This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/q7WfGeBPEEvSqwuhjuGB9MK0FR4.roa File: q7WfGeBPEEvSqwuhjuGB9MK0FR4.roa (raw, json) Hash identifier: 6I5OLAD4XJOUPBEb7WYc+qrHbMwA5+oW8O7b01lul68= Subject key identifier: AB:B5:9F:19:E0:4F:10:4B:D2:AB:0B:A1:8E:E1:81:F4:C2:B4:15:1E Certificate issuer: /CN=0ba11a46c44eecf90c6231f8456cc702ae938076 Certificate serial: 019C23B8F754F98207CC6310E5143428D4F1 Authority key identifier: 0B:A1:1A:46:C4:4E:EC:F9:0C:62:31:F8:45:6C:C7:02:AE:93:80:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/q7WfGeBPEEvSqwuhjuGB9MK0FR4.roa Signing time: Tue 03 Feb 2026 13:37:30 +0000 ROA not before: Tue 03 Feb 2026 13:37:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216403 IP address blocks: 185.55.81.0/24 maxlen: 24 2a13:bac0:113::/48 maxlen: 48 2a13:bac0:161::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:23:b8:f7:54:f9:82:07:cc:63:10:e5:14:34:28:d4:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ba11a46c44eecf90c6231f8456cc702ae938076 Validity Not Before: Feb 3 13:37:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abb59f19e04f104bd2ab0ba18ee181f4c2b4151e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ed:2d:81:ec:a6:f8:87:22:e5:9f:f4:46:1b: 13:21:f0:d4:e8:bc:49:2f:eb:44:8b:c6:68:24:b1: b6:11:83:98:cf:1a:d9:f5:96:ff:d3:3a:10:6b:a7: 4c:bf:da:cb:2a:bc:5d:9a:1d:2f:7d:4a:08:2a:a2: d2:44:fe:3d:ad:f6:72:f7:78:61:21:d5:52:52:7d: ed:2e:e8:16:b1:39:26:14:08:78:44:e1:b9:ac:c3: 0e:ba:89:82:5d:b8:21:23:f8:bf:29:83:81:be:06: f9:5b:42:6f:2c:e5:9c:fd:3b:f7:97:4d:5f:68:70: 6b:72:21:9d:57:89:27:24:f2:61:32:cd:aa:76:93: 67:f7:10:ed:ca:64:73:c7:39:6d:4e:ec:4e:ac:82: 17:45:1f:e6:15:7f:3e:72:2a:1a:f2:ae:2e:16:6a: 6f:72:ba:44:31:1e:01:a4:bf:fb:c6:f2:ba:a5:d0: e1:87:d8:a2:09:fd:36:ec:b9:81:14:58:56:c3:ae: b2:18:38:79:10:11:a7:79:f6:21:81:5a:f8:56:0b: 3c:61:5b:28:ab:bc:f9:c5:4a:eb:f7:b7:ea:ad:32: 47:98:be:b2:83:6b:c1:20:16:7f:65:c0:23:c4:96: ef:85:70:65:d8:55:bf:75:54:ef:7b:41:86:76:5b: 66:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B5:9F:19:E0:4F:10:4B:D2:AB:0B:A1:8E:E1:81:F4:C2:B4:15:1E X509v3 Authority Key Identifier: keyid:0B:A1:1A:46:C4:4E:EC:F9:0C:62:31:F8:45:6C:C7:02:AE:93:80:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/q7WfGeBPEEvSqwuhjuGB9MK0FR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.55.81.0/24 IPv6: 2a13:bac0:113::/48 2a13:bac0:161::/48 Signature Algorithm: sha256WithRSAEncryption 95:93:3d:0e:b0:4c:e1:7a:78:a1:f8:49:f2:6f:e1:f8:9d:31: 87:5f:5f:02:db:e1:4a:06:91:86:af:a2:79:7e:f4:ac:f3:80: aa:f5:c6:14:60:ac:da:af:34:89:02:05:da:83:3e:ed:19:97: 47:9b:ed:6e:b8:2a:9f:94:3b:47:3b:c6:83:d4:fa:a6:c0:ae: 11:84:9d:7f:37:f2:e4:70:8d:00:68:1e:5a:48:74:86:29:8b: 87:5f:f6:8e:61:4a:f2:b9:cd:a6:28:68:8a:be:a3:eb:1e:d5: 03:93:6c:7c:fd:e6:a6:4e:bf:34:45:5d:b3:4d:59:02:50:12: e0:30:c6:38:0c:a7:e9:73:1a:fd:05:49:4c:fd:7a:43:6b:6b: 72:29:8c:cc:3d:5a:b8:da:b8:0b:55:96:b6:a2:60:6c:16:0d: 96:ad:75:3d:95:c0:c1:50:36:4f:f7:07:1f:34:a2:0c:d2:50: ee:00:d8:05:0a:2e:62:e9:8b:5e:5c:28:30:92:57:6a:16:bf: 92:20:28:0e:78:70:79:97:59:c9:b6:9a:41:10:e2:f1:47:75: 4a:69:e9:3e:5a:9e:8d:d6:8f:ff:44:29:f2:8e:ab:03:66:8b: e1:4a:28:1d:15:4f:b1:df:c4:48:e8:da:44:d8:70:08:24:10: cc:ab:b8:99 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZwjuPdU+YIHzGMQ5RQ0KNTxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYTExYTQ2YzQ0ZWVjZjkwYzYyMzFmODQ1NmNjNzAyYWU5 MzgwNzYwHhcNMjYwMjAzMTMzNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmI1OWYxOWUwNGYxMDRiZDJhYjBiYTE4ZWUxODFmNGMyYjQxNTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+0tgeym+Ici5Z/0RhsTIfDU6LxJ L+tEi8ZoJLG2EYOYzxrZ9Zb/0zoQa6dMv9rLKrxdmh0vfUoIKqLSRP49rfZy93hh IdVSUn3tLugWsTkmFAh4ROG5rMMOuomCXbghI/i/KYOBvgb5W0JvLOWc/Tv3l01f aHBrciGdV4knJPJhMs2qdpNn9xDtymRzxzltTuxOrIIXRR/mFX8+cioa8q4uFmpv crpEMR4BpL/7xvK6pdDhh9iiCf027LmBFFhWw66yGDh5EBGnefYhgVr4Vgs8YVso q7z5xUrr97fqrTJHmL6yg2vBIBZ/ZcAjxJbvhXBl2FW/dVTve0GGdltmHwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFKu1nxngTxBL0qsLoY7hgfTCtBUeMB8GA1UdIwQY MBaAFAuhGkbETuz5DGIx+EVsxwKuk4B2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzZFYVJzUk83UGtNWWpINFJXekhBcTZUZ0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ODVlOGUtMWQxOS00YjQwLTlkY2Et Mjc0Y2ZiMDk2ZWQyLzEvcTdXZkdlQlBFRXZTcXd1aGp1R0I5TUswRlI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS81ODVlOGUtMWQxOS00YjQwLTlkY2EtMjc0Y2ZiMDk2ZWQy LzEvQzZFYVJzUk83UGtNWWpINFJXekhBcTZUZ0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAuTdRMBgE AgACMBIDBwAqE7rAARMDBwAqE7rAAWEwDQYJKoZIhvcNAQELBQADggEBAJWTPQ6w TOF6eKH4SfJv4fidMYdfXwLb4UoGkYavonl+9KzzgKr1xhRgrNqvNIkCBdqDPu0Z l0eb7W64Kp+UO0c7xoPU+qbArhGEnX838uRwjQBoHlpIdIYpi4df9o5hSvK5zaYo aIq+o+se1QOTbHz95qZOvzRFXbNNWQJQEuAwxjgMp+lzGv0FSUz9ekNra3IpjMw9 WrjauAtVlraiYGwWDZatdT2VwMFQNk/3Bx80ogzSUO4A2AUKLmLpi15cKDCSV2oW v5IgKA54cHmXWcm2mkEQ4vFHdUpp6T5ano3Wj/9EKfKOqwNmi+FKKB0VT7HfxEjo 2kTYcAgkEMyruJk= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:35 2026 by rpki-client