This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/po4crTaA95m-lSpTh_du9PtU6gY.roa File: po4crTaA95m-lSpTh_du9PtU6gY.roa (raw, json) Hash identifier: SJ7n/VopAoAzW1zSv/V6X7AVtWxebx5P9AXUE5osTUo= Subject key identifier: A6:8E:1C:AD:36:80:F7:99:BE:95:2A:53:87:F7:6E:F4:FB:54:EA:06 Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d Certificate serial: 019B78A217E2BDA893B781914381EFCDFBF5 Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/po4crTaA95m-lSpTh_du9PtU6gY.roa Signing time: Thu 01 Jan 2026 08:17:27 +0000 ROA not before: Thu 01 Jan 2026 08:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207355 IP address blocks: 66.97.192.0/19 maxlen: 19 91.196.172.0/22 maxlen: 22 193.187.160.0/22 maxlen: 22 193.239.168.0/23 maxlen: 23 2a06:f240::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:17:e2:bd:a8:93:b7:81:91:43:81:ef:cd:fb:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d Validity Not Before: Jan 1 08:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a68e1cad3680f799be952a5387f76ef4fb54ea06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0e:e8:bc:a2:bd:80:3b:0e:b6:d7:15:02:f6: ab:1a:8e:e1:d0:ec:6e:84:d3:94:6b:ba:ae:8a:b4: a1:b4:2f:2d:0e:5d:22:03:4d:c8:5a:f7:36:6b:9e: e3:49:f5:45:c5:f6:70:7f:d0:af:81:24:60:2a:6e: d8:e2:15:8a:49:d6:d5:78:6f:30:06:02:9e:0f:75: ad:f6:3f:a5:c2:58:b2:e9:3b:c8:1c:2b:ae:44:4e: 29:87:bf:67:08:76:b0:da:90:7f:f5:43:92:b1:bd: 16:d7:33:21:3d:6b:9f:1c:5b:09:8e:5c:f6:c6:3a: be:00:41:14:60:53:b1:47:15:bd:df:55:81:f3:f3: 06:47:a1:f9:7f:2c:49:fb:01:8e:8f:01:dd:ab:da: e9:7a:60:b7:98:33:e6:57:7d:07:25:67:36:2b:df: 00:bb:1e:f9:15:ab:4b:5e:20:ad:6e:7e:d1:3c:e7: 15:27:f4:d7:be:d8:e9:b5:83:e2:ff:36:d0:91:6e: d5:df:5a:43:ae:a9:ab:bf:b4:6e:1a:4c:48:25:5c: 43:91:b9:be:60:7e:ca:81:80:04:ca:79:80:a3:fd: b5:27:4a:19:fe:44:32:e6:d4:b0:ac:36:4f:0e:b4: bf:42:7c:d5:e8:59:b4:b6:6d:39:3f:d0:1f:a0:47: bf:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8E:1C:AD:36:80:F7:99:BE:95:2A:53:87:F7:6E:F4:FB:54:EA:06 X509v3 Authority Key Identifier: keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/po4crTaA95m-lSpTh_du9PtU6gY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.97.192.0/19 91.196.172.0/22 193.187.160.0/22 193.239.168.0/23 IPv6: 2a06:f240::/29 Signature Algorithm: sha256WithRSAEncryption 79:4d:bb:88:18:a8:a2:8f:33:cb:ae:39:f3:13:1b:2c:77:a9: a4:7b:c5:98:e3:f5:a5:b6:89:9f:13:b1:0f:2a:e8:25:09:58: e8:a8:e9:d7:75:51:ec:a6:d7:f3:83:b2:80:24:cb:0a:3e:0b: e7:f6:a8:ef:0b:cc:9e:3c:73:da:85:e3:3c:e8:16:63:32:bc: 3c:d3:c3:72:ea:72:92:e9:31:b2:d3:33:3f:95:c4:24:67:ab: cd:a9:2e:77:69:d9:31:c5:f2:33:a2:31:86:f5:74:ce:cf:ba: 34:4c:c1:b4:ec:1b:e4:47:f9:89:de:38:b8:2a:91:c1:eb:b7: 09:82:6f:e9:51:19:37:42:41:39:9b:55:05:19:ac:5b:9b:6d: c0:d9:04:4a:62:98:38:65:c6:b1:c4:36:81:be:cf:ea:70:33: 59:8b:91:7f:1e:0e:32:7b:7c:fd:89:2d:2e:2f:43:37:3b:97: 6a:a3:63:05:e5:8b:e0:8e:25:8c:14:f1:4b:15:a6:58:cf:9f: fd:4e:60:be:c4:05:12:f1:7e:32:18:d7:2a:59:67:c0:b5:0b: 65:08:a0:b7:ac:45:91:0a:41:b3:85:65:04:71:fa:a6:d9:3c: 43:1e:05:77:5f:cd:04:e8:e0:f3:db:4c:1c:56:bc:14:99:36: ad:de:69:f3 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt4ohfivaiTt4GRQ4Hvzfv1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNWM2YWYzZDAyMjYyMGY3MmM1M2I3NzBlODJlNWM3M2Fl NTUwNmQwHhcNMjYwMTAxMDgxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjhlMWNhZDM2ODBmNzk5YmU5NTJhNTM4N2Y3NmVmNGZiNTRlYTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ7ovKK9gDsOttcVAvarGo7h0Oxu hNOUa7quirShtC8tDl0iA03IWvc2a57jSfVFxfZwf9CvgSRgKm7Y4hWKSdbVeG8w BgKeD3Wt9j+lwliy6TvIHCuuRE4ph79nCHaw2pB/9UOSsb0W1zMhPWufHFsJjlz2 xjq+AEEUYFOxRxW931WB8/MGR6H5fyxJ+wGOjwHdq9rpemC3mDPmV30HJWc2K98A ux75FatLXiCtbn7RPOcVJ/TXvtjptYPi/zbQkW7V31pDrqmrv7RuGkxIJVxDkbm+ YH7KgYAEynmAo/21J0oZ/kQy5tSwrDZPDrS/QnzV6Fm0tm05P9AfoEe/NQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFKaOHK02gPeZvpUqU4f3bvT7VOoGMB8GA1UdIwQY MBaAFPBcavPQImIPcsU7dw6C5cc65VBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9mN2I3YzItNWQ4ZC00ZTg4LTg0NTQt MGE1MzIxNTZiMmE2LzEvcG80Y3JUYUE5NW0tbFNwVGhfZHU5UHRVNmdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9mN2I3YzItNWQ4ZC00ZTg4LTg0NTQtMGE1MzIxNTZiMmE2 LzEvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFQmHAAwQC W8SsAwQCwbugAwQBwe+oMA0EAgACMAcDBQMqBvJAMA0GCSqGSIb3DQEBCwUAA4IB AQB5TbuIGKiijzPLrjnzExssd6mke8WY4/WltomfE7EPKuglCVjoqOnXdVHsptfz g7KAJMsKPgvn9qjvC8yePHPaheM86BZjMrw808Ny6nKS6TGy0zM/lcQkZ6vNqS53 adkxxfIzojGG9XTOz7o0TMG07BvkR/mJ3ji4KpHB67cJgm/pURk3QkE5m1UFGaxb m23A2QRKYpg4ZcaxxDaBvs/qcDNZi5F/Hg4ye3z9iS0uL0M3O5dqo2MF5YvgjiWM FPFLFaZYz5/9TmC+xAUS8X4yGNcqWWfAtQtlCKC3rEWRCkGzhWUEcfqm2TxDHgV3 X80E6ODz20wcVrwUmTat3mnz -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:25 2026 by rpki-client