This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/XquFLJH506MrgOoaLqeMT1iQD30.roa File: XquFLJH506MrgOoaLqeMT1iQD30.roa (raw, json) Hash identifier: P4/JJ496SClE89p7goP7qNc9hg0lemrqFHj9cOV9OUg= Subject key identifier: 5E:AB:85:2C:91:F9:D3:A3:2B:80:EA:1A:2E:A7:8C:4F:58:90:0F:7D Certificate issuer: /CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03 Certificate serial: 019B7C113EDC6F254689C029988C0A93BA8A Authority key identifier: F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/XquFLJH506MrgOoaLqeMT1iQD30.roa Signing time: Fri 02 Jan 2026 00:17:43 +0000 ROA not before: Fri 02 Jan 2026 00:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42183 IP address blocks: 185.82.96.0/22 maxlen: 24 185.82.96.0/24 maxlen: 24 185.82.97.0/24 maxlen: 24 185.82.98.0/24 maxlen: 24 185.82.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:3e:dc:6f:25:46:89:c0:29:98:8c:0a:93:ba:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03 Validity Not Before: Jan 2 00:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5eab852c91f9d3a32b80ea1a2ea78c4f58900f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ed:d0:50:0e:28:1f:02:fe:ae:19:6a:02:ad: fa:73:72:48:30:db:cc:c2:b8:f2:90:bd:2a:36:8a: 80:c8:ed:c0:9a:65:46:9d:41:4e:5f:09:54:17:a3: bb:08:2e:01:e6:4b:c1:c6:6f:9b:e2:5a:be:62:d6: ce:62:ac:5c:d3:a7:7a:8c:9c:1e:47:81:e0:88:45: 53:06:66:1e:8d:2d:7d:70:3c:b6:67:99:02:3e:31: 33:35:80:29:8a:69:6e:40:65:8e:b5:89:5b:72:ae: 8e:6b:b0:1e:02:81:3f:a9:e5:92:9c:16:6c:82:eb: f0:38:41:79:ce:30:35:4a:d9:92:1a:41:9e:68:fb: c0:2c:2e:ff:a2:56:1a:49:da:ef:c3:49:27:1f:4d: f6:20:7d:a1:2d:b9:25:2c:01:af:a2:c1:12:4d:6f: 6f:53:36:d8:65:c1:da:42:1e:4a:4d:30:09:fd:f7: 41:8b:d6:f6:60:65:bd:2c:fd:06:c3:6c:fd:15:79: 7c:31:73:66:04:58:f4:d3:f5:8c:95:4e:c9:fe:7a: 88:f7:11:30:91:83:db:27:f3:42:81:b6:af:60:c5: 06:4a:12:33:19:99:19:37:52:7b:3f:f6:8a:6a:1b: a0:7e:c6:df:60:db:f6:19:ea:19:f9:4a:e3:72:83: 16:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AB:85:2C:91:F9:D3:A3:2B:80:EA:1A:2E:A7:8C:4F:58:90:0F:7D X509v3 Authority Key Identifier: keyid:F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/XquFLJH506MrgOoaLqeMT1iQD30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.82.96.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:7b:54:b9:a4:24:c1:4b:67:db:e9:e9:84:7a:86:6a:fc:24: 29:ff:2a:0b:dc:d0:02:f1:32:a1:1e:e4:40:1f:4c:39:fa:c0: 21:7c:3e:c0:c6:50:5a:9f:ba:f1:33:74:8a:27:1d:9e:5c:73: d5:ba:64:5c:11:2a:48:b8:b5:c9:b0:46:5a:5c:15:5d:30:f3: 2a:28:25:b4:a3:78:42:c0:5d:68:4d:0e:c4:c4:03:b8:eb:a8: c7:28:be:42:70:6a:9c:5c:be:17:cd:48:d1:97:48:15:e6:ff: 36:f8:65:71:8a:c9:25:30:30:41:f0:b4:26:17:b3:ff:b2:cd: 36:79:0e:ed:64:ab:66:5b:7e:5e:9e:ee:87:a3:2b:41:bf:8d: 64:d8:70:20:2f:56:2a:84:aa:40:8c:99:0a:71:2f:43:c8:2a: e2:be:9a:87:50:91:1f:5a:81:d6:3a:86:6d:18:c5:8a:38:26: 88:1a:b1:fc:74:ea:20:7c:d1:ab:bf:3a:d3:ef:56:8e:f8:34: 81:71:ca:1a:8e:e6:b3:62:79:96:6a:0f:64:09:1f:c3:6f:18: 2d:b1:4f:f6:a4:9c:5d:dc:0c:91:35:e2:64:86:f6:b9:ed:17: cc:26:51:ef:49:7f:3d:e4:5a:b7:8c:24:bb:59:9d:d4:04:98: e2:82:f0:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ET7cbyVGicApmIwKk7qKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ODU4YjkxYTY2MjdmMjM1OGVhYWRjZDI2YmE1YzJjNWM0 NmVhMDMwHhcNMjYwMTAyMDAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWFiODUyYzkxZjlkM2EzMmI4MGVhMWEyZWE3OGM0ZjU4OTAwZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle3QUA4oHwL+rhlqAq36c3JIMNvM wrjykL0qNoqAyO3AmmVGnUFOXwlUF6O7CC4B5kvBxm+b4lq+YtbOYqxc06d6jJwe R4HgiEVTBmYejS19cDy2Z5kCPjEzNYApimluQGWOtYlbcq6Oa7AeAoE/qeWSnBZs guvwOEF5zjA1StmSGkGeaPvALC7/olYaSdrvw0knH032IH2hLbklLAGvosESTW9v UzbYZcHaQh5KTTAJ/fdBi9b2YGW9LP0Gw2z9FXl8MXNmBFj00/WMlU7J/nqI9xEw kYPbJ/NCgbavYMUGShIzGZkZN1J7P/aKahugfsbfYNv2GeoZ+UrjcoMW7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF6rhSyR+dOjK4DqGi6njE9YkA99MB8GA1UdIwQY MBaAFPeFi5GmYn8jWOqtzSa6XCxcRuoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTRXTGthWmlmeU5ZNnEzTkpycGNMRnhHNmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9mMDI4ZTgtZjA0MS00ODgwLThhOWQt ZjI3YWE5YzZlYjZiLzEvWHF1RkxKSDUwNk1yZ09vYUxxZU1UMWlRRDMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9mMDI4ZTgtZjA0MS00ODgwLThhOWQtZjI3YWE5YzZlYjZi LzEvOTRXTGthWmlmeU5ZNnEzTkpycGNMRnhHNmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVJgMA0G CSqGSIb3DQEBCwUAA4IBAQBOe1S5pCTBS2fb6emEeoZq/CQp/yoL3NAC8TKhHuRA H0w5+sAhfD7AxlBan7rxM3SKJx2eXHPVumRcESpIuLXJsEZaXBVdMPMqKCW0o3hC wF1oTQ7ExAO466jHKL5CcGqcXL4XzUjRl0gV5v82+GVxisklMDBB8LQmF7P/ss02 eQ7tZKtmW35enu6HoytBv41k2HAgL1YqhKpAjJkKcS9DyCrivpqHUJEfWoHWOoZt GMWKOCaIGrH8dOogfNGrvzrT71aO+DSBccoajuazYnmWag9kCR/DbxgtsU/2pJxd 3AyRNeJkhva57RfMJlHvSX895Fq3jCS7WZ3UBJjigvCQ -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:11 2026 by rpki-client