This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/4Bg7xc4c3gn14eqw3Q_EY2wsLCg.roa File: 4Bg7xc4c3gn14eqw3Q_EY2wsLCg.roa (raw, json) Hash identifier: V0r6f18ufhArHZVCr3p5V92fQa1xW01Er8GrT60C2Ak= Subject key identifier: E0:18:3B:C5:CE:1C:DE:09:F5:E1:EA:B0:DD:0F:C4:63:6C:2C:2C:28 Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283 Certificate serial: 019B7B3561A5B3AD01E2B3F64FD67EE07D16 Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/4Bg7xc4c3gn14eqw3Q_EY2wsLCg.roa Signing time: Thu 01 Jan 2026 20:17:34 +0000 ROA not before: Thu 01 Jan 2026 20:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20701 IP address blocks: 185.43.135.0/24 maxlen: 24 193.17.47.0/24 maxlen: 24 2001:148f:fffe::/48 maxlen: 48 2001:148f:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:61:a5:b3:ad:01:e2:b3:f6:4f:d6:7e:e0:7d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283 Validity Not Before: Jan 1 20:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0183bc5ce1cde09f5e1eab0dd0fc4636c2c2c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:04:e1:a7:b9:55:72:d7:be:24:f2:d1:52:b4: 17:e8:eb:7b:23:a7:fc:fa:41:66:73:80:28:2c:bf: 18:64:51:dc:9e:12:90:6a:33:80:d8:76:33:59:69: 66:6a:07:e8:16:02:8a:f5:03:5a:b2:ea:cf:1e:02: 14:23:2a:8d:b7:9c:ae:3d:ee:45:10:1a:2a:9b:a1: 9b:b6:57:44:4c:bf:cc:2a:2e:4b:f9:03:b1:09:0f: fe:00:be:23:61:02:de:48:2f:68:51:68:4a:8b:a8: 13:5b:c6:de:be:11:6f:e6:a4:15:e0:3c:2a:c3:f0: cd:49:98:f2:d4:8f:91:60:f8:61:c1:b7:a2:43:0e: 99:74:24:20:4a:93:19:e5:73:da:8b:3c:b9:a2:47: 75:5d:e9:5a:e8:a6:e5:4c:3e:a8:2d:c1:d5:51:8d: 5e:21:2a:6f:d4:7a:b2:e1:55:bf:6b:20:0d:cc:fb: ab:56:1f:e2:cf:e7:bf:3f:84:2c:b3:ff:b4:6f:a7: 3c:43:91:a0:1a:f6:83:f2:b4:d8:e4:42:71:15:fa: 96:46:16:a9:3f:9e:3d:35:96:fa:29:3d:2b:c2:08: 21:81:94:ab:1c:64:cd:f3:11:72:60:fb:67:ed:b2: 64:9c:55:35:1c:82:ae:9d:2f:ad:a4:7f:17:6b:e0: fa:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:18:3B:C5:CE:1C:DE:09:F5:E1:EA:B0:DD:0F:C4:63:6C:2C:2C:28 X509v3 Authority Key Identifier: keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/4Bg7xc4c3gn14eqw3Q_EY2wsLCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.43.135.0/24 193.17.47.0/24 IPv6: 2001:148f:fffe::/47 Signature Algorithm: sha256WithRSAEncryption 6d:98:4d:85:6a:d2:b7:0a:95:4f:dd:21:74:88:58:ee:7b:a6: b1:41:08:e1:a1:0c:c9:87:f6:58:c2:84:85:3b:c6:c6:82:5a: f6:82:83:66:e3:7b:ef:c8:f0:e2:ed:2d:5b:09:29:94:ec:28: f9:bb:08:92:42:6a:da:fa:a5:f3:8f:29:c2:c2:2c:6c:6b:68: 46:6e:5f:9e:ec:0b:32:52:6b:6f:27:af:25:8e:93:72:66:ac: 11:67:47:f7:03:bb:a3:34:86:de:25:fa:22:4b:85:96:11:a7: d3:7a:bc:ff:e7:d8:f5:0d:6d:36:a0:85:97:de:c5:38:21:11: f8:d4:6a:4e:77:e2:0d:5d:f2:4d:b1:f3:93:f1:f6:f4:82:d4: f3:3f:6a:fa:9b:1e:32:f0:11:73:c0:1e:3d:40:0a:42:be:f6: e6:84:96:e9:64:5e:91:b6:22:42:e1:2a:6d:0e:9c:9e:2a:d8: cf:34:57:93:bd:94:d3:50:d3:8a:7a:d4:54:82:ff:ee:60:fa: b3:bd:f9:bb:c6:e9:c0:36:66:6a:96:eb:ad:ed:31:b3:5c:34: 9f:57:81:a3:5b:97:c1:76:83:ae:1b:f5:88:6b:34:a8:66:e1: 54:44:a2:ed:b6:c3:65:4f:d6:2a:7c:47:a4:ae:1d:36:ea:18: 37:f2:18:55 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt7NWGls60B4rP2T9Z+4H0WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTdmZmU4MjJiM2JhN2JjMTk0ZGI3YTczNGM4NWVmY2Vm MmYyODMwHhcNMjYwMTAxMjAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDE4M2JjNWNlMWNkZTA5ZjVlMWVhYjBkZDBmYzQ2MzZjMmMyYzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AThp7lVcte+JPLRUrQX6Ot7I6f8 +kFmc4AoLL8YZFHcnhKQajOA2HYzWWlmagfoFgKK9QNasurPHgIUIyqNt5yuPe5F EBoqm6GbtldETL/MKi5L+QOxCQ/+AL4jYQLeSC9oUWhKi6gTW8bevhFv5qQV4Dwq w/DNSZjy1I+RYPhhwbeiQw6ZdCQgSpMZ5XPaizy5okd1Xela6KblTD6oLcHVUY1e ISpv1Hqy4VW/ayANzPurVh/iz+e/P4Qss/+0b6c8Q5GgGvaD8rTY5EJxFfqWRhap P549NZb6KT0rwgghgZSrHGTN8xFyYPtn7bJknFU1HIKunS+tpH8Xa+D6cQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFOAYO8XOHN4J9eHqsN0PxGNsLCwoMB8GA1UdIwQY MBaAFGpX/+gis7p7wZTbenNMhe/O8vKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxmXzZDS3p1bnZCbE50NmMweUY3ODd5OG9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hZmVmMTItMWYwOC00YjQ2LTk0N2It Y2EwYzYyNjIxMDk4LzEvNEJnN3hjNGMzZ24xNGVxdzNRX0VZMndzTENnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hZmVmMTItMWYwOC00YjQ2LTk0N2ItY2EwYzYyNjIxMDk4 LzEvYWxmXzZDS3p1bnZCbE50NmMweUY3ODd5OG9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAuSuHAwQA wREvMA8EAgACMAkDBwEgARSP//4wDQYJKoZIhvcNAQELBQADggEBAG2YTYVq0rcK lU/dIXSIWO57prFBCOGhDMmH9ljChIU7xsaCWvaCg2bje+/I8OLtLVsJKZTsKPm7 CJJCatr6pfOPKcLCLGxraEZuX57sCzJSa28nryWOk3JmrBFnR/cDu6M0ht4l+iJL hZYRp9N6vP/n2PUNbTaghZfexTghEfjUak534g1d8k2x85Px9vSC1PM/avqbHjLw EXPAHj1ACkK+9uaElulkXpG2IkLhKm0OnJ4q2M80V5O9lNNQ04p61FSC/+5g+rO9 +bvG6cA2ZmqW663tMbNcNJ9XgaNbl8F2g64b9YhrNKhm4VREou22w2VP1ip8R6Su HTbqGDfyGFU= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:34 2026 by rpki-client