This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/afJIfmFpNu3X_XQnH955OF5pA20.roa File: afJIfmFpNu3X_XQnH955OF5pA20.roa (raw, json) Hash identifier: clXQX+IWESYXCRjS08HRXKg3UCGRxStO10aaboiTF8Y= Subject key identifier: 69:F2:48:7E:61:69:36:ED:D7:FD:74:27:1F:DE:79:38:5E:69:03:6D Certificate issuer: /CN=767eb661936dc95da3ecc4ca3eaf581389c0d855 Certificate serial: 019B7E37439FA0868C097F01BD358E34907A Authority key identifier: 76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/afJIfmFpNu3X_XQnH955OF5pA20.roa Signing time: Fri 02 Jan 2026 10:18:29 +0000 ROA not before: Fri 02 Jan 2026 10:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39855 IP address blocks: 91.192.85.0/24 maxlen: 24 91.192.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:43:9f:a0:86:8c:09:7f:01:bd:35:8e:34:90:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767eb661936dc95da3ecc4ca3eaf581389c0d855 Validity Not Before: Jan 2 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f2487e616936edd7fd74271fde79385e69036d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:27:5d:1e:38:81:23:2c:6d:7f:87:f8:71:ff: 3e:6b:d9:c0:3d:e5:b4:d4:fa:f0:dc:12:3e:4a:7e: 45:45:6c:5f:8d:e6:38:67:37:db:94:0c:65:f9:86: b2:46:2f:d9:49:15:be:38:75:c9:91:6a:c0:d6:62: d8:93:4e:11:c4:4c:17:87:3f:b0:ec:60:f2:41:ac: d2:b2:e4:e5:f8:fb:58:8d:b7:78:fb:11:d6:0d:94: a1:f2:56:1a:57:71:e9:00:bb:7b:5b:74:20:41:f9: ca:b1:3a:7b:3e:31:69:ea:a0:11:30:1d:f0:8b:38: ac:ac:e0:60:bb:00:42:65:28:4e:ce:cb:87:4d:d5: 2d:46:db:d9:9f:5f:eb:4a:d7:6a:f5:18:bf:4d:de: eb:a5:3d:6b:9b:29:cc:ce:a1:9c:e4:f9:e0:f7:19: 82:8e:b2:12:62:dc:68:13:27:dd:7a:4a:b3:20:32: ac:6e:6d:41:3a:03:32:76:4a:0e:61:e6:09:4e:3c: 01:80:13:ee:a1:1c:99:1a:cb:a6:58:ac:22:4b:43: 73:77:74:99:96:6e:29:41:63:7d:4d:3e:a4:7b:a5: 9d:75:c3:08:b2:22:f9:d5:59:e1:7d:c1:0a:bc:88: af:af:c8:79:8a:1a:a7:01:5a:86:50:d5:d4:58:6c: f7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F2:48:7E:61:69:36:ED:D7:FD:74:27:1F:DE:79:38:5E:69:03:6D X509v3 Authority Key Identifier: keyid:76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/afJIfmFpNu3X_XQnH955OF5pA20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.85.0-91.192.87.255 Signature Algorithm: sha256WithRSAEncryption 47:81:e1:eb:db:97:36:1b:af:cd:3a:86:c4:01:2c:2e:c4:99: fc:06:d3:5f:aa:43:8d:6f:de:8e:3d:ee:2c:8f:7c:cc:80:68: ec:93:7f:be:df:5a:bd:e2:02:8b:05:e8:10:f1:04:53:d0:87: 27:12:b1:69:21:80:73:3f:05:12:68:b5:3b:23:a0:3f:9b:35: af:cc:a6:fe:2c:60:82:57:a4:58:09:7c:03:f2:4e:f1:ee:80: dd:66:1c:ab:5e:3a:1c:f3:f3:dd:b5:ca:eb:94:37:a7:88:fc: ae:96:6f:75:48:8a:6d:a5:67:f7:49:4c:1b:05:0d:5e:88:e2: 18:77:bc:69:a8:1e:10:df:07:25:2e:7f:e2:02:d4:6d:a0:4e: 6e:5a:e7:e7:7d:38:32:a9:72:4d:76:e2:55:67:81:5a:98:ff: 85:46:1a:31:e9:c0:ff:72:2d:31:07:9c:d4:31:5f:14:5f:3f: 99:f5:e6:fc:78:e1:58:e7:08:27:70:83:c3:de:f1:a6:2d:1c: 0e:25:8d:7f:1d:ec:77:e9:b4:a3:b0:16:f5:c8:9f:55:d5:7a: cf:61:2a:1d:e7:63:2f:86:45:35:cb:17:bd:c2:44:5b:17:5c: 15:f8:bc:8e:1a:09:43:25:40:b8:b6:6f:eb:87:b7:07:dc:e0: 21:5a:7f:e2 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+N0OfoIaMCX8BvTWONJB6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2ViNjYxOTM2ZGM5NWRhM2VjYzRjYTNlYWY1ODEzODlj MGQ4NTUwHhcNMjYwMTAyMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWYyNDg3ZTYxNjkzNmVkZDdmZDc0MjcxZmRlNzkzODVlNjkwMzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SddHjiBIyxtf4f4cf8+a9nAPeW0 1Prw3BI+Sn5FRWxfjeY4ZzfblAxl+YayRi/ZSRW+OHXJkWrA1mLYk04RxEwXhz+w 7GDyQazSsuTl+PtYjbd4+xHWDZSh8lYaV3HpALt7W3QgQfnKsTp7PjFp6qARMB3w izisrOBguwBCZShOzsuHTdUtRtvZn1/rStdq9Ri/Td7rpT1rmynMzqGc5Png9xmC jrISYtxoEyfdekqzIDKsbm1BOgMydkoOYeYJTjwBgBPuoRyZGsumWKwiS0Nzd3SZ lm4pQWN9TT6ke6WddcMIsiL51VnhfcEKvIivr8h5ihqnAVqGUNXUWGz3KQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGnySH5haTbt1/10Jx/eeTheaQNtMB8GA1UdIwQY MBaAFHZ+tmGTbcldo+zEyj6vWBOJwNhVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG42MllaTnR5VjJqN01US1BxOVlFNG5BMkZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yYTVhOWMtYmRmOS00ZWQwLWFkMzMt ZjQ1NzU0NDM2M2VmLzEvYWZKSWZtRnBOdTNYX1hRbkg5NTVPRjVwQTIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yYTVhOWMtYmRmOS00ZWQwLWFkMzMtZjQ1NzU0NDM2M2Vm LzEvZG42MllaTnR5VjJqN01US1BxOVlFNG5BMkZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABbwFUD BANbwFAwDQYJKoZIhvcNAQELBQADggEBAEeB4evblzYbr806hsQBLC7EmfwG01+q Q41v3o497iyPfMyAaOyTf77fWr3iAosF6BDxBFPQhycSsWkhgHM/BRJotTsjoD+b Na/Mpv4sYIJXpFgJfAPyTvHugN1mHKteOhzz8921yuuUN6eI/K6Wb3VIim2lZ/dJ TBsFDV6I4hh3vGmoHhDfByUuf+IC1G2gTm5a5+d9ODKpck124lVngVqY/4VGGjHp wP9yLTEHnNQxXxRfP5n15vx44VjnCCdwg8Pe8aYtHA4ljX8d7HfptKOwFvXIn1XV es9hKh3nYy+GRTXLF73CRFsXXBX4vI4aCUMlQLi2b+uHtwfc4CFaf+I= -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:31 2026 by rpki-client