This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/fAEQXEU8XqYl4iZbVuPiwUl1I_0.roa File: fAEQXEU8XqYl4iZbVuPiwUl1I_0.roa (raw, json) Hash identifier: q8r4P3JkpztaMfofkjIYM4mXiBLUcbGTHnSsBJ/p6UM= Subject key identifier: 7C:01:10:5C:45:3C:5E:A6:25:E2:26:5B:56:E3:E2:C1:49:75:23:FD Certificate issuer: /CN=52e71b39d7c49430bbc77bb65952e4021a025316 Certificate serial: 019B79ECD4572BBFF2FBAC79FCA26CF4909C Authority key identifier: 52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/fAEQXEU8XqYl4iZbVuPiwUl1I_0.roa Signing time: Thu 01 Jan 2026 14:18:42 +0000 ROA not before: Thu 01 Jan 2026 14:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39530 IP address blocks: 185.255.232.0/22 maxlen: 25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d4:57:2b:bf:f2:fb:ac:79:fc:a2:6c:f4:90:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e71b39d7c49430bbc77bb65952e4021a025316 Validity Not Before: Jan 1 14:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c01105c453c5ea625e2265b56e3e2c1497523fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:34:0d:49:7b:58:ba:55:3e:69:58:df:ee:db: 23:f2:8c:50:87:ca:0a:8d:a2:54:dd:e7:02:4e:21: bb:47:d4:ac:d5:77:5a:0c:e8:95:0d:03:83:4c:b0: a6:1c:62:28:e1:f8:66:e6:74:eb:59:73:b2:c0:dd: 2e:f7:cd:59:09:b9:50:d0:84:5c:ac:b7:24:89:33: df:42:bb:fd:81:96:fa:18:c6:20:01:26:83:2b:23: c8:23:0f:61:d6:97:cc:e2:1e:d9:54:18:06:ef:f1: 5a:8f:01:0b:8b:6d:f1:2a:6f:4a:ba:a8:f2:76:a8: ab:54:13:2a:7c:ad:0b:f6:b6:18:8f:65:1a:f5:e1: ab:8e:98:f7:ea:33:60:54:4c:1e:2b:44:36:eb:3d: 4d:4d:d6:db:96:d1:b3:d6:88:fe:28:8e:ad:a5:dc: 27:cb:4d:15:d0:c0:65:dd:f0:57:72:c2:83:3e:71: a0:44:cf:ca:6b:a7:12:af:1a:e9:f1:c0:df:c7:b2: 23:82:6d:6a:4f:c2:56:34:7f:89:29:a8:f4:17:3b: 2a:ea:98:42:64:a8:d0:45:8b:d8:b8:9d:0d:90:4d: e6:db:a0:19:9b:95:95:ed:27:c3:8a:53:ad:c5:ab: 6a:08:fb:e0:62:4f:ea:9e:ab:ac:d3:50:8a:65:35: 56:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:01:10:5C:45:3C:5E:A6:25:E2:26:5B:56:E3:E2:C1:49:75:23:FD X509v3 Authority Key Identifier: keyid:52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/fAEQXEU8XqYl4iZbVuPiwUl1I_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.232.0/22 Signature Algorithm: sha256WithRSAEncryption 59:08:e3:6c:cd:92:e8:dd:47:9c:21:ef:f3:a8:5c:b3:09:74: 44:9b:22:be:1f:5f:c9:c9:8a:d9:f2:2a:9a:32:51:6f:85:aa: b5:ad:2a:c8:e3:09:65:af:5e:2a:9c:2e:c9:eb:5e:e5:3d:1f: 97:90:c1:81:d4:b2:f7:a8:03:ab:77:be:2b:ed:d1:d5:f7:2c: 1f:0e:81:81:ff:16:9f:a7:6e:7b:27:c1:db:3e:c4:78:f1:69: fe:81:17:d5:10:7a:c1:c9:78:d9:48:55:df:dd:d6:96:66:9a: 9c:01:9b:df:0f:44:0d:dd:16:bc:65:67:23:a0:e1:a8:5e:ed: d9:bb:a4:01:e2:97:f4:31:c8:e9:48:1f:2b:86:e6:f1:92:2d: ee:67:1a:5b:29:b6:26:70:83:ca:63:4b:42:9f:97:08:83:50: 9f:13:6a:23:1a:ad:86:5d:93:38:0d:bc:5b:cd:21:88:c0:bc: 9a:c6:82:20:63:c4:5a:01:1f:2a:56:a9:b2:7c:2c:25:b4:27: ad:4b:c3:9f:81:cf:36:f9:6f:e4:0e:74:bc:e3:69:87:40:7b: 07:10:22:8b:df:6c:44:80:3c:06:cb:e1:31:cf:75:24:eb:a2: 89:c4:75:d8:4e:1d:ed:de:42:e8:7d:0a:a2:8d:c7:9e:ee:41: be:44:68:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57NRXK7/y+6x5/KJs9JCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZTcxYjM5ZDdjNDk0MzBiYmM3N2JiNjU5NTJlNDAyMWEw MjUzMTYwHhcNMjYwMTAxMTQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzAxMTA1YzQ1M2M1ZWE2MjVlMjI2NWI1NmUzZTJjMTQ5NzUyM2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTQNSXtYulU+aVjf7tsj8oxQh8oK jaJU3ecCTiG7R9Ss1XdaDOiVDQODTLCmHGIo4fhm5nTrWXOywN0u981ZCblQ0IRc rLckiTPfQrv9gZb6GMYgASaDKyPIIw9h1pfM4h7ZVBgG7/FajwELi23xKm9Kuqjy dqirVBMqfK0L9rYYj2Ua9eGrjpj36jNgVEweK0Q26z1NTdbbltGz1oj+KI6tpdwn y00V0MBl3fBXcsKDPnGgRM/Ka6cSrxrp8cDfx7Ijgm1qT8JWNH+JKaj0Fzsq6phC ZKjQRYvYuJ0NkE3m26AZm5WV7SfDilOtxatqCPvgYk/qnqus01CKZTVWKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHwBEFxFPF6mJeImW1bj4sFJdSP9MB8GA1UdIwQY MBaAFFLnGznXxJQwu8d7tllS5AIaAlMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jMzlhOGMtM2JiMC00NDlkLTg5YzMt NmZiYTZhMWUwZWU3LzEvZkFFUVhFVThYcVlsNGlaYlZ1UGl3VWwxSV8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9jMzlhOGMtM2JiMC00NDlkLTg5YzMtNmZiYTZhMWUwZWU3 LzEvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuf/oMA0G CSqGSIb3DQEBCwUAA4IBAQBZCONszZLo3UecIe/zqFyzCXREmyK+H1/JyYrZ8iqa MlFvhaq1rSrI4wllr14qnC7J617lPR+XkMGB1LL3qAOrd74r7dHV9ywfDoGB/xaf p257J8HbPsR48Wn+gRfVEHrByXjZSFXf3daWZpqcAZvfD0QN3Ra8ZWcjoOGoXu3Z u6QB4pf0McjpSB8rhubxki3uZxpbKbYmcIPKY0tCn5cIg1CfE2ojGq2GXZM4Dbxb zSGIwLyaxoIgY8RaAR8qVqmyfCwltCetS8Ofgc82+W/kDnS842mHQHsHECKL32xE gDwGy+Exz3Uk66KJxHXYTh3t3kLofQqijcee7kG+RGg+ -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:47 2026 by rpki-client