This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/05QJdDPCq2Q_jznqerhgP5BoCxg.roa File: 05QJdDPCq2Q_jznqerhgP5BoCxg.roa (raw, json) Hash identifier: gU+YSQWmwa9r8UbcwqPCuU94QjYr5yYj3Kh8Xri7um4= Subject key identifier: D3:94:09:74:33:C2:AB:64:3F:8F:39:EA:7A:B8:60:3F:90:68:0B:18 Certificate issuer: /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2 Certificate serial: 019BBBEC86A28055C76D5F63D69AAF533F2D Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/05QJdDPCq2Q_jznqerhgP5BoCxg.roa Signing time: Wed 14 Jan 2026 09:53:18 +0000 ROA not before: Wed 14 Jan 2026 09:53:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201205 IP address blocks: 37.230.120.0/21 maxlen: 21 78.24.168.0/21 maxlen: 21 147.12.64.0/19 maxlen: 24 147.12.64.0/24 maxlen: 24 176.62.136.0/21 maxlen: 21 185.29.4.0/22 maxlen: 22 185.29.4.0/24 maxlen: 24 185.29.5.0/24 maxlen: 24 185.29.6.0/23 maxlen: 24 185.160.220.0/22 maxlen: 24 2a01:5c00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:ec:86:a2:80:55:c7:6d:5f:63:d6:9a:af:53:3f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2 Validity Not Before: Jan 14 09:53:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d394097433c2ab643f8f39ea7ab8603f90680b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9c:b4:4b:20:2a:83:5b:52:78:97:20:45:d8: 78:5c:71:af:b7:d2:57:73:dc:a0:90:0a:01:75:d6: 0c:b7:45:c3:1a:4e:a3:b3:0c:e8:00:d6:a5:04:52: a8:2c:e8:9a:c4:79:7b:9e:88:62:da:fa:50:53:4f: 84:e7:f5:a0:4c:b8:a7:a0:3d:af:26:02:8f:45:fa: 8f:36:0f:4d:4a:05:bd:e0:75:1b:0f:30:3a:00:40: 8f:04:e0:bc:4d:7e:fd:24:e4:e2:9a:ac:16:43:23: 8d:75:cd:3c:a4:7b:eb:84:ec:67:1f:86:74:7d:7e: 92:17:80:f3:5f:83:3f:e6:34:1c:d4:29:b1:78:12: fd:f3:b8:a3:4f:2b:23:2c:2c:e3:5a:64:e8:e8:3b: 6c:b4:b6:1f:84:30:23:22:48:56:55:11:03:08:e9: ba:a0:f6:9a:70:c7:8b:9f:7e:33:c1:31:c9:d9:36: b3:5d:5b:ba:73:c9:44:87:e1:05:08:9a:4e:1d:89: 4c:6f:be:d4:e8:80:0a:da:56:33:0d:ae:26:bd:4c: 9f:3e:a3:74:be:c9:72:f1:1c:3f:d4:e5:31:e7:04: af:92:d2:00:02:d7:89:a4:d1:d3:99:57:c8:ca:53: c6:98:e8:37:fe:1a:cb:4c:44:39:db:f9:99:9b:f2: 9b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:94:09:74:33:C2:AB:64:3F:8F:39:EA:7A:B8:60:3F:90:68:0B:18 X509v3 Authority Key Identifier: keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/05QJdDPCq2Q_jznqerhgP5BoCxg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.120.0/21 78.24.168.0/21 147.12.64.0/19 176.62.136.0/21 185.29.4.0/22 185.160.220.0/22 IPv6: 2a01:5c00::/32 Signature Algorithm: sha256WithRSAEncryption 98:52:8e:24:71:0f:b6:3c:25:9f:19:5f:ab:63:32:13:2f:c8: 17:e2:d7:7f:15:2d:8f:0e:52:66:06:29:ef:9f:66:f0:cc:c9: 5a:ed:88:36:d0:e9:e8:a0:1c:de:82:e8:f4:5e:96:d4:1e:fa: 7e:e2:af:ae:d6:6a:ca:34:f8:08:60:68:5f:a7:c4:6e:26:bf: 6e:87:d3:f7:6f:90:fe:d4:0e:a7:83:12:1b:b7:69:13:8e:da: 25:0d:e8:29:2d:24:ac:65:54:d1:b0:62:93:04:da:bd:9d:46: 29:02:e7:00:cd:fb:8d:19:9e:a3:6a:a7:a3:6c:a5:02:28:43: 0f:a9:7f:b2:df:52:66:0f:c1:25:d3:8f:b2:a8:03:32:1f:39: e1:bc:01:c3:f8:f9:14:71:9c:c4:ab:85:66:c3:1d:fb:83:1b: 9a:e8:20:9b:23:bc:98:ba:5c:ec:da:44:99:3c:2f:cb:85:21: e2:1b:49:2a:3a:dc:e9:c3:c9:56:d8:e0:9b:7a:5b:7b:46:2b: 09:60:db:d2:72:14:f6:86:82:73:5d:70:b3:89:93:2e:91:ec: 76:39:8f:86:33:43:43:fa:76:65:5d:42:ca:fe:17:29:61:cb: 3e:64:c8:38:b1:71:c8:3e:78:2f:92:9d:48:7e:52:c5:1d:84: 70:80:52:44 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZu77IaigFXHbV9j1pqvUz8tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDJmYTJjNWJhMjg5MjA0NWU3Y2Q1MGE1YWRmZDU0ZDZk YmI4YzIwHhcNMjYwMTE0MDk1MzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzk0MDk3NDMzYzJhYjY0M2Y4ZjM5ZWE3YWI4NjAzZjkwNjgwYjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25y0SyAqg1tSeJcgRdh4XHGvt9JX c9ygkAoBddYMt0XDGk6jswzoANalBFKoLOiaxHl7nohi2vpQU0+E5/WgTLinoD2v JgKPRfqPNg9NSgW94HUbDzA6AECPBOC8TX79JOTimqwWQyONdc08pHvrhOxnH4Z0 fX6SF4DzX4M/5jQc1CmxeBL987ijTysjLCzjWmTo6DtstLYfhDAjIkhWVREDCOm6 oPaacMeLn34zwTHJ2TazXVu6c8lEh+EFCJpOHYlMb77U6IAK2lYzDa4mvUyfPqN0 vsly8Rw/1OUx5wSvktIAAteJpNHTmVfIylPGmOg3/hrLTEQ52/mZm/Kb3wIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFNOUCXQzwqtkP4856nq4YD+QaAsYMB8GA1UdIwQY MBaAFH0C+ixbookgRefNUKWt/VTW27jCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFMNkxGdWlpU0JGNTgxUXBhMzlWTmJidU1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jY2UyMGItNGQ1YS00OGY4LWI4OGUt ODEwMzlmM2NmM2ZkLzEvMDVRSmREUENxMlFfanpucWVyaGdQNUJvQ3hnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jY2UyMGItNGQ1YS00OGY4LWI4OGUtODEwMzlmM2NmM2Zk LzEvZlFMNkxGdWlpU0JGNTgxUXBhMzlWTmJidU1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDJeZ4AwQD ThioAwQFkwxAAwQDsD6IAwQCuR0EAwQCuaDcMA0EAgACMAcDBQAqAVwAMA0GCSqG SIb3DQEBCwUAA4IBAQCYUo4kcQ+2PCWfGV+rYzITL8gX4td/FS2PDlJmBinvn2bw zMla7Yg20OnooBzeguj0XpbUHvp+4q+u1mrKNPgIYGhfp8RuJr9uh9P3b5D+1A6n gxIbt2kTjtolDegpLSSsZVTRsGKTBNq9nUYpAucAzfuNGZ6jaqejbKUCKEMPqX+y 31JmD8El04+yqAMyHznhvAHD+PkUcZzEq4Vmwx37gxua6CCbI7yYulzs2kSZPC/L hSHiG0kqOtzpw8lW2OCbelt7RisJYNvSchT2hoJzXXCziZMukex2OY+GM0ND+nZl XULK/hcpYcs+ZMg4sXHIPngvkp1IflLFHYRwgFJE -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:17 2026 by rpki-client