This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/avgf1I0MlRwhkwtnvCFBve8cXuY.roa File: avgf1I0MlRwhkwtnvCFBve8cXuY.roa (raw, json) Hash identifier: yaBWkyvgOOxbTnib2Xpd9vJky9B3kYKUvM6dRGhpzic= Subject key identifier: 6A:F8:1F:D4:8D:0C:95:1C:21:93:0B:67:BC:21:41:BD:EF:1C:5E:E6 Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019ACB4BB9172F6265D9905A27E58AE2CAE2 Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/avgf1I0MlRwhkwtnvCFBve8cXuY.roa Signing time: Fri 28 Nov 2025 16:28:48 +0000 ROA not before: Fri 28 Nov 2025 16:28:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44486 IP address blocks: 78.40.211.0/24 maxlen: 24 217.147.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:4b:b9:17:2f:62:65:d9:90:5a:27:e5:8a:e2:ca:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Nov 28 16:28:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6af81fd48d0c951c21930b67bc2141bdef1c5ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:65:48:06:3d:46:0f:f0:31:c7:1c:72:2c:ff: 59:87:8d:61:ea:e0:5e:a1:58:d7:6b:f8:39:63:a1: 89:0f:22:a7:70:d5:ba:2d:5e:a0:a2:71:44:31:ae: b5:0b:4b:8e:58:6b:00:fd:43:33:84:a8:10:bd:2d: 7d:67:d5:37:92:8c:0c:5c:99:84:17:6e:3c:d6:27: b3:7e:19:9c:5d:3a:f9:0a:c9:78:2f:b4:c9:08:86: 6d:0c:b1:15:cb:aa:27:31:ff:63:21:1f:cd:3c:3f: cd:eb:be:bd:5e:ae:b8:30:a2:f9:b9:c6:f0:38:21: 10:bb:ca:f9:d4:e7:b2:b2:9e:68:3e:45:35:b1:bc: 42:8a:0a:31:0d:12:c9:6f:cd:e9:1b:b3:96:4c:7f: 83:04:88:45:87:a7:e0:90:77:f7:86:3f:1c:74:ec: c4:9b:43:f2:55:2d:17:6c:96:b6:66:8f:6c:4b:3d: 4b:07:ca:58:83:0a:3d:02:6e:4d:2e:27:f8:c2:4b: 22:74:c5:c0:4c:a2:c6:71:30:94:00:d7:cc:05:e7: c0:53:78:3b:93:12:09:92:d8:26:f6:b9:fa:80:79: 14:86:10:9c:b5:43:9c:76:72:5d:5c:6b:15:53:9b: a2:ca:36:35:2e:93:91:2b:0c:50:a1:43:d0:5b:5f: b1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F8:1F:D4:8D:0C:95:1C:21:93:0B:67:BC:21:41:BD:EF:1C:5E:E6 X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/avgf1I0MlRwhkwtnvCFBve8cXuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.211.0/24 217.147.14.0/24 Signature Algorithm: sha256WithRSAEncryption 70:f3:95:d8:8d:7a:ed:95:48:c8:93:d4:82:d7:17:b2:44:9c: c2:aa:c0:c1:25:2d:1d:d4:4a:84:61:cd:24:02:3d:82:98:e7: f1:d4:d7:4b:62:d6:97:75:f6:30:ae:da:02:bf:ff:34:03:2e: 4d:a8:b9:63:01:f4:fe:4e:8b:75:7b:51:5e:ff:ba:53:32:40: 79:50:01:aa:ed:bf:b7:86:45:e8:45:67:b6:2f:14:b1:b1:07: f2:1f:bb:a5:8a:82:f4:94:f0:35:f7:45:50:6a:4b:ba:24:7e: 67:93:71:2a:2b:87:64:a4:28:26:96:99:c7:19:57:f5:50:ae: 7f:31:a4:71:a8:85:f6:5b:6c:b2:cf:0c:c0:5f:78:60:b1:59: 2e:a3:df:d7:65:a1:48:b1:20:9a:b6:ed:c4:d1:4b:80:33:f9: 23:64:eb:95:d5:51:a0:83:5c:48:de:18:76:48:29:82:59:7c: 56:b5:b4:4a:65:0f:d2:a4:30:77:e3:91:19:8e:7a:ef:dd:49: 9a:69:9d:b7:fd:bc:25:95:cc:03:a4:b1:7f:7a:04:13:87:50: 44:88:1a:72:1b:75:01:a5:61:d1:02:c7:d6:0c:17:5f:bd:5d: 6a:a3:9c:74:27:6a:57:ae:8a:bb:fb:32:c6:de:38:76:02:14: 97:e8:ab:a2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrLS7kXL2Jl2ZBaJ+WK4sriMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjUxMTI4MTYyODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWY4MWZkNDhkMGM5NTFjMjE5MzBiNjdiYzIxNDFiZGVmMWM1ZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGVIBj1GD/AxxxxyLP9Zh41h6uBe oVjXa/g5Y6GJDyKncNW6LV6gonFEMa61C0uOWGsA/UMzhKgQvS19Z9U3kowMXJmE F2481iezfhmcXTr5Csl4L7TJCIZtDLEVy6onMf9jIR/NPD/N6769Xq64MKL5ucbw OCEQu8r51Oeysp5oPkU1sbxCigoxDRLJb83pG7OWTH+DBIhFh6fgkHf3hj8cdOzE m0PyVS0XbJa2Zo9sSz1LB8pYgwo9Am5NLif4wksidMXATKLGcTCUANfMBefAU3g7 kxIJktgm9rn6gHkUhhCctUOcdnJdXGsVU5uiyjY1LpORKwxQoUPQW1+xFwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGr4H9SNDJUcIZMLZ7whQb3vHF7mMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvYXZnZjFJME1sUndoa3d0bnZDRkJ2ZThjWHVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATijTAwQA 2ZMOMA0GCSqGSIb3DQEBCwUAA4IBAQBw85XYjXrtlUjIk9SC1xeyRJzCqsDBJS0d 1EqEYc0kAj2CmOfx1NdLYtaXdfYwrtoCv/80Ay5NqLljAfT+Tot1e1Fe/7pTMkB5 UAGq7b+3hkXoRWe2LxSxsQfyH7ulioL0lPA190VQaku6JH5nk3EqK4dkpCgmlpnH GVf1UK5/MaRxqIX2W2yyzwzAX3hgsVkuo9/XZaFIsSCatu3E0UuAM/kjZOuV1VGg g1xI3hh2SCmCWXxWtbRKZQ/SpDB345EZjnrv3UmaaZ23/bwllcwDpLF/egQTh1BE iBpyG3UBpWHRAsfWDBdfvV1qo5x0J2pXroq7+zLG3jh2AhSX6Kui -----END CERTIFICATE-----Generated at Fri Nov 28 22:12:52 2025 by rpki-client