This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/_QaXkGOzguH_3SYFNe1d3y7B2Tw.roa File: _QaXkGOzguH_3SYFNe1d3y7B2Tw.roa (raw, json) Hash identifier: KztSdz5ODte8K6guWxzrXZlYDG1F2rVO/Vqml3J+Q0o= Subject key identifier: FD:06:97:90:63:B3:82:E1:FF:DD:26:05:35:ED:5D:DF:2E:C1:D9:3C Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c Certificate serial: 019C2D32D8E3DE61EFF8C554E87FEAC8B359 Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/_QaXkGOzguH_3SYFNe1d3y7B2Tw.roa Signing time: Thu 05 Feb 2026 09:47:12 +0000 ROA not before: Thu 05 Feb 2026 09:47:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35592 IP address blocks: 46.29.184.0/21 maxlen: 24 87.236.192.0/21 maxlen: 24 87.236.192.0/24 maxlen: 24 87.236.193.0/24 maxlen: 24 87.236.194.0/23 maxlen: 23 87.236.196.0/23 maxlen: 23 87.236.198.0/23 maxlen: 23 89.187.128.0/19 maxlen: 24 89.187.128.0/24 maxlen: 24 89.187.129.0/24 maxlen: 24 89.187.130.0/23 maxlen: 23 89.187.132.0/24 maxlen: 24 89.187.133.0/24 maxlen: 24 89.187.134.0/23 maxlen: 23 89.187.136.0/24 maxlen: 24 89.187.137.0/24 maxlen: 24 89.187.138.0/24 maxlen: 24 89.187.139.0/24 maxlen: 24 89.187.140.0/23 maxlen: 23 89.187.142.0/23 maxlen: 23 89.187.144.0/23 maxlen: 23 89.187.148.0/23 maxlen: 23 89.187.150.0/23 maxlen: 23 89.187.152.0/23 maxlen: 23 89.187.154.0/23 maxlen: 23 89.187.156.0/24 maxlen: 24 89.187.157.0/24 maxlen: 24 89.187.158.0/24 maxlen: 24 89.187.159.0/24 maxlen: 24 91.245.16.0/21 maxlen: 24 185.162.4.0/22 maxlen: 24 2a01:5f0::/29 maxlen: 64 2a01:5f0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2d:32:d8:e3:de:61:ef:f8:c5:54:e8:7f:ea:c8:b3:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c Validity Not Before: Feb 5 09:47:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd06979063b382e1ffdd260535ed5ddf2ec1d93c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bc:af:fc:92:7c:4b:77:e1:e6:ee:74:a3:03: 6a:5a:9a:55:41:68:9d:ce:b5:40:5f:fc:55:9b:cf: db:ba:b0:e8:bb:87:98:d7:0e:54:e3:af:cf:b1:58: a8:b4:7c:34:6e:e8:63:6a:62:98:4d:11:ad:fc:2d: 75:49:dc:36:af:8c:5e:e9:2f:5e:ed:e3:90:6a:fb: 10:33:e9:91:22:57:bc:3a:78:d2:c4:b0:30:dd:cb: 64:39:9a:c9:73:b0:02:fd:60:36:32:7c:55:38:56: c6:b4:b9:c3:85:16:b9:7a:25:ec:17:71:b4:46:d9: df:74:76:a9:80:44:46:e2:d1:c0:ca:48:13:4f:5d: 70:91:58:22:7f:f5:df:0c:1e:08:1f:54:5c:fe:47: e3:f7:0e:a1:72:a9:bc:d4:10:14:ae:d0:f2:83:75: 76:eb:80:5b:81:ba:75:71:bb:cb:46:61:a0:13:37: 71:16:42:32:c2:a8:27:20:6b:c7:10:c8:8e:28:3a: fa:1c:5a:24:94:d2:01:92:84:cb:60:47:e9:b2:a3: 46:b1:57:c1:a3:3e:98:f4:44:7c:ab:3b:d2:68:3a: 68:70:5e:db:63:d7:f2:17:79:da:2a:48:07:36:2a: 54:8e:e8:7d:9a:2b:df:f8:c6:50:46:74:c8:fc:2d: 8d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:06:97:90:63:B3:82:E1:FF:DD:26:05:35:ED:5D:DF:2E:C1:D9:3C X509v3 Authority Key Identifier: keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/_QaXkGOzguH_3SYFNe1d3y7B2Tw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.184.0/21 87.236.192.0/21 89.187.128.0/19 91.245.16.0/21 185.162.4.0/22 IPv6: 2a01:5f0::/29 Signature Algorithm: sha256WithRSAEncryption 76:1d:fd:06:93:b6:6a:4f:c9:be:fa:e7:0e:26:05:37:f1:82: c9:38:d6:88:a1:82:86:22:6b:c5:2d:f4:0a:f9:74:fd:bf:d7: 3c:e8:58:0c:c8:fb:e6:39:0b:8b:86:e2:8a:6a:c9:c2:27:e9: 85:1a:11:07:db:3b:8d:f0:36:c7:23:3d:52:be:9c:4d:1f:f6: ef:6f:48:87:83:8a:71:51:6d:04:0f:01:a9:10:b4:2b:dc:d6: d0:cf:4f:9d:d0:e3:8a:18:56:b2:c5:40:a8:1f:c2:98:8d:ee: 8c:81:f3:6c:ef:f6:82:32:1e:c5:36:12:d2:c7:12:fb:67:1f: 23:f8:15:21:5d:07:e9:40:12:e1:b2:7c:44:91:1e:3f:77:bc: be:74:7a:e2:e3:cb:c9:8f:31:2f:32:1b:86:4a:7f:60:76:d3: d3:b1:7e:ba:29:ae:37:12:1c:4f:d1:18:79:7f:42:60:18:11: 65:dc:c6:0e:58:f9:39:11:95:a1:ec:f3:1f:15:2f:e1:6f:67: ec:6f:a1:be:3c:a4:ed:89:32:ef:76:39:6d:b9:08:03:83:8a: 1c:fd:99:f3:ed:8d:4a:82:af:d1:17:de:7c:92:15:8e:b5:43: 69:11:5c:ee:b4:bb:1c:d8:98:7a:63:ad:b1:70:bb:bd:f0:9f: b2:a7:e1:a5 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZwtMtjj3mHv+MVU6H/qyLNZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjY2IyZDVmYjI1Mzg1MmYxODIzYzY1NDM0ZThmMjc2ZDA0 ZTRlMGMwHhcNMjYwMjA1MDk0NzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDA2OTc5MDYzYjM4MmUxZmZkZDI2MDUzNWVkNWRkZjJlYzFkOTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4byv/JJ8S3fh5u50owNqWppVQWid zrVAX/xVm8/burDou4eY1w5U46/PsViotHw0buhjamKYTRGt/C11Sdw2r4xe6S9e 7eOQavsQM+mRIle8OnjSxLAw3ctkOZrJc7AC/WA2MnxVOFbGtLnDhRa5eiXsF3G0 RtnfdHapgERG4tHAykgTT11wkVgif/XfDB4IH1Rc/kfj9w6hcqm81BAUrtDyg3V2 64Bbgbp1cbvLRmGgEzdxFkIywqgnIGvHEMiOKDr6HFoklNIBkoTLYEfpsqNGsVfB oz6Y9ER8qzvSaDpocF7bY9fyF3naKkgHNipUjuh9mivf+MZQRnTI/C2N1QIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFP0Gl5Bjs4Lh/90mBTXtXd8uwdk8MB8GA1UdIwQY MBaAFNzLLV+yU4UvGCPGVDTo8nbQTk4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM01zdFg3SlRoUzhZSThaVU5PanlkdEJPVGd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83YzFjMjktY2EwMi00OTBiLWFhODQt ZTFhOGE2ZjFkNTlhLzEvX1FhWGtHT3pndUhfM1NZRk5lMWQzeTdCMlR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS83YzFjMjktY2EwMi00OTBiLWFhODQtZTFhOGE2ZjFkNTlh LzEvM01zdFg3SlRoUzhZSThaVU5PanlkdEJPVGd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDLh24AwQD V+zAAwQFWbuAAwQDW/UQAwQCuaIEMA0EAgACMAcDBQMqAQXwMA0GCSqGSIb3DQEB CwUAA4IBAQB2Hf0Gk7ZqT8m++ucOJgU38YLJONaIoYKGImvFLfQK+XT9v9c86FgM yPvmOQuLhuKKasnCJ+mFGhEH2zuN8DbHIz1SvpxNH/bvb0iHg4pxUW0EDwGpELQr 3NbQz0+d0OOKGFayxUCoH8KYje6MgfNs7/aCMh7FNhLSxxL7Zx8j+BUhXQfpQBLh snxEkR4/d7y+dHri48vJjzEvMhuGSn9gdtPTsX66Ka43EhxP0Rh5f0JgGBFl3MYO WPk5EZWh7PMfFS/hb2fsb6G+PKTtiTLvdjltuQgDg4oc/Znz7Y1Kgq/RF958khWO tUNpEVzutLsc2Jh6Y62xcLu98J+yp+Gl -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:17 2026 by rpki-client