This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/fSE8Q3BHF-37hTlX0eyFzGv4iBc.roa File: fSE8Q3BHF-37hTlX0eyFzGv4iBc.roa (raw, json) Hash identifier: pVD8HGH2rJXCl52itQj8YwGZtz7maygncTTWGAdWmOg= Subject key identifier: 7D:21:3C:43:70:47:17:ED:FB:85:39:57:D1:EC:85:CC:6B:F8:88:17 Certificate issuer: /CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c Certificate serial: 019B7C12CF47D831E158B6C0B20E9A69313E Authority key identifier: 1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/fSE8Q3BHF-37hTlX0eyFzGv4iBc.roa Signing time: Fri 02 Jan 2026 00:19:25 +0000 ROA not before: Fri 02 Jan 2026 00:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211501 IP address blocks: 46.33.27.0/24 maxlen: 24 194.26.238.0/24 maxlen: 24 2a11:75c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:cf:47:d8:31:e1:58:b6:c0:b2:0e:9a:69:31:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c Validity Not Before: Jan 2 00:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d213c43704717edfb853957d1ec85cc6bf88817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:41:27:6c:e4:0a:2d:de:f7:9f:7a:dc:c2:cd: d9:bf:86:3d:a9:e7:57:24:e8:f9:29:f1:db:9b:57: 24:9b:e3:b2:cf:89:ca:a2:ef:4b:9b:f0:95:c3:66: 7b:9f:38:bb:1e:f1:33:62:b9:05:d5:f6:74:18:20: b9:e5:0a:d7:3d:a4:a6:d5:10:f5:7b:4f:b9:83:f6: e8:a5:ab:70:b5:85:b0:59:4b:f7:e2:91:65:f0:09: 05:95:23:44:27:93:db:b7:7d:b2:c0:0b:ae:23:cf: 95:dc:ef:7c:4f:f3:58:16:fc:1d:df:1c:fa:d8:d9: 65:3d:c9:e2:f7:b1:da:3e:45:3d:56:a1:8c:78:0c: f8:f9:63:5d:c9:fb:3c:4d:45:8d:43:58:85:92:17: 81:f8:5c:d7:50:f5:cd:e3:d4:dc:b7:b6:c0:b6:17: ee:1f:7b:de:56:92:7e:42:b9:e8:12:97:d2:3e:09: 6e:90:26:94:a6:bd:cb:38:27:36:e8:90:8e:7d:da: db:c3:f0:d3:0d:c2:85:fe:5d:ec:d5:6e:f1:06:a3: 4d:42:27:bc:d7:d9:5b:53:b4:51:74:7d:ea:da:3a: bd:7f:08:e1:10:33:dd:00:da:47:60:9a:eb:13:c8: 12:18:72:40:dd:a6:29:25:16:7f:5b:7c:5d:b0:ab: dc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:21:3C:43:70:47:17:ED:FB:85:39:57:D1:EC:85:CC:6B:F8:88:17 X509v3 Authority Key Identifier: keyid:1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/fSE8Q3BHF-37hTlX0eyFzGv4iBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.33.27.0/24 194.26.238.0/24 IPv6: 2a11:75c0::/29 Signature Algorithm: sha256WithRSAEncryption 7e:45:69:87:1b:b8:fe:d8:e3:9b:c4:b5:13:6c:7e:53:1d:90: 8f:1b:29:1b:a5:2c:73:a8:22:4a:91:89:7f:1b:ee:56:be:45: d0:79:95:67:ab:6f:d3:48:27:fd:e8:15:8d:66:2b:d8:b6:27: d0:e7:7f:17:b5:01:2d:89:32:15:d7:98:5a:31:56:9e:92:02: c7:01:56:cb:7f:53:e4:9d:6f:72:ce:38:50:7d:69:d4:93:93: bd:2d:b9:28:80:eb:32:cd:02:8d:a3:dc:9c:99:7e:fe:35:a7: 63:8d:e1:df:07:3c:f0:85:0c:52:6f:5e:80:48:98:3d:a9:25: a0:a7:4b:1d:db:1b:7c:7a:6d:be:29:d7:dd:05:92:c1:d2:2c: d8:40:3b:83:b5:aa:41:25:a2:68:ac:4b:46:9a:a7:a2:7a:dd: f4:b4:b0:29:17:ce:06:95:97:06:f5:77:45:38:8f:f3:be:97: c3:91:7e:57:d4:6a:eb:ba:22:2c:8e:23:a0:43:4e:ba:b3:d1: a3:34:1f:fb:ca:9c:6a:9c:77:d9:eb:be:ff:06:01:01:f0:cf: 06:a9:cd:4a:71:24:22:8a:96:05:a8:7d:55:08:1e:8b:f1:cf: 99:5b:79:9c:3d:40:4e:8c:76:ac:f1:0d:bf:12:ae:00:42:0c: 5c:45:ca:92 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8Es9H2DHhWLbAsg6aaTE+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYTdhNmFmYjIxYmIxNDg3NDJmNjE1NWQxYTM5YWZjOGZj N2U3OWMwHhcNMjYwMTAyMDAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDIxM2M0MzcwNDcxN2VkZmI4NTM5NTdkMWVjODVjYzZiZjg4ODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUEnbOQKLd73n3rcws3Zv4Y9qedX JOj5KfHbm1ckm+Oyz4nKou9Lm/CVw2Z7nzi7HvEzYrkF1fZ0GCC55QrXPaSm1RD1 e0+5g/bopatwtYWwWUv34pFl8AkFlSNEJ5Pbt32ywAuuI8+V3O98T/NYFvwd3xz6 2NllPcni97HaPkU9VqGMeAz4+WNdyfs8TUWNQ1iFkheB+FzXUPXN49Tct7bAthfu H3veVpJ+QrnoEpfSPglukCaUpr3LOCc26JCOfdrbw/DTDcKF/l3s1W7xBqNNQie8 19lbU7RRdH3q2jq9fwjhEDPdANpHYJrrE8gSGHJA3aYpJRZ/W3xdsKvcDQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFH0hPENwRxft+4U5V9Hshcxr+IgXMB8GA1UdIwQY MBaAFB6npq+yG7FIdC9hVdGjmvyPx+ecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84ODYxNjMtNjViMy00NTk5LWJmNGIt ZjM2Y2Q4NzkwYjBhLzEvZlNFOFEzQkhGLTM3aFRsWDBleUZ6R3Y0aUJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84ODYxNjMtNjViMy00NTk5LWJmNGItZjM2Y2Q4NzkwYjBh LzEvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALiEbAwQA whruMA0EAgACMAcDBQMqEXXAMA0GCSqGSIb3DQEBCwUAA4IBAQB+RWmHG7j+2OOb xLUTbH5THZCPGykbpSxzqCJKkYl/G+5WvkXQeZVnq2/TSCf96BWNZivYtifQ538X tQEtiTIV15haMVaekgLHAVbLf1PknW9yzjhQfWnUk5O9LbkogOsyzQKNo9ycmX7+ NadjjeHfBzzwhQxSb16ASJg9qSWgp0sd2xt8em2+KdfdBZLB0izYQDuDtapBJaJo rEtGmqeiet30tLApF84GlZcG9XdFOI/zvpfDkX5X1GrruiIsjiOgQ066s9GjNB/7 ypxqnHfZ677/BgEB8M8Gqc1KcSQiipYFqH1VCB6L8c+ZW3mcPUBOjHas8Q2/Eq4A QgxcRcqS -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:48 2026 by rpki-client