This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/q33LmE5Se9FQEcP6RSFJNn-BXIs.roa File: q33LmE5Se9FQEcP6RSFJNn-BXIs.roa (raw, json) Hash identifier: oPU6durkYfLGQ3BAJeR+pZewLCfJC12AIpaH6yElthY= Subject key identifier: AB:7D:CB:98:4E:52:7B:D1:50:11:C3:FA:45:21:49:36:7F:81:5C:8B Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019C3D63706AA2D9706DFEE4B2F66A0EA688 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/q33LmE5Se9FQEcP6RSFJNn-BXIs.roa Signing time: Sun 08 Feb 2026 13:14:12 +0000 ROA not before: Sun 08 Feb 2026 13:14:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 91.109.40.0/24 maxlen: 24 91.109.41.0/24 maxlen: 24 91.109.44.0/24 maxlen: 24 147.185.196.0/24 maxlen: 24 193.168.200.0/24 maxlen: 24 193.168.203.0/24 maxlen: 24 207.244.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:3d:63:70:6a:a2:d9:70:6d:fe:e4:b2:f6:6a:0e:a6:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Feb 8 13:14:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab7dcb984e527bd15011c3fa452149367f815c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fd:b8:8c:ec:66:3e:34:12:05:8c:c7:8c:ed: ce:2b:c6:3b:63:87:3d:bd:6e:ce:5d:35:b5:a8:06: 24:16:4b:7f:dd:6b:c3:08:e7:54:8a:b9:c2:cd:23: f5:d5:2d:49:ea:aa:87:4f:50:eb:7c:0b:b8:00:0b: 09:90:c4:87:99:a2:82:02:50:29:86:0d:37:60:d8: 21:79:d1:aa:45:2c:5f:d9:45:74:ef:99:6b:4f:65: 96:60:b8:ab:3b:91:49:e2:b3:3d:ba:94:e2:e9:23: 60:1c:16:69:ee:ca:f7:32:62:0c:32:7e:81:d8:ff: de:38:78:1c:bf:34:c8:e6:1e:8f:ff:17:15:74:a5: 78:13:9f:f5:96:35:7c:0a:40:02:92:3a:0c:27:80: b7:5d:70:66:ed:f4:67:84:51:2f:7a:c0:fd:44:0e: 7b:18:66:67:15:22:f1:7d:52:55:bb:87:36:3b:db: e4:7d:91:3d:6e:86:8c:70:7c:59:46:59:88:4d:6d: c3:73:b7:23:ae:c4:c8:4c:53:3c:88:a5:ef:42:4e: 6b:33:70:e9:32:b0:36:9a:35:09:5a:e1:72:62:e3: 1f:10:d9:94:c6:d6:7c:7c:5b:a3:79:14:0d:eb:ed: 17:52:72:ed:a3:97:40:d1:a0:f0:28:95:ce:c0:85: 5b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7D:CB:98:4E:52:7B:D1:50:11:C3:FA:45:21:49:36:7F:81:5C:8B X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/q33LmE5Se9FQEcP6RSFJNn-BXIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.109.40.0/23 91.109.44.0/24 147.185.196.0/24 193.168.200.0/24 193.168.203.0/24 207.244.198.0/24 Signature Algorithm: sha256WithRSAEncryption 30:e2:b3:f6:b2:1b:76:01:89:50:42:0f:4e:ef:e0:5c:bd:64: 23:ed:d3:4f:72:b8:ba:33:83:35:d6:3e:b7:81:f3:9a:8b:a1: 30:e4:6f:b6:23:66:b0:83:af:4c:62:71:10:42:c0:d6:64:1c: 07:0e:60:8d:05:51:a5:da:03:12:b5:2d:cc:5f:af:df:cf:c1: dc:f6:9c:00:b3:42:73:49:70:2c:e3:8b:1d:70:ff:3b:4b:b2: 13:45:1b:f2:8c:13:5e:63:74:87:b0:a7:33:0c:79:98:a1:6f: c3:9c:e2:c0:b4:24:33:d4:02:81:0a:93:7d:89:d3:8b:a9:db: ec:8f:a1:27:6d:ec:0e:48:52:03:42:d2:3a:26:a7:39:e5:c7: 97:5e:a9:b3:e3:15:95:79:94:38:1c:71:0a:b0:ab:cb:c4:3e: 53:4a:73:71:43:09:cb:fe:61:f5:8b:28:16:4b:71:23:1f:8f: ea:9c:f3:57:e3:67:4b:11:3e:f3:f6:67:16:09:05:dd:3d:b1: 10:be:d4:5e:8b:04:29:89:bd:dd:06:4f:61:36:54:e2:92:19: 8a:19:88:20:f8:d3:02:93:6c:63:44:e0:9b:02:11:73:bb:b9: f9:e3:6a:c6:09:6c:e9:04:1f:0e:07:18:7e:99:96:7b:09:a7: 1e:cc:47:9f -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZw9Y3Bqotlwbf7ksvZqDqaIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMjA4MTMxNDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjdkY2I5ODRlNTI3YmQxNTAxMWMzZmE0NTIxNDkzNjdmODE1YzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv24jOxmPjQSBYzHjO3OK8Y7Y4c9 vW7OXTW1qAYkFkt/3WvDCOdUirnCzSP11S1J6qqHT1DrfAu4AAsJkMSHmaKCAlAp hg03YNghedGqRSxf2UV075lrT2WWYLirO5FJ4rM9upTi6SNgHBZp7sr3MmIMMn6B 2P/eOHgcvzTI5h6P/xcVdKV4E5/1ljV8CkACkjoMJ4C3XXBm7fRnhFEvesD9RA57 GGZnFSLxfVJVu4c2O9vkfZE9boaMcHxZRlmITW3Dc7cjrsTITFM8iKXvQk5rM3Dp MrA2mjUJWuFyYuMfENmUxtZ8fFujeRQN6+0XUnLto5dA0aDwKJXOwIVbWQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFKt9y5hOUnvRUBHD+kUhSTZ/gVyLMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvcTMzTG1FNVNlOUZRRWNQNlJTRkpObi1CWElzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBW20oAwQA W20sAwQAk7nEAwQAwajIAwQAwajLAwQAz/TGMA0GCSqGSIb3DQEBCwUAA4IBAQAw 4rP2sht2AYlQQg9O7+BcvWQj7dNPcri6M4M11j63gfOai6Ew5G+2I2awg69MYnEQ QsDWZBwHDmCNBVGl2gMStS3MX6/fz8Hc9pwAs0JzSXAs44sdcP87S7ITRRvyjBNe Y3SHsKczDHmYoW/DnOLAtCQz1AKBCpN9idOLqdvsj6EnbewOSFIDQtI6Jqc55ceX Xqmz4xWVeZQ4HHEKsKvLxD5TSnNxQwnL/mH1iygWS3EjH4/qnPNX42dLET7z9mcW CQXdPbEQvtReiwQpib3dBk9hNlTikhmKGYgg+NMCk2xjROCbAhFzu7n542rGCWzp BB8OBxh+mZZ7CacezEef -----END CERTIFICATE-----Generated at Sat Feb 14 17:24:12 2026 by rpki-client