This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/laiDZxmXdgJH8Of-yAuGAFD0Nks.roa File: laiDZxmXdgJH8Of-yAuGAFD0Nks.roa (raw, json) Hash identifier: 29mbTdf0w60u4m7lifJIKwS951c2LKKJ0JQHfZ51kdg= Subject key identifier: 95:A8:83:67:19:97:76:02:47:F0:E7:FE:C8:0B:86:00:50:F4:36:4B Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c Certificate serial: 019C495AE0AA030C3A0B364061D97D65A8A9 Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/laiDZxmXdgJH8Of-yAuGAFD0Nks.roa Signing time: Tue 10 Feb 2026 21:00:18 +0000 ROA not before: Tue 10 Feb 2026 21:00:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.222.61.0/24 maxlen: 24 2001:67c:12b4::/48 maxlen: 48 2a0a:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Feb 2026 23:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:49:5a:e0:aa:03:0c:3a:0b:36:40:61:d9:7d:65:a8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c Validity Not Before: Feb 10 21:00:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95a883671997760247f0e7fec80b860050f4364b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d8:3d:6a:ba:66:f9:b3:36:17:52:1c:64:65: 30:0a:94:81:ff:b6:73:3c:8f:e6:41:f4:fb:44:c9: 06:11:da:c4:76:96:b3:3f:6c:42:7e:e5:f8:fe:ac: 84:99:9b:0f:7a:50:b2:0d:44:59:5d:c3:1f:d5:30: f9:26:a9:74:22:ad:b6:8d:cd:33:fe:11:eb:63:72: 14:e9:c7:94:5d:9c:41:62:5a:37:65:07:a6:a6:49: fa:2a:d4:6a:40:31:2c:ae:62:56:01:df:8a:36:d7: 7e:7d:cd:82:f7:32:8c:5f:50:b8:60:59:b7:ec:34: bf:87:e0:28:46:f4:39:8b:ba:0e:45:f6:4a:f8:c3: 9a:8d:f1:9f:33:89:c8:b8:0a:a5:a1:d9:c6:6c:23: 55:f8:a7:86:54:38:fa:a5:e5:da:c9:14:b4:0d:a3: 70:14:a6:2b:d4:b7:7f:74:58:d5:5d:f5:35:1d:fa: 56:04:33:b4:01:56:7a:fe:0f:79:f2:b4:52:c2:76: 11:ef:cd:6d:ca:fb:b5:6b:aa:e1:7f:04:63:4d:d1: 3c:95:8f:c4:43:d9:68:f7:98:5a:d5:f6:22:18:33: 3c:c8:7d:75:0c:95:4f:51:04:ce:ec:ec:08:e8:7a: ea:a7:9e:6d:4d:55:7d:e8:8e:2c:25:97:72:76:b8: 18:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A8:83:67:19:97:76:02:47:F0:E7:FE:C8:0B:86:00:50:F4:36:4B X509v3 Authority Key Identifier: keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/laiDZxmXdgJH8Of-yAuGAFD0Nks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.222.61.0/24 IPv6: 2001:67c:12b4::/48 2a0a:a000::/40 Signature Algorithm: sha256WithRSAEncryption 16:c4:55:1b:3a:8d:a4:d6:15:e0:a4:a9:e0:b1:18:f2:e6:44: 89:44:98:19:4c:14:cd:d2:12:7b:db:6d:7e:6b:23:29:9f:d5: 74:a6:44:14:2a:ee:ec:45:26:a4:0e:fa:f7:00:db:8d:c9:17: bf:f1:78:e6:fe:7a:56:9a:ba:51:90:ea:31:35:73:82:c9:d1: 98:7f:80:de:60:99:fd:c1:d8:f1:b3:d9:0c:af:0b:3a:4f:27: 20:df:0d:93:24:97:a2:6e:30:ea:c3:3f:b8:2c:ef:ec:c5:bf: 34:3b:c4:b3:8c:d8:53:b6:c6:9d:24:38:9c:63:a9:88:92:a4: 48:28:f9:d0:0a:3a:46:a9:49:2b:93:a4:e2:b7:fe:01:64:78: 9d:b4:6e:24:82:3d:aa:79:fa:f0:6c:30:61:8c:5b:09:05:30: 67:1d:9e:05:05:2c:bf:fb:c2:20:6f:1b:93:2c:c9:e8:af:90: bb:3b:88:1f:12:14:33:ff:9e:d7:b2:f3:ca:02:47:b0:71:66: 63:ee:74:16:0a:54:a1:64:04:57:77:f8:8c:ad:1e:40:73:45: 46:76:f0:55:1d:15:40:a6:d5:6b:a8:e5:d7:0a:e4:3f:91:1f: 8f:ac:3e:73:f3:51:bd:f2:2e:f9:77:83:07:11:72:8d:c2:b8: de:f6:8c:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxJWuCqAww6CzZAYdl9ZaipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNDAxODVmNTUyY2Q5NzUyNzZjMDM0NjRmNTBjN2E1ZDM1 MTU2NGMwHhcNMjYwMjEwMjEwMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWE4ODM2NzE5OTc3NjAyNDdmMGU3ZmVjODBiODYwMDUwZjQzNjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9g9arpm+bM2F1IcZGUwCpSB/7Zz PI/mQfT7RMkGEdrEdpazP2xCfuX4/qyEmZsPelCyDURZXcMf1TD5Jql0Iq22jc0z /hHrY3IU6ceUXZxBYlo3ZQempkn6KtRqQDEsrmJWAd+KNtd+fc2C9zKMX1C4YFm3 7DS/h+AoRvQ5i7oORfZK+MOajfGfM4nIuAqlodnGbCNV+KeGVDj6peXayRS0DaNw FKYr1Ld/dFjVXfU1HfpWBDO0AVZ6/g958rRSwnYR781tyvu1a6rhfwRjTdE8lY/E Q9lo95ha1fYiGDM8yH11DJVPUQTO7OwI6Hrqp55tTVV96I4sJZdydrgYZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWog2cZl3YCR/Dn/sgLhgBQ9DZLMB8GA1UdIwQY MBaAFM9AGF9VLNl1J2wDRk9Qx6XTUVZMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejBBWVgxVXMyWFVuYkFOR1QxREhwZE5SVmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8xMTY4ZmEtZmJmNi00ZTA3LTllYzct OTE5ZWVmYmE0OGI1LzEvbGFpRFp4bVhkZ0pIOE9mLXlBdUdBRkQwTmtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8xMTY4ZmEtZmJmNi00ZTA3LTllYzctOTE5ZWVmYmE0OGI1 LzEvejBBWVgxVXMyWFVuYkFOR1QxREhwZE5SVmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAMBAIAATAGAwQAwd49MBcE AgACMBEDBwAgAQZ8ErQDBgAqCqAAADANBgkqhkiG9w0BAQsFAAOCAQEAFsRVGzqN pNYV4KSp4LEY8uZEiUSYGUwUzdISe9ttfmsjKZ/VdKZEFCru7EUmpA769wDbjckX v/F45v56Vpq6UZDqMTVzgsnRmH+A3mCZ/cHY8bPZDK8LOk8nIN8NkySXom4w6sM/ uCzv7MW/NDvEs4zYU7bGnSQ4nGOpiJKkSCj50Ao6RqlJK5Ok4rf+AWR4nbRuJII9 qnn68GwwYYxbCQUwZx2eBQUsv/vCIG8bkyzJ6K+QuzuIHxIUM/+e17LzygJHsHFm Y+50FgpUoWQEV3f4jK0eQHNFRnbwVR0VQKbVa6jl1wrkP5Efj6w+c/NRvfIu+XeD BxFyjcK43vaM0Q== -----END CERTIFICATE-----Generated at Mon Feb 16 06:36:53 2026 by rpki-client