This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/nqJ87houspD5VoO74mRdMV9fAd0.roa File: nqJ87houspD5VoO74mRdMV9fAd0.roa (raw, json) Hash identifier: YvGxh8GyUSROGpmrKuTGBAcWaZ9SnsI/tzMK+vvWSvc= Subject key identifier: 9E:A2:7C:EE:1A:2E:B2:90:F9:56:83:BB:E2:64:5D:31:5F:5F:01:DD Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019C3725D98370BF79D387E8AEABE064A5DD Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/nqJ87houspD5VoO74mRdMV9fAd0.roa Signing time: Sat 07 Feb 2026 08:09:13 +0000 ROA not before: Sat 07 Feb 2026 08:09:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 64.137.52.0/23 maxlen: 23 104.233.0.0/22 maxlen: 22 104.238.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Feb 2026 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:37:25:d9:83:70:bf:79:d3:87:e8:ae:ab:e0:64:a5:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Feb 7 08:09:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ea27cee1a2eb290f95683bbe2645d315f5f01dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:b2:5a:80:47:a9:8a:3d:00:72:f3:f1:b9: 3c:7b:70:ca:44:4f:88:83:06:9c:4f:13:df:6e:4e: d2:00:09:ab:1b:39:fb:e9:e1:b4:25:46:82:80:82: 38:14:47:9d:3f:e4:26:7f:f6:3e:72:ff:94:33:01: c3:eb:72:dd:3d:7e:4c:f9:0f:26:0f:b8:69:48:2c: ef:09:51:1b:fb:22:6c:46:fd:38:4d:9a:7b:c7:3d: 0e:37:d8:46:d9:5f:3e:e6:3e:7d:d4:9f:b5:30:f0: 9a:c2:45:ae:ee:b1:5a:37:fb:d7:79:d2:46:8f:39: 06:36:69:3d:e3:77:63:f9:9c:17:83:57:10:d7:b5: ea:e1:4f:a3:29:31:e1:e2:91:07:28:1b:d5:a1:22: bf:4f:01:49:76:40:7b:ea:5b:b0:d6:1d:b2:f6:d2: 1a:9e:cf:c0:c9:9a:70:64:4b:f6:70:8a:e4:2a:8b: 66:e6:c5:ce:4f:43:95:65:5b:9a:01:6d:f0:0c:52: 8d:3a:3b:2c:fa:2b:ac:47:2b:b8:88:13:87:14:56: 0f:fe:da:76:b3:a8:6c:a9:9f:1e:0d:70:4d:a9:41: c8:bb:be:9b:50:65:6c:4a:dc:f7:70:b7:86:ce:75: 9b:2d:b9:e6:cc:15:eb:2c:42:fe:78:63:7f:42:4c: 36:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A2:7C:EE:1A:2E:B2:90:F9:56:83:BB:E2:64:5D:31:5F:5F:01:DD X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/nqJ87houspD5VoO74mRdMV9fAd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.137.52.0/23 104.233.0.0/22 104.238.0.0/22 Signature Algorithm: sha256WithRSAEncryption 94:d4:d5:04:d2:cf:5f:82:50:12:0e:fb:4c:52:48:26:1e:10: 61:51:b2:26:d5:cf:b2:91:42:bc:23:c9:82:11:86:57:f6:45: 69:6f:fe:67:c6:16:ec:cd:94:01:d1:d1:82:f8:bf:dc:ec:52: 73:5e:c2:c1:46:f6:6e:65:11:e9:27:39:63:87:89:02:d0:42: 83:08:96:00:08:e3:17:41:c0:de:ca:25:e1:47:84:ba:7e:9b: b4:4d:7e:5c:43:df:ce:6d:39:3b:61:aa:59:3a:be:b0:3e:a5: 8a:ce:4e:1f:0a:30:e1:6d:15:46:18:9e:55:f1:19:44:3f:fb: 47:03:ba:ed:73:b1:ae:ef:6e:4a:a3:68:4f:b4:36:8c:0c:79: 4c:b4:79:93:16:74:d7:40:1a:9c:d6:8a:6b:5c:c4:d5:74:66: 7f:b9:47:9d:f1:7c:4a:f0:44:1b:51:12:8b:03:67:58:da:72: 0d:c2:17:35:8b:0b:d6:67:7f:eb:90:83:0a:32:e4:1e:61:a4: bf:a8:8a:87:f5:d0:ff:76:79:75:86:40:24:1d:7f:be:a4:29: 10:23:df:26:5b:85:e6:81:05:df:56:da:24:0b:62:22:7f:e6: 3f:85:13:db:68:3e:77:39:1b:74:e0:09:03:20:1a:2c:38:5c: 69:91:04:2e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZw3JdmDcL9504forqvgZKXdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMjA3MDgwOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWEyN2NlZTFhMmViMjkwZjk1NjgzYmJlMjY0NWQzMTVmNWYwMWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiKyWoBHqYo9AHLz8bk8e3DKRE+I gwacTxPfbk7SAAmrGzn76eG0JUaCgII4FEedP+Qmf/Y+cv+UMwHD63LdPX5M+Q8m D7hpSCzvCVEb+yJsRv04TZp7xz0ON9hG2V8+5j591J+1MPCawkWu7rFaN/vXedJG jzkGNmk943dj+ZwXg1cQ17Xq4U+jKTHh4pEHKBvVoSK/TwFJdkB76luw1h2y9tIa ns/AyZpwZEv2cIrkKotm5sXOT0OVZVuaAW3wDFKNOjss+iusRyu4iBOHFFYP/tp2 s6hsqZ8eDXBNqUHIu76bUGVsStz3cLeGznWbLbnmzBXrLEL+eGN/Qkw2NwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJ6ifO4aLrKQ+VaDu+JkXTFfXwHdMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvbnFKODdob3VzcEQ1Vm9PNzRtUmRNVjlmQWQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBQIk0AwQC aOkAAwQCaO4AMA0GCSqGSIb3DQEBCwUAA4IBAQCU1NUE0s9fglASDvtMUkgmHhBh UbIm1c+ykUK8I8mCEYZX9kVpb/5nxhbszZQB0dGC+L/c7FJzXsLBRvZuZRHpJzlj h4kC0EKDCJYACOMXQcDeyiXhR4S6fpu0TX5cQ9/ObTk7YapZOr6wPqWKzk4fCjDh bRVGGJ5V8RlEP/tHA7rtc7Gu725Ko2hPtDaMDHlMtHmTFnTXQBqc1oprXMTVdGZ/ uUed8XxK8EQbURKLA2dY2nINwhc1iwvWZ3/rkIMKMuQeYaS/qIqH9dD/dnl1hkAk HX++pCkQI98mW4XmgQXfVtokC2Iif+Y/hRPbaD53ORt04AkDIBosOFxpkQQu -----END CERTIFICATE-----Generated at Thu Feb 12 16:43:41 2026 by rpki-client