This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/rq0Igngn6mQzQAc5iKtb5wJdTyU.roa File: rq0Igngn6mQzQAc5iKtb5wJdTyU.roa (raw, json) Hash identifier: +8wcpot5HIuUBXib66PRvYYuXQtonsS/RRDmfYpMdNE= Subject key identifier: AE:AD:08:82:78:27:EA:64:33:40:07:39:88:AB:5B:E7:02:5D:4F:25 Certificate issuer: /CN=467b394cf8a4051c167d468bc7b892a71dee4d03 Certificate serial: 019B7BA3F32D24B8D5AAAB5AE804859257D2 Authority key identifier: 46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/rq0Igngn6mQzQAc5iKtb5wJdTyU.roa Signing time: Thu 01 Jan 2026 22:18:20 +0000 ROA not before: Thu 01 Jan 2026 22:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199635 IP address blocks: 185.8.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:f3:2d:24:b8:d5:aa:ab:5a:e8:04:85:92:57:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=467b394cf8a4051c167d468bc7b892a71dee4d03 Validity Not Before: Jan 1 22:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aead08827827ea643340073988ab5be7025d4f25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:5f:44:00:da:30:34:89:ae:cd:22:43:29: b9:d4:db:17:78:df:b2:fe:39:ce:c0:45:38:da:8d: 89:c2:2b:f6:39:33:85:98:ae:14:b8:9f:29:e6:f9: 4c:ea:ba:e7:c4:35:62:46:ee:f5:fe:52:7f:d0:9f: 22:a4:d4:5d:66:30:dd:91:99:db:ff:5e:ba:f4:a3: f9:d5:45:3b:55:31:91:17:30:a8:32:94:d8:b5:9f: df:81:b2:c0:a5:00:d3:e9:f8:1a:55:6a:2d:16:6c: 4d:5b:2f:f7:d5:1e:d5:43:f3:75:c8:49:bb:b4:9b: f6:e9:90:b6:c0:93:45:99:b1:73:b0:c0:08:62:5c: 0b:0b:9f:91:1d:c0:c6:71:2a:49:f0:94:91:e0:16: 80:d3:49:2e:e8:ec:8f:60:ed:04:3b:9d:d4:89:9c: c0:37:b3:e7:62:06:86:5d:fe:53:85:77:73:1e:e5: 6e:9f:87:e8:bf:bd:7b:a2:67:02:bb:48:5d:dd:89: 7f:21:94:a7:34:df:b7:1a:5a:73:19:9b:f6:7b:2c: 59:ba:6b:43:61:48:c5:67:d0:07:a1:b8:00:b7:78: c0:76:28:f7:a7:89:80:73:dc:95:d1:1f:63:c5:3c: fb:e1:ce:10:da:28:fe:b6:5e:70:a8:76:20:41:6e: 25:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AD:08:82:78:27:EA:64:33:40:07:39:88:AB:5B:E7:02:5D:4F:25 X509v3 Authority Key Identifier: keyid:46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/rq0Igngn6mQzQAc5iKtb5wJdTyU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.8.216.0/22 Signature Algorithm: sha256WithRSAEncryption 15:2c:b8:34:51:69:ae:48:3c:3d:ad:68:57:73:e2:82:23:81: 57:5b:72:c4:51:7b:2e:a2:a4:41:4e:4f:41:2e:cf:47:00:88: 02:04:71:f5:f7:cd:af:d8:74:b9:33:c2:20:ea:11:01:45:c5: bb:58:b0:5c:0a:be:a8:f6:dc:fe:c5:b4:73:a9:63:40:af:86: 3e:eb:61:aa:5f:0c:3b:2f:ae:c7:ed:e3:76:50:66:f8:0b:86: dc:c6:08:7b:8b:9c:ea:78:e1:9f:7a:cb:31:7d:c8:8d:5f:bb: 81:81:c7:2e:ff:96:05:67:00:9e:9d:f1:bc:27:fc:59:ad:c0: ce:a7:9b:a8:18:b8:ce:1f:ca:0b:d0:be:5c:a1:33:52:90:80: 24:73:ea:66:4d:c6:c1:8f:48:dd:29:95:f4:e0:8a:26:d5:d7: 57:a4:48:aa:9e:b9:f4:82:af:30:13:de:fa:72:5e:76:a4:96: d9:24:02:18:2a:e9:ce:9a:26:e8:45:f4:c9:83:b2:7d:b0:d7: b6:10:f8:53:80:c4:ad:5c:7f:81:cf:3a:d8:c3:73:e2:8b:f5: 1d:ed:c3:e6:81:47:86:3b:8f:95:22:ee:f8:db:4d:ba:07:f5: d1:0a:a7:68:04:8b:38:77:d8:66:1a:27:13:f5:60:1e:fc:1b: f9:63:a1:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o/MtJLjVqqta6ASFklfSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2N2IzOTRjZjhhNDA1MWMxNjdkNDY4YmM3Yjg5MmE3MWRl ZTRkMDMwHhcNMjYwMTAxMjIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWFkMDg4Mjc4MjdlYTY0MzM0MDA3Mzk4OGFiNWJlNzAyNWQ0ZjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZdfRADaMDSJrs0iQym51NsXeN+y /jnOwEU42o2Jwiv2OTOFmK4UuJ8p5vlM6rrnxDViRu71/lJ/0J8ipNRdZjDdkZnb /1669KP51UU7VTGRFzCoMpTYtZ/fgbLApQDT6fgaVWotFmxNWy/31R7VQ/N1yEm7 tJv26ZC2wJNFmbFzsMAIYlwLC5+RHcDGcSpJ8JSR4BaA00ku6OyPYO0EO53UiZzA N7PnYgaGXf5ThXdzHuVun4fov717omcCu0hd3Yl/IZSnNN+3GlpzGZv2eyxZumtD YUjFZ9AHobgAt3jAdij3p4mAc9yV0R9jxTz74c4Q2ij+tl5wqHYgQW4lcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK6tCIJ4J+pkM0AHOYirW+cCXU8lMB8GA1UdIwQY MBaAFEZ7OUz4pAUcFn1Gi8e4kqcd7k0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNWM4MDUtZjYwYy00NDJjLWFjNWQt MGYwMWI1NjA2NTdjLzEvcnEwSWduZ242bVF6UUFjNWlLdGI1d0pkVHlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zNWM4MDUtZjYwYy00NDJjLWFjNWQtMGYwMWI1NjA2NTdj LzEvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQjYMA0G CSqGSIb3DQEBCwUAA4IBAQAVLLg0UWmuSDw9rWhXc+KCI4FXW3LEUXsuoqRBTk9B Ls9HAIgCBHH1982v2HS5M8Ig6hEBRcW7WLBcCr6o9tz+xbRzqWNAr4Y+62GqXww7 L67H7eN2UGb4C4bcxgh7i5zqeOGfessxfciNX7uBgccu/5YFZwCenfG8J/xZrcDO p5uoGLjOH8oL0L5coTNSkIAkc+pmTcbBj0jdKZX04Iom1ddXpEiqnrn0gq8wE976 cl52pJbZJAIYKunOmiboRfTJg7J9sNe2EPhTgMStXH+BzzrYw3Pii/Ud7cPmgUeG O4+VIu742026B/XRCqdoBIs4d9hmGicT9WAe/Bv5Y6EE -----END CERTIFICATE-----Generated at Mon Feb 9 21:02:45 2026 by rpki-client