This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/2f-P4fDHiKWUADrK-tktjHqGw6s.roa File: 2f-P4fDHiKWUADrK-tktjHqGw6s.roa (raw, json) Hash identifier: zVsJo2j3kxjfhqS1ysVureSptf/JpUq/fXy1LYaHfRY= Subject key identifier: D9:FF:8F:E1:F0:C7:88:A5:94:00:3A:CA:FA:D9:2D:8C:7A:86:C3:AB Certificate issuer: /CN=40c57f7c0befe63b6004e944df684c9d51e468f3 Certificate serial: 019B7DCAAF56404146C6390212967B7143F5 Authority key identifier: 40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/2f-P4fDHiKWUADrK-tktjHqGw6s.roa Signing time: Fri 02 Jan 2026 08:19:53 +0000 ROA not before: Fri 02 Jan 2026 08:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57574 IP address blocks: 164.215.56.0/23 maxlen: 23 164.215.58.0/24 maxlen: 24 164.215.59.0/24 maxlen: 24 164.215.60.0/23 maxlen: 23 164.215.60.0/24 maxlen: 24 164.215.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:af:56:40:41:46:c6:39:02:12:96:7b:71:43:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40c57f7c0befe63b6004e944df684c9d51e468f3 Validity Not Before: Jan 2 08:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9ff8fe1f0c788a594003acafad92d8c7a86c3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a6:b1:7b:7f:05:69:2d:d4:ce:5e:ba:0a:75: fb:1b:37:81:c8:d5:1c:e0:a2:8a:0c:e4:16:ec:9a: 11:cc:6a:cb:d9:ea:91:f3:98:df:2f:03:99:32:b7: 48:e1:67:0f:62:09:a7:46:fc:b0:55:9e:5a:cb:05: 16:5b:c0:72:54:54:b1:13:db:15:41:58:e9:cf:a0: 9b:43:4e:40:9e:1a:07:d9:0b:b1:e6:18:7f:e9:49: 14:00:d5:98:58:51:fb:23:fc:1f:10:bc:b2:b2:90: fc:81:cb:ea:b2:ee:0d:96:4d:49:a4:37:4f:40:31: 70:db:db:75:f9:4b:a7:57:02:6c:bd:1b:67:ce:bf: 9b:31:dd:03:14:78:71:ef:cc:10:d7:ee:63:fa:cc: 06:d1:35:30:9e:69:71:11:95:06:17:e8:51:37:3d: c3:07:2b:17:a1:af:fb:1b:2e:9f:40:1a:d1:f8:3e: d4:56:4b:5a:39:53:58:b4:a1:e0:dd:8c:e7:03:06: 5f:bf:a6:06:16:88:97:45:b6:b2:62:34:aa:23:55: db:36:91:7c:2d:ae:05:b4:2a:8c:86:46:a1:1f:85: a0:9d:74:21:05:97:23:6d:12:6b:66:d2:72:03:a9: 3d:ff:f0:39:b0:fa:99:72:4b:5d:dc:d8:95:6f:31: 30:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FF:8F:E1:F0:C7:88:A5:94:00:3A:CA:FA:D9:2D:8C:7A:86:C3:AB X509v3 Authority Key Identifier: keyid:40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/2f-P4fDHiKWUADrK-tktjHqGw6s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.215.56.0-164.215.61.255 Signature Algorithm: sha256WithRSAEncryption 4e:b3:4d:c4:65:fa:e0:ac:05:4d:6a:44:5d:80:21:38:45:48: 18:34:3f:b1:bd:aa:2b:64:59:72:22:07:2d:cd:4b:93:03:8d: 00:af:e1:53:ae:55:1a:28:84:e7:b5:f9:a0:bf:83:e2:b6:30: c0:46:ac:d2:6b:80:c0:3d:c0:f6:31:53:88:67:df:1d:e8:13: 97:93:c2:bd:a2:96:c2:11:8c:8f:f1:e0:63:1d:a8:26:29:bd: ad:7c:15:05:a4:c4:14:c0:b3:29:02:01:b6:32:de:d6:d9:37: 88:12:8e:5b:29:81:28:32:54:ec:74:59:b7:35:9c:28:78:2b: 90:9a:c8:19:fe:d3:29:87:a3:e9:2d:ab:f4:c6:60:7f:65:37: 49:8b:47:77:e7:94:fa:8a:69:da:58:b2:46:93:a3:8e:b2:69: 1d:7f:17:29:5a:5a:1f:3f:92:ba:04:5e:f2:db:eb:8e:a1:96: bb:97:d6:0a:20:46:89:14:a9:7f:e8:17:55:da:7e:9e:01:d6: 23:0b:08:ea:66:c2:ce:ca:03:13:fb:05:9b:c6:6f:a5:03:fd: 68:7c:ea:48:30:13:8b:ed:43:54:e0:d4:b0:d5:50:86:3f:0f: df:91:b6:54:24:36:bd:76:19:29:28:2b:f1:fc:bc:c6:87:80: fa:3f:1b:5d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9yq9WQEFGxjkCEpZ7cUP1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYzU3ZjdjMGJlZmU2M2I2MDA0ZTk0NGRmNjg0YzlkNTFl NDY4ZjMwHhcNMjYwMTAyMDgxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWZmOGZlMWYwYzc4OGE1OTQwMDNhY2FmYWQ5MmQ4YzdhODZjM2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Kaxe38FaS3Uzl66CnX7GzeByNUc 4KKKDOQW7JoRzGrL2eqR85jfLwOZMrdI4WcPYgmnRvywVZ5aywUWW8ByVFSxE9sV QVjpz6CbQ05AnhoH2Qux5hh/6UkUANWYWFH7I/wfELyyspD8gcvqsu4Nlk1JpDdP QDFw29t1+UunVwJsvRtnzr+bMd0DFHhx78wQ1+5j+swG0TUwnmlxEZUGF+hRNz3D BysXoa/7Gy6fQBrR+D7UVktaOVNYtKHg3YznAwZfv6YGFoiXRbayYjSqI1XbNpF8 La4FtCqMhkahH4WgnXQhBZcjbRJrZtJyA6k9//A5sPqZcktd3NiVbzEwVwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNn/j+Hwx4illAA6yvrZLYx6hsOrMB8GA1UdIwQY MBaAFEDFf3wL7+Y7YATpRN9oTJ1R5GjzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU1WX2ZBdnY1anRnQk9sRTMyaE1uVkhrYVBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mZTJlMDEtZDg1NC00ZmJjLWJhMTkt MmIwMTJmZThlYTUyLzEvMmYtUDRmREhpS1dVQURySy10a3RqSHFHdzZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9mZTJlMDEtZDg1NC00ZmJjLWJhMTktMmIwMTJmZThlYTUy LzEvUU1WX2ZBdnY1anRnQk9sRTMyaE1uVkhrYVBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAOk1zgD BAGk1zwwDQYJKoZIhvcNAQELBQADggEBAE6zTcRl+uCsBU1qRF2AIThFSBg0P7G9 qitkWXIiBy3NS5MDjQCv4VOuVRoohOe1+aC/g+K2MMBGrNJrgMA9wPYxU4hn3x3o E5eTwr2ilsIRjI/x4GMdqCYpva18FQWkxBTAsykCAbYy3tbZN4gSjlspgSgyVOx0 Wbc1nCh4K5CayBn+0ymHo+ktq/TGYH9lN0mLR3fnlPqKadpYskaTo46yaR1/Fyla Wh8/kroEXvLb646hlruX1gogRokUqX/oF1Xafp4B1iMLCOpmws7KAxP7BZvGb6UD /Wh86kgwE4vtQ1Tg1LDVUIY/D9+RtlQkNr12GSkoK/H8vMaHgPo/G10= -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:10 2026 by rpki-client