This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/afksL8Y4wp9aBVxxgcGKfU2eROw.roa File: afksL8Y4wp9aBVxxgcGKfU2eROw.roa (raw, json) Hash identifier: 8xwBL2ZqnkL2AeUdnHRPvgqeZ+oYYKmlsRH2l3bkjtE= Subject key identifier: 69:F9:2C:2F:C6:38:C2:9F:5A:05:5C:71:81:C1:8A:7D:4D:9E:44:EC Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f Certificate serial: 019B36B80A36DD91EFEF98AE69E87F892830 Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/afksL8Y4wp9aBVxxgcGKfU2eROw.roa Signing time: Fri 19 Dec 2025 13:06:29 +0000 ROA not before: Fri 19 Dec 2025 13:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49981 IP address blocks: 45.93.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b8:0a:36:dd:91:ef:ef:98:ae:69:e8:7f:89:28:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f Validity Not Before: Dec 19 13:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69f92c2fc638c29f5a055c7181c18a7d4d9e44ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ab:f0:e6:36:14:67:0e:2f:9e:ee:28:5d:ec: 25:d8:1c:91:c1:77:62:d3:37:a6:17:4a:52:b2:52: 41:1f:e2:de:ed:28:3f:b4:af:03:8b:61:86:6b:87: be:53:47:af:24:01:de:47:52:a2:c5:19:7a:3b:67: a9:13:dd:66:b5:94:c3:8b:d2:66:ce:c5:e8:f7:7b: 7f:44:68:55:86:88:58:09:7b:a2:cf:5e:a1:fc:e6: 7d:5f:a2:5d:28:59:59:9d:34:40:e4:cd:7d:64:12: 1d:8c:85:48:d5:1f:cf:75:09:01:ea:b6:ed:4a:5f: e7:38:4c:cc:9f:8b:a3:7f:0a:b6:1f:a0:fa:5e:32: 1d:ff:48:e1:00:a2:36:34:4e:e5:f2:81:98:f7:fc: 6d:6a:63:b3:5a:48:38:ce:32:df:c1:f5:e5:d7:74: f4:f0:3f:8f:57:83:cc:0f:7e:d7:13:05:b1:87:1d: f1:6a:a9:4c:b2:4e:db:69:dd:a6:20:0b:6a:b8:90: 5d:80:b4:07:16:45:9e:fd:3d:4c:0a:f7:25:2a:2d: d4:8d:8d:b6:60:80:f8:bc:7e:89:00:c4:ec:84:ee: d2:21:2a:f2:4b:2f:8f:4f:f8:5e:9b:92:64:95:d7: a1:02:c4:bd:02:ea:84:b1:93:8b:f8:00:e3:c5:d1: 13:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F9:2C:2F:C6:38:C2:9F:5A:05:5C:71:81:C1:8A:7D:4D:9E:44:EC X509v3 Authority Key Identifier: keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/afksL8Y4wp9aBVxxgcGKfU2eROw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.23.0/24 Signature Algorithm: sha256WithRSAEncryption 15:3c:55:b1:56:f6:11:5a:28:c6:0a:4d:e2:f4:72:55:d9:b8: 61:5c:3b:c8:c9:18:f8:bc:44:a9:44:9b:45:6e:a7:3c:a4:b1: 13:11:80:b5:2c:95:66:bf:25:b1:9b:b4:6c:ab:d2:77:e3:43: 6a:18:22:1b:fe:69:f7:b5:90:9b:f4:c3:4c:4b:6a:7d:11:e7: 52:38:0d:16:87:88:e7:e8:62:0c:e8:b0:d4:3d:3c:28:a2:a4: d2:38:b6:9a:25:0e:a0:d7:f2:8c:01:70:3c:e6:5f:04:1a:2b: 04:e2:25:b4:73:9b:e5:83:3e:e8:06:86:00:9f:1a:e9:28:bf: f8:94:23:04:99:07:16:41:a3:56:b7:b7:d1:82:cd:44:7c:a0: 16:04:6c:50:87:53:47:72:75:3f:5f:d0:5c:a3:ba:5a:0f:7b: d3:11:0c:01:32:5f:ef:81:b0:f5:6e:07:69:a3:64:e0:fc:ee: 19:db:52:16:7b:72:a5:56:1b:4b:86:d7:87:3c:c8:5c:1c:e6: 6a:dc:83:0d:ed:4e:39:58:66:1c:29:6a:25:5b:c7:4c:51:48: 00:2e:a1:f4:f8:35:eb:a0:ee:c0:bf:21:1b:80:79:87:f7:4c: ef:16:8a:39:7b:b2:1b:45:c9:3c:cb:5a:23:4b:8a:23:a3:d2: e4:a5:64:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs2uAo23ZHv75iuaeh/iSgwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYjg0MjI1NGJiZDZiZjMzZTA5ZDA1YTQ1OGYwMGEwNDg0 Y2YxNmYwHhcNMjUxMjE5MTMwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWY5MmMyZmM2MzhjMjlmNWEwNTVjNzE4MWMxOGE3ZDRkOWU0NGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqvw5jYUZw4vnu4oXewl2ByRwXdi 0zemF0pSslJBH+Le7Sg/tK8Di2GGa4e+U0evJAHeR1KixRl6O2epE91mtZTDi9Jm zsXo93t/RGhVhohYCXuiz16h/OZ9X6JdKFlZnTRA5M19ZBIdjIVI1R/PdQkB6rbt Sl/nOEzMn4ujfwq2H6D6XjId/0jhAKI2NE7l8oGY9/xtamOzWkg4zjLfwfXl13T0 8D+PV4PMD37XEwWxhx3xaqlMsk7bad2mIAtquJBdgLQHFkWe/T1MCvclKi3UjY22 YID4vH6JAMTshO7SISrySy+PT/hem5JkldehAsS9AuqEsZOL+ADjxdETRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGn5LC/GOMKfWgVccYHBin1NnkTsMB8GA1UdIwQY MBaAFGO4QiVLvWvzPgnQWkWPAKBITPFvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTdoQ0pVdTlhX00tQ2RCYVJZOEFvRWhNOFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iZGQxZTctYjc5YS00YzIxLTliYTkt ZjE1N2MzMjk0ZDQwLzEvYWZrc0w4WTR3cDlhQlZ4eGdjR0tmVTJlUk93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9iZGQxZTctYjc5YS00YzIxLTliYTktZjE1N2MzMjk0ZDQw LzEvWTdoQ0pVdTlhX00tQ2RCYVJZOEFvRWhNOFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV0XMA0G CSqGSIb3DQEBCwUAA4IBAQAVPFWxVvYRWijGCk3i9HJV2bhhXDvIyRj4vESpRJtF bqc8pLETEYC1LJVmvyWxm7Rsq9J340NqGCIb/mn3tZCb9MNMS2p9EedSOA0Wh4jn 6GIM6LDUPTwooqTSOLaaJQ6g1/KMAXA85l8EGisE4iW0c5vlgz7oBoYAnxrpKL/4 lCMEmQcWQaNWt7fRgs1EfKAWBGxQh1NHcnU/X9Bco7paD3vTEQwBMl/vgbD1bgdp o2Tg/O4Z21IWe3KlVhtLhteHPMhcHOZq3IMN7U45WGYcKWolW8dMUUgALqH0+DXr oO7AvyEbgHmH90zvFoo5e7IbRck8y1ojS4ojo9LkpWTD -----END CERTIFICATE-----Generated at Fri Dec 19 22:58:09 2025 by rpki-client