This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/IfzzL_xyiiJd-L-TeZf2nv-aWek.roa File: IfzzL_xyiiJd-L-TeZf2nv-aWek.roa (raw, json) Hash identifier: ItJvMdPy4DtlwbE7neUmnXaWtdfBUR0v8nYYsh0ATrg= Subject key identifier: 21:FC:F3:2F:FC:72:8A:22:5D:F8:BF:93:79:97:F6:9E:FF:9A:59:E9 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019C3726C2F4D55741A4E9508906230BDF8C Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/IfzzL_xyiiJd-L-TeZf2nv-aWek.roa Signing time: Sat 07 Feb 2026 08:10:13 +0000 ROA not before: Sat 07 Feb 2026 08:10:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 104.222.160.0/24 maxlen: 24 104.222.163.0/24 maxlen: 24 104.222.164.0/24 maxlen: 24 104.222.165.0/24 maxlen: 24 104.222.166.0/24 maxlen: 24 104.239.74.0/24 maxlen: 24 104.239.79.0/24 maxlen: 24 104.239.89.0/24 maxlen: 24 104.239.102.0/24 maxlen: 24 104.239.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Feb 2026 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:37:26:c2:f4:d5:57:41:a4:e9:50:89:06:23:0b:df:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Feb 7 08:10:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21fcf32ffc728a225df8bf937997f69eff9a59e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:92:24:c1:14:38:0e:e2:27:e0:b2:8c:2a:9d: 92:cf:0b:0b:fd:8b:e5:2b:d6:e5:77:02:1a:11:46: 31:ad:db:e0:42:51:47:2a:e3:6f:c6:1a:41:0d:4b: 4e:67:ad:d7:6a:36:f8:b6:45:7e:9d:1e:01:6b:9e: 30:5f:b8:7d:85:4c:b0:ed:bb:dd:4b:2e:49:b0:c5: f5:57:6f:b1:ac:97:46:15:31:2d:19:f7:37:f6:c9: fc:93:9f:05:44:b2:33:f2:1f:03:88:ae:40:8d:75: 8e:86:31:8c:87:c0:f5:29:d7:55:21:b0:07:13:eb: ad:45:70:07:a8:77:ef:7a:b0:ec:8b:07:2e:3c:62: ec:c5:2c:3e:4d:7c:28:f1:df:be:b2:50:51:7e:f7: e7:ab:0e:d3:36:4c:bf:bf:d0:03:ad:a5:91:23:47: 84:67:b0:1b:65:83:6d:1d:9d:8d:76:b8:ce:86:6b: d3:a8:0f:1e:db:63:c4:15:5c:86:57:10:2a:c8:5d: 4d:55:85:8b:04:0a:4c:4c:9a:e6:a5:51:c8:19:16: e3:2b:8e:a5:dc:3b:33:8a:de:24:29:90:0c:72:84: f9:55:78:36:99:ac:22:71:39:66:a5:f0:50:57:7b: c0:e5:10:f6:d8:7d:58:8a:f2:20:e6:03:d7:d4:b2: c5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FC:F3:2F:FC:72:8A:22:5D:F8:BF:93:79:97:F6:9E:FF:9A:59:E9 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/IfzzL_xyiiJd-L-TeZf2nv-aWek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.222.160.0/24 104.222.163.0-104.222.166.255 104.239.74.0/24 104.239.79.0/24 104.239.89.0/24 104.239.102.0/24 104.239.109.0/24 Signature Algorithm: sha256WithRSAEncryption 83:90:17:46:80:a4:c5:5d:45:b2:95:32:73:33:3c:56:84:9f: 3f:38:1c:0b:4e:3c:42:99:ba:e0:5b:66:e1:53:07:b8:9c:b5: 28:63:5b:5a:ad:6f:38:78:c1:39:ba:f3:9e:85:b8:5d:0e:f4: 20:de:49:c5:c3:32:8b:e7:50:46:bf:5c:26:00:b8:08:73:6e: e9:dc:29:62:44:0a:56:d8:c6:35:2e:bc:de:cc:00:94:a0:a8: ac:13:05:c6:bc:d6:81:36:a5:3b:d9:a8:19:9b:0f:af:cb:a0: 29:1f:95:2d:f3:db:fc:a0:85:73:07:0a:6f:8e:7a:34:d0:85: 4d:0b:5b:a8:7f:f7:74:4c:af:1b:b9:b4:fb:47:2c:5c:e8:e8: d9:ed:27:7b:cf:2b:eb:bc:09:50:e9:13:f2:7e:32:a6:56:af: 6f:cd:f6:f2:0b:24:48:74:43:3a:2f:70:13:53:80:4f:39:d1: 13:3b:e3:7e:6c:aa:41:58:43:06:b5:a2:e8:8b:56:05:1f:04: 6e:b0:43:50:66:cd:fa:ec:f1:cb:d9:d2:8a:42:3f:36:cc:c3: 5d:f0:67:75:43:ea:a4:98:54:49:c0:2c:4b:d1:90:50:3d:13: a3:96:81:68:52:23:b4:8a:21:87:48:d5:ed:8f:ac:45:4a:8e: c9:8a:9b:ca -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZw3JsL01VdBpOlQiQYjC9+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMjA3MDgxMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWZjZjMyZmZjNzI4YTIyNWRmOGJmOTM3OTk3ZjY5ZWZmOWE1OWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5IkwRQ4DuIn4LKMKp2SzwsL/Yvl K9bldwIaEUYxrdvgQlFHKuNvxhpBDUtOZ63Xajb4tkV+nR4Ba54wX7h9hUyw7bvd Sy5JsMX1V2+xrJdGFTEtGfc39sn8k58FRLIz8h8DiK5AjXWOhjGMh8D1KddVIbAH E+utRXAHqHfverDsiwcuPGLsxSw+TXwo8d++slBRfvfnqw7TNky/v9ADraWRI0eE Z7AbZYNtHZ2NdrjOhmvTqA8e22PEFVyGVxAqyF1NVYWLBApMTJrmpVHIGRbjK46l 3Dszit4kKZAMcoT5VXg2mawicTlmpfBQV3vA5RD22H1YivIg5gPX1LLFmQIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFCH88y/8cooiXfi/k3mX9p7/mlnpMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvSWZ6ekxfeHlpaUpkLUwtVGVaZjJudi1hV2VrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAaN6gMAwD BABo3qMDBABo3qYDBABo70oDBABo708DBABo71kDBABo72YDBABo720wDQYJKoZI hvcNAQELBQADggEBAIOQF0aApMVdRbKVMnMzPFaEnz84HAtOPEKZuuBbZuFTB7ic tShjW1qtbzh4wTm6856FuF0O9CDeScXDMovnUEa/XCYAuAhzbuncKWJEClbYxjUu vN7MAJSgqKwTBca81oE2pTvZqBmbD6/LoCkflS3z2/yghXMHCm+OejTQhU0LW6h/ 93RMrxu5tPtHLFzo6NntJ3vPK+u8CVDpE/J+MqZWr2/N9vILJEh0QzovcBNTgE85 0RM7435sqkFYQwa1ouiLVgUfBG6wQ1Bmzfrs8cvZ0opCPzbMw13wZ3VD6qSYVEnA LEvRkFA9E6OWgWhSI7SKIYdI1e2PrEVKjsmKm8o= -----END CERTIFICATE-----Generated at Thu Feb 12 16:47:50 2026 by rpki-client