This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/D05FEfy3QwUovfHdBOTC__Qm1Ig.roa File: D05FEfy3QwUovfHdBOTC__Qm1Ig.roa (raw, json) Hash identifier: y2+5HO71wdmdzCObaPM0TXVY8FFplAz7lSQMcABak5k= Subject key identifier: 0F:4E:45:11:FC:B7:43:05:28:BD:F1:DD:04:E4:C2:FF:F4:26:D4:88 Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019BDB038DB8076FE98952B801E3B66C49A3 Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/D05FEfy3QwUovfHdBOTC__Qm1Ig.roa Signing time: Tue 20 Jan 2026 10:46:41 +0000 ROA not before: Tue 20 Jan 2026 10:46:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34450 IP address blocks: 86.106.80.0/24 maxlen: 24 86.106.104.0/24 maxlen: 24 89.34.8.0/21 maxlen: 21 89.44.209.0/24 maxlen: 24 93.113.158.0/24 maxlen: 24 93.114.55.0/24 maxlen: 24 93.114.99.0/24 maxlen: 24 93.114.171.0/24 maxlen: 24 93.114.187.0/24 maxlen: 24 188.213.18.0/24 maxlen: 24 188.215.72.0/23 maxlen: 24 188.215.73.0/24 maxlen: 24 188.215.95.0/24 maxlen: 24 188.240.14.0/24 maxlen: 24 2a05:b680:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:03:8d:b8:07:6f:e9:89:52:b8:01:e3:b6:6c:49:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 20 10:46:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f4e4511fcb7430528bdf1dd04e4c2fff426d488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e1:cc:4e:b3:d9:39:1d:98:ec:b1:be:ef:fd: 6f:28:18:54:00:43:a4:1f:12:b8:7e:d1:dc:77:e6: e1:10:40:1b:40:e1:c6:61:0b:a6:bf:f9:71:d2:51: 20:61:25:85:f1:40:2f:70:d5:3e:68:82:27:d8:6e: 13:2a:f7:ea:83:c5:b0:41:02:fb:0b:7e:f8:bd:b0: 43:8a:50:03:ec:10:dc:24:5b:8f:bf:c2:9b:76:0a: 5b:7e:40:0f:cb:c0:2a:1c:6a:d9:2e:2b:4d:91:35: a3:15:28:b5:34:76:3d:95:96:5a:7e:32:bd:46:04: c3:96:0b:db:5c:78:0d:87:e1:72:d3:ac:b3:c3:68: ac:37:79:1c:f7:2b:71:1e:80:32:99:b4:13:af:9b: c9:f0:af:04:97:ff:de:d7:c9:68:dc:27:07:17:37: 35:d7:df:6a:f0:f6:3a:ef:c7:40:23:3e:03:86:6f: 2e:2d:11:b4:e1:72:15:40:80:42:dd:68:bc:33:59: 48:31:de:72:dd:f9:ab:3f:dc:d0:39:00:95:ba:25: c4:52:5f:fd:83:b2:9b:3d:1b:4f:c0:7e:d0:87:7d: dc:11:44:cf:1f:0b:65:4e:6f:30:9f:02:1f:f2:8e: d9:95:88:1d:b0:bf:10:d1:fa:d3:d0:44:73:46:e9: 6b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4E:45:11:FC:B7:43:05:28:BD:F1:DD:04:E4:C2:FF:F4:26:D4:88 X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/D05FEfy3QwUovfHdBOTC__Qm1Ig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.106.80.0/24 86.106.104.0/24 89.34.8.0/21 89.44.209.0/24 93.113.158.0/24 93.114.55.0/24 93.114.99.0/24 93.114.171.0/24 93.114.187.0/24 188.213.18.0/24 188.215.72.0/23 188.215.95.0/24 188.240.14.0/24 IPv6: 2a05:b680:1::/48 Signature Algorithm: sha256WithRSAEncryption 6e:fb:c3:ee:cf:d1:07:86:27:37:2e:a6:5b:a7:59:eb:af:0a: 03:99:15:ab:ed:a7:61:db:3b:4e:3f:0d:8f:e4:6a:07:ad:9a: 73:bc:39:d7:81:ee:26:75:51:c0:c0:64:43:8b:df:83:cf:c8: 13:1c:e8:11:a0:f0:cf:41:8f:8f:1f:87:16:5f:57:b0:19:c4: a4:9e:ce:03:5a:e4:ea:d1:b1:83:5c:c5:b6:3e:ee:6f:75:df: 8a:54:91:3c:46:a7:1b:d5:b8:c4:43:36:f7:c7:c7:d0:8c:2b: 02:e0:f7:11:46:39:23:71:fc:68:02:00:60:88:f3:7f:df:aa: 96:13:53:95:c9:2d:fe:2b:5c:22:91:a6:28:34:39:ee:93:58: 45:9a:df:81:c3:1d:b6:e3:c7:28:8f:36:fa:c8:c7:04:a1:13: eb:b0:94:d0:bc:57:16:e9:88:27:b7:fe:9f:10:e7:ae:9e:02: bb:1a:c5:40:1f:8e:67:3a:ab:ea:7a:3b:28:a4:99:28:94:4c: 33:24:cc:6d:4d:10:3a:44:77:9d:64:34:dc:88:c8:1f:6b:f2: 2a:f0:55:dd:d8:4a:f2:6c:87:1d:7c:16:0c:da:d6:11:a5:53: c0:22:df:a7:15:c7:4f:e5:20:f5:f8:0e:bd:87:b4:81:0e:68: 06:8a:e0:a0 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgISAZvbA424B2/piVK4AeO2bEmjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTIwMTA0NjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjRlNDUxMWZjYjc0MzA1MjhiZGYxZGQwNGU0YzJmZmY0MjZkNDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueHMTrPZOR2Y7LG+7/1vKBhUAEOk HxK4ftHcd+bhEEAbQOHGYQumv/lx0lEgYSWF8UAvcNU+aIIn2G4TKvfqg8WwQQL7 C374vbBDilAD7BDcJFuPv8KbdgpbfkAPy8AqHGrZLitNkTWjFSi1NHY9lZZafjK9 RgTDlgvbXHgNh+Fy06yzw2isN3kc9ytxHoAymbQTr5vJ8K8El//e18lo3CcHFzc1 199q8PY678dAIz4Dhm8uLRG04XIVQIBC3Wi8M1lIMd5y3fmrP9zQOQCVuiXEUl/9 g7KbPRtPwH7Qh33cEUTPHwtlTm8wnwIf8o7ZlYgdsL8Q0frT0ERzRulrDQIDAQAB o4ICYjCCAl4wHQYDVR0OBBYEFA9ORRH8t0MFKL3x3QTkwv/0JtSIMB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvRDA1RkVmeTNRd1VvdmZIZEJPVENfX1FtMUlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBUBAIAATBOAwQAVmpQAwQA VmpoAwQDWSIIAwQAWSzRAwQAXXGeAwQAXXI3AwQAXXJjAwQAXXKrAwQAXXK7AwQA vNUSAwQBvNdIAwQAvNdfAwQAvPAOMA8EAgACMAkDBwAqBbaAAAEwDQYJKoZIhvcN AQELBQADggEBAG77w+7P0QeGJzcuplunWeuvCgOZFavtp2HbO04/DY/kagetmnO8 OdeB7iZ1UcDAZEOL34PPyBMc6BGg8M9Bj48fhxZfV7AZxKSezgNa5OrRsYNcxbY+ 7m9134pUkTxGpxvVuMRDNvfHx9CMKwLg9xFGOSNx/GgCAGCI83/fqpYTU5XJLf4r XCKRpig0Oe6TWEWa34HDHbbjxyiPNvrIxwShE+uwlNC8VxbpiCe3/p8Q566eArsa xUAfjmc6q+p6OyikmSiUTDMkzG1NEDpEd51kNNyIyB9r8irwVd3YSvJshx18Fgza 1hGlU8Ai36cVx0/lIPX4Dr2HtIEOaAaK4KA= -----END CERTIFICATE-----Generated at Wed Jan 21 10:48:14 2026 by rpki-client