This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/m8Q5zJZ_AxfjsiGl8q1Fy-V2YKU.roa File: m8Q5zJZ_AxfjsiGl8q1Fy-V2YKU.roa (raw, json) Hash identifier: gmO3hyi9CFxj4bGHRGh2gH5C4A1U0mvXeUP9On396ug= Subject key identifier: 9B:C4:39:CC:96:7F:03:17:E3:B2:21:A5:F2:AD:45:CB:E5:76:60:A5 Certificate issuer: /CN=1a5caaf3a0993b76ae13e119136dbf0069698911 Certificate serial: 019B7CEDD9B0CFEC6EDD3FB3E7553BE6D755 Authority key identifier: 1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/m8Q5zJZ_AxfjsiGl8q1Fy-V2YKU.roa Signing time: Fri 02 Jan 2026 04:18:41 +0000 ROA not before: Fri 02 Jan 2026 04:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39052 IP address blocks: 144.57.0.0/19 maxlen: 19 144.57.64.0/18 maxlen: 18 144.57.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d9:b0:cf:ec:6e:dd:3f:b3:e7:55:3b:e6:d7:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a5caaf3a0993b76ae13e119136dbf0069698911 Validity Not Before: Jan 2 04:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bc439cc967f0317e3b221a5f2ad45cbe57660a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1b:89:8a:81:07:fd:a6:20:0d:36:66:3a:70: 83:e9:e0:6d:ca:a2:20:dd:f7:59:82:b7:a3:c3:c2: 58:a4:57:26:5a:97:e5:7a:ff:59:96:37:02:7a:1a: 5a:cb:f2:ba:82:7e:4b:7c:6a:00:43:ef:05:72:4a: fd:d9:4e:96:86:ab:eb:bd:66:81:ce:91:4f:0c:19: 32:42:ed:ae:d7:49:6f:52:84:1b:fd:67:12:6c:86: 6b:21:4f:5e:94:de:b1:14:bf:6a:20:7c:7a:71:8b: ed:25:18:69:4f:56:30:8d:07:0d:6a:a1:61:b5:69: 0b:17:62:50:e9:47:7a:5a:ab:b3:d2:78:93:19:9c: 21:5e:88:49:28:3c:35:cc:d6:01:21:9c:e2:38:aa: 79:0b:e4:b8:e0:98:f7:27:85:62:1c:b0:c1:ad:45: 30:07:c4:91:74:17:80:ca:da:73:29:10:df:df:33: e8:59:d1:56:51:d6:87:84:50:4c:aa:3c:82:75:4b: 4d:c7:4e:c7:1d:0e:0d:1f:d8:6c:ac:b7:79:c2:4d: ae:5a:25:5b:ca:5a:8c:dc:ee:f1:7e:2a:1b:73:ba: 09:26:0d:20:ec:6a:0a:97:97:d0:86:27:95:5b:09: cf:76:3a:40:0c:e4:03:c8:e3:76:41:14:54:d8:ea: ff:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C4:39:CC:96:7F:03:17:E3:B2:21:A5:F2:AD:45:CB:E5:76:60:A5 X509v3 Authority Key Identifier: keyid:1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/m8Q5zJZ_AxfjsiGl8q1Fy-V2YKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.57.0.0/19 144.57.64.0-144.57.255.255 Signature Algorithm: sha256WithRSAEncryption 23:6e:a5:8a:fe:f7:da:f6:4d:95:2c:57:1d:40:db:e8:72:25: 64:ba:eb:a3:52:b8:75:b7:8a:2c:03:bd:90:0d:fa:92:78:05: a9:85:2e:a0:93:1b:3d:47:b9:a1:ce:c9:ce:41:13:76:a8:27: df:da:c3:c5:2d:c6:b9:43:b9:64:77:d3:04:96:1e:b3:5e:02: c3:c5:cb:97:a9:25:99:0f:72:7b:0b:2d:9a:9e:2b:bc:45:d9: 39:8a:ef:c7:3c:d8:1e:ab:0c:62:c4:8e:5f:ca:da:f8:cd:10: 69:ea:f8:f4:28:8e:f3:a7:01:6a:60:ff:21:78:6a:5a:3e:39: de:69:fd:ba:5f:ac:ec:53:3c:10:17:b2:6f:69:fc:92:16:63: 4c:0c:74:2d:c5:ed:59:d8:d9:01:86:da:99:04:e3:e9:cc:55: 25:d4:d8:e4:ea:e4:a7:37:c3:a8:08:4e:2d:aa:bc:fc:22:eb: a5:92:63:d1:60:2c:8a:4f:4d:b6:20:03:f9:d1:63:85:47:0e: ed:c6:52:ad:b2:3d:df:8f:66:69:d0:d5:df:09:83:7e:57:fc: 6e:a2:5f:cb:47:fb:63:d4:cf:08:88:21:00:12:5d:6b:75:a8: 85:85:45:6d:52:3b:8f:9d:e8:15:19:c5:f5:09:e7:29:3c:d6: 26:22:92:72 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt87dmwz+xu3T+z51U75tdVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNWNhYWYzYTA5OTNiNzZhZTEzZTExOTEzNmRiZjAwNjk2 OTg5MTEwHhcNMjYwMTAyMDQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmM0MzljYzk2N2YwMzE3ZTNiMjIxYTVmMmFkNDVjYmU1NzY2MGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhuJioEH/aYgDTZmOnCD6eBtyqIg 3fdZgrejw8JYpFcmWpflev9ZljcCehpay/K6gn5LfGoAQ+8Fckr92U6WhqvrvWaB zpFPDBkyQu2u10lvUoQb/WcSbIZrIU9elN6xFL9qIHx6cYvtJRhpT1YwjQcNaqFh tWkLF2JQ6Ud6Wquz0niTGZwhXohJKDw1zNYBIZziOKp5C+S44Jj3J4ViHLDBrUUw B8SRdBeAytpzKRDf3zPoWdFWUdaHhFBMqjyCdUtNx07HHQ4NH9hsrLd5wk2uWiVb ylqM3O7xfiobc7oJJg0g7GoKl5fQhieVWwnPdjpADOQDyON2QRRU2Or/sQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFJvEOcyWfwMX47IhpfKtRcvldmClMB8GA1UdIwQY MBaAFBpcqvOgmTt2rhPhGRNtvwBpaYkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2x5cTg2Q1pPM2F1RS1FWkUyMl9BR2xwaVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85NGNkYjItOTM5OS00NTBiLWE4MmUt N2M1OTBiY2Y5ODFhLzEvbThRNXpKWl9BeGZqc2lHbDhxMUZ5LVYyWUtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny85NGNkYjItOTM5OS00NTBiLWE4MmUtN2M1OTBiY2Y5ODFh LzEvR2x5cTg2Q1pPM2F1RS1FWkUyMl9BR2xwaVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQFkDkAMAsD BAaQOUADAwGQODANBgkqhkiG9w0BAQsFAAOCAQEAI26liv732vZNlSxXHUDb6HIl ZLrro1K4dbeKLAO9kA36kngFqYUuoJMbPUe5oc7JzkETdqgn39rDxS3GuUO5ZHfT BJYes14Cw8XLl6klmQ9yewstmp4rvEXZOYrvxzzYHqsMYsSOX8ra+M0Qaer49CiO 86cBamD/IXhqWj453mn9ul+s7FM8EBeyb2n8khZjTAx0LcXtWdjZAYbamQTj6cxV JdTY5OrkpzfDqAhOLaq8/CLrpZJj0WAsik9NtiAD+dFjhUcO7cZSrbI9349madDV 3wmDflf8bqJfy0f7Y9TPCIghABJda3WohYVFbVI7j53oFRnF9QnnKTzWJiKScg== -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:52 2026 by rpki-client