This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/aVs_pTCF35izq7eFYVQj7GDKKKg.roa File: aVs_pTCF35izq7eFYVQj7GDKKKg.roa (raw, json) Hash identifier: HUtPfJfh73XSHYvTDAm1hqZnRW91m33+bqE8cdLnnnE= Subject key identifier: 69:5B:3F:A5:30:85:DF:98:B3:AB:B7:85:61:54:23:EC:60:CA:28:A8 Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8 Certificate serial: 019B7BA504ABC4ED0C29E5D3B8E57667393D Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/aVs_pTCF35izq7eFYVQj7GDKKKg.roa Signing time: Thu 01 Jan 2026 22:19:30 +0000 ROA not before: Thu 01 Jan 2026 22:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208591 IP address blocks: 45.84.208.0/22 maxlen: 24 2a0e:a180::/29 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:04:ab:c4:ed:0c:29:e5:d3:b8:e5:76:67:39:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8 Validity Not Before: Jan 1 22:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=695b3fa53085df98b3abb785615423ec60ca28a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:16:6c:cc:9e:b0:30:0c:14:e8:ef:2c:dc:d8: 5a:3d:e5:5c:94:60:ff:ea:da:c4:40:5a:bf:6b:df: 8a:55:73:5b:04:34:dc:06:99:61:10:5d:f8:c3:f7: df:b5:3a:4e:80:00:85:2c:48:58:3d:61:d7:e0:19: 0f:77:ec:ca:4f:29:d4:09:18:3d:46:32:12:d4:3a: c3:e2:46:76:3e:f5:32:2a:dd:07:4d:8e:9a:05:88: 29:8b:78:9b:52:88:4f:08:99:12:9c:3f:52:5e:b1: e3:c5:bf:eb:50:46:97:81:26:11:63:29:0f:1c:36: 5f:9f:ca:56:80:40:c2:23:63:f7:0b:4d:c7:cd:b1: a8:56:7b:f0:1a:4d:cc:7f:59:8a:4e:ba:0b:ca:62: 2e:2b:ff:96:88:bf:5e:85:9c:cc:66:52:2a:3b:9e: 57:db:fa:32:bf:c5:b0:43:74:c3:9a:e6:3e:1d:75: 4c:5d:9a:2f:79:70:7a:53:a4:9d:38:89:43:0f:bd: e7:eb:bb:4d:d3:a5:50:e7:fc:c1:e9:c3:a9:5c:98: d3:55:36:1d:0c:8f:4b:69:af:01:f6:71:98:a5:af: 31:ce:bf:9c:6a:c7:46:26:9c:e5:b7:a7:6d:1d:1c: 5e:ff:d6:09:40:88:3b:30:0d:10:1e:17:19:22:1b: da:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5B:3F:A5:30:85:DF:98:B3:AB:B7:85:61:54:23:EC:60:CA:28:A8 X509v3 Authority Key Identifier: keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/aVs_pTCF35izq7eFYVQj7GDKKKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.208.0/22 IPv6: 2a0e:a180::/29 Signature Algorithm: sha256WithRSAEncryption a4:dc:f3:d5:b3:4c:8b:b5:d5:d9:06:7c:7b:70:8b:ca:2c:87: 8d:53:11:94:2a:20:1c:41:74:79:8c:3b:e1:e9:10:b7:0b:c4: 6c:93:9f:73:1b:54:bc:bc:5e:52:97:68:99:05:4f:13:21:82: 4d:c4:c3:c9:b5:23:56:06:d6:42:5f:36:a8:8a:ff:64:07:54: 12:b0:25:44:01:20:ff:dd:31:ab:e9:da:01:79:ab:38:de:80: 64:53:f7:de:27:c2:8a:f6:95:13:d1:f4:c7:33:c0:69:b2:1f: f3:f9:99:a0:d0:a1:16:50:05:1a:39:c6:be:c6:78:40:f5:20: 10:99:c8:70:bd:ce:26:be:29:11:bd:a2:3c:d8:db:a1:6c:31: 5d:3e:58:c4:03:12:3b:77:84:16:6d:c9:0c:37:64:ea:55:9f: 10:ee:37:d0:8b:c8:07:a0:51:9f:53:27:a8:f3:35:4c:39:cc: 5a:f5:ba:ee:20:ba:de:61:2a:d9:ab:58:04:18:49:ec:a8:f5: 59:8c:52:f9:65:24:7b:da:87:19:ef:9d:b8:4f:89:95:76:88: f9:49:b5:c6:6a:e7:bd:af:66:2e:b9:fd:72:ae:bd:50:66:c3: d2:95:ae:4e:6e:8c:2b:94:72:d0:e4:85:2f:49:cf:31:6f:a3: 34:1f:fc:0e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pQSrxO0MKeXTuOV2Zzk9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZDRiY2JmMzVkYjdmZTJlZjY2MzUyMmE1YTNhMzk3OWE0 ZjFmZjgwHhcNMjYwMTAxMjIxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTViM2ZhNTMwODVkZjk4YjNhYmI3ODU2MTU0MjNlYzYwY2EyOGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxZszJ6wMAwU6O8s3NhaPeVclGD/ 6trEQFq/a9+KVXNbBDTcBplhEF34w/fftTpOgACFLEhYPWHX4BkPd+zKTynUCRg9 RjIS1DrD4kZ2PvUyKt0HTY6aBYgpi3ibUohPCJkSnD9SXrHjxb/rUEaXgSYRYykP HDZfn8pWgEDCI2P3C03HzbGoVnvwGk3Mf1mKTroLymIuK/+WiL9ehZzMZlIqO55X 2/oyv8WwQ3TDmuY+HXVMXZoveXB6U6SdOIlDD73n67tN06VQ5/zB6cOpXJjTVTYd DI9Laa8B9nGYpa8xzr+casdGJpzlt6dtHRxe/9YJQIg7MA0QHhcZIhvaRQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGlbP6Uwhd+Ys6u3hWFUI+xgyiioMB8GA1UdIwQY MBaAFIvUvL8123/i72Y1IqWjo5eaTx/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAt NDc4ZWQ3ZjhkMDVlLzEvYVZzX3BUQ0YzNWl6cTdlRllWUWo3R0RLS0tnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAtNDc4ZWQ3ZjhkMDVl LzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVTQMA0E AgACMAcDBQMqDqGAMA0GCSqGSIb3DQEBCwUAA4IBAQCk3PPVs0yLtdXZBnx7cIvK LIeNUxGUKiAcQXR5jDvh6RC3C8Rsk59zG1S8vF5Sl2iZBU8TIYJNxMPJtSNWBtZC Xzaoiv9kB1QSsCVEASD/3TGr6doBeas43oBkU/feJ8KK9pUT0fTHM8Bpsh/z+Zmg 0KEWUAUaOca+xnhA9SAQmchwvc4mvikRvaI82NuhbDFdPljEAxI7d4QWbckMN2Tq VZ8Q7jfQi8gHoFGfUyeo8zVMOcxa9bruILreYSrZq1gEGEnsqPVZjFL5ZSR72ocZ 7524T4mVdoj5SbXGaue9r2Yuuf1yrr1QZsPSla5ObowrlHLQ5IUvSc8xb6M0H/wO -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:59 2026 by rpki-client