This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/fAH5HGr0FJnwVfimBME1mjRTR6I.roa File: fAH5HGr0FJnwVfimBME1mjRTR6I.roa (raw, json) Hash identifier: JoiS3vBcWeJyqI74VLwhU1NQ94a4ip5InVm6CERVHPg= Subject key identifier: 7C:01:F9:1C:6A:F4:14:99:F0:55:F8:A6:04:C1:35:9A:34:53:47:A2 Certificate issuer: /CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42 Certificate serial: 019B79106F5474824C152FE10A302B94B6EA Authority key identifier: E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/fAH5HGr0FJnwVfimBME1mjRTR6I.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15451 IP address blocks: 46.182.144.0/21 maxlen: 21 79.140.48.0/20 maxlen: 21 80.94.128.0/20 maxlen: 20 91.190.200.0/21 maxlen: 21 185.26.76.0/22 maxlen: 22 193.27.48.0/21 maxlen: 21 2a00:e50::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6f:54:74:82:4c:15:2f:e1:0a:30:2b:94:b6:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42 Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c01f91c6af41499f055f8a604c1359a345347a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:76:97:5b:05:b1:28:6d:7f:a9:e5:ec:53:b8: 0c:2a:70:8f:e7:c6:f1:47:ed:79:46:df:1f:c0:91: d8:ce:27:81:89:88:c7:52:f3:55:10:4b:eb:cc:e5: a9:d2:a5:80:25:fa:55:c1:00:3b:a9:f6:e4:09:6e: e0:e5:ab:ee:e3:9e:94:49:54:4d:42:36:6a:33:c8: 7c:f2:de:ce:15:c9:45:af:7f:94:c3:91:bf:e4:b1: 8f:a1:70:62:19:7e:47:46:f4:ce:c5:82:0d:2f:44: 2c:2a:15:16:b1:53:46:c8:73:06:32:d7:93:2b:66: cb:e7:8c:63:91:8a:4b:51:13:64:2e:8d:ed:0a:a8: 16:d5:77:d5:a0:b1:72:0f:46:bc:87:bd:38:c0:5a: 55:b0:66:7e:b6:cf:a4:73:00:c8:51:c8:2d:ff:44: fe:57:45:86:f8:79:d5:9e:66:fd:1d:fb:eb:f0:c7: b2:2d:f1:3d:dd:76:9b:13:1f:55:39:87:ce:62:fe: 0f:76:15:2f:ed:bd:1c:a3:e9:0c:f3:94:a4:b8:d2: 18:34:08:58:58:ba:8a:08:b9:11:4f:4e:fd:40:84: 0c:ae:77:6d:82:c6:45:a4:99:2f:73:11:b2:09:4f: 2e:25:87:28:32:8f:98:c5:97:b4:ca:40:b0:fb:4d: 81:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:01:F9:1C:6A:F4:14:99:F0:55:F8:A6:04:C1:35:9A:34:53:47:A2 X509v3 Authority Key Identifier: keyid:E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/fAH5HGr0FJnwVfimBME1mjRTR6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.182.144.0/21 79.140.48.0/20 80.94.128.0/20 91.190.200.0/21 185.26.76.0/22 193.27.48.0/21 IPv6: 2a00:e50::/29 Signature Algorithm: sha256WithRSAEncryption 42:dc:86:bc:75:50:d7:28:80:8b:ce:a4:f6:1a:9e:d7:3d:ce: ed:20:ca:2d:dc:86:1f:13:f1:f7:78:07:a3:72:56:da:66:6c: f3:76:b8:82:7b:b4:05:9d:14:c1:a5:8a:0a:52:50:ff:24:26: c4:a7:97:bb:45:dd:db:c5:93:3a:8c:81:08:50:ca:ed:75:ab: 8c:14:b8:2d:00:6a:63:a3:ff:05:62:53:26:b0:e7:4a:aa:a7: 21:2a:39:2b:6a:0f:bb:e0:6f:7c:1c:4f:d7:02:81:5f:47:ca: 55:83:c7:b8:f0:07:dc:e0:0b:7d:86:29:a0:82:06:aa:88:14: 63:fe:9f:7e:0b:42:66:4d:8f:5f:54:f6:91:78:8b:10:bf:17: ff:60:17:88:2c:27:8d:d7:73:0a:d9:c6:89:c2:04:40:36:94: be:c6:fc:3d:f4:a0:7b:9e:9e:66:bc:fa:ff:57:8f:8f:00:20: ee:4b:b0:e7:90:ee:0c:5b:51:6e:23:37:05:fc:52:19:b9:0b: cf:cb:97:25:69:c4:76:a8:1a:1e:82:a7:e4:f3:d2:a9:95:2b: 22:a0:38:0e:3f:ff:b7:5a:62:48:bb:8a:87:56:f4:e0:8e:73: e8:3c:e1:3b:58:43:29:d9:9b:e9:1b:d8:d1:ac:4a:12:bc:77: 3b:0b:ed:a0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt5EG9UdIJMFS/hCjArlLbqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MzdjOWE0NDJhOGI0YTRjOTEyZjExYmMyYjZkM2NmMTAw YWRmNDIwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzAxZjkxYzZhZjQxNDk5ZjA1NWY4YTYwNGMxMzU5YTM0NTM0N2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3aXWwWxKG1/qeXsU7gMKnCP58bx R+15Rt8fwJHYzieBiYjHUvNVEEvrzOWp0qWAJfpVwQA7qfbkCW7g5avu456USVRN QjZqM8h88t7OFclFr3+Uw5G/5LGPoXBiGX5HRvTOxYINL0QsKhUWsVNGyHMGMteT K2bL54xjkYpLURNkLo3tCqgW1XfVoLFyD0a8h704wFpVsGZ+ts+kcwDIUcgt/0T+ V0WG+HnVnmb9Hfvr8MeyLfE93XabEx9VOYfOYv4PdhUv7b0co+kM85SkuNIYNAhY WLqKCLkRT079QIQMrndtgsZFpJkvcxGyCU8uJYcoMo+YxZe0ykCw+02BbwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFHwB+Rxq9BSZ8FX4pgTBNZo0U0eiMB8GA1UdIwQY MBaAFOc3yaRCqLSkyRLxG8K2088QCt9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXpmSnBFS290S1RKRXZFYndyYlR6eEFLMzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xNzY2N2UtMDIxOS00MjFlLTg0MTIt MzFmNjAzNzNhMDkyLzEvZkFINUhHcjBGSm53VmZpbUJNRTFtalJUUjZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8xNzY2N2UtMDIxOS00MjFlLTg0MTItMzFmNjAzNzNhMDky LzEvNXpmSnBFS290S1RKRXZFYndyYlR6eEFLMzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDLraQAwQE T4wwAwQEUF6AAwQDW77IAwQCuRpMAwQDwRswMA0EAgACMAcDBQMqAA5QMA0GCSqG SIb3DQEBCwUAA4IBAQBC3Ia8dVDXKICLzqT2Gp7XPc7tIMot3IYfE/H3eAejclba ZmzzdriCe7QFnRTBpYoKUlD/JCbEp5e7Rd3bxZM6jIEIUMrtdauMFLgtAGpjo/8F YlMmsOdKqqchKjkrag+74G98HE/XAoFfR8pVg8e48Afc4At9himgggaqiBRj/p9+ C0JmTY9fVPaReIsQvxf/YBeILCeN13MK2caJwgRANpS+xvw99KB7np5mvPr/V4+P ACDuS7DnkO4MW1FuIzcF/FIZuQvPy5clacR2qBoegqfk89KplSsioDgOP/+3WmJI u4qHVvTgjnPoPOE7WEMp2ZvpG9jRrEoSvHc7C+2g -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:43 2026 by rpki-client