This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/Gfv6VShJ4mT0fdnOqNJm0r4Kd0I.roa File: Gfv6VShJ4mT0fdnOqNJm0r4Kd0I.roa (raw, json) Hash identifier: qUpgMPynY63Z9VUYkg3HECjUl6zX6JH95LZtBLn9SPc= Subject key identifier: 19:FB:FA:55:28:49:E2:64:F4:7D:D9:CE:A8:D2:66:D2:BE:0A:77:42 Certificate issuer: /CN=c2f3e8cdd31c82798ddef93401f29c7dcaa6af6d Certificate serial: 019B7F14030BB0FEEDF3E6A8AB9A879305FE Authority key identifier: C2:F3:E8:CD:D3:1C:82:79:8D:DE:F9:34:01:F2:9C:7D:CA:A6:AF:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/Gfv6VShJ4mT0fdnOqNJm0r4Kd0I.roa Signing time: Fri 02 Jan 2026 14:19:36 +0000 ROA not before: Fri 02 Jan 2026 14:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213432 IP address blocks: 193.33.244.0/24 maxlen: 24 2a14:26c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.crl rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:03:0b:b0:fe:ed:f3:e6:a8:ab:9a:87:93:05:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2f3e8cdd31c82798ddef93401f29c7dcaa6af6d Validity Not Before: Jan 2 14:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19fbfa552849e264f47dd9cea8d266d2be0a7742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:1a:99:0b:8f:9b:50:16:4b:81:a7:1c:81: ae:b0:40:b1:8e:b0:65:6d:12:a1:9c:7f:c7:77:85: 07:dc:26:6a:f5:da:80:7a:0a:d4:bb:cc:db:d7:d0: f1:82:83:31:28:05:53:6c:f0:30:ca:f0:da:b7:0c: 7b:fb:bf:e2:84:17:26:a6:53:ea:c3:64:8a:a3:c1: e5:6a:01:d5:8b:30:63:f8:99:49:32:53:72:10:1c: 84:94:29:f1:47:18:0b:f3:2c:a6:af:05:15:58:ff: e0:24:5b:d4:62:46:90:06:e2:6d:28:a0:36:64:42: a8:2f:fd:e8:4c:8f:30:7a:e6:5f:33:29:25:29:04: bc:c2:4f:4a:f9:eb:57:d3:87:29:d9:03:d6:eb:c4: c7:56:33:55:0b:fd:44:60:90:29:64:76:72:6a:a6: 53:e8:31:a8:ea:72:e4:ee:46:0d:e6:7e:45:dd:2a: 8d:e1:4c:49:d8:cc:e5:a6:2b:0f:46:ee:53:fe:95: e8:c1:2f:4d:0b:e1:26:87:92:1b:da:a9:bb:14:c0: 3d:c5:98:43:a6:63:57:b8:b6:a1:08:1f:a7:d9:8e: 2d:9b:db:df:64:f2:24:3a:15:c1:57:53:4a:c5:aa: 62:f5:12:be:31:b2:51:a0:19:3d:e2:d8:04:3f:cb: cd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FB:FA:55:28:49:E2:64:F4:7D:D9:CE:A8:D2:66:D2:BE:0A:77:42 X509v3 Authority Key Identifier: keyid:C2:F3:E8:CD:D3:1C:82:79:8D:DE:F9:34:01:F2:9C:7D:CA:A6:AF:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/Gfv6VShJ4mT0fdnOqNJm0r4Kd0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.244.0/24 IPv6: 2a14:26c0::/29 Signature Algorithm: sha256WithRSAEncryption 76:28:8a:b3:46:de:52:f6:ee:45:05:75:c7:97:47:6e:3a:52: 15:f8:da:0f:da:f1:b4:e0:ae:78:93:2a:d7:31:b1:2d:da:d5: 04:d1:92:43:bf:e2:9d:55:68:8d:c6:14:18:9c:9a:32:ac:21: 33:38:55:de:73:6d:37:a2:52:05:c7:48:99:a7:b5:e5:58:8a: 91:11:9f:46:a8:ab:1f:3b:bc:44:d9:5f:79:55:1f:41:7c:76: c1:9b:c2:5f:b7:aa:3c:90:0f:91:c0:ef:63:8b:88:93:62:7f: 54:f7:b1:4c:47:74:be:1e:10:41:97:d6:81:98:82:eb:19:46: 77:db:1d:f6:bb:47:fa:91:c5:16:bc:6f:89:bf:18:b1:35:15: a1:2f:d1:75:fd:46:ca:5d:4b:b1:d1:30:5a:86:dc:d7:57:4d: ad:66:5d:50:b9:95:0d:d9:6a:0c:a8:3f:65:48:62:03:14:4b: 4c:bc:db:c7:2e:3c:d4:6a:2c:e8:d8:cb:45:14:0f:52:29:b8: f2:6b:8a:fc:52:3a:8a:51:e9:7c:a1:6d:ec:a1:19:fe:30:3e: 27:9a:1c:f6:81:e4:93:9c:c1:4e:14:c2:9f:76:4b:7a:23:e6: 13:58:df:66:bc:de:7f:de:7e:6e:0b:1e:de:26:f2:85:02:fe: 78:28:09:34 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FAMLsP7t8+aoq5qHkwX+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZjNlOGNkZDMxYzgyNzk4ZGRlZjkzNDAxZjI5YzdkY2Fh NmFmNmQwHhcNMjYwMTAyMTQxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWZiZmE1NTI4NDllMjY0ZjQ3ZGQ5Y2VhOGQyNjZkMmJlMGE3NzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpYamQuPm1AWS4GnHIGusECxjrBl bRKhnH/Hd4UH3CZq9dqAegrUu8zb19DxgoMxKAVTbPAwyvDatwx7+7/ihBcmplPq w2SKo8HlagHVizBj+JlJMlNyEByElCnxRxgL8yymrwUVWP/gJFvUYkaQBuJtKKA2 ZEKoL/3oTI8weuZfMyklKQS8wk9K+etX04cp2QPW68THVjNVC/1EYJApZHZyaqZT 6DGo6nLk7kYN5n5F3SqN4UxJ2MzlpisPRu5T/pXowS9NC+Emh5Ib2qm7FMA9xZhD pmNXuLahCB+n2Y4tm9vfZPIkOhXBV1NKxapi9RK+MbJRoBk94tgEP8vN/QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBn7+lUoSeJk9H3ZzqjSZtK+CndCMB8GA1UdIwQY MBaAFMLz6M3THIJ5jd75NAHynH3Kpq9tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3ZQb3pkTWNnbm1OM3ZrMEFmS2NmY3FtcjIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kZmI4ZjUtNDlhZi00ZjQ4LTg5M2Mt ZmM1NzQ0MGQ0NDhhLzEvR2Z2NlZTaEo0bVQwZmRuT3FOSm0wcjRLZDBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9kZmI4ZjUtNDlhZi00ZjQ4LTg5M2MtZmM1NzQ0MGQ0NDhh LzEvd3ZQb3pkTWNnbm1OM3ZrMEFmS2NmY3FtcjIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwSH0MA0E AgACMAcDBQMqFCbAMA0GCSqGSIb3DQEBCwUAA4IBAQB2KIqzRt5S9u5FBXXHl0du OlIV+NoP2vG04K54kyrXMbEt2tUE0ZJDv+KdVWiNxhQYnJoyrCEzOFXec203olIF x0iZp7XlWIqREZ9GqKsfO7xE2V95VR9BfHbBm8Jft6o8kA+RwO9ji4iTYn9U97FM R3S+HhBBl9aBmILrGUZ32x32u0f6kcUWvG+JvxixNRWhL9F1/UbKXUux0TBahtzX V02tZl1QuZUN2WoMqD9lSGIDFEtMvNvHLjzUaizo2MtFFA9SKbjya4r8UjqKUel8 oW3soRn+MD4nmhz2geSTnMFOFMKfdkt6I+YTWN9mvN5/3n5uCx7eJvKFAv54KAk0 -----END CERTIFICATE-----Generated at Mon Feb 9 21:26:03 2026 by rpki-client