This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/1nEI4ofN7-_O7YLfMqtxBcLAnwA.roa File: 1nEI4ofN7-_O7YLfMqtxBcLAnwA.roa (raw, json) Hash identifier: 3NhBeQVEE89mf7lTmcAscd7f117hY++nWIP6cov6PBQ= Subject key identifier: D6:71:08:E2:87:CD:EF:EF:CE:ED:82:DF:32:AB:71:05:C2:C0:9F:00 Certificate issuer: /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2 Certificate serial: 019B7BA519C2058A2F69611FE3EEB1B67062 Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/1nEI4ofN7-_O7YLfMqtxBcLAnwA.roa Signing time: Thu 01 Jan 2026 22:19:36 +0000 ROA not before: Thu 01 Jan 2026 22:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205561 IP address blocks: 147.12.64.0/24 maxlen: 24 185.160.220.0/22 maxlen: 24 185.160.220.0/24 maxlen: 24 185.160.221.0/24 maxlen: 24 185.160.222.0/24 maxlen: 24 185.160.223.0/24 maxlen: 24 193.53.101.0/24 maxlen: 24 193.53.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:19:c2:05:8a:2f:69:61:1f:e3:ee:b1:b6:70:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2 Validity Not Before: Jan 1 22:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d67108e287cdefefceed82df32ab7105c2c09f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2b:6c:12:50:25:02:41:32:24:b9:64:4f:7d: 47:6c:1b:91:e1:2d:3a:16:48:a2:a5:64:3a:51:e0: a5:93:1b:b6:cd:b7:59:cc:01:ab:5e:bd:81:b6:8e: f8:0c:6d:d5:7a:5b:d9:5b:68:1f:54:18:97:7d:a3: b6:fd:f5:76:d8:07:80:e0:f6:49:e3:26:bb:bb:61: 85:5d:6b:3b:46:08:f3:3e:db:7c:b2:72:ac:64:c8: 88:4b:9b:83:9c:1c:5e:9a:e4:b5:26:61:76:b9:7e: d7:96:44:e9:47:5b:27:d8:30:35:0f:fd:60:92:d1: c3:b5:09:1e:c5:a7:a4:90:f3:5f:54:0d:2f:ca:f3: 70:6b:00:9a:41:c9:df:26:5f:6d:76:4b:55:6a:bd: 70:a3:e4:6f:51:75:c6:ab:d3:cd:3e:68:26:c1:3d: 46:e8:01:ec:5c:3c:66:5a:7e:b0:97:fe:45:f1:ce: 01:a4:a1:3e:d6:f5:a2:85:08:15:aa:42:98:6b:55: 2a:16:3a:fb:19:84:05:5d:35:c9:81:1b:c6:d6:ae: ad:43:d4:c3:a3:d5:d7:92:6e:7d:f3:e8:c7:08:e1: 30:db:8e:74:89:5b:13:19:b6:56:b6:42:2b:56:f5: ce:9e:1f:c8:2e:1c:8b:df:e3:e8:a3:0d:af:ab:99: 04:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:71:08:E2:87:CD:EF:EF:CE:ED:82:DF:32:AB:71:05:C2:C0:9F:00 X509v3 Authority Key Identifier: keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/1nEI4ofN7-_O7YLfMqtxBcLAnwA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.12.64.0/24 185.160.220.0/22 193.53.101.0-193.53.102.255 Signature Algorithm: sha256WithRSAEncryption 07:c1:84:bf:b0:e7:72:da:1b:c1:62:8e:71:50:ee:39:11:0e: b7:1a:c7:3d:6a:27:2d:e6:9a:c2:aa:6b:0b:e5:7f:54:58:79: b9:6f:f4:d8:f9:54:bf:2a:3f:0c:7c:1d:a8:55:ac:f0:a9:d0: ff:09:8b:64:04:e7:5b:84:7e:28:d1:81:eb:70:28:fe:cd:f1: 70:aa:2b:f5:f6:50:a1:fa:f7:b9:e0:fc:46:fe:fc:f6:4a:a3: 2f:18:8b:e2:6d:4d:da:e3:86:70:4a:8d:95:9c:dd:6d:73:da: 35:03:82:b3:85:22:10:22:2f:67:de:1a:7f:54:f3:bb:8d:9e: db:d6:c5:15:d9:d5:e6:5d:6d:4b:90:e6:87:bb:e8:b8:69:fd: a2:1c:f4:43:64:bc:01:c5:c2:73:7e:a7:3e:08:09:83:e5:d4: d9:78:a5:6e:3f:df:e8:39:d7:37:6c:04:fa:7f:f4:b6:3e:2b: 2e:3e:e7:aa:37:50:e2:c3:27:07:31:52:ea:97:82:5e:5e:47: be:45:3a:5d:f8:c6:87:da:6e:e6:ef:54:ee:df:8f:e3:53:8a: 07:c3:2d:fe:ed:94:9d:a4:f2:e1:31:0a:bd:66:cf:ae:83:64: 2a:8c:70:77:0f:25:44:7b:5e:31:50:78:c9:c1:12:90:d7:69: c7:59:a5:f9 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt7pRnCBYovaWEf4+6xtnBiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDJmYTJjNWJhMjg5MjA0NWU3Y2Q1MGE1YWRmZDU0ZDZk YmI4YzIwHhcNMjYwMTAxMjIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjcxMDhlMjg3Y2RlZmVmY2VlZDgyZGYzMmFiNzEwNWMyYzA5ZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnytsElAlAkEyJLlkT31HbBuR4S06 FkiipWQ6UeClkxu2zbdZzAGrXr2Bto74DG3VelvZW2gfVBiXfaO2/fV22AeA4PZJ 4ya7u2GFXWs7RgjzPtt8snKsZMiIS5uDnBxemuS1JmF2uX7XlkTpR1sn2DA1D/1g ktHDtQkexaekkPNfVA0vyvNwawCaQcnfJl9tdktVar1wo+RvUXXGq9PNPmgmwT1G 6AHsXDxmWn6wl/5F8c4BpKE+1vWihQgVqkKYa1UqFjr7GYQFXTXJgRvG1q6tQ9TD o9XXkm598+jHCOEw2450iVsTGbZWtkIrVvXOnh/ILhyL3+Poow2vq5kExwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFNZxCOKHze/vzu2C3zKrcQXCwJ8AMB8GA1UdIwQY MBaAFH0C+ixbookgRefNUKWt/VTW27jCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFMNkxGdWlpU0JGNTgxUXBhMzlWTmJidU1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jY2UyMGItNGQ1YS00OGY4LWI4OGUt ODEwMzlmM2NmM2ZkLzEvMW5FSTRvZk43LV9PN1lMZk1xdHhCY0xBbndBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jY2UyMGItNGQ1YS00OGY4LWI4OGUtODEwMzlmM2NmM2Zk LzEvZlFMNkxGdWlpU0JGNTgxUXBhMzlWTmJidU1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAkwxAAwQC uaDcMAwDBADBNWUDBADBNWYwDQYJKoZIhvcNAQELBQADggEBAAfBhL+w53LaG8Fi jnFQ7jkRDrcaxz1qJy3mmsKqawvlf1RYeblv9Nj5VL8qPwx8HahVrPCp0P8Ji2QE 51uEfijRgetwKP7N8XCqK/X2UKH697ng/Eb+/PZKoy8Yi+JtTdrjhnBKjZWc3W1z 2jUDgrOFIhAiL2feGn9U87uNntvWxRXZ1eZdbUuQ5oe76Lhp/aIc9ENkvAHFwnN+ pz4ICYPl1Nl4pW4/3+g51zdsBPp/9LY+Ky4+56o3UOLDJwcxUuqXgl5eR75FOl34 xofabubvVO7fj+NTigfDLf7tlJ2k8uExCr1mz66DZCqMcHcPJUR7XjFQeMnBEpDX acdZpfk= -----END CERTIFICATE-----Generated at Mon Feb 9 23:47:19 2026 by rpki-client