This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/rf-2AjrADnCTKylGVxnPCu282dA.roa File: rf-2AjrADnCTKylGVxnPCu282dA.roa (raw, json) Hash identifier: V9W3NsQtuzHtmHu/wb6rWjq5cO2tLpUMthvdcTU49tg= Subject key identifier: AD:FF:B6:02:3A:C0:0E:70:93:2B:29:46:57:19:CF:0A:ED:BC:D9:D0 Certificate issuer: /CN=d65d79f98e70b22ad7d76a2085aa7b851aa18483 Certificate serial: 019B310B191226FAE29E7353692C3728FE93 Authority key identifier: D6:5D:79:F9:8E:70:B2:2A:D7:D7:6A:20:85:AA:7B:85:1A:A1:84:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1l15-Y5wsirX12oghap7hRqhhIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/rf-2AjrADnCTKylGVxnPCu282dA.roa Signing time: Thu 18 Dec 2025 10:39:29 +0000 ROA not before: Thu 18 Dec 2025 10:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212984 IP address blocks: 194.49.96.0/24 maxlen: 24 194.49.97.0/24 maxlen: 24 194.49.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft rsync://rpki.ripe.net/repository/DEFAULT/1l15-Y5wsirX12oghap7hRqhhIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:0b:19:12:26:fa:e2:9e:73:53:69:2c:37:28:fe:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65d79f98e70b22ad7d76a2085aa7b851aa18483 Validity Not Before: Dec 18 10:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=adffb6023ac00e70932b29465719cf0aedbcd9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:51:1d:4f:af:fe:65:fb:03:e8:60:f4:56:91: 10:d5:4a:f5:93:d7:62:07:e4:5c:04:a7:5b:c6:4d: e3:c0:d2:2f:5a:16:7a:f7:4a:72:b0:e9:cd:14:ff: df:1b:5a:9b:23:76:38:07:1a:02:bb:40:67:87:e2: 63:14:85:06:27:f1:e0:2b:28:c5:54:8d:98:53:28: a3:14:ad:d0:29:42:19:12:50:d0:ae:44:b9:4d:6c: 98:1f:48:cb:5c:d8:59:9f:64:13:3f:85:f0:61:c9: f8:1c:94:4b:31:43:10:e5:ee:09:53:01:8c:c6:ed: 5e:d5:c8:f6:ce:a7:9a:b6:ce:6e:b6:2e:71:50:95: fa:3b:9b:61:70:7d:96:4f:09:84:7a:0e:d4:8d:e3: c0:bd:98:0c:7c:5b:af:78:d0:4d:7d:0a:9e:1f:7d: cb:55:24:da:69:e6:8f:24:31:01:a2:fc:90:7c:7e: 06:ae:ed:b1:d4:a9:c9:01:70:50:55:23:8c:6b:ed: e9:91:70:f2:83:91:19:a0:5c:b0:fa:53:69:1f:4b: 16:b9:f3:8c:5f:f9:3f:13:68:d8:2c:b4:52:22:bc: 34:6a:65:97:75:42:c5:55:cf:7d:32:e0:a6:52:4f: a6:09:2b:de:a0:e9:7a:0f:49:0e:90:fb:18:59:6b: e9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FF:B6:02:3A:C0:0E:70:93:2B:29:46:57:19:CF:0A:ED:BC:D9:D0 X509v3 Authority Key Identifier: keyid:D6:5D:79:F9:8E:70:B2:2A:D7:D7:6A:20:85:AA:7B:85:1A:A1:84:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1l15-Y5wsirX12oghap7hRqhhIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/rf-2AjrADnCTKylGVxnPCu282dA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.49.96.0-194.49.98.255 Signature Algorithm: sha256WithRSAEncryption 07:b1:f5:6f:43:ec:2f:b2:70:e2:63:fe:9e:c3:4d:05:e7:fc: e4:62:d9:cd:31:ba:6d:e1:c8:f3:c5:08:65:3e:c5:16:f3:b0: 3d:9e:29:06:6e:ed:46:1e:e4:51:c9:5c:af:4b:18:91:51:1f: aa:cc:70:ac:20:77:aa:e7:6f:4e:ed:bc:9c:da:6d:59:72:8f: b6:b5:a8:0b:2b:28:0b:39:55:f7:81:91:8e:9b:ad:d0:27:59: b8:0d:5f:26:89:48:08:22:0b:c6:23:45:77:11:d2:cf:5d:1b: f6:ac:76:29:33:b7:96:0e:4e:c3:d8:54:f6:2e:2b:36:e5:de: 26:12:05:9a:74:a1:f0:08:b8:d3:29:e6:bc:40:e9:95:96:94: 7c:fb:79:cf:60:87:f8:2b:bd:fa:cc:c7:1f:2f:19:02:c9:46: 9b:03:87:75:b5:0e:66:36:a2:6f:da:ee:c7:fc:69:c7:c1:41: 25:17:de:4e:fc:8d:76:9b:6c:57:b6:56:8f:5b:6f:bb:3d:75: e3:c4:21:47:c7:72:38:86:3a:0a:5e:e6:62:74:d1:97:f7:4e: 68:c3:58:43:c6:ef:ca:a0:7c:91:37:f1:cf:15:6b:9a:1c:9f: 70:5a:40:c0:1b:56:d6:fc:19:58:db:e5:bd:ba:84:8b:8a:d5: e3:50:91:09 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZsxCxkSJvrinnNTaSw3KP6TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NWQ3OWY5OGU3MGIyMmFkN2Q3NmEyMDg1YWE3Yjg1MWFh MTg0ODMwHhcNMjUxMjE4MTAzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGZmYjYwMjNhYzAwZTcwOTMyYjI5NDY1NzE5Y2YwYWVkYmNkOWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVEdT6/+ZfsD6GD0VpEQ1Ur1k9di B+RcBKdbxk3jwNIvWhZ690pysOnNFP/fG1qbI3Y4BxoCu0Bnh+JjFIUGJ/HgKyjF VI2YUyijFK3QKUIZElDQrkS5TWyYH0jLXNhZn2QTP4XwYcn4HJRLMUMQ5e4JUwGM xu1e1cj2zqeats5uti5xUJX6O5thcH2WTwmEeg7UjePAvZgMfFuveNBNfQqeH33L VSTaaeaPJDEBovyQfH4Gru2x1KnJAXBQVSOMa+3pkXDyg5EZoFyw+lNpH0sWufOM X/k/E2jYLLRSIrw0amWXdULFVc99MuCmUk+mCSveoOl6D0kOkPsYWWvpXwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFK3/tgI6wA5wkyspRlcZzwrtvNnQMB8GA1UdIwQY MBaAFNZdefmOcLIq19dqIIWqe4UaoYSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWwxNS1ZNXdzaXJYMTJvZ2hhcDdoUnFoaElNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85MDhmYjEtYWYyOS00MWNlLWIxZjgt MTcxMjNmZTM3YmU5LzEvcmYtMkFqckFEbkNUS3lsR1Z4blBDdTI4MmRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS85MDhmYjEtYWYyOS00MWNlLWIxZjgtMTcxMjNmZTM3YmU5 LzEvMWwxNS1ZNXdzaXJYMTJvZ2hhcDdoUnFoaElNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXCMWAD BADCMWIwDQYJKoZIhvcNAQELBQADggEBAAex9W9D7C+ycOJj/p7DTQXn/ORi2c0x um3hyPPFCGU+xRbzsD2eKQZu7UYe5FHJXK9LGJFRH6rMcKwgd6rnb07tvJzabVly j7a1qAsrKAs5VfeBkY6brdAnWbgNXyaJSAgiC8YjRXcR0s9dG/asdikzt5YOTsPY VPYuKzbl3iYSBZp0ofAIuNMp5rxA6ZWWlHz7ec9gh/grvfrMxx8vGQLJRpsDh3W1 DmY2om/a7sf8acfBQSUX3k78jXabbFe2Vo9bb7s9dePEIUfHcjiGOgpe5mJ00Zf3 TmjDWEPG78qgfJE38c8Va5ocn3BaQMAbVtb8GVjb5b26hIuK1eNQkQk= -----END CERTIFICATE-----Generated at Fri Dec 26 17:23:29 2025 by rpki-client