This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/fOEnPAWhsxTOpFt7roZ3tUcQEpA.roa File: fOEnPAWhsxTOpFt7roZ3tUcQEpA.roa (raw, json) Hash identifier: hJyQkOhG2dynFkXSSov+GNMjBt8nhvuX9AxIVC3sXH0= Subject key identifier: 7C:E1:27:3C:05:A1:B3:14:CE:A4:5B:7B:AE:86:77:B5:47:10:12:90 Certificate issuer: /CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26 Certificate serial: 019B77591848695B9022C1A2CB73C6EB5E91 Authority key identifier: 5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/fOEnPAWhsxTOpFt7roZ3tUcQEpA.roa Signing time: Thu 01 Jan 2026 02:18:06 +0000 ROA not before: Thu 01 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43268 IP address blocks: 188.190.96.0/22 maxlen: 22 188.190.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:18:48:69:5b:90:22:c1:a2:cb:73:c6:eb:5e:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26 Validity Not Before: Jan 1 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ce1273c05a1b314cea45b7bae8677b547101290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d2:eb:8f:53:4c:bc:49:04:05:e2:6e:54:9b: 9c:c1:03:2a:87:c9:6a:9a:6b:cd:ba:13:18:b1:d7: 95:66:ac:1a:84:00:66:df:f3:ad:04:e7:3b:e8:72: 81:e9:50:47:14:aa:4a:7f:48:a7:c4:f1:91:dd:47: bd:5e:eb:9d:f5:c3:14:92:00:ac:64:36:e2:a2:4f: a3:c6:62:25:85:1a:2d:7b:83:5c:de:5b:24:1f:af: b5:f4:26:39:b6:f3:d1:e3:86:d2:82:02:9a:19:9d: e4:2f:f5:05:8a:47:2f:13:e1:cb:4e:e5:f1:bd:d8: c2:4d:32:b8:39:59:35:c0:cb:06:24:3a:0e:57:33: 95:4a:8b:d5:47:ed:71:aa:7a:5b:8f:a2:4a:eb:02: 30:c3:75:d3:42:d4:d2:7c:03:71:d0:08:6a:0d:30: 4d:4a:13:0a:50:62:e6:f9:55:ce:98:e4:79:8c:fb: d3:f0:25:af:c4:4c:93:32:7c:3d:cb:8e:17:13:4a: 5f:a2:bb:91:ed:b4:d0:86:6f:ce:a3:9b:8b:56:c7: 10:a6:51:4d:c5:fd:33:06:68:b4:38:12:5c:a3:e9: 7c:07:31:b3:fe:1d:da:f1:cb:dd:84:de:96:5c:9c: 41:7a:45:9f:56:3e:2d:33:80:1c:55:ca:1b:ef:e8: ea:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E1:27:3C:05:A1:B3:14:CE:A4:5B:7B:AE:86:77:B5:47:10:12:90 X509v3 Authority Key Identifier: keyid:5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/fOEnPAWhsxTOpFt7roZ3tUcQEpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.190.96.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:fe:88:50:e6:d8:68:c6:93:73:09:aa:b3:02:9b:f1:82:5f: fd:17:19:89:23:cb:e6:9c:e9:43:ff:2c:ae:19:41:dc:79:d0: 6e:8e:e8:14:15:76:2d:a7:81:71:8a:3e:d0:b8:7d:2d:1b:c6: 63:34:7f:09:c3:f4:40:58:75:de:62:16:f4:11:aa:4d:66:c0: 53:2f:a8:1e:4e:78:8c:95:92:74:3c:ed:6a:15:84:78:ab:06: 47:df:11:eb:e2:96:c6:75:44:15:34:c7:76:63:14:ce:b6:e2: a5:13:cb:36:6a:d6:44:aa:9e:b0:b7:a8:a1:44:95:b4:3b:00: 89:1e:8b:72:47:c9:20:8b:c0:2d:ea:27:d7:b6:57:c1:23:aa: 98:74:e7:a1:58:18:7d:20:cc:42:31:24:ac:5f:f4:ce:36:c4: 52:d4:98:f3:f3:d5:e8:e1:e0:48:ca:c8:59:64:d0:d6:28:97: ee:b1:6e:f7:79:56:98:92:8d:a0:66:1f:22:49:22:c1:56:49: 4c:5a:85:90:32:13:7b:bb:ab:e3:f8:e3:fc:f5:f0:26:f9:a6: f1:93:41:37:d7:a9:f1:ce:88:c2:9c:e1:34:95:30:7b:8b:19: c0:dd:9e:e5:84:a7:fd:da:88:90:b6:01:76:12:3d:16:6f:19: cb:bd:82:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WRhIaVuQIsGiy3PG616RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViOGIyNmM1MzJmYmM1MmI1ZGU2NzJhYjM1NzYxZDFjN2Q5 N2ViMjYwHhcNMjYwMTAxMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2UxMjczYzA1YTFiMzE0Y2VhNDViN2JhZTg2NzdiNTQ3MTAxMjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9Lrj1NMvEkEBeJuVJucwQMqh8lq mmvNuhMYsdeVZqwahABm3/OtBOc76HKB6VBHFKpKf0inxPGR3Ue9Xuud9cMUkgCs ZDbiok+jxmIlhRote4Nc3lskH6+19CY5tvPR44bSggKaGZ3kL/UFikcvE+HLTuXx vdjCTTK4OVk1wMsGJDoOVzOVSovVR+1xqnpbj6JK6wIww3XTQtTSfANx0AhqDTBN ShMKUGLm+VXOmOR5jPvT8CWvxEyTMnw9y44XE0pforuR7bTQhm/Oo5uLVscQplFN xf0zBmi0OBJco+l8BzGz/h3a8cvdhN6WXJxBekWfVj4tM4AcVcob7+jqrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHzhJzwFobMUzqRbe66Gd7VHEBKQMB8GA1UdIwQY MBaAFFuLJsUy+8UrXeZyqzV2HRx9l+smMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzRzbXhUTDd4U3RkNW5Lck5YWWRISDJYNnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84NjY0YmYtZTk2YS00YzBmLThiZTMt ZTcyZTliNGI3NjU4LzEvZk9FblBBV2hzeFRPcEZ0N3JvWjN0VWNRRXBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC84NjY0YmYtZTk2YS00YzBmLThiZTMtZTcyZTliNGI3NjU4 LzEvVzRzbXhUTDd4U3RkNW5Lck5YWWRISDJYNnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvL5gMA0G CSqGSIb3DQEBCwUAA4IBAQBr/ohQ5thoxpNzCaqzApvxgl/9FxmJI8vmnOlD/yyu GUHcedBujugUFXYtp4Fxij7QuH0tG8ZjNH8Jw/RAWHXeYhb0EapNZsBTL6geTniM lZJ0PO1qFYR4qwZH3xHr4pbGdUQVNMd2YxTOtuKlE8s2atZEqp6wt6ihRJW0OwCJ HotyR8kgi8At6ifXtlfBI6qYdOehWBh9IMxCMSSsX/TONsRS1Jjz89Xo4eBIyshZ ZNDWKJfusW73eVaYko2gZh8iSSLBVklMWoWQMhN7u6vj+OP89fAm+abxk0E316nx zojCnOE0lTB7ixnA3Z7lhKf92oiQtgF2Ej0WbxnLvYJb -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:45 2026 by rpki-client