This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/af2JbsFaiF65db9s1Px-v45Smq8.roa File: af2JbsFaiF65db9s1Px-v45Smq8.roa (raw, json) Hash identifier: SgjbbnkwbwDgclTeMfNjxj2r3waXIVgmYqV+oR+91Xc= Subject key identifier: 69:FD:89:6E:C1:5A:88:5E:B9:75:BF:6C:D4:FC:7E:BF:8E:52:9A:AF Certificate issuer: /CN=9b129de9eba6b47516f0a155734205abbb98b7c2 Certificate serial: 019B7F152732C4612274D88FC6A2749410CC Authority key identifier: 9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/af2JbsFaiF65db9s1Px-v45Smq8.roa Signing time: Fri 02 Jan 2026 14:20:51 +0000 ROA not before: Fri 02 Jan 2026 14:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205732 IP address blocks: 185.208.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:27:32:c4:61:22:74:d8:8f:c6:a2:74:94:10:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b129de9eba6b47516f0a155734205abbb98b7c2 Validity Not Before: Jan 2 14:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69fd896ec15a885eb975bf6cd4fc7ebf8e529aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d9:a9:ee:eb:30:7b:4f:58:06:d0:a5:cd:c0: 4d:22:f9:fd:a5:96:79:8a:c1:ba:4c:3f:e8:fb:56: b6:b8:00:a9:41:95:d8:53:e4:bd:3d:36:fc:d8:4d: 57:39:22:15:dd:89:92:85:44:9d:19:e6:0f:a9:0d: 5b:09:51:fe:bb:6e:1e:e8:18:f6:5e:f4:06:5e:61: 84:17:fc:3f:1c:b1:4a:cb:8d:01:fd:d9:28:dc:92: d9:73:71:2e:1e:b2:a8:af:c5:0c:36:94:bc:77:5f: 07:f6:57:4e:9d:41:6b:bc:29:2f:25:ee:f5:4d:51: 33:6a:e0:31:94:06:5d:a6:d7:52:a6:08:ed:f1:f6: 74:1b:87:0a:ed:bb:fc:7e:26:35:26:a1:6d:bc:2e: 90:ab:f1:16:09:1c:a6:71:f0:a9:e2:06:39:16:80: 50:6a:08:0c:5d:4a:a1:2b:2a:fc:a9:96:b5:39:81: f0:09:7d:17:95:a3:58:6e:e3:ea:6f:96:51:d8:8b: 04:fe:a3:ba:82:54:15:f7:74:85:55:05:55:f9:45: 03:ad:80:38:d1:78:76:14:04:c8:1c:a7:cc:c1:e4: 54:1f:04:79:0d:55:63:e1:12:19:f2:2f:65:9a:12: ff:ec:4b:fb:1f:9c:31:c3:a3:6a:f3:2f:ad:fa:3e: 07:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FD:89:6E:C1:5A:88:5E:B9:75:BF:6C:D4:FC:7E:BF:8E:52:9A:AF X509v3 Authority Key Identifier: keyid:9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/af2JbsFaiF65db9s1Px-v45Smq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.208.105.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:dc:c9:62:7e:8b:55:c6:08:1f:20:60:10:a2:a7:2a:34:7d: af:b6:43:5d:2e:02:9b:32:f9:94:56:57:00:44:9d:13:35:08: 53:67:27:6d:1c:ab:4a:70:49:de:e3:1b:2b:d6:4b:5e:56:65: 46:92:08:db:d2:68:fe:36:09:be:6d:25:06:20:ee:1d:ee:a4: d5:35:f0:c4:7b:68:08:5d:c6:91:b2:71:2d:39:a5:17:43:0b: 57:29:9e:a0:cc:09:81:11:76:37:58:6b:04:93:50:eb:17:a0: 1c:f4:cd:9f:f3:38:5b:08:97:07:67:c6:50:23:63:4c:ca:aa: 85:84:8b:e5:00:e0:a4:55:1e:b0:e6:de:5e:8d:78:29:d7:07: 26:07:68:3d:e4:96:bb:46:94:9e:51:b4:ea:c8:6a:5a:6d:8b: 7c:47:2a:43:2c:0b:a2:dc:ae:82:c0:db:dc:86:cc:5f:11:75: 4b:31:88:64:96:98:08:09:fb:2d:bd:0b:7e:d3:a3:bf:68:e0: 00:fc:b9:96:68:95:e9:05:4a:66:9e:8f:0c:c3:46:54:7f:7b: 25:bd:ec:3b:f0:3e:b8:93:00:81:e2:33:63:91:5a:8c:34:f1: a2:69:88:c7:f2:4c:17:a4:f8:46:32:aa:0a:b0:cb:8e:02:99: ac:f3:7c:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FScyxGEidNiPxqJ0lBDMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMTI5ZGU5ZWJhNmI0NzUxNmYwYTE1NTczNDIwNWFiYmI5 OGI3YzIwHhcNMjYwMTAyMTQyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWZkODk2ZWMxNWE4ODVlYjk3NWJmNmNkNGZjN2ViZjhlNTI5YWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9mp7uswe09YBtClzcBNIvn9pZZ5 isG6TD/o+1a2uACpQZXYU+S9PTb82E1XOSIV3YmShUSdGeYPqQ1bCVH+u24e6Bj2 XvQGXmGEF/w/HLFKy40B/dko3JLZc3EuHrKor8UMNpS8d18H9ldOnUFrvCkvJe71 TVEzauAxlAZdptdSpgjt8fZ0G4cK7bv8fiY1JqFtvC6Qq/EWCRymcfCp4gY5FoBQ aggMXUqhKyr8qZa1OYHwCX0XlaNYbuPqb5ZR2IsE/qO6glQV93SFVQVV+UUDrYA4 0Xh2FATIHKfMweRUHwR5DVVj4RIZ8i9lmhL/7Ev7H5wxw6Nq8y+t+j4HXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGn9iW7BWoheuXW/bNT8fr+OUpqvMB8GA1UdIwQY MBaAFJsSnenrprR1FvChVXNCBau7mLfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXhLZDZldW10SFVXOEtGVmMwSUZxN3VZdDhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81YjM3M2UtZDMxNC00NDU5LWI4NTgt Y2YxZDFmMDA3YTM2LzEvYWYySmJzRmFpRjY1ZGI5czFQeC12NDVTbXE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81YjM3M2UtZDMxNC00NDU5LWI4NTgtY2YxZDFmMDA3YTM2 LzEvbXhLZDZldW10SFVXOEtGVmMwSUZxN3VZdDhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudBpMA0G CSqGSIb3DQEBCwUAA4IBAQA63MlifotVxggfIGAQoqcqNH2vtkNdLgKbMvmUVlcA RJ0TNQhTZydtHKtKcEne4xsr1kteVmVGkgjb0mj+Ngm+bSUGIO4d7qTVNfDEe2gI XcaRsnEtOaUXQwtXKZ6gzAmBEXY3WGsEk1DrF6Ac9M2f8zhbCJcHZ8ZQI2NMyqqF hIvlAOCkVR6w5t5ejXgp1wcmB2g95Ja7RpSeUbTqyGpabYt8RypDLAui3K6CwNvc hsxfEXVLMYhklpgICfstvQt+06O/aOAA/LmWaJXpBUpmno8Mw0ZUf3slvew78D64 kwCB4jNjkVqMNPGiaYjH8kwXpPhGMqoKsMuOApms83zn -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:45 2026 by rpki-client