This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/OQqEEAJAiPU1Ypg4_ug8x9-Hajs.roa File: OQqEEAJAiPU1Ypg4_ug8x9-Hajs.roa (raw, json) Hash identifier: SD+uKA8/a0U2/wxdSCNkq74UMq0JRQPbJacchqGYw20= Subject key identifier: 39:0A:84:10:02:40:88:F5:35:62:98:38:FE:E8:3C:C7:DF:87:6A:3B Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2 Certificate serial: 019B79ECC9DFD8210A1BB5E48B034225B1F3 Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/OQqEEAJAiPU1Ypg4_ug8x9-Hajs.roa Signing time: Thu 01 Jan 2026 14:18:39 +0000 ROA not before: Thu 01 Jan 2026 14:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15518 IP address blocks: 212.86.160.0/20 maxlen: 20 212.86.180.0/22 maxlen: 22 212.86.188.0/22 maxlen: 22 213.153.64.0/22 maxlen: 22 213.153.72.0/22 maxlen: 22 213.153.72.0/24 maxlen: 24 213.153.73.0/24 maxlen: 24 213.153.74.0/24 maxlen: 24 213.153.75.0/24 maxlen: 24 2a00:1180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c9:df:d8:21:0a:1b:b5:e4:8b:03:42:25:b1:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2 Validity Not Before: Jan 1 14:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=390a8410024088f535629838fee83cc7df876a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e0:72:92:6c:62:4d:48:d6:0f:72:48:85:c6: fe:a6:08:a9:c0:1d:d7:3a:67:16:85:59:38:a5:b5: 9a:c7:93:60:0f:e8:94:b8:92:df:f4:75:02:8a:82: 70:03:a5:41:da:16:6a:6b:df:05:2b:f6:30:b7:17: 4d:fb:8d:f6:69:94:c3:1e:6c:b8:c6:cd:76:44:69: 34:01:ae:84:23:f7:d4:d0:af:b4:fa:2f:bf:5c:47: 0c:ab:cd:c4:db:0c:46:8c:e5:62:c7:39:96:bc:4e: ad:77:bd:be:25:83:18:6c:6d:3c:03:a5:16:f4:b2: f6:19:69:e1:a1:cc:8d:ab:e0:b6:51:e4:e0:f7:8c: bb:a3:01:c9:a3:9f:ee:92:b0:7a:9b:9e:1e:ec:d5: 88:51:35:5f:4b:a5:9e:65:04:59:3d:30:1d:d1:61: c3:6d:94:1e:b6:13:19:72:af:57:f3:5a:bd:01:b2: d6:6e:c5:0b:75:1e:cb:b1:6c:21:56:e7:52:15:84: 34:d6:fe:fc:c5:21:19:74:58:ca:db:55:59:e5:a4: 36:06:a3:d5:a3:6a:5b:4f:20:70:74:7e:1f:1f:2a: 4d:76:d8:3e:b7:34:55:f9:65:34:a2:f1:84:d1:f9: d6:f0:27:57:cf:ac:81:5f:d6:a6:5e:67:95:f1:ca: 9e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0A:84:10:02:40:88:F5:35:62:98:38:FE:E8:3C:C7:DF:87:6A:3B X509v3 Authority Key Identifier: keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/OQqEEAJAiPU1Ypg4_ug8x9-Hajs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.86.160.0/20 212.86.180.0/22 212.86.188.0/22 213.153.64.0/22 213.153.72.0/22 IPv6: 2a00:1180::/32 Signature Algorithm: sha256WithRSAEncryption 07:23:4d:38:10:d3:6b:ed:70:a7:f0:72:b9:c8:8b:49:52:ec: 13:aa:f4:06:2b:0e:e8:0a:c9:78:96:d8:26:6b:e4:d8:63:64: 5e:76:8f:2d:6a:18:85:a3:67:b4:b7:db:4d:88:f2:e8:d5:af: dc:8c:c9:e6:24:98:d1:ca:5a:ec:af:83:a1:ea:d4:96:b5:67: c2:14:f9:10:fd:c5:41:fa:8e:fa:00:5e:4f:c3:cd:65:c3:0d: 99:1f:b9:1a:52:b0:77:4d:29:cb:6d:95:4e:ab:da:3e:04:74: 58:28:a5:5f:cc:08:77:50:24:46:5f:7c:30:e7:ab:08:3e:2b: 65:e2:7d:f1:4d:af:3f:f4:93:b2:b4:41:75:05:46:14:3c:a7: 10:4c:a2:4a:11:ea:23:11:13:ef:de:1a:44:52:6a:79:10:99: 16:09:f1:88:75:ce:f4:d9:d3:30:1e:66:6c:ec:b7:f2:f4:e2: fb:61:98:a4:ee:1e:24:e3:3a:be:f8:e7:f1:44:d5:ef:83:68: 31:0d:5e:8f:3c:bf:b2:8e:bd:06:cf:55:81:89:56:45:9b:62: d2:93:cb:42:16:a3:bf:80:c8:6a:63:5a:8b:58:e7:66:92:ba: 87:a4:e6:c2:ce:7e:6c:54:87:db:86:db:56:8c:a3:1a:8b:88: 12:d3:67:f3 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt57Mnf2CEKG7XkiwNCJbHzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ZjhlZGUyMGI3OGY5OTU5OTNkYTk4ZjQzNGE5NjYwNzRk NTYyYzIwHhcNMjYwMTAxMTQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTBhODQxMDAyNDA4OGY1MzU2Mjk4MzhmZWU4M2NjN2RmODc2YTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeBykmxiTUjWD3JIhcb+pgipwB3X OmcWhVk4pbWax5NgD+iUuJLf9HUCioJwA6VB2hZqa98FK/YwtxdN+432aZTDHmy4 xs12RGk0Aa6EI/fU0K+0+i+/XEcMq83E2wxGjOVixzmWvE6td72+JYMYbG08A6UW 9LL2GWnhocyNq+C2UeTg94y7owHJo5/ukrB6m54e7NWIUTVfS6WeZQRZPTAd0WHD bZQethMZcq9X81q9AbLWbsULdR7LsWwhVudSFYQ01v78xSEZdFjK21VZ5aQ2BqPV o2pbTyBwdH4fHypNdtg+tzRV+WU0ovGE0fnW8CdXz6yBX9amXmeV8cqeDwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFDkKhBACQIj1NWKYOP7oPMffh2o7MB8GA1UdIwQY MBaAFCj47eILePmVmT2pj0NKlmB01WLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1BqdDRndDQtWldaUGFtUFEwcVdZSFRWWXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jZmNmZmEtNjAyOS00MmRkLTllZjgt OWQzYTBmMjNjYmU3LzEvT1FxRUVBSkFpUFUxWXBnNF91Zzh4OS1IYWpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jZmNmZmEtNjAyOS00MmRkLTllZjgtOWQzYTBmMjNjYmU3 LzEvS1BqdDRndDQtWldaUGFtUFEwcVdZSFRWWXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQE1FagAwQC 1Fa0AwQC1Fa8AwQC1ZlAAwQC1ZlIMA0EAgACMAcDBQAqABGAMA0GCSqGSIb3DQEB CwUAA4IBAQAHI004ENNr7XCn8HK5yItJUuwTqvQGKw7oCsl4ltgma+TYY2Redo8t ahiFo2e0t9tNiPLo1a/cjMnmJJjRylrsr4Oh6tSWtWfCFPkQ/cVB+o76AF5Pw81l ww2ZH7kaUrB3TSnLbZVOq9o+BHRYKKVfzAh3UCRGX3ww56sIPitl4n3xTa8/9JOy tEF1BUYUPKcQTKJKEeojERPv3hpEUmp5EJkWCfGIdc702dMwHmZs7Lfy9OL7YZik 7h4k4zq++OfxRNXvg2gxDV6PPL+yjr0Gz1WBiVZFm2LSk8tCFqO/gMhqY1qLWOdm krqHpObCzn5sVIfbhttWjKMai4gS02fz -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:47 2026 by rpki-client