This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/KqD4sHTqiE0Hld_Y54YBKeLVZUM.roa File: KqD4sHTqiE0Hld_Y54YBKeLVZUM.roa (raw, json) Hash identifier: Q/7eqyje+7BZIAWiKFsMOt6OdJlmOhoIMfNkfXj7t34= Subject key identifier: 2A:A0:F8:B0:74:EA:88:4D:07:95:DF:D8:E7:86:01:29:E2:D5:65:43 Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019C1DECE98FCA9737F11673CAD9FCA02F19 Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/KqD4sHTqiE0Hld_Y54YBKeLVZUM.roa Signing time: Mon 02 Feb 2026 10:36:31 +0000 ROA not before: Mon 02 Feb 2026 10:36:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 93.191.170.0/24 maxlen: 24 93.191.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Feb 2026 23:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:ec:e9:8f:ca:97:37:f1:16:73:ca:d9:fc:a0:2f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Feb 2 10:36:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2aa0f8b074ea884d0795dfd8e7860129e2d56543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:82:ba:cb:ec:6d:f0:e8:8b:a7:fc:ed:ca: 17:3d:1b:c2:41:4c:3b:78:a8:bd:4c:35:44:a2:20: 68:e9:a9:20:f1:fa:6b:01:fa:bc:f8:07:64:ef:38: 9b:0c:11:02:ee:c3:86:d7:83:2e:8a:02:63:d5:8a: 8b:04:c0:06:23:9e:d4:8a:ca:d5:b0:e9:b4:bb:42: d7:df:51:4d:e1:62:64:75:f1:b3:67:b9:4d:7f:a8: c7:12:f3:d3:b0:6b:09:4c:43:47:fa:bc:9b:dd:30: 9b:6b:a0:37:63:87:88:0b:23:0a:8c:7c:a5:c2:b6: 16:1d:19:69:bd:c1:14:3c:3f:a8:a7:22:ee:fe:a6: 02:3d:a7:c8:bf:73:68:82:bb:5d:a0:f7:87:a1:80: 02:15:68:91:91:97:18:80:77:96:ed:35:8a:4e:21: eb:e2:dc:27:e8:f5:26:b1:b9:d0:f3:e4:6d:eb:74: cd:79:20:72:34:ca:09:88:7f:6a:f4:84:02:af:4b: ec:4c:c4:50:91:16:32:67:52:6a:fa:5a:27:a0:92: a9:ea:f7:c4:c1:6f:96:37:e9:10:70:73:6a:c7:7e: 9c:09:07:4c:a9:be:a8:13:80:f5:3c:ac:ed:2a:91: 1b:d8:83:e6:b9:e4:f2:85:b1:fd:99:a1:7e:f6:11: a9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A0:F8:B0:74:EA:88:4D:07:95:DF:D8:E7:86:01:29:E2:D5:65:43 X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/KqD4sHTqiE0Hld_Y54YBKeLVZUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.191.170.0/24 93.191.175.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:e1:7a:0a:97:cb:26:60:b0:ce:2d:2c:49:ed:48:28:0b:16: 04:fb:21:c6:0b:04:48:62:30:f4:83:33:8c:f8:79:46:3a:80: 00:86:f8:ea:55:89:bd:fd:61:da:41:b7:3d:b3:99:31:48:00: fb:53:af:e6:60:77:d3:95:02:bf:fe:e7:97:cb:aa:11:62:0e: e2:0c:d9:52:dc:8f:54:fe:64:63:54:24:5d:26:2e:07:63:6a: 91:ce:4f:b2:b7:01:b0:51:de:47:3b:0a:90:85:10:c0:5f:6e: 7c:7d:af:e0:0a:cf:ba:6d:0c:c6:7e:1a:f8:c1:71:dc:74:0e: ba:a0:be:6b:15:d1:e5:ff:d9:2a:73:d9:2b:9b:c9:4a:a2:98: 7d:85:24:f6:e4:8a:82:b2:7c:f4:72:e1:ed:c4:ef:a9:cc:1e: ad:10:ea:49:1e:9f:26:c0:38:83:85:a9:7f:fb:93:40:d3:4b: ab:97:49:3e:c8:3c:0f:73:31:f6:50:a2:ad:64:55:00:43:1b: 04:db:c4:b7:e8:69:30:0a:57:55:89:2b:16:48:46:5c:28:4d: a7:c1:87:0b:5b:3c:6d:19:3d:bf:68:16:c5:2e:97:f9:3e:c2: 49:99:06:04:31:8d:37:17:3a:a8:4b:0e:e5:2c:82:9e:09:b1: da:95:d8:de -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwd7OmPypc38RZzytn8oC8ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMjAyMTAzNjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWEwZjhiMDc0ZWE4ODRkMDc5NWRmZDhlNzg2MDEyOWUyZDU2NTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuGCusvsbfDoi6f87coXPRvCQUw7 eKi9TDVEoiBo6akg8fprAfq8+Adk7zibDBEC7sOG14MuigJj1YqLBMAGI57UisrV sOm0u0LX31FN4WJkdfGzZ7lNf6jHEvPTsGsJTENH+ryb3TCba6A3Y4eICyMKjHyl wrYWHRlpvcEUPD+opyLu/qYCPafIv3NogrtdoPeHoYACFWiRkZcYgHeW7TWKTiHr 4twn6PUmsbnQ8+Rt63TNeSByNMoJiH9q9IQCr0vsTMRQkRYyZ1Jq+lonoJKp6vfE wW+WN+kQcHNqx36cCQdMqb6oE4D1PKztKpEb2IPmueTyhbH9maF+9hGpAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCqg+LB06ohNB5Xf2OeGASni1WVDMB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvS3FENHNIVHFpRTBIbGRfWTU0WUJLZUxWWlVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXb+qAwQA Xb+vMA0GCSqGSIb3DQEBCwUAA4IBAQA/4XoKl8smYLDOLSxJ7UgoCxYE+yHGCwRI YjD0gzOM+HlGOoAAhvjqVYm9/WHaQbc9s5kxSAD7U6/mYHfTlQK//ueXy6oRYg7i DNlS3I9U/mRjVCRdJi4HY2qRzk+ytwGwUd5HOwqQhRDAX258fa/gCs+6bQzGfhr4 wXHcdA66oL5rFdHl/9kqc9krm8lKoph9hST25IqCsnz0cuHtxO+pzB6tEOpJHp8m wDiDhal/+5NA00url0k+yDwPczH2UKKtZFUAQxsE28S36GkwCldViSsWSEZcKE2n wYcLWzxtGT2/aBbFLpf5PsJJmQYEMY03FzqoSw7lLIKeCbHaldje -----END CERTIFICATE-----Generated at Mon Feb 16 06:36:39 2026 by rpki-client