This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/84LpmG68F7Kl-A8fwrFLp1ZbLKk.roa File: 84LpmG68F7Kl-A8fwrFLp1ZbLKk.roa (raw, json) Hash identifier: 2XJZi7mXa4opeuJIyNfWmpTnxGxuMecCcsVg8EKeWbU= Subject key identifier: F3:82:E9:98:6E:BC:17:B2:A5:F8:0F:1F:C2:B1:4B:A7:56:5B:2C:A9 Certificate issuer: /CN=c088b56bd9e016f9bc521af4dc249e6d1256b1df Certificate serial: 019B7F1561582F99A097352D98F80AA2D59F Authority key identifier: C0:88:B5:6B:D9:E0:16:F9:BC:52:1A:F4:DC:24:9E:6D:12:56:B1:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/84LpmG68F7Kl-A8fwrFLp1ZbLKk.roa Signing time: Fri 02 Jan 2026 14:21:06 +0000 ROA not before: Fri 02 Jan 2026 14:21:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15388 IP address blocks: 185.62.64.0/22 maxlen: 22 212.77.224.0/19 maxlen: 19 2a02:2800::/29 maxlen: 29 2a02:2800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:61:58:2f:99:a0:97:35:2d:98:f8:0a:a2:d5:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c088b56bd9e016f9bc521af4dc249e6d1256b1df Validity Not Before: Jan 2 14:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f382e9986ebc17b2a5f80f1fc2b14ba7565b2ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:26:c9:ea:28:98:4a:e6:04:19:2c:f3:81:dd: 07:fa:ce:f9:3c:3c:1d:8a:d0:ee:98:24:e1:8d:72: 42:13:6b:94:f3:15:b0:88:1f:c0:71:97:86:24:f2: 2c:d4:e4:ac:be:5e:a7:70:35:be:6d:20:78:f5:70: 1b:ab:b6:7a:32:75:6f:d2:1d:03:f9:03:02:56:83: af:6b:53:e6:c6:37:5a:b3:76:cb:ba:54:72:3a:fe: bf:81:d3:03:05:d9:66:d0:f5:08:9a:8a:bb:c2:a5: b2:40:94:d3:2a:05:a0:4b:23:2e:99:6d:e1:af:e0: 90:8d:37:85:08:c7:66:0d:56:78:85:81:a0:b3:ee: e3:2a:6a:0d:7d:ea:ca:48:70:52:9c:02:cd:40:ae: c6:91:d7:b9:c2:88:81:76:c8:c3:62:16:70:bd:f3: 10:59:cf:4d:c7:a8:5b:36:7c:5d:3d:21:93:d1:27: 35:fa:4b:ce:91:60:36:dd:21:78:4a:9e:ae:93:40: c1:c8:0f:f7:0e:6e:2e:3d:e0:61:3f:24:44:0d:af: 86:34:e1:7a:b4:7d:f6:03:e2:09:01:8b:9c:de:a6: 07:02:e9:ae:1d:fd:61:66:95:fc:aa:f4:b6:e3:d1: 9a:86:31:76:cc:8f:3b:ec:80:59:c8:35:da:32:ae: 83:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:82:E9:98:6E:BC:17:B2:A5:F8:0F:1F:C2:B1:4B:A7:56:5B:2C:A9 X509v3 Authority Key Identifier: keyid:C0:88:B5:6B:D9:E0:16:F9:BC:52:1A:F4:DC:24:9E:6D:12:56:B1:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/84LpmG68F7Kl-A8fwrFLp1ZbLKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.64.0/22 212.77.224.0/19 IPv6: 2a02:2800::/29 Signature Algorithm: sha256WithRSAEncryption aa:b3:06:f9:3f:dd:71:c0:a5:aa:b9:1a:db:4c:a1:5b:93:c8: 29:46:54:40:87:eb:66:8e:ef:b0:f2:b3:e6:c4:bb:ef:52:a5: 67:d1:20:ba:25:d2:68:7d:91:ea:9a:29:51:bc:28:ca:7c:04: 2a:22:1e:fb:26:57:39:30:0b:cf:d4:dc:3b:50:72:9b:a5:e3: f6:64:97:9b:f3:a2:4a:e9:45:75:ee:f6:be:88:12:52:03:13: dd:85:b4:12:70:69:4d:ff:3d:a3:f5:e4:2d:6a:e5:da:cb:5f: 74:55:78:76:0f:05:67:1b:24:10:24:11:9a:29:0f:0b:fc:64: 66:4f:70:8a:f0:b7:0f:cf:7e:cc:23:ec:de:2a:e4:57:94:97: 2a:94:50:e2:67:08:b9:1a:f9:9f:a3:36:a5:ec:0c:c0:4a:1f: 62:dc:9b:66:fe:69:39:17:ef:89:76:f5:50:28:dc:7a:27:cf: 76:5f:bd:b1:66:cb:7b:14:17:30:55:87:66:87:99:5c:42:e5: 9b:cb:39:78:13:b4:c2:f7:f0:2d:12:79:b2:e0:8f:e1:53:b6: 10:52:cb:0a:be:72:b8:fe:47:a0:b8:73:e4:e5:02:a0:7c:03: 8a:c4:68:bf:db:f1:7b:19:e7:5f:2d:6d:24:ce:e1:28:9b:8f: 3d:bf:8d:11 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FWFYL5mglzUtmPgKotWfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODhiNTZiZDllMDE2ZjliYzUyMWFmNGRjMjQ5ZTZkMTI1 NmIxZGYwHhcNMjYwMTAyMTQyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzgyZTk5ODZlYmMxN2IyYTVmODBmMWZjMmIxNGJhNzU2NWIyY2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCbJ6iiYSuYEGSzzgd0H+s75PDwd itDumCThjXJCE2uU8xWwiB/AcZeGJPIs1OSsvl6ncDW+bSB49XAbq7Z6MnVv0h0D +QMCVoOva1Pmxjdas3bLulRyOv6/gdMDBdlm0PUImoq7wqWyQJTTKgWgSyMumW3h r+CQjTeFCMdmDVZ4hYGgs+7jKmoNferKSHBSnALNQK7Gkde5woiBdsjDYhZwvfMQ Wc9Nx6hbNnxdPSGT0Sc1+kvOkWA23SF4Sp6uk0DByA/3Dm4uPeBhPyREDa+GNOF6 tH32A+IJAYuc3qYHAumuHf1hZpX8qvS249GahjF2zI877IBZyDXaMq6DtwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPOC6ZhuvBeypfgPH8KxS6dWWyypMB8GA1UdIwQY MBaAFMCItWvZ4Bb5vFIa9Nwknm0SVrHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lpMWE5bmdGdm04VWhyMDNDU2ViUkpXc2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mNWFjNDYtNGM1OS00YjNlLWI3MWUt YmVjZjEyODYyNDk3LzEvODRMcG1HNjhGN0tsLUE4ZndyRkxwMVpiTEtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mNWFjNDYtNGM1OS00YjNlLWI3MWUtYmVjZjEyODYyNDk3 LzEvd0lpMWE5bmdGdm04VWhyMDNDU2ViUkpXc2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuT5AAwQF 1E3gMA0EAgACMAcDBQMqAigAMA0GCSqGSIb3DQEBCwUAA4IBAQCqswb5P91xwKWq uRrbTKFbk8gpRlRAh+tmju+w8rPmxLvvUqVn0SC6JdJofZHqmilRvCjKfAQqIh77 Jlc5MAvP1Nw7UHKbpeP2ZJeb86JK6UV17va+iBJSAxPdhbQScGlN/z2j9eQtauXa y190VXh2DwVnGyQQJBGaKQ8L/GRmT3CK8LcPz37MI+zeKuRXlJcqlFDiZwi5Gvmf ozal7AzASh9i3Jtm/mk5F++JdvVQKNx6J892X72xZst7FBcwVYdmh5lcQuWbyzl4 E7TC9/AtEnmy4I/hU7YQUssKvnK4/keguHPk5QKgfAOKxGi/2/F7GedfLW0kzuEo m489v40R -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:42 2026 by rpki-client