This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/DeMSqglNgnRimF4pLlzh1FBEhnA.roa File: DeMSqglNgnRimF4pLlzh1FBEhnA.roa (raw, json) Hash identifier: 4oE04OONKgwG5O+fZ1H47RApbnAL6oA0WTInP838z0I= Subject key identifier: 0D:E3:12:AA:09:4D:82:74:62:98:5E:29:2E:5C:E1:D4:50:44:86:70 Certificate issuer: /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710 Certificate serial: 019B7EA56315EB0727A3CE38903A288C4B0F Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/DeMSqglNgnRimF4pLlzh1FBEhnA.roa Signing time: Fri 02 Jan 2026 12:18:46 +0000 ROA not before: Fri 02 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39256 IP address blocks: 46.254.80.0/21 maxlen: 21 92.43.0.0/21 maxlen: 21 185.17.88.0/22 maxlen: 22 188.93.24.0/21 maxlen: 21 2a03:7dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:63:15:eb:07:27:a3:ce:38:90:3a:28:8c:4b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710 Validity Not Before: Jan 2 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0de312aa094d827462985e292e5ce1d450448670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:31:15:6a:0c:a9:5f:6a:50:88:13:9b:51:d8: 31:ea:19:e9:90:24:a9:b8:d3:54:7f:0c:4e:cc:33: 73:b3:d5:ec:3a:d5:76:19:0e:c9:96:b2:56:f0:0b: 80:04:a7:89:8e:68:1a:28:07:17:80:0e:92:3f:e5: e4:83:a3:2f:fa:0b:ab:9a:60:1f:d5:a7:15:fa:c3: 83:bb:8b:dd:e9:51:6a:ef:6f:dd:0f:f4:d3:4d:c7: 52:a4:31:16:2a:94:73:69:8b:8f:aa:c9:c3:f3:6d: 41:cf:d8:47:5f:b1:2b:d9:2c:81:40:99:cb:66:1b: 2e:96:4c:64:2c:69:be:ae:2b:80:a2:99:c2:ed:7b: e2:98:2b:62:82:ca:08:fe:38:47:62:0a:e3:aa:b4: b1:d9:98:a6:a9:5e:03:27:99:79:f8:4d:c1:a0:96: a6:71:3d:d6:ce:3d:d7:f6:07:44:20:3d:eb:d3:36: 6b:4b:59:3a:d1:f2:da:34:73:ab:a8:bc:71:40:7b: d0:03:b9:45:c9:b8:c5:ad:ef:00:9b:7b:aa:cc:cf: fb:65:0b:fe:60:a5:c0:dd:2d:13:04:22:f0:09:d4: fa:41:59:65:3f:f0:a3:f1:a0:1e:eb:22:ce:43:ae: 24:62:5d:8b:a8:cd:97:30:74:1c:a3:2f:a2:ca:26: 5f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E3:12:AA:09:4D:82:74:62:98:5E:29:2E:5C:E1:D4:50:44:86:70 X509v3 Authority Key Identifier: keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/DeMSqglNgnRimF4pLlzh1FBEhnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.80.0/21 92.43.0.0/21 185.17.88.0/22 188.93.24.0/21 IPv6: 2a03:7dc0::/32 Signature Algorithm: sha256WithRSAEncryption 53:41:4b:23:d2:cd:6e:64:a0:64:47:5d:1d:70:6c:0f:39:2c: f7:d7:ab:df:44:13:68:7e:5f:b4:b5:2e:69:56:3f:03:69:5d: 7c:c9:b9:b6:46:85:a0:2c:6c:be:c9:31:0f:f9:69:69:66:d1: 0b:95:29:05:16:d6:d8:0c:c8:57:22:7b:8b:d6:5b:26:3b:a3: 94:eb:65:72:a7:88:d1:cb:c6:7f:4a:49:13:a6:a6:93:5b:e4: 3e:39:5f:40:ce:25:fb:90:0c:e9:92:41:86:57:8b:94:f1:d4: 2b:0d:eb:32:07:fc:53:2d:86:52:20:3c:f8:61:87:00:d8:a4: eb:1e:e1:ff:dd:9d:0a:18:61:2b:9a:91:9b:cd:3f:a7:41:da: 24:e5:11:8b:3a:99:7b:93:d3:88:a9:0b:8a:c0:3b:2c:f6:14: bc:f7:e6:8a:84:8a:f8:ce:6c:be:43:9e:18:f8:d7:bb:b2:98: b0:c4:7a:26:c7:09:4e:58:ca:6a:17:93:70:e0:84:16:87:e9: 5d:df:7f:7d:a7:91:c1:c8:48:cc:35:b2:aa:18:44:87:b7:7b: 72:d3:ee:e2:82:ff:07:41:e0:66:ee:54:25:e2:31:44:3c:09: 94:ca:43:e8:58:c5:ac:76:bb:de:5e:e5:f6:81:e7:e0:18:20: e4:b4:85:7f -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt+pWMV6wcno844kDoojEsPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYTRlZWE4NmY5ZjNlNmU3ODgxYjRiOGRhMTlhMWQyNzI1 ZTg3MTAwHhcNMjYwMTAyMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGUzMTJhYTA5NGQ4Mjc0NjI5ODVlMjkyZTVjZTFkNDUwNDQ4NjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDEVagypX2pQiBObUdgx6hnpkCSp uNNUfwxOzDNzs9XsOtV2GQ7JlrJW8AuABKeJjmgaKAcXgA6SP+Xkg6Mv+gurmmAf 1acV+sODu4vd6VFq72/dD/TTTcdSpDEWKpRzaYuPqsnD821Bz9hHX7Er2SyBQJnL ZhsulkxkLGm+riuAopnC7XvimCtigsoI/jhHYgrjqrSx2ZimqV4DJ5l5+E3BoJam cT3Wzj3X9gdEID3r0zZrS1k60fLaNHOrqLxxQHvQA7lFybjFre8Am3uqzM/7ZQv+ YKXA3S0TBCLwCdT6QVllP/Cj8aAe6yLOQ64kYl2LqM2XMHQcoy+iyiZfxwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFA3jEqoJTYJ0YpheKS5c4dRQRIZwMB8GA1UdIwQY MBaAFPqk7qhvnz5ueIG0uNoZodJyXocQMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xVHVxRy1mUG01NGdiUzQyaG1oMG5KZWh4QS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvYzJjMjg4LTZmNTYtNGM0ZC05ZGI1 LTk2ZTk5Zjc5NDI3OC8xL0RlTVNxZ2xOZ25SaW1GNHBMbHpoMUZCRWhuQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGYvYzJjMjg4LTZmNTYtNGM0ZC05ZGI1LTk2ZTk5Zjc5NDI3 OC8xLzEtcVR1cUctZlBtNTRnYlM0MmhtaDBuSmVoeEEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAMu/lAD BANcKwADBAK5EVgDBAO8XRgwDQQCAAIwBwMFACoDfcAwDQYJKoZIhvcNAQELBQAD ggEBAFNBSyPSzW5koGRHXR1wbA85LPfXq99EE2h+X7S1LmlWPwNpXXzJubZGhaAs bL7JMQ/5aWlm0QuVKQUW1tgMyFcie4vWWyY7o5TrZXKniNHLxn9KSROmppNb5D45 X0DOJfuQDOmSQYZXi5Tx1CsN6zIH/FMthlIgPPhhhwDYpOse4f/dnQoYYSuakZvN P6dB2iTlEYs6mXuT04ipC4rAOyz2FLz35oqEivjObL5Dnhj417uymLDEeibHCU5Y ymoXk3DghBaH6V3ff32nkcHISMw1sqoYRIe3e3LT7uKC/wdB4GbuVCXiMUQ8CZTK Q+hYxax2u95e5faB5+AYIOS0hX8= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:46 2026 by rpki-client