:f9:7a:a0: 32:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5D:6D:C9:FB:65:62:FF:99:6C:1D:20:C4:61:A2:2D:B5:8D:E4:9C X509v3 Authority Key Identifier: keyid:D0:4B:6E:A6:28:17:9C:A3:A0:E4:1B:FF:AE:EA:2D:33:A5:54:61:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/AF1tyftlYv-ZbB0gxGGiLbWN5Jw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.233.64.0/21 193.84.186.0/24 IPv6: 2a0c:4800::/29 Signature Algorithm: sha256WithRSAEncryption 1f:40:5f:01:d7:1f:b0:b8:7d:40:56:bc:28:d9:5b:3f:78:99: 8a:6a:19:f0:7a:a6:0f:dc:1f:c5:5b:63:54:3a:ad:23:d7:65: ee:02:5c:6a:ff:ba:b1:cb:97:3b:dc:58:fd:21:7d:3a:ca:f6: 7e:9b:b3:12:a2:7a:11:de:e5:04:ec:b1:19:33:4e:f7:d6:7c: 8a:43:1e:c2:ce:c1:e3:a2:ae:25:1b:02:63:e6:3e:a5:6d:66: 73:98:6b:3b:9a:20:cf:7a:f0:d6:8c:47:be:99:dd:21:24:b1: b7:4a:32:21:7b:dc:8b:39:90:1a:60:f7:ba:05:9e:73:5f:fa: d2:3f:a4:a8:70:51:d4:96:80:d4:29:c6:9e:a0:45:80:46:69: 69:be:d4:da:c8:a4:0a:b9:7b:d2:12:ac:9c:da:9c:05:7f:5e: 53:c2:d9:36:6b:c8:ce:20:67:29:66:e1:b1:ed:19:e1:d9:da: be:75:b2:39:17:59:73:10:17:b3:14:2b:bd:c3:99:ad:29:0f: 75:22:00:d0:b0:ee:81:ec:84:14:81:46:ce:64:0c:a9:db:70: 3d:ff:b4:3b:40:92:4a:68:c9:22:f2:c4:04:14:94:bb:f2:bc: df:a3:2f:bf:7d:e1:36:10:c4:cf:06:a2:d6:48:06:3d:ce:5f: 81:6c:30:fc -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+pMQmowlawPhlb4bKwqy7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNGI2ZWE2MjgxNzljYTNhMGU0MWJmZmFlZWEyZDMzYTU1 NDYxZGUwHhcNMjYwMTAyMTIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDVkNmRjOWZiNjU2MmZmOTk2YzFkMjBjNDYxYTIyZGI1OGRlNDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5znw4WzVlqFsYzfwJp03T2KapPvv uUZg+jOpcis25b29beRimGsK2grffSDN5D09AfruQZZaPfxUvdpNs2Y2uFKVlfxE 8s06jQnOd5dEBKfqQMANyiuGjLSjX+FMv19XYoobob096hvxa+w/FAle2FC4ZdE1 pQx5/mbql6mEm2vKBGoFxuM6pf3bK+dbpemKljDhXqCNda91YrAF6IDyZeaAExzO 2xyUGCJdtkS4woxpB/KfCohs5hfMiYtPTpt495vanzfsRpJNtzWHWFsrDKxRq1YM 94sr+/BjfC0W6sodfGI9oHcpNXBhPP7SW3fEx9VFDEGgrMqvYd75eqAyuQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFABdbcn7ZWL/mWwdIMRhoi21jeScMB8GA1UdIwQY MBaAFNBLbqYoF5yjoOQb/67qLTOlVGHeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEV0dXBpZ1huS09nNUJ2X3J1b3RNNlZVWWQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lMWU2YjMtOTMwYS00MDIyLWE4Yzct ZWNjNzIyZjlkN2ZmLzEvQUYxdHlmdGxZdi1aYkIwZ3hHR2lMYldONUp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9lMWU2YjMtOTMwYS00MDIyLWE4YzctZWNjNzIyZjlkN2Zm LzEvMEV0dXBpZ1huS09nNUJ2X3J1b3RNNlZVWWQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDbelAAwQA wVS6MA0EAgACMAcDBQMqDEgAMA0GCSqGSIb3DQEBCwUAA4IBAQAfQF8B1x+wuH1A Vrwo2Vs/eJmKahnweqYP3B/FW2NUOq0j12XuAlxq/7qxy5c73Fj9IX06yvZ+m7MS onoR3uUE7LEZM0731nyKQx7CzsHjoq4lGwJj5j6lbWZzmGs7miDPevDWjEe+md0h JLG3SjIhe9yLOZAaYPe6BZ5zX/rSP6SocFHUloDUKcaeoEWARmlpvtTayKQKuXvS Eqyc2pwFf15Twtk2a8jOIGcpZuGx7Rnh2dq+dbI5F1lzEBezFCu9w5mtKQ91IgDQ sO6B7IQUgUbOZAyp23A9/7Q7QJJKaMki8sQEFJS78rzfoy+/feE2EMTPBqLWSAY9 zl+BbDD8 -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:19 2026 by rpki-client