This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/AEfnrK6ix3lgbRrsMfPKWVRCzjE.roa File: AEfnrK6ix3lgbRrsMfPKWVRCzjE.roa (raw, json) Hash identifier: qwyfmOqhQfxk+SJv3YNNgHlxe2wh96nicliB7SifUfM= Subject key identifier: 00:47:E7:AC:AE:A2:C7:79:60:6D:1A:EC:31:F3:CA:59:54:42:CE:31 Certificate issuer: /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148 Certificate serial: 019B7C12AC2D8514238D10DA1D36E7A09321 Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/AEfnrK6ix3lgbRrsMfPKWVRCzjE.roa Signing time: Fri 02 Jan 2026 00:19:17 +0000 ROA not before: Fri 02 Jan 2026 00:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14127 IP address blocks: 89.106.176.0/22 maxlen: 24 89.106.180.0/23 maxlen: 23 89.106.182.0/23 maxlen: 23 185.45.0.0/23 maxlen: 24 185.45.2.0/23 maxlen: 24 185.233.228.0/24 maxlen: 24 185.233.229.0/24 maxlen: 24 185.233.230.0/24 maxlen: 24 185.233.231.0/24 maxlen: 24 193.246.192.0/24 maxlen: 24 193.246.193.0/24 maxlen: 24 193.246.194.0/24 maxlen: 24 193.246.195.0/24 maxlen: 24 193.246.196.0/24 maxlen: 24 193.246.197.0/24 maxlen: 24 193.246.198.0/24 maxlen: 24 193.246.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ac:2d:85:14:23:8d:10:da:1d:36:e7:a0:93:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148 Validity Not Before: Jan 2 00:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0047e7acaea2c779606d1aec31f3ca595442ce31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e4:12:3f:42:5a:10:6a:d7:b3:8d:e7:db:05: c9:7f:51:f1:0a:37:a7:c8:ca:3e:3a:75:64:43:db: 13:02:a4:b2:30:b9:a6:c7:21:76:51:80:f8:f1:06: 0d:cb:17:6f:1c:1c:65:f2:34:b4:6c:29:0b:a2:8b: 71:4c:ca:97:c3:07:56:6e:d9:c1:53:bb:d1:69:a0: ec:a3:e5:77:48:3b:b7:4e:27:2e:cf:6d:46:72:62: dd:c4:42:d5:22:03:8f:cf:47:fb:ac:0c:3f:0e:bb: 13:08:dd:8d:de:69:b6:7f:99:8f:7d:6b:dc:41:0c: c6:57:80:a5:08:67:e9:6c:cd:db:be:e2:5a:19:15: f3:77:6f:96:54:17:77:ee:7d:43:35:09:03:02:42: 0a:7a:59:45:8a:53:e0:ad:d7:a1:80:68:11:37:2e: 0f:64:fe:fa:27:27:da:8f:2e:d0:fb:7b:dc:9a:8a: 75:07:c8:f5:dd:46:93:eb:71:f9:55:86:78:bb:d8: 93:94:dc:4e:d6:47:9a:77:d7:7e:7a:7e:c4:a8:fd: 16:13:6b:f8:34:91:86:da:43:61:d4:bd:85:62:24: 02:7c:0e:91:6c:a2:76:2e:63:0f:eb:80:fb:0e:5e: 2f:a8:0f:fd:82:57:c0:8f:4d:d5:54:17:d3:2e:5d: 40:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:47:E7:AC:AE:A2:C7:79:60:6D:1A:EC:31:F3:CA:59:54:42:CE:31 X509v3 Authority Key Identifier: keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/AEfnrK6ix3lgbRrsMfPKWVRCzjE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.176.0/21 185.45.0.0/22 185.233.228.0/22 193.246.192.0/21 Signature Algorithm: sha256WithRSAEncryption 9e:09:a9:72:b5:61:ea:6b:e5:de:82:db:a0:03:a6:19:8d:c3: 20:ad:f9:b5:70:fa:69:58:0f:3d:ab:1c:7f:7b:5d:e3:0d:25: 1e:d9:ba:84:de:a4:89:a8:29:85:a6:05:33:4e:9a:4e:f5:b6: bf:60:e0:aa:b9:64:6d:26:ab:35:57:66:82:1e:db:2a:ea:aa: d7:00:5a:45:b8:20:48:74:8b:24:f2:6f:07:05:65:68:10:89: 61:f5:2f:25:3d:ac:38:36:6d:19:ca:9d:0b:96:31:40:8a:47: fd:43:70:52:d2:eb:51:63:3f:6f:e8:e7:1e:b0:a9:bb:fa:2d: 7e:33:72:50:d9:e5:24:86:6d:5d:00:65:b5:84:52:ff:5e:48: 3e:9a:a0:f5:a4:a1:d7:c8:7d:c9:74:48:3d:52:11:23:f9:09: ac:fc:cf:ec:3e:07:29:42:2d:02:5c:2d:ae:07:a2:dd:2d:b8: 70:dc:91:7d:71:0c:2f:99:66:0d:bd:80:d2:ce:f7:6d:e1:ac: 5a:95:e7:b8:ee:5e:5e:58:fe:1a:eb:21:96:16:34:73:61:26: fe:17:95:59:3b:cb:41:9d:2b:df:26:3c:2e:01:40:33:0b:45: ac:39:ad:8f:28:3d:ca:01:d8:15:30:8a:06:58:a2:9b:75:0c: a2:60:3f:70 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8EqwthRQjjRDaHTbnoJMhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YTNiNDNmNjQ3ZTFlNzcxNGNkMTMwNzY0Y2JiYzQ4MTRl N2ExNDgwHhcNMjYwMTAyMDAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDQ3ZTdhY2FlYTJjNzc5NjA2ZDFhZWMzMWYzY2E1OTU0NDJjZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveQSP0JaEGrXs43n2wXJf1HxCjen yMo+OnVkQ9sTAqSyMLmmxyF2UYD48QYNyxdvHBxl8jS0bCkLootxTMqXwwdWbtnB U7vRaaDso+V3SDu3Ticuz21GcmLdxELVIgOPz0f7rAw/DrsTCN2N3mm2f5mPfWvc QQzGV4ClCGfpbM3bvuJaGRXzd2+WVBd37n1DNQkDAkIKellFilPgrdehgGgRNy4P ZP76Jyfajy7Q+3vcmop1B8j13UaT63H5VYZ4u9iTlNxO1kead9d+en7EqP0WE2v4 NJGG2kNh1L2FYiQCfA6RbKJ2LmMP64D7Dl4vqA/9glfAj03VVBfTLl1AXQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFABH56yuosd5YG0a7DHzyllUQs4xMB8GA1UdIwQY MBaAFESjtD9kfh53FM0TB2TLvEgU56FIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUktPMFAyUi1IbmNVelJNSFpNdThTQlRub1VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lMWNlZTYtZGNmZi00MzczLWJkODgt YTNjNTM5ZjBiNmQyLzEvQUVmbnJLNml4M2xnYlJyc01mUEtXVlJDempFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9lMWNlZTYtZGNmZi00MzczLWJkODgtYTNjNTM5ZjBiNmQy LzEvUktPMFAyUi1IbmNVelJNSFpNdThTQlRub1VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDWWqwAwQC uS0AAwQCuenkAwQDwfbAMA0GCSqGSIb3DQEBCwUAA4IBAQCeCalytWHqa+Xegtug A6YZjcMgrfm1cPppWA89qxx/e13jDSUe2bqE3qSJqCmFpgUzTppO9ba/YOCquWRt Jqs1V2aCHtsq6qrXAFpFuCBIdIsk8m8HBWVoEIlh9S8lPaw4Nm0Zyp0LljFAikf9 Q3BS0utRYz9v6OcesKm7+i1+M3JQ2eUkhm1dAGW1hFL/Xkg+mqD1pKHXyH3JdEg9 UhEj+Qms/M/sPgcpQi0CXC2uB6LdLbhw3JF9cQwvmWYNvYDSzvdt4axalee47l5e WP4a6yGWFjRzYSb+F5VZO8tBnSvfJjwuAUAzC0WsOa2PKD3KAdgVMIoGWKKbdQyi YD9w -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:14 2026 by rpki-client