This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/aF3T6rUHhBUitqz7mzC6Hyu2UkE.roa File: aF3T6rUHhBUitqz7mzC6Hyu2UkE.roa (raw, json) Hash identifier: 5R617/4qsuOdiRWLsBA1sCOnoyDIgE8YtEcLWIAgty0= Subject key identifier: 68:5D:D3:EA:B5:07:84:15:22:B6:AC:FB:9B:30:BA:1F:2B:B6:52:41 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5AFB5D71CE6A1B51391296CA2BDE47 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/aF3T6rUHhBUitqz7mzC6Hyu2UkE.roa Signing time: Fri 02 Jan 2026 06:17:53 +0000 ROA not before: Fri 02 Jan 2026 06:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41537 IP address blocks: 31.14.220.0/23 maxlen: 23 31.14.220.0/24 maxlen: 24 31.14.221.0/24 maxlen: 24 85.204.123.0/24 maxlen: 24 93.115.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:fb:5d:71:ce:6a:1b:51:39:12:96:ca:2b:de:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=685dd3eab507841522b6acfb9b30ba1f2bb65241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:08:d6:85:a3:84:ed:9b:c7:41:c1:43:29: bb:70:5a:ce:bb:db:39:54:6e:19:c9:5f:80:27:b7: 10:76:91:cb:3b:fd:8a:2c:fb:d8:b0:07:3b:57:4c: a7:df:22:d4:8c:91:a9:05:cb:61:a9:90:26:f1:31: dc:8d:18:41:80:4b:fd:c1:41:cd:4a:22:22:6c:9a: 00:64:a0:ff:7b:b2:2d:0d:43:a8:5d:66:f8:d7:e4: e6:4c:91:ab:b9:1d:7b:db:04:28:0f:e4:5b:ec:14: 45:3d:23:c3:56:a1:fc:ab:1a:60:49:f8:88:61:91: d0:26:00:33:bc:df:41:92:98:96:7d:b4:8f:6c:99: 79:98:14:0b:dc:b3:4e:3c:c8:d0:17:1a:c4:69:3f: 3d:61:93:ba:85:a3:36:ed:b0:cb:c8:42:41:c3:ac: 2e:0a:18:da:7b:6e:e8:1c:08:cd:ac:7c:c7:fd:e7: a7:15:29:da:09:05:b7:f3:93:09:a2:a1:2f:90:23: 73:7b:92:98:17:0b:9e:2b:02:c4:fb:fd:f8:39:d4: ec:e1:b6:72:2c:05:c5:3d:1a:ab:0d:bf:66:d0:7c: af:8d:27:32:89:4a:f7:00:bc:82:c9:b4:c6:55:73: 08:07:8f:40:97:5d:31:b0:8c:d8:09:08:ab:65:d2: 64:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5D:D3:EA:B5:07:84:15:22:B6:AC:FB:9B:30:BA:1F:2B:B6:52:41 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/aF3T6rUHhBUitqz7mzC6Hyu2UkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.220.0/23 85.204.123.0/24 93.115.58.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:9a:1a:b5:0b:a6:e7:b6:32:78:50:e0:8c:94:0a:b2:db:67: e9:cf:43:fe:4d:19:75:cc:5c:1e:44:1f:cc:07:2d:c4:cc:77: c3:10:e9:94:b8:9d:3f:cb:e2:9a:a6:9c:b7:b6:11:79:d8:b9: 53:18:6a:e2:0a:c9:7b:da:35:08:ab:df:54:99:29:df:e4:96: bc:81:ad:b3:8b:40:86:b1:63:fa:45:43:50:5d:62:54:ab:65: 76:c9:ed:9d:c2:1f:9b:68:cd:86:2c:65:8d:f8:a6:4a:86:fb: e7:45:5a:08:64:fc:09:87:90:be:24:4c:4a:cb:a0:18:5b:49: c2:7c:99:f6:0d:35:fd:30:34:9b:6a:6d:f4:65:27:40:b5:76: 30:49:10:4b:1e:94:94:36:56:72:7c:3c:16:dc:2f:a6:fb:27: 62:80:66:3b:9e:a3:9b:b0:55:e3:8d:3a:36:f4:ec:01:e1:b8: 5f:39:d4:ba:d8:a3:37:66:f2:f4:29:4f:d1:e5:7b:58:86:90: af:59:09:e9:66:5b:66:05:07:32:cc:6e:ee:50:10:a5:b7:c7: ec:ba:42:5a:5c:d4:58:7d:91:cc:4b:b6:7b:1b:62:8a:1c:27: 62:d7:0f:f5:5b:b5:b1:a9:76:0a:0f:eb:6a:a4:68:0d:15:23: 07:70:8f:6c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9Wvtdcc5qG1E5EpbKK95HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODVkZDNlYWI1MDc4NDE1MjJiNmFjZmI5YjMwYmExZjJiYjY1MjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZkI1oWjhO2bx0HBQym7cFrOu9s5 VG4ZyV+AJ7cQdpHLO/2KLPvYsAc7V0yn3yLUjJGpBcthqZAm8THcjRhBgEv9wUHN SiIibJoAZKD/e7ItDUOoXWb41+TmTJGruR172wQoD+Rb7BRFPSPDVqH8qxpgSfiI YZHQJgAzvN9BkpiWfbSPbJl5mBQL3LNOPMjQFxrEaT89YZO6haM27bDLyEJBw6wu Chjae27oHAjNrHzH/eenFSnaCQW385MJoqEvkCNze5KYFwueKwLE+/34OdTs4bZy LAXFPRqrDb9m0HyvjScyiUr3ALyCybTGVXMIB49Al10xsIzYCQirZdJkAQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGhd0+q1B4QVIras+5swuh8rtlJBMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvYUYzVDZyVUhoQlVpdHF6N216QzZIeXUyVWtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBHw7cAwQA Vcx7AwQAXXM6MA0GCSqGSIb3DQEBCwUAA4IBAQB/mhq1C6bntjJ4UOCMlAqy22fp z0P+TRl1zFweRB/MBy3EzHfDEOmUuJ0/y+Kappy3thF52LlTGGriCsl72jUIq99U mSnf5Ja8ga2zi0CGsWP6RUNQXWJUq2V2ye2dwh+baM2GLGWN+KZKhvvnRVoIZPwJ h5C+JExKy6AYW0nCfJn2DTX9MDSbam30ZSdAtXYwSRBLHpSUNlZyfDwW3C+m+ydi gGY7nqObsFXjjTo29OwB4bhfOdS62KM3ZvL0KU/R5XtYhpCvWQnpZltmBQcyzG7u UBClt8fsukJaXNRYfZHMS7Z7G2KKHCdi1w/1W7WxqXYKD+tqpGgNFSMHcI9s -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:13 2026 by rpki-client