This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/q8akKFKswGsTj_WpjK3bxZW99G8.roa File: q8akKFKswGsTj_WpjK3bxZW99G8.roa (raw, json) Hash identifier: bvAmYcYZDJUEx6RPMDdQf7Ot5ZQUyjU6PmIDVWJ3Sco= Subject key identifier: AB:C6:A4:28:52:AC:C0:6B:13:8F:F5:A9:8C:AD:DB:C5:95:BD:F4:6F Certificate issuer: /CN=1ef498bab7f3bb97166da579294a8b471450e75c Certificate serial: 019B77C6BC49DD2E93FF2580C43D2C09BA72 Authority key identifier: 1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/q8akKFKswGsTj_WpjK3bxZW99G8.roa Signing time: Thu 01 Jan 2026 04:17:51 +0000 ROA not before: Thu 01 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57902 IP address blocks: 185.74.40.0/22 maxlen: 22 185.87.228.0/22 maxlen: 22 2a05:4680::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:bc:49:dd:2e:93:ff:25:80:c4:3d:2c:09:ba:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ef498bab7f3bb97166da579294a8b471450e75c Validity Not Before: Jan 1 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abc6a42852acc06b138ff5a98caddbc595bdf46f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dd:03:84:37:8d:9f:91:43:16:ca:e2:28:2c: fc:83:a1:d4:2d:27:a1:14:4d:91:a5:cb:41:1e:60: 56:95:0a:c8:5c:cf:e9:52:24:e1:31:3a:1b:fe:ef: e0:dd:21:6b:a1:52:54:39:fb:02:36:d5:68:8f:cf: a8:1c:8d:c2:de:96:57:64:55:19:a6:5c:51:8c:9a: 67:8c:9f:09:b7:0b:66:1b:4c:e6:9d:12:4d:7c:e5: e2:c6:4a:ad:8f:a0:56:d3:86:36:0e:b8:58:c9:2d: 39:9f:7b:b4:af:96:0c:4a:1d:40:54:45:7c:5a:74: 77:7e:76:3e:bb:4d:b4:8e:f9:0d:fe:e0:84:2e:4b: 46:8e:04:fe:98:f8:a4:8d:80:93:19:6e:c5:b1:36: d4:62:1a:8d:1a:94:79:13:e2:2a:95:ec:9b:f5:70: dc:d7:da:b1:35:e1:07:92:9b:27:b9:30:6c:27:4d: bc:7c:c0:09:3c:83:10:63:83:bf:a1:a6:b4:45:78: ee:e0:e8:7e:09:10:ae:3f:ba:f0:a5:0d:c9:f3:4a: b9:34:48:e3:08:2c:24:97:0e:9e:f2:f3:bd:cc:e5: 42:b4:5f:58:57:b4:68:84:8f:76:d6:86:ed:37:1a: fe:ba:3c:a0:7f:8f:d9:78:f2:bf:49:86:7d:ec:01: 41:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C6:A4:28:52:AC:C0:6B:13:8F:F5:A9:8C:AD:DB:C5:95:BD:F4:6F X509v3 Authority Key Identifier: keyid:1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/q8akKFKswGsTj_WpjK3bxZW99G8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.74.40.0/22 185.87.228.0/22 IPv6: 2a05:4680::/29 Signature Algorithm: sha256WithRSAEncryption 90:f5:52:af:a3:33:8f:89:d3:be:55:a2:d1:45:92:b5:61:a4: e0:d4:9f:80:4a:c3:31:54:70:d5:30:ee:2e:15:3a:61:b5:f8: 9a:9e:dd:82:e6:a2:4b:ce:14:81:b8:b5:0f:ee:d1:8c:03:45: bf:f1:f8:90:48:3b:41:80:88:e9:9f:97:fc:b7:40:0b:e7:65: 19:8d:84:5c:21:ed:82:99:24:f2:26:20:59:d5:5f:2a:a7:e6: cb:ca:02:fb:67:b6:4c:41:53:ca:d7:f5:26:79:3b:1f:bd:93: c8:50:4f:78:ea:9d:16:81:d7:31:20:e9:11:c6:2e:9b:ca:38: a1:1d:9d:1d:e2:89:3d:3e:96:f0:c2:7e:9c:33:be:94:62:42: ff:83:be:8d:1f:9a:1b:11:1d:b2:7d:03:b4:b9:b7:25:9d:a8: 50:37:dd:a2:fa:00:ea:41:f4:3f:dd:05:97:af:aa:3a:26:5e: fe:7f:ce:b3:85:7e:d4:23:2a:47:60:b7:36:4b:6d:bc:90:42: c9:7a:75:3c:69:6d:e7:ec:b7:c8:ec:95:4f:b9:07:fd:c0:bf: 34:f6:39:35:f9:aa:06:ca:af:6f:b7:a5:58:de:09:3f:1f:60: 96:d1:b6:ff:fc:89:69:45:f2:30:b9:07:61:2e:34:c3:89:7e: 56:0b:ae:3e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3xrxJ3S6T/yWAxD0sCbpyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZjQ5OGJhYjdmM2JiOTcxNjZkYTU3OTI5NGE4YjQ3MTQ1 MGU3NWMwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmM2YTQyODUyYWNjMDZiMTM4ZmY1YTk4Y2FkZGJjNTk1YmRmNDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN0DhDeNn5FDFsriKCz8g6HULSeh FE2RpctBHmBWlQrIXM/pUiThMTob/u/g3SFroVJUOfsCNtVoj8+oHI3C3pZXZFUZ plxRjJpnjJ8JtwtmG0zmnRJNfOXixkqtj6BW04Y2DrhYyS05n3u0r5YMSh1AVEV8 WnR3fnY+u020jvkN/uCELktGjgT+mPikjYCTGW7FsTbUYhqNGpR5E+Iqleyb9XDc 19qxNeEHkpsnuTBsJ028fMAJPIMQY4O/oaa0RXju4Oh+CRCuP7rwpQ3J80q5NEjj CCwklw6e8vO9zOVCtF9YV7RohI921obtNxr+ujygf4/ZePK/SYZ97AFBywIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKvGpChSrMBrE4/1qYyt28WVvfRvMB8GA1UdIwQY MBaAFB70mLq387uXFm2leSlKi0cUUOdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZTWXVyZnp1NWNXYmFWNUtVcUxSeFJRNTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84NjJlMjQtMDBmNi00ZTg0LWE4Y2Et NzUyNjI1OTI4ZmVmLzEvcThha0tGS3N3R3NUal9XcGpLM2J4Wlc5OUc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi84NjJlMjQtMDBmNi00ZTg0LWE4Y2EtNzUyNjI1OTI4ZmVm LzEvSHZTWXVyZnp1NWNXYmFWNUtVcUxSeFJRNTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuUooAwQC uVfkMA0EAgACMAcDBQMqBUaAMA0GCSqGSIb3DQEBCwUAA4IBAQCQ9VKvozOPidO+ VaLRRZK1YaTg1J+ASsMxVHDVMO4uFTphtfiant2C5qJLzhSBuLUP7tGMA0W/8fiQ SDtBgIjpn5f8t0AL52UZjYRcIe2CmSTyJiBZ1V8qp+bLygL7Z7ZMQVPK1/UmeTsf vZPIUE946p0WgdcxIOkRxi6byjihHZ0d4ok9Ppbwwn6cM76UYkL/g76NH5obER2y fQO0ubclnahQN92i+gDqQfQ/3QWXr6o6Jl7+f86zhX7UIypHYLc2S228kELJenU8 aW3n7LfI7JVPuQf9wL809jk1+aoGyq9vt6VY3gk/H2CW0bb//IlpRfIwuQdhLjTD iX5WC64+ -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:13 2026 by rpki-client