This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/AOFzHIFEP91V8Omac3aKie9xki8.roa File: AOFzHIFEP91V8Omac3aKie9xki8.roa (raw, json) Hash identifier: HMkFQ86ieg8/vv84gq6sItk0FTIJYyGV0fWrEdqsQ4o= Subject key identifier: 00:E1:73:1C:81:44:3F:DD:55:F0:E9:9A:73:76:8A:89:EF:71:92:2F Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356 Certificate serial: 019B79ED54F255189B75C1B4D970E3933CB3 Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/AOFzHIFEP91V8Omac3aKie9xki8.roa Signing time: Thu 01 Jan 2026 14:19:15 +0000 ROA not before: Thu 01 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44465 IP address blocks: 92.43.170.0/23 maxlen: 23 92.43.170.0/24 maxlen: 24 92.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:54:f2:55:18:9b:75:c1:b4:d9:70:e3:93:3c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356 Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00e1731c81443fdd55f0e99a73768a89ef71922f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:91:06:78:a4:21:75:95:4e:43:b1:82:62:fc: 80:45:8f:3c:27:bb:2f:a6:58:ab:57:74:57:7d:22: fd:1d:30:32:d3:94:78:0e:44:be:62:f6:76:ca:a5: 3b:e3:46:89:ab:bf:bf:d8:d6:a7:3f:9f:04:0c:e0: e2:51:11:51:09:fe:bd:40:47:b7:43:fb:a8:bb:e8: 96:f3:66:5f:1b:f9:7a:4a:5b:c6:6c:56:bb:43:72: a7:9c:8a:c8:eb:a6:f3:87:d5:4e:3e:67:2d:01:a9: d9:3e:0f:1e:b8:4b:fa:bd:36:ea:19:34:59:3d:e7: e0:c9:f0:ed:cb:6b:8d:1d:25:aa:10:f9:c8:21:5b: a0:3d:4a:0f:64:55:59:eb:0d:7e:f6:38:70:09:5b: a7:db:b5:c1:6a:e7:d2:71:4d:42:1a:30:53:66:21: 24:41:ee:36:3a:15:c3:17:bb:6b:2b:da:8a:d7:5f: ef:ab:f6:c1:f9:34:93:ed:ea:e2:cc:1e:26:4e:db: 89:69:db:6a:e1:93:93:e1:d8:1e:95:3c:8c:64:50: 19:cb:8d:02:bd:3d:eb:b4:9d:5c:5d:25:e0:13:f5: 90:e1:b6:74:42:15:13:34:98:bd:2e:aa:d8:8e:a5: 64:4d:47:36:27:f3:4a:b4:c7:8c:6a:38:95:6b:e8: 55:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E1:73:1C:81:44:3F:DD:55:F0:E9:9A:73:76:8A:89:EF:71:92:2F X509v3 Authority Key Identifier: keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/AOFzHIFEP91V8Omac3aKie9xki8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.43.170.0-92.43.172.255 Signature Algorithm: sha256WithRSAEncryption 0f:2b:08:d4:7e:b2:db:58:77:e4:31:ba:25:bf:35:13:46:fa: b8:34:97:01:0b:bf:6b:41:2a:1f:0e:e5:ae:6e:fe:1b:8a:f4: 3d:17:76:83:dc:1e:98:c4:35:06:39:ee:65:32:45:74:63:8b: d5:33:55:8c:f4:dc:7f:08:50:97:a9:ab:b4:50:60:6b:1e:40: d3:a4:4c:7c:f5:fc:fb:34:3f:51:cd:a9:97:f2:c9:ed:ba:45: 20:19:d6:28:91:59:1e:f8:82:bb:c2:4c:45:ac:f7:f4:73:82: 13:26:0e:7f:e1:e2:cd:33:c8:b5:9d:7d:d7:18:6e:b1:88:6f: 8a:ac:05:9b:2d:c5:40:03:30:22:5c:2b:73:d1:18:c0:c1:cd: f7:21:74:37:a4:aa:f2:82:f2:f3:12:e5:d4:91:a0:7e:4a:a5: 11:86:86:f4:6d:bd:bb:45:2b:f4:87:de:92:0f:64:65:c0:97: 49:fa:3c:ce:57:db:22:a3:05:7c:6a:86:ae:f4:65:bd:bd:54: 1e:b8:f5:1e:c7:35:c5:84:91:0d:e2:d2:4b:e8:8b:a7:22:36: 9c:f5:75:b7:35:12:70:ab:f0:0e:04:f1:ba:a4:22:f5:44:38: 01:0b:c5:0d:55:0f:0b:2e:3c:76:9e:83:65:b5:35:38:ee:fe: eb:99:a7:e8 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt57VTyVRibdcG02XDjkzyzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZDdmZTczMTJlZmI0MmJkOGQxZWNkODJhYzc2MTkxZWEy NmMzNTYwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGUxNzMxYzgxNDQzZmRkNTVmMGU5OWE3Mzc2OGE4OWVmNzE5MjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZEGeKQhdZVOQ7GCYvyARY88J7sv plirV3RXfSL9HTAy05R4DkS+YvZ2yqU740aJq7+/2NanP58EDODiURFRCf69QEe3 Q/uou+iW82ZfG/l6SlvGbFa7Q3KnnIrI66bzh9VOPmctAanZPg8euEv6vTbqGTRZ PefgyfDty2uNHSWqEPnIIVugPUoPZFVZ6w1+9jhwCVun27XBaufScU1CGjBTZiEk Qe42OhXDF7trK9qK11/vq/bB+TST7erizB4mTtuJadtq4ZOT4dgelTyMZFAZy40C vT3rtJ1cXSXgE/WQ4bZ0QhUTNJi9LqrYjqVkTUc2J/NKtMeMajiVa+hVKwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFADhcxyBRD/dVfDpmnN2ionvcZIvMB8GA1UdIwQY MBaAFILX/nMS77Qr2NHs2CrHYZHqJsNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYt MzdiMjFiYWIzYjAwLzEvQU9GekhJRkVQOTFWOE9tYWMzYUtpZTl4a2k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYtMzdiMjFiYWIzYjAw LzEvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFcK6oD BABcK6wwDQYJKoZIhvcNAQELBQADggEBAA8rCNR+sttYd+QxuiW/NRNG+rg0lwEL v2tBKh8O5a5u/huK9D0XdoPcHpjENQY57mUyRXRji9UzVYz03H8IUJepq7RQYGse QNOkTHz1/Ps0P1HNqZfyye26RSAZ1iiRWR74grvCTEWs9/RzghMmDn/h4s0zyLWd fdcYbrGIb4qsBZstxUADMCJcK3PRGMDBzfchdDekqvKC8vMS5dSRoH5KpRGGhvRt vbtFK/SH3pIPZGXAl0n6PM5X2yKjBXxqhq70Zb29VB649R7HNcWEkQ3i0kvoi6ci Npz1dbc1EnCr8A4E8bqkIvVEOAELxQ1VDwsuPHaeg2W1NTju/uuZp+g= -----END CERTIFICATE-----Generated at Tue Feb 10 01:14:15 2026 by rpki-client