This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/AFxWP5v-LMiOayi2dIPfo8g0sew.roa File: AFxWP5v-LMiOayi2dIPfo8g0sew.roa (raw, json) Hash identifier: oQfa2Ax5iDTsjYw9BSN32EY9FTl8mwhb+e6fN/Zrk+A= Subject key identifier: 00:5C:56:3F:9B:FE:2C:C8:8E:6B:28:B6:74:83:DF:A3:C8:34:B1:EC Certificate issuer: /CN=c691f345a503cb8c8a9de427e8812efff21b22b5 Certificate serial: 019B7EA474D71FC50D6A95DD71904733564A Authority key identifier: C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/AFxWP5v-LMiOayi2dIPfo8g0sew.roa Signing time: Fri 02 Jan 2026 12:17:45 +0000 ROA not before: Fri 02 Jan 2026 12:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61354 IP address blocks: 185.9.40.0/22 maxlen: 22 185.254.192.0/22 maxlen: 22 193.107.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:74:d7:1f:c5:0d:6a:95:dd:71:90:47:33:56:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c691f345a503cb8c8a9de427e8812efff21b22b5 Validity Not Before: Jan 2 12:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=005c563f9bfe2cc88e6b28b67483dfa3c834b1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cd:6d:9a:12:46:f8:b0:c5:db:9e:6f:d9:07: 4d:6b:cf:4d:0d:28:1b:36:bb:c3:ca:7d:38:6e:39: 4b:ac:07:16:ec:02:b6:83:7a:8b:09:46:77:c3:f4: ba:da:89:75:6e:1f:84:c9:73:53:03:ac:80:bc:7b: f3:80:21:79:0a:88:ff:4b:0f:67:49:f8:78:d0:89: 0a:c6:c2:0e:5b:96:2f:b9:2c:83:39:c0:76:9c:95: 59:86:29:ef:59:33:7b:04:17:8c:15:01:03:a8:b4: 6e:72:75:f4:b7:c7:41:fa:20:6b:8c:fb:c4:b6:54: 6f:35:47:41:7b:be:07:89:c9:96:71:2a:70:7e:7d: ac:75:c4:cf:d6:34:9e:62:28:49:1f:73:db:81:06: 99:89:0a:1b:9f:f9:16:08:75:be:e1:04:05:e5:de: d8:f1:d1:2c:5c:90:43:ea:c4:90:07:3d:38:8c:39: bd:31:f5:c7:26:10:9b:c4:72:18:2c:4b:c9:a8:be: 75:b1:50:63:41:7f:6e:e3:c7:46:54:14:a4:be:35: 02:b3:75:ef:4f:77:fc:99:0b:08:1e:81:ee:d8:96: 3d:d2:07:b7:6a:71:13:10:95:07:aa:54:d4:5c:78: 70:d2:bc:4c:2d:6b:4b:56:f3:34:e5:5a:93:33:79: 5e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5C:56:3F:9B:FE:2C:C8:8E:6B:28:B6:74:83:DF:A3:C8:34:B1:EC X509v3 Authority Key Identifier: keyid:C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/AFxWP5v-LMiOayi2dIPfo8g0sew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.40.0/22 185.254.192.0/22 193.107.21.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:72:4f:1d:5b:6e:ac:68:42:ce:51:1b:18:92:8b:36:f2:b2: dc:14:5f:59:2f:cc:45:3a:be:fd:91:26:59:50:5a:67:39:02: ea:73:d1:23:70:6f:33:d0:b9:1f:72:71:eb:04:5a:e0:19:b3: 46:ba:d9:50:99:e1:d4:a2:9a:08:d6:3b:92:94:cd:76:14:d7: 0f:cb:db:09:c0:27:7c:94:01:78:66:df:c6:4c:0c:6d:ed:38: 03:93:d2:a5:a1:e0:c8:03:66:d7:e3:61:46:61:cd:cf:52:4c: 5c:b9:da:50:68:31:57:84:65:d6:d7:77:c4:6c:04:0a:55:ee: 68:c4:0f:fd:38:16:9a:d0:ed:da:a7:ee:3f:f7:e8:b1:5f:aa: 60:e7:0c:dd:a6:c8:db:bf:5a:1e:c6:47:31:4f:6b:7f:80:88: 8a:ba:71:6b:cf:09:5a:01:0a:a0:58:89:93:a7:6e:2c:be:5d: 8a:66:ec:87:a5:50:b7:b2:3f:c7:6a:2e:a9:ad:5e:2a:ca:3d: 1f:ae:3b:0d:2c:64:2f:d1:6d:c9:65:6c:a7:c8:fb:69:d8:dd: 19:86:98:5e:b8:96:80:df:e2:e9:63:d1:64:f4:7c:0e:04:14: 5a:dd:5e:b9:e4:8d:c0:be:e3:2c:aa:73:e1:6c:8d:21:39:c3: 43:10:5f:a0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pHTXH8UNapXdcZBHM1ZKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OTFmMzQ1YTUwM2NiOGM4YTlkZTQyN2U4ODEyZWZmZjIx YjIyYjUwHhcNMjYwMTAyMTIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDVjNTYzZjliZmUyY2M4OGU2YjI4YjY3NDgzZGZhM2M4MzRiMWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs1tmhJG+LDF255v2QdNa89NDSgb NrvDyn04bjlLrAcW7AK2g3qLCUZ3w/S62ol1bh+EyXNTA6yAvHvzgCF5Coj/Sw9n Sfh40IkKxsIOW5YvuSyDOcB2nJVZhinvWTN7BBeMFQEDqLRucnX0t8dB+iBrjPvE tlRvNUdBe74HicmWcSpwfn2sdcTP1jSeYihJH3PbgQaZiQobn/kWCHW+4QQF5d7Y 8dEsXJBD6sSQBz04jDm9MfXHJhCbxHIYLEvJqL51sVBjQX9u48dGVBSkvjUCs3Xv T3f8mQsIHoHu2JY90ge3anETEJUHqlTUXHhw0rxMLWtLVvM05VqTM3leiQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFABcVj+b/izIjmsotnSD36PINLHsMB8GA1UdIwQY MBaAFMaR80WlA8uMip3kJ+iBLv/yGyK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHBIelJhVUR5NHlLbmVRbjZJRXVfX0liSXJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xOWU2ZTItYzJhMS00ZWJjLWJhNWEt ZTdjYWY1ZTViY2JhLzEvQUZ4V1A1di1MTWlPYXlpMmRJUGZvOGcwc2V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xOWU2ZTItYzJhMS00ZWJjLWJhNWEtZTdjYWY1ZTViY2Jh LzEveHBIelJhVUR5NHlLbmVRbjZJRXVfX0liSXJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuQkoAwQC uf7AAwQAwWsVMA0GCSqGSIb3DQEBCwUAA4IBAQB7ck8dW26saELOURsYkos28rLc FF9ZL8xFOr79kSZZUFpnOQLqc9EjcG8z0LkfcnHrBFrgGbNGutlQmeHUopoI1juS lM12FNcPy9sJwCd8lAF4Zt/GTAxt7TgDk9KloeDIA2bX42FGYc3PUkxcudpQaDFX hGXW13fEbAQKVe5oxA/9OBaa0O3ap+4/9+ixX6pg5wzdpsjbv1oexkcxT2t/gIiK unFrzwlaAQqgWImTp24svl2KZuyHpVC3sj/Hai6prV4qyj0frjsNLGQv0W3JZWyn yPtp2N0ZhpheuJaA3+LpY9Fk9HwOBBRa3V655I3AvuMsqnPhbI0hOcNDEF+g -----END CERTIFICATE-----Generated at Wed Feb 4 09:48:20 2026 by rpki-client