This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/1qpA4kBmWPvjXJj5-28o1Uru68U.roa File: 1qpA4kBmWPvjXJj5-28o1Uru68U.roa (raw, json) Hash identifier: Xci7Bw12VXpZ9NdP2YN2sZhOd2vyN4EA/pcZ8/zKifE= Subject key identifier: D6:AA:40:E2:40:66:58:FB:E3:5C:98:F9:FB:6F:28:D5:4A:EE:EB:C5 Certificate issuer: /CN=168a919a4a463f3ca2bba5442550fc247da90cae Certificate serial: 019B7CEE2B074448AF237111EAB665D67014 Authority key identifier: 16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/1qpA4kBmWPvjXJj5-28o1Uru68U.roa Signing time: Fri 02 Jan 2026 04:19:01 +0000 ROA not before: Fri 02 Jan 2026 04:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196776 IP address blocks: 91.215.236.0/22 maxlen: 24 91.215.236.0/23 maxlen: 24 91.215.238.0/24 maxlen: 24 91.215.239.0/24 maxlen: 24 91.229.250.0/23 maxlen: 24 195.88.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2b:07:44:48:af:23:71:11:ea:b6:65:d6:70:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=168a919a4a463f3ca2bba5442550fc247da90cae Validity Not Before: Jan 2 04:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6aa40e2406658fbe35c98f9fb6f28d54aeeebc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:16:3f:68:3a:a8:2d:6e:19:61:33:39:26:26: 8a:4d:58:4d:b9:9b:cd:06:7c:ec:db:be:e8:a4:5f: b7:96:40:7b:ba:0c:47:dc:62:b5:14:5c:54:83:b3: 00:f6:e8:f7:98:ab:2e:68:74:f1:63:c2:13:fa:fc: fc:7a:6a:8b:ab:a7:6a:47:e6:79:be:09:ef:0b:78: 44:5d:6b:24:1d:34:28:44:14:a1:8b:66:79:19:df: bd:8d:f1:5b:c3:da:f9:0a:eb:ee:03:b4:28:ba:69: 32:41:73:dd:dd:db:eb:28:b2:7c:80:b6:fb:b0:81: 9b:ed:75:eb:de:38:07:9f:65:11:45:b2:42:ad:d8: c4:b8:3c:53:7e:8f:bd:a2:5d:bb:60:3e:84:52:74: 64:64:e8:4b:3a:19:78:46:34:36:72:bb:fc:24:b3: 52:0b:f3:39:cc:43:72:ce:99:18:ee:67:70:a2:f0: f1:55:67:98:9d:5e:ed:0b:41:d9:61:5a:fb:1e:70: 1c:96:c0:d6:b8:ee:1a:01:94:c3:26:67:1a:c3:d6: 9c:a9:2d:3b:4d:31:1f:d1:15:14:64:79:a1:72:1d: cc:f7:60:41:bd:64:c5:bc:3e:b7:01:e7:59:ec:f5: 8d:86:a3:81:59:7d:6b:19:21:93:03:4b:16:9a:dd: fd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AA:40:E2:40:66:58:FB:E3:5C:98:F9:FB:6F:28:D5:4A:EE:EB:C5 X509v3 Authority Key Identifier: keyid:16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/1qpA4kBmWPvjXJj5-28o1Uru68U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.215.236.0/22 91.229.250.0/23 195.88.90.0/23 Signature Algorithm: sha256WithRSAEncryption 13:f1:75:09:77:e1:85:9d:2b:4d:92:62:07:16:6a:f0:4d:17: 46:35:7e:ff:6c:1e:14:d8:05:51:a9:d9:b6:5e:c9:5b:64:cf: 20:50:dd:bb:85:ea:9f:23:e6:55:48:19:d6:c8:7c:47:5e:bf: 76:90:89:3a:bd:ee:fb:a2:32:39:2d:d8:fc:50:de:bd:31:78: b1:f1:73:bb:c6:7d:5f:fc:65:b6:20:ef:09:6f:35:9b:7a:da: d2:b9:5a:71:72:9a:91:3d:36:cb:f9:6e:65:af:42:42:46:38: d1:f2:a6:51:1d:42:43:10:5e:80:61:b0:59:2d:6c:96:ee:6a: 37:45:e4:40:db:a9:7a:1b:a7:b6:4c:50:7a:0c:fd:0a:d4:e6: f5:12:d7:26:78:5a:04:62:c5:40:72:7a:75:30:c4:85:a0:b3: 96:cf:21:8a:b8:67:91:f3:f0:12:56:c4:89:7e:5a:05:b4:4e: 18:76:7a:5d:2b:5f:a8:8d:62:64:ea:f6:ab:d3:8a:74:9e:ef: a2:12:13:d5:66:70:a2:9e:92:9c:a2:27:30:51:87:1a:0d:f6: f0:40:45:a0:24:1a:70:70:d3:9d:d7:75:01:ec:76:9d:5f:af: d7:b9:05:74:98:d5:79:de:94:f8:8b:3c:be:2c:db:c8:25:c6: 34:9a:55:7a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87isHREivI3ER6rZl1nAUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OGE5MTlhNGE0NjNmM2NhMmJiYTU0NDI1NTBmYzI0N2Rh OTBjYWUwHhcNMjYwMTAyMDQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmFhNDBlMjQwNjY1OGZiZTM1Yzk4ZjlmYjZmMjhkNTRhZWVlYmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphY/aDqoLW4ZYTM5JiaKTVhNuZvN Bnzs277opF+3lkB7ugxH3GK1FFxUg7MA9uj3mKsuaHTxY8IT+vz8emqLq6dqR+Z5 vgnvC3hEXWskHTQoRBShi2Z5Gd+9jfFbw9r5CuvuA7QoumkyQXPd3dvrKLJ8gLb7 sIGb7XXr3jgHn2URRbJCrdjEuDxTfo+9ol27YD6EUnRkZOhLOhl4RjQ2crv8JLNS C/M5zENyzpkY7mdwovDxVWeYnV7tC0HZYVr7HnAclsDWuO4aAZTDJmcaw9acqS07 TTEf0RUUZHmhch3M92BBvWTFvD63AedZ7PWNhqOBWX1rGSGTA0sWmt39vwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNaqQOJAZlj741yY+ftvKNVK7uvFMB8GA1UdIwQY MBaAFBaKkZpKRj88orulRCVQ/CR9qQyuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm9xUm1rcEdQenlpdTZWRUpWRDhKSDJwREs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mYzBiZDYtOTg2OC00YjQ5LTk4ODgt ZGNkNmEzOWY4MGRmLzEvMXFwQTRrQm1XUHZqWEpqNS0yOG8xVXJ1NjhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9mYzBiZDYtOTg2OC00YjQ5LTk4ODgtZGNkNmEzOWY4MGRm LzEvRm9xUm1rcEdQenlpdTZWRUpWRDhKSDJwREs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW9fsAwQB W+X6AwQBw1haMA0GCSqGSIb3DQEBCwUAA4IBAQAT8XUJd+GFnStNkmIHFmrwTRdG NX7/bB4U2AVRqdm2XslbZM8gUN27heqfI+ZVSBnWyHxHXr92kIk6ve77ojI5Ldj8 UN69MXix8XO7xn1f/GW2IO8JbzWbetrSuVpxcpqRPTbL+W5lr0JCRjjR8qZRHUJD EF6AYbBZLWyW7mo3ReRA26l6G6e2TFB6DP0K1Ob1EtcmeFoEYsVAcnp1MMSFoLOW zyGKuGeR8/ASVsSJfloFtE4YdnpdK1+ojWJk6var04p0nu+iEhPVZnCinpKcoicw UYcaDfbwQEWgJBpwcNOd13UB7HadX6/XuQV0mNV53pT4izy+LNvIJcY0mlV6 -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:42 2026 by rpki-client