This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/AOsYF79xJ6mwpSoq_CsTPxIhIUc.roa File: AOsYF79xJ6mwpSoq_CsTPxIhIUc.roa (raw, json) Hash identifier: eHh19EYVK7Y6kkFMfVMowI7crTkOBt+ZcdNlnXxLe2I= Subject key identifier: 00:EB:18:17:BF:71:27:A9:B0:A5:2A:2A:FC:2B:13:3F:12:21:21:47 Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7 Certificate serial: 019B7AC895A4AA5FD8F21808C74123555758 Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/AOsYF79xJ6mwpSoq_CsTPxIhIUc.roa Signing time: Thu 01 Jan 2026 18:18:44 +0000 ROA not before: Thu 01 Jan 2026 18:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.2.244.0/22 maxlen: 22 185.2.246.0/24 maxlen: 24 185.2.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:95:a4:aa:5f:d8:f2:18:08:c7:41:23:55:57:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7 Validity Not Before: Jan 1 18:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00eb1817bf7127a9b0a52a2afc2b133f12212147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:48:02:eb:51:f4:72:ed:6c:c0:a6:a3:4a:b8: 64:44:36:88:27:96:74:2f:56:8b:71:e9:57:c5:6e: 5d:0e:e4:27:4b:92:ae:c3:96:17:53:ad:5e:da:c5: 48:4f:a1:8d:39:92:f4:2c:f0:3c:68:ce:0c:39:ce: f6:6d:a5:ca:0d:2c:73:58:1c:90:cc:bb:4a:8a:fd: f3:92:25:df:21:b5:51:8b:ce:9a:8d:89:7e:01:39: dc:a2:d5:71:62:99:ee:30:70:22:7c:cc:be:79:fa: 8e:3e:cd:86:c5:b9:cf:eb:78:99:8e:88:40:3c:45: a1:55:23:5e:86:b3:31:ed:a9:42:d4:f4:28:ac:42: f1:54:4c:84:90:05:e4:94:c6:eb:bf:24:f9:d3:94: 05:8e:5a:f4:9e:2d:2e:22:86:09:93:68:8f:69:b8: ff:5b:e8:8f:a5:6a:83:fc:79:b8:42:66:ef:79:4b: 21:e4:aa:b3:d7:10:a4:ca:5c:3e:fe:d8:48:f2:d3: 36:2f:9e:49:cc:4c:55:c4:66:02:80:36:d0:ba:f2: b6:e6:f4:43:c7:4b:c3:62:72:42:e0:97:e7:a7:5a: 0a:11:ff:b9:d0:e4:cc:98:3d:ee:3b:fc:58:85:3d: 3a:d4:e9:5b:0f:5f:0f:ae:31:50:2d:fe:50:83:5b: ea:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EB:18:17:BF:71:27:A9:B0:A5:2A:2A:FC:2B:13:3F:12:21:21:47 X509v3 Authority Key Identifier: keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/AOsYF79xJ6mwpSoq_CsTPxIhIUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.2.244.0/22 Signature Algorithm: sha256WithRSAEncryption cb:f0:82:22:18:c0:11:05:a5:8b:77:80:35:89:49:81:f2:b3: 24:2a:33:bb:6c:10:f6:3d:99:ca:62:d4:92:eb:d9:7b:3b:31: 30:ac:f5:d0:69:aa:98:05:d3:e8:48:22:9e:28:e6:ce:af:5f: 79:95:39:bd:51:87:90:a4:5d:a9:19:cf:e2:2c:80:f4:e9:c6: cc:88:43:91:f9:d7:45:f3:68:48:b5:b9:65:a1:6b:0a:2c:5d: 21:4b:ef:56:3c:29:e3:99:9d:fe:86:94:1e:d6:93:cb:23:24: 80:f7:34:18:8c:7c:0f:2e:bd:79:60:aa:34:b7:47:e5:77:fc: 86:af:cd:d1:cf:93:af:a5:b9:30:ce:2d:32:34:f3:76:1c:6d: 38:db:97:3e:a7:db:d4:52:38:92:f9:8b:11:0b:99:48:2d:d0: 3a:94:a5:57:3e:0e:5f:a6:75:65:7b:b2:4b:f8:69:dd:f9:13: a9:d0:7a:81:e4:91:66:1e:b0:c8:12:02:09:22:fc:61:a3:41: bc:ed:38:5a:b2:d9:1c:f6:0f:3a:a8:d2:d5:9f:6e:d6:1a:2c: 7b:03:6e:96:dd:15:bd:9c:e4:72:d2:7e:46:83:87:a4:5f:58: c8:eb:11:69:29:f6:3c:40:dd:c4:bc:6c:8d:f9:bc:7d:e3:f6: ae:30:53:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yJWkql/Y8hgIx0EjVVdYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYWYyZTk4N2QyYjYzYWRkYWE1YWRjMTc4ZjMxZTkwZDg3 NmFhYTcwHhcNMjYwMTAxMTgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGViMTgxN2JmNzEyN2E5YjBhNTJhMmFmYzJiMTMzZjEyMjEyMTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EgC61H0cu1swKajSrhkRDaIJ5Z0 L1aLcelXxW5dDuQnS5Kuw5YXU61e2sVIT6GNOZL0LPA8aM4MOc72baXKDSxzWByQ zLtKiv3zkiXfIbVRi86ajYl+ATncotVxYpnuMHAifMy+efqOPs2GxbnP63iZjohA PEWhVSNehrMx7alC1PQorELxVEyEkAXklMbrvyT505QFjlr0ni0uIoYJk2iPabj/ W+iPpWqD/Hm4QmbveUsh5Kqz1xCkylw+/thI8tM2L55JzExVxGYCgDbQuvK25vRD x0vDYnJC4Jfnp1oKEf+50OTMmD3uO/xYhT061OlbD18PrjFQLf5Qg1vqiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFADrGBe/cSepsKUqKvwrEz8SISFHMB8GA1UdIwQY MBaAFEOvLph9K2Ot2qWtwXjzHpDYdqqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82Njg0MzctOTdjMi00OGMyLWI3Yzgt Y2M3NzQ2NzE5NDA2LzEvQU9zWUY3OXhKNm13cFNvcV9Dc1RQeEloSVVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82Njg0MzctOTdjMi00OGMyLWI3YzgtY2M3NzQ2NzE5NDA2 LzEvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQL0MA0G CSqGSIb3DQEBCwUAA4IBAQDL8IIiGMARBaWLd4A1iUmB8rMkKjO7bBD2PZnKYtSS 69l7OzEwrPXQaaqYBdPoSCKeKObOr195lTm9UYeQpF2pGc/iLID06cbMiEOR+ddF 82hItblloWsKLF0hS+9WPCnjmZ3+hpQe1pPLIySA9zQYjHwPLr15YKo0t0fld/yG r83Rz5Ovpbkwzi0yNPN2HG0425c+p9vUUjiS+YsRC5lILdA6lKVXPg5fpnVle7JL +Gnd+ROp0HqB5JFmHrDIEgIJIvxho0G87Thastkc9g86qNLVn27WGix7A26W3RW9 nORy0n5Gg4ekX1jI6xFpKfY8QN3EvGyN+bx94/auMFOq -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:51 2026 by rpki-client