This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/1qfpefK-IKLyRX2WbiD-8WMvtIo.roa File: 1qfpefK-IKLyRX2WbiD-8WMvtIo.roa (raw, json) Hash identifier: 92M9a8T4KZ/HeDVtYT2qczbOaea03AQx3PHj+D4fEdU= Subject key identifier: D6:A7:E9:79:F2:BE:20:A2:F2:45:7D:96:6E:20:FE:F1:63:2F:B4:8A Certificate issuer: /CN=7e2e2918432849eb71e95dc40d1079ea865f6109 Certificate serial: 019B76EB7E511B312A430747642F5401DA59 Authority key identifier: 7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/1qfpefK-IKLyRX2WbiD-8WMvtIo.roa Signing time: Thu 01 Jan 2026 00:18:23 +0000 ROA not before: Thu 01 Jan 2026 00:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208197 IP address blocks: 194.9.63.0/24 maxlen: 24 2a12:4640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7e:51:1b:31:2a:43:07:47:64:2f:54:01:da:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e2e2918432849eb71e95dc40d1079ea865f6109 Validity Not Before: Jan 1 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6a7e979f2be20a2f2457d966e20fef1632fb48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:65:19:7a:40:18:a6:16:71:de:85:b9:82:56: 26:56:3b:d3:7f:dc:81:f5:3a:36:3b:6c:3c:1a:62: da:e2:a2:a9:be:ff:47:b8:ef:39:9d:20:66:f4:1c: c3:ff:1f:72:56:0e:90:24:9b:48:dc:b3:32:25:ea: 29:c4:40:73:8f:45:4c:2d:f5:23:3d:07:f6:73:93: 00:b0:15:60:d0:a7:02:a3:08:60:40:1f:3b:2d:7d: fe:ab:a2:50:4d:39:97:8c:e6:5d:15:47:1f:d6:33: 73:99:f6:78:f0:86:55:81:4f:bd:88:a5:96:f6:6e: ec:ca:28:78:51:4a:1e:dd:c2:ab:b7:cf:af:54:e7: 4e:44:d7:c3:67:24:69:68:bc:d8:db:14:ae:ff:b2: c5:c0:78:8e:6d:79:7c:95:53:92:be:f4:0f:5a:82: 6c:75:31:c3:43:7e:53:0e:c5:df:5b:0e:df:08:fb: 22:1e:dd:25:dd:3d:53:dc:fb:28:83:fc:e4:e5:51: 5a:fc:58:ad:99:97:c1:cb:e8:40:43:1d:f4:3c:8e: ca:2c:74:10:a8:65:b1:de:ce:24:e3:29:76:40:6c: 06:a4:df:f3:b9:18:73:4f:b4:be:f1:53:8b:e8:15: bb:e3:50:80:68:ca:19:1c:a3:7e:b0:db:de:c3:e9: 09:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A7:E9:79:F2:BE:20:A2:F2:45:7D:96:6E:20:FE:F1:63:2F:B4:8A X509v3 Authority Key Identifier: keyid:7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/1qfpefK-IKLyRX2WbiD-8WMvtIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.9.63.0/24 IPv6: 2a12:4640::/32 Signature Algorithm: sha256WithRSAEncryption 93:0d:e0:7f:bf:2f:f7:a7:9c:46:ab:07:3c:bd:d2:bb:35:e1: a8:bc:3f:76:52:63:4e:e5:18:0b:c0:c8:38:e3:aa:02:dd:ae: 1d:bd:f1:fe:05:c2:cc:13:53:5b:b6:24:3e:33:e8:8a:b3:91: 99:49:f4:4d:01:ab:18:66:36:a6:06:f3:98:6b:ac:dd:63:f6: 84:27:35:8f:7f:e1:94:f0:08:4c:c3:6c:69:a4:32:aa:f3:fd: 4d:95:ac:85:95:57:a6:06:db:30:6a:50:30:5a:f7:d9:f7:ee: 73:8c:9c:43:4c:d1:89:30:0b:41:98:d6:08:07:8d:fe:43:70: 15:a0:11:79:76:f8:13:0e:87:f0:c5:48:7a:c6:eb:43:5e:b1: 69:df:21:06:a3:b5:7c:79:ea:7e:96:b9:b0:f1:24:b3:36:ba: 29:f8:47:53:e1:09:1c:63:3a:0f:22:43:e5:26:95:1e:3b:25: 35:e5:9d:14:1e:e6:76:c9:98:9c:f7:77:17:f7:90:d8:59:e7: bc:0f:ef:88:29:6d:9e:d5:d0:2d:5d:bb:c0:c4:b0:35:ca:83: 43:59:cb:d6:aa:f5:dc:d5:a3:13:39:fb:59:9b:d2:57:dc:31: 74:6b:ef:c8:56:27:23:fd:dc:9c:c7:6c:0c:61:f3:80:1a:07: 13:34:18:8c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt2635RGzEqQwdHZC9UAdpZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMmUyOTE4NDMyODQ5ZWI3MWU5NWRjNDBkMTA3OWVhODY1 ZjYxMDkwHhcNMjYwMTAxMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmE3ZTk3OWYyYmUyMGEyZjI0NTdkOTY2ZTIwZmVmMTYzMmZiNDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WUZekAYphZx3oW5glYmVjvTf9yB 9To2O2w8GmLa4qKpvv9HuO85nSBm9BzD/x9yVg6QJJtI3LMyJeopxEBzj0VMLfUj PQf2c5MAsBVg0KcCowhgQB87LX3+q6JQTTmXjOZdFUcf1jNzmfZ48IZVgU+9iKWW 9m7syih4UUoe3cKrt8+vVOdORNfDZyRpaLzY2xSu/7LFwHiObXl8lVOSvvQPWoJs dTHDQ35TDsXfWw7fCPsiHt0l3T1T3Psog/zk5VFa/FitmZfBy+hAQx30PI7KLHQQ qGWx3s4k4yl2QGwGpN/zuRhzT7S+8VOL6BW741CAaMoZHKN+sNvew+kJhwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNan6XnyviCi8kV9lm4g/vFjL7SKMB8GA1UdIwQY MBaAFH4uKRhDKEnrceldxA0QeeqGX2EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmk0cEdFTW9TZXR4NlYzRURSQjU2b1pmWVFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kODVmNDEtNzcwMS00NGMyLWJmMmUt YzU2MTk4NTk0NTBjLzEvMXFmcGVmSy1JS0x5UlgyV2JpRC04V012dElvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kODVmNDEtNzcwMS00NGMyLWJmMmUtYzU2MTk4NTk0NTBj LzEvZmk0cEdFTW9TZXR4NlYzRURSQjU2b1pmWVFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwgk/MA0E AgACMAcDBQAqEkZAMA0GCSqGSIb3DQEBCwUAA4IBAQCTDeB/vy/3p5xGqwc8vdK7 NeGovD92UmNO5RgLwMg446oC3a4dvfH+BcLME1NbtiQ+M+iKs5GZSfRNAasYZjam BvOYa6zdY/aEJzWPf+GU8AhMw2xppDKq8/1NlayFlVemBtswalAwWvfZ9+5zjJxD TNGJMAtBmNYIB43+Q3AVoBF5dvgTDofwxUh6xutDXrFp3yEGo7V8eep+lrmw8SSz Nrop+EdT4QkcYzoPIkPlJpUeOyU15Z0UHuZ2yZic93cX95DYWee8D++IKW2e1dAt XbvAxLA1yoNDWcvWqvXc1aMTOftZm9JX3DF0a+/IVicj/dycx2wMYfOAGgcTNBiM -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:16 2026 by rpki-client