This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/AFD3LN3IxTOKfmEYuxEuR7wUjPc.roa File: AFD3LN3IxTOKfmEYuxEuR7wUjPc.roa (raw, json) Hash identifier: 3fx4frrKprBnR59Ru38Fa8S145quoaM9IAirxeo8gyc= Subject key identifier: 00:50:F7:2C:DD:C8:C5:33:8A:7E:61:18:BB:11:2E:47:BC:14:8C:F7 Certificate issuer: /CN=e14939b83595e2efb69456bcdf23866a5079f6f5 Certificate serial: 019B7E37DE0B551626A354ED0CD6B576385E Authority key identifier: E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/AFD3LN3IxTOKfmEYuxEuR7wUjPc.roa Signing time: Fri 02 Jan 2026 10:19:09 +0000 ROA not before: Fri 02 Jan 2026 10:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206841 IP address blocks: 185.174.184.0/22 maxlen: 22 185.174.184.0/24 maxlen: 24 185.174.185.0/24 maxlen: 24 185.174.186.0/24 maxlen: 24 185.174.187.0/24 maxlen: 24 2a0b:b300::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:de:0b:55:16:26:a3:54:ed:0c:d6:b5:76:38:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14939b83595e2efb69456bcdf23866a5079f6f5 Validity Not Before: Jan 2 10:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0050f72cddc8c5338a7e6118bb112e47bc148cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:35:6a:40:1d:51:37:c8:16:b6:63:d2:8f:64: f3:af:79:42:c7:e4:45:56:70:0c:4c:14:dd:b4:41: 81:b9:1f:99:57:83:46:4d:fa:e2:ea:72:ee:fa:dc: 43:56:58:19:41:51:10:1e:d4:57:a1:d2:e2:d3:74: a5:df:be:3b:bb:db:d8:0b:11:04:aa:7a:45:4d:17: dc:af:20:2a:1b:3b:c6:c0:6b:c7:6f:d5:1b:ea:37: ee:c3:11:5b:0f:35:d0:aa:d5:be:db:b5:9d:6f:a4: 03:f7:cb:43:8f:c3:6c:4f:e5:f3:c3:bc:6b:eb:c8: e8:e5:f7:1e:6a:4a:ec:03:d3:5c:a2:71:50:0b:0e: a3:b9:7f:28:bf:cd:f3:23:de:e5:c5:f1:f9:1c:b6: 21:29:85:ce:2a:6c:30:c3:42:d8:4a:df:0c:d2:0f: 2e:bb:c9:bf:d3:ed:d2:cd:dd:3f:12:be:c1:06:31: 46:ef:8f:2a:16:c5:46:8d:f6:48:dd:66:57:35:03: 8a:d2:87:81:70:7a:81:cc:3e:0a:0b:c0:bd:32:95: 92:54:38:f6:70:5d:62:27:be:5f:0c:5f:dd:98:6b: c5:c4:a8:4e:6b:98:dc:63:9a:fe:ee:b0:14:60:30: 6c:22:ac:b3:59:8a:15:ab:5c:15:cb:28:73:92:33: 34:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:50:F7:2C:DD:C8:C5:33:8A:7E:61:18:BB:11:2E:47:BC:14:8C:F7 X509v3 Authority Key Identifier: keyid:E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/AFD3LN3IxTOKfmEYuxEuR7wUjPc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.174.184.0/22 IPv6: 2a0b:b300::/29 Signature Algorithm: sha256WithRSAEncryption 34:49:5b:a2:38:8d:40:3a:40:ea:69:04:13:38:03:c5:d4:a1: d8:47:f7:67:67:90:c8:63:1a:f3:50:38:51:fa:95:5d:6c:26: 74:df:1a:d8:81:05:18:92:d9:6d:11:82:56:78:ff:67:bb:42: 0c:aa:3b:49:9e:91:6f:e9:a5:36:f3:49:f6:bc:f9:f9:cd:1b: 9e:20:5a:a5:e7:7e:80:46:cf:8e:38:b5:8d:3b:89:34:1f:a7: dc:e5:da:ba:bb:4a:83:ec:ff:a7:ec:25:01:15:66:c6:7b:40: da:7e:95:14:5c:17:55:9b:5b:e1:06:be:99:8a:8b:d9:52:53: 9e:a6:e3:db:d4:57:97:85:4f:d6:2b:9c:fd:27:ae:62:5f:6f: f7:b0:16:1d:22:3c:29:56:3f:a5:4e:81:7d:78:ef:92:4f:78: 90:11:32:8f:27:3f:ec:5f:8e:c2:f9:a6:85:90:e4:51:48:1a: e1:58:11:92:b6:39:89:89:18:55:41:c3:92:71:41:87:02:2c: 24:ac:85:02:3e:c7:dc:40:1c:e6:7e:70:24:2b:2f:71:08:5c: 4f:05:fa:da:3a:5f:9d:bf:fe:f6:ef:d1:e3:d0:22:82:b4:68: af:66:d6:f1:b4:53:8f:e5:42:17:71:04:70:e8:31:28:4a:31: 00:d1:98:01 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+N94LVRYmo1TtDNa1djheMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNDkzOWI4MzU5NWUyZWZiNjk0NTZiY2RmMjM4NjZhNTA3 OWY2ZjUwHhcNMjYwMTAyMTAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDUwZjcyY2RkYzhjNTMzOGE3ZTYxMThiYjExMmU0N2JjMTQ4Y2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzVqQB1RN8gWtmPSj2Tzr3lCx+RF VnAMTBTdtEGBuR+ZV4NGTfri6nLu+txDVlgZQVEQHtRXodLi03Sl3747u9vYCxEE qnpFTRfcryAqGzvGwGvHb9Ub6jfuwxFbDzXQqtW+27Wdb6QD98tDj8NsT+Xzw7xr 68jo5fceakrsA9NconFQCw6juX8ov83zI97lxfH5HLYhKYXOKmwww0LYSt8M0g8u u8m/0+3Szd0/Er7BBjFG748qFsVGjfZI3WZXNQOK0oeBcHqBzD4KC8C9MpWSVDj2 cF1iJ75fDF/dmGvFxKhOa5jcY5r+7rAUYDBsIqyzWYoVq1wVyyhzkjM0DwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFABQ9yzdyMUzin5hGLsRLke8FIz3MB8GA1UdIwQY MBaAFOFJObg1leLvtpRWvN8jhmpQefb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVrNXVEV1Y0dS0ybEZhODN5T0dhbEI1OXZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mOTBmZGEtMDM0ZC00NGUwLWE4MTIt Y2Q2MzBkYmMxZDE4LzEvQUZEM0xOM0l4VE9LZm1FWXV4RXVSN3dValBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9mOTBmZGEtMDM0ZC00NGUwLWE4MTItY2Q2MzBkYmMxZDE4 LzEvNFVrNXVEV1Y0dS0ybEZhODN5T0dhbEI1OXZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCua64MA0E AgACMAcDBQMqC7MAMA0GCSqGSIb3DQEBCwUAA4IBAQA0SVuiOI1AOkDqaQQTOAPF 1KHYR/dnZ5DIYxrzUDhR+pVdbCZ03xrYgQUYktltEYJWeP9nu0IMqjtJnpFv6aU2 80n2vPn5zRueIFql536ARs+OOLWNO4k0H6fc5dq6u0qD7P+n7CUBFWbGe0DafpUU XBdVm1vhBr6ZiovZUlOepuPb1FeXhU/WK5z9J65iX2/3sBYdIjwpVj+lToF9eO+S T3iQETKPJz/sX47C+aaFkORRSBrhWBGStjmJiRhVQcOScUGHAiwkrIUCPsfcQBzm fnAkKy9xCFxPBfraOl+dv/7279Hj0CKCtGivZtbxtFOP5UIXcQRw6DEoSjEA0ZgB -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:46 2026 by rpki-client