This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/iSQyXQXTNq3ZnJ5MHmvbGLZ6D-o.roa File: iSQyXQXTNq3ZnJ5MHmvbGLZ6D-o.roa (raw, json) Hash identifier: hxpMuIMAWPPuoDPBmcuWcDWjHDfCMnkqmAwOmOL9DOc= Subject key identifier: 89:24:32:5D:05:D3:36:AD:D9:9C:9E:4C:1E:6B:DB:18:B6:7A:0F:EA Certificate issuer: /CN=544a82aa5e2eb71719b7f9f049a307b12454497e Certificate serial: 019C27FFEF7262CFB240F572FBAFE3CBB13D Authority key identifier: 54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/iSQyXQXTNq3ZnJ5MHmvbGLZ6D-o.roa Signing time: Wed 04 Feb 2026 09:33:30 +0000 ROA not before: Wed 04 Feb 2026 09:33:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211381 IP address blocks: 188.137.176.0/24 maxlen: 24 188.137.177.0/24 maxlen: 24 188.137.179.0/24 maxlen: 24 188.137.180.0/24 maxlen: 24 188.137.181.0/24 maxlen: 24 188.137.182.0/24 maxlen: 24 188.137.183.0/24 maxlen: 24 188.137.224.0/24 maxlen: 24 188.137.225.0/24 maxlen: 24 188.137.227.0/24 maxlen: 24 188.137.228.0/24 maxlen: 24 188.137.229.0/24 maxlen: 24 188.137.230.0/24 maxlen: 24 188.137.240.0/24 maxlen: 24 188.137.241.0/24 maxlen: 24 188.137.242.0/24 maxlen: 24 188.137.243.0/24 maxlen: 24 188.137.245.0/24 maxlen: 24 188.137.246.0/24 maxlen: 24 188.137.247.0/24 maxlen: 24 188.137.248.0/24 maxlen: 24 188.137.249.0/24 maxlen: 24 188.137.250.0/24 maxlen: 24 188.137.251.0/24 maxlen: 24 188.137.252.0/24 maxlen: 24 188.137.253.0/24 maxlen: 24 188.137.254.0/24 maxlen: 24 188.137.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:27:ff:ef:72:62:cf:b2:40:f5:72:fb:af:e3:cb:b1:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544a82aa5e2eb71719b7f9f049a307b12454497e Validity Not Before: Feb 4 09:33:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8924325d05d336add99c9e4c1e6bdb18b67a0fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cd:f3:54:46:eb:03:81:0d:24:0b:a9:b2:d6: 79:08:fb:48:bb:a4:db:d8:33:45:78:ee:d8:f7:af: 65:1b:a2:65:42:57:f0:d7:a5:a8:31:3d:54:8b:f6: 6a:09:25:04:ad:63:fd:a8:a2:c6:59:43:34:f8:a5: 00:9f:4f:15:67:49:c6:a6:c0:73:84:df:0d:01:32: 75:7a:63:d1:b6:07:7b:c1:ea:92:2a:45:ca:91:65: a4:8f:da:d8:16:c1:b5:48:1b:1c:4a:7f:ff:40:5c: 2b:37:ad:bd:73:6d:3b:5a:d4:ff:eb:f2:62:cc:f4: 0b:22:16:6a:b5:f9:7c:6e:25:54:da:d3:85:3b:04: 82:72:4e:ea:ab:99:89:62:1b:d6:8d:22:36:7d:d9: 4d:f7:21:ef:b4:9b:5f:26:e7:6e:74:6c:20:d5:24: fb:6c:05:1f:99:f1:f4:f2:0c:f7:82:d7:e4:08:fa: 52:ed:38:5c:f6:23:51:4e:67:2d:03:cd:7e:1d:d4: 89:f9:a5:34:be:ce:c6:4b:91:9a:38:84:f1:15:7a: 15:3a:c0:19:db:01:e3:44:8b:7e:38:09:5a:7e:76: aa:3c:8a:b0:f7:7d:53:8b:7d:49:54:36:f5:b1:de: 2d:43:ce:5f:54:fb:d6:dd:67:b7:b3:f9:c4:5d:df: 88:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:24:32:5D:05:D3:36:AD:D9:9C:9E:4C:1E:6B:DB:18:B6:7A:0F:EA X509v3 Authority Key Identifier: keyid:54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/iSQyXQXTNq3ZnJ5MHmvbGLZ6D-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.137.176.0/23 188.137.179.0-188.137.183.255 188.137.224.0/23 188.137.227.0-188.137.230.255 188.137.240.0/22 188.137.245.0-188.137.255.255 Signature Algorithm: sha256WithRSAEncryption 7c:9f:75:ea:a1:dd:6e:ed:43:c0:09:1b:73:a7:34:f5:7d:30: 1b:51:84:1b:fa:a0:59:ca:b4:73:e1:6d:84:6d:e0:b2:cf:34: 9e:59:4d:f5:3a:c0:6f:69:80:a7:28:a8:9e:af:84:1e:6c:12: 9d:1c:19:a0:9b:9b:cc:62:94:99:5f:f0:40:c8:c5:31:c1:8b: ed:b6:a3:b5:49:2e:7a:2a:3a:08:ab:bc:80:77:63:48:33:09: 78:87:82:33:ed:ae:f7:65:b8:48:7a:36:ca:ab:5f:16:63:9a: 60:ae:09:af:47:57:ac:be:21:5d:e5:75:11:37:1c:64:70:e0: a7:48:89:f3:82:13:e6:1d:6e:a4:76:bb:d3:18:e7:30:8d:67: 20:10:38:f4:1d:8e:bd:1a:5f:7f:a0:5d:f7:39:2a:3c:e9:d6: 70:72:68:a7:e4:87:ae:cb:23:4f:c5:dc:16:a0:84:81:7f:06: c0:8f:40:34:0f:91:a1:49:60:bb:39:9c:88:b2:91:ca:2f:5e: 3c:17:e8:8a:98:53:b2:ed:00:62:9e:57:3a:d0:93:86:69:b5: 59:31:49:fc:04:98:70:91:ff:6a:22:fe:3a:7d:08:ba:bd:f9: d0:7c:91:d7:e4:e8:af:76:30:f4:71:62:b4:49:3a:2a:e0:cf: f9:35:69:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZwn/+9yYs+yQPVy+6/jy7E9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NGE4MmFhNWUyZWI3MTcxOWI3ZjlmMDQ5YTMwN2IxMjQ1 NDQ5N2UwHhcNMjYwMjA0MDkzMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTI0MzI1ZDA1ZDMzNmFkZDk5YzllNGMxZTZiZGIxOGI2N2EwZmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M3zVEbrA4ENJAupstZ5CPtIu6Tb 2DNFeO7Y969lG6JlQlfw16WoMT1Ui/ZqCSUErWP9qKLGWUM0+KUAn08VZ0nGpsBz hN8NATJ1emPRtgd7weqSKkXKkWWkj9rYFsG1SBscSn//QFwrN629c207WtT/6/Ji zPQLIhZqtfl8biVU2tOFOwSCck7qq5mJYhvWjSI2fdlN9yHvtJtfJududGwg1ST7 bAUfmfH08gz3gtfkCPpS7Thc9iNRTmctA81+HdSJ+aU0vs7GS5GaOITxFXoVOsAZ 2wHjRIt+OAlafnaqPIqw931Ti31JVDb1sd4tQ85fVPvW3We3s/nEXd+IrwIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFIkkMl0F0zat2ZyeTB5r2xi2eg/qMB8GA1UdIwQY MBaAFFRKgqpeLrcXGbf58EmjB7EkVEl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9jNTAxOGMtZmRjNi00MTRiLWJlZWYt MDJkZTAxMjQyMjhlLzEvaVNReVhRWFROcTNabko1TUhtdmJHTFo2RC1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9jNTAxOGMtZmRjNi00MTRiLWJlZWYtMDJkZTAxMjQyMjhl LzEvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzBBBAIAATA7AwQBvImwMAwD BAC8ibMDBAO8ibADBAG8ieAwDAMEALyJ4wMEALyJ5gMEAryJ8DALAwQAvIn1AwMB vIgwDQYJKoZIhvcNAQELBQADggEBAHyfdeqh3W7tQ8AJG3OnNPV9MBtRhBv6oFnK tHPhbYRt4LLPNJ5ZTfU6wG9pgKcoqJ6vhB5sEp0cGaCbm8xilJlf8EDIxTHBi+22 o7VJLnoqOgirvIB3Y0gzCXiHgjPtrvdluEh6NsqrXxZjmmCuCa9HV6y+IV3ldRE3 HGRw4KdIifOCE+YdbqR2u9MY5zCNZyAQOPQdjr0aX3+gXfc5Kjzp1nByaKfkh67L I0/F3BaghIF/BsCPQDQPkaFJYLs5nIiykcovXjwX6IqYU7LtAGKeVzrQk4ZptVkx SfwEmHCR/2oi/jp9CLq9+dB8kdfk6K92MPRxYrRJOirgz/k1aQI= -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:23 2026 by rpki-client