This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/831cec-d965-400a-9899-fdbc5c6ae5aa/1/lqZ_FZi5OZNxjRgi3lzjeMY1GAk.roa File: lqZ_FZi5OZNxjRgi3lzjeMY1GAk.roa (raw, json) Hash identifier: sEkCH/URmL0mijxwIa1jp+WkOSTIx15bnsPupZsfVfw= Subject key identifier: 96:A6:7F:15:98:B9:39:93:71:8D:18:22:DE:5C:E3:78:C6:35:18:09 Certificate issuer: /CN=a71ac23a4d3ecfcbca4513896b17ae4e89682a78 Certificate serial: 019B797E94E98E9DB4A67FAF6B2A0593E662 Authority key identifier: A7:1A:C2:3A:4D:3E:CF:CB:CA:45:13:89:6B:17:AE:4E:89:68:2A:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxrCOk0-z8vKRROJaxeuToloKng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/831cec-d965-400a-9899-fdbc5c6ae5aa/1/lqZ_FZi5OZNxjRgi3lzjeMY1GAk.roa Signing time: Thu 01 Jan 2026 12:18:17 +0000 ROA not before: Thu 01 Jan 2026 12:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204319 IP address blocks: 185.228.208.0/22 maxlen: 24 2a0d:4600::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/831cec-d965-400a-9899-fdbc5c6ae5aa/1/pxrCOk0-z8vKRROJaxeuToloKng.crl rsync://rpki.ripe.net/repository/DEFAULT/17/831cec-d965-400a-9899-fdbc5c6ae5aa/1/pxrCOk0-z8vKRROJaxeuToloKng.mft rsync://rpki.ripe.net/repository/DEFAULT/pxrCOk0-z8vKRROJaxeuToloKng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:94:e9:8e:9d:b4:a6:7f:af:6b:2a:05:93:e6:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ac23a4d3ecfcbca4513896b17ae4e89682a78 Validity Not Before: Jan 1 12:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96a67f1598b93993718d1822de5ce378c6351809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:0b:ef:21:7c:d9:5c:6d:30:f9:ea:e8:d9: b7:bb:34:45:19:2b:59:a6:8b:35:dd:71:5e:9c:6a: dc:7b:7c:5a:8c:bb:85:df:67:05:d6:80:48:06:71: bb:4c:61:0b:74:16:d4:27:c0:88:f6:57:ff:c1:cd: 32:51:55:1a:88:bf:97:88:45:c1:e3:3c:e6:d5:ae: 87:4a:25:cd:e9:eb:13:f0:bf:8a:70:ce:d8:6a:c6: 68:e7:c2:8e:c6:54:8e:9b:27:e4:90:c7:3e:bd:f9: c5:0a:91:f1:d9:10:e3:fa:84:6a:8e:cd:18:b7:01: 25:d9:ba:6f:a4:b9:68:16:97:cf:ef:98:35:c2:e3: 20:23:ab:03:0f:1e:bb:1f:5b:8e:5d:88:97:03:8a: 0d:3b:29:52:26:e4:09:00:40:f5:95:39:21:ed:52: a3:9d:98:e6:61:8a:7a:4a:0f:ce:29:bc:90:a1:87: 46:82:5d:53:77:5c:9c:d5:fb:e2:be:d1:77:11:af: 60:e8:01:1b:fa:a6:a4:c2:98:8c:65:d4:21:ca:f6: 2f:ba:fa:18:82:42:58:ea:34:09:ea:6a:38:16:85: e1:5a:00:eb:65:a4:98:15:ea:9b:3d:63:58:da:f9: 57:59:4d:0a:04:6d:eb:cb:ab:94:6f:ea:1c:80:cb: 47:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A6:7F:15:98:B9:39:93:71:8D:18:22:DE:5C:E3:78:C6:35:18:09 X509v3 Authority Key Identifier: keyid:A7:1A:C2:3A:4D:3E:CF:CB:CA:45:13:89:6B:17:AE:4E:89:68:2A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxrCOk0-z8vKRROJaxeuToloKng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/831cec-d965-400a-9899-fdbc5c6ae5aa/1/lqZ_FZi5OZNxjRgi3lzjeMY1GAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/831cec-d965-400a-9899-fdbc5c6ae5aa/1/pxrCOk0-z8vKRROJaxeuToloKng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.208.0/22 IPv6: 2a0d:4600::/29 Signature Algorithm: sha256WithRSAEncryption 7f:fc:bf:f9:33:f1:92:02:82:61:80:23:ea:14:1b:3d:79:09: dc:9f:4f:46:59:c3:f5:20:b1:ac:54:c1:ff:72:26:6b:e1:dc: 43:97:8e:06:8b:e3:03:1e:84:f2:cd:68:84:dc:70:96:9c:b5: 9c:a8:15:bb:0b:e3:67:59:a0:33:60:31:74:82:49:e2:f9:58: b9:24:c0:65:20:81:55:79:5f:96:fb:67:87:42:a7:64:37:08: b9:5f:43:43:59:0e:a6:07:1c:d4:0c:4a:07:47:54:2f:3a:74: a1:6c:4e:76:6a:91:c1:ab:47:34:22:00:c3:eb:25:04:d9:06: f0:17:54:dd:7c:26:42:7e:16:a2:3a:2d:92:40:68:fc:ee:88: f2:a4:82:32:cb:45:68:b4:11:2c:8c:8a:e1:a8:a2:4a:22:44: 41:af:dc:80:58:07:df:8e:2b:95:20:7b:14:1c:68:b1:04:5a: 71:95:49:7b:47:c7:da:8c:34:62:da:e9:24:3d:c1:dc:7f:02: d5:3f:1f:be:01:9d:28:9f:c5:19:bf:77:37:fa:35:ce:8d:26: 13:42:2b:4f:60:df:ac:7a:a2:8e:a8:be:18:7f:d2:28:1c:ca: 8d:c7:96:89:95:60:16:0d:12:a5:ed:e9:a7:28:18:05:29:1f: 17:f0:a4:7d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fpTpjp20pn+vayoFk+ZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MWFjMjNhNGQzZWNmY2JjYTQ1MTM4OTZiMTdhZTRlODk2 ODJhNzgwHhcNMjYwMTAxMTIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmE2N2YxNTk4YjkzOTkzNzE4ZDE4MjJkZTVjZTM3OGM2MzUxODA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywIL7yF82VxtMPnq6Nm3uzRFGStZ pos13XFenGrce3xajLuF32cF1oBIBnG7TGELdBbUJ8CI9lf/wc0yUVUaiL+XiEXB 4zzm1a6HSiXN6esT8L+KcM7YasZo58KOxlSOmyfkkMc+vfnFCpHx2RDj+oRqjs0Y twEl2bpvpLloFpfP75g1wuMgI6sDDx67H1uOXYiXA4oNOylSJuQJAED1lTkh7VKj nZjmYYp6Sg/OKbyQoYdGgl1Td1yc1fvivtF3Ea9g6AEb+qakwpiMZdQhyvYvuvoY gkJY6jQJ6mo4FoXhWgDrZaSYFeqbPWNY2vlXWU0KBG3ry6uUb+ocgMtHfQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJamfxWYuTmTcY0YIt5c43jGNRgJMB8GA1UdIwQY MBaAFKcawjpNPs/LykUTiWsXrk6JaCp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHhyQ09rMC16OHZLUlJPSmF4ZXVUb2xvS25nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84MzFjZWMtZDk2NS00MDBhLTk4OTkt ZmRiYzVjNmFlNWFhLzEvbHFaX0ZaaTVPWk54alJnaTNsemplTVkxR0FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy84MzFjZWMtZDk2NS00MDBhLTk4OTktZmRiYzVjNmFlNWFh LzEvcHhyQ09rMC16OHZLUlJPSmF4ZXVUb2xvS25nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCueTQMA0E AgACMAcDBQMqDUYAMA0GCSqGSIb3DQEBCwUAA4IBAQB//L/5M/GSAoJhgCPqFBs9 eQncn09GWcP1ILGsVMH/ciZr4dxDl44Gi+MDHoTyzWiE3HCWnLWcqBW7C+NnWaAz YDF0gkni+Vi5JMBlIIFVeV+W+2eHQqdkNwi5X0NDWQ6mBxzUDEoHR1QvOnShbE52 apHBq0c0IgDD6yUE2QbwF1TdfCZCfhaiOi2SQGj87ojypIIyy0VotBEsjIrhqKJK IkRBr9yAWAffjiuVIHsUHGixBFpxlUl7R8fajDRi2ukkPcHcfwLVPx++AZ0on8UZ v3c3+jXOjSYTQitPYN+seqKOqL4Yf9IoHMqNx5aJlWAWDRKl7emnKBgFKR8X8KR9 -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:36 2026 by rpki-client