This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/fK_RqyAKvk7n3ODLIZ0WLrGJM8w.roa File: fK_RqyAKvk7n3ODLIZ0WLrGJM8w.roa (raw, json) Hash identifier: 7v/5RLR7Q81lEDWcKmADnfeMIsDhKBKucowaJiP2+SM= Subject key identifier: 7C:AF:D1:AB:20:0A:BE:4E:E7:DC:E0:CB:21:9D:16:2E:B1:89:33:CC Certificate issuer: /CN=269f4f7143b4067805cba9a40f639732ee7d42e5 Certificate serial: 019B76EB932AB02DD3F716C744C1F77ECA18 Authority key identifier: 26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/fK_RqyAKvk7n3ODLIZ0WLrGJM8w.roa Signing time: Thu 01 Jan 2026 00:18:28 +0000 ROA not before: Thu 01 Jan 2026 00:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34574 IP address blocks: 188.64.144.0/23 maxlen: 23 188.64.144.0/24 maxlen: 24 188.64.145.0/24 maxlen: 24 188.64.146.0/24 maxlen: 24 188.64.147.0/24 maxlen: 24 2a00:1120::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:93:2a:b0:2d:d3:f7:16:c7:44:c1:f7:7e:ca:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=269f4f7143b4067805cba9a40f639732ee7d42e5 Validity Not Before: Jan 1 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cafd1ab200abe4ee7dce0cb219d162eb18933cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:90:4f:0b:59:9c:41:c1:95:6e:9a:53:e6:ff: 77:f7:d5:32:c6:f9:6d:53:3c:3b:a3:cb:32:59:0f: 60:ba:c9:91:ca:96:d4:f2:a8:ee:53:cc:66:0f:72: bb:1d:93:bf:a4:ae:cc:08:98:e2:69:a5:34:2d:8b: 60:77:6a:2a:d3:8d:6c:fd:df:76:1f:23:fc:20:c2: 90:46:89:08:86:aa:27:4d:35:b2:de:0d:26:b3:4e: 7e:5d:6d:a9:3c:6e:b4:9b:5d:2d:db:b8:cd:b5:b0: ae:18:62:39:01:15:aa:64:2d:cc:64:29:39:34:36: 74:a9:a2:bf:1d:e2:42:d0:ef:2b:c0:da:db:6e:74: 74:da:28:ac:7d:86:5c:d7:5a:6f:01:00:c0:14:cc: 91:be:95:a2:bb:20:52:20:8b:ec:b0:02:cf:d4:90: 8c:ea:0c:e7:02:00:c2:24:72:bd:24:f4:b3:68:ab: 76:2d:1b:f8:3b:6f:5e:d9:10:01:a0:18:2d:57:76: 75:f0:b4:bc:06:0b:a1:57:ce:7d:77:37:c9:d5:90: 0f:a1:fa:61:de:b1:26:9c:33:45:c2:62:4e:29:ce: d9:24:ef:90:5b:3d:eb:69:a9:c7:4a:1e:a3:8a:31: 68:cc:7e:de:71:5f:37:8a:e0:12:ac:b0:a6:a0:cd: 05:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AF:D1:AB:20:0A:BE:4E:E7:DC:E0:CB:21:9D:16:2E:B1:89:33:CC X509v3 Authority Key Identifier: keyid:26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/fK_RqyAKvk7n3ODLIZ0WLrGJM8w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.64.144.0/22 IPv6: 2a00:1120::/32 Signature Algorithm: sha256WithRSAEncryption 1e:b3:11:97:a4:03:09:c5:88:96:1e:30:cc:24:86:09:0c:c1: ca:9c:dd:e5:69:e4:78:02:39:0a:6b:f4:6d:30:7c:b2:6c:e3: c7:d5:7a:b7:3b:48:24:94:b3:a6:b1:f4:f1:e7:7f:18:c4:4d: f2:a9:7e:df:54:55:eb:cb:c6:a4:ac:62:80:8f:d0:d8:b6:a8: 49:b6:4c:c9:ff:72:a7:7e:6d:d5:33:03:e1:a0:dd:ba:19:12: 8d:48:a0:05:e3:4f:f9:5e:94:06:fa:9d:d3:0e:f0:87:6b:56: 94:f5:12:9f:86:dc:fe:37:0c:69:fe:3b:e6:f5:f1:78:f6:60: 51:5b:ea:02:26:d3:48:b7:40:81:6d:8f:07:73:ec:31:e5:c7: 11:6c:7e:56:14:1a:5d:c3:5d:58:82:9c:96:30:e3:4b:44:2f: 65:cf:47:d2:61:8f:9f:76:f4:8f:21:bd:84:59:89:38:a7:45: cc:53:8d:14:ec:3c:9a:3f:8e:98:1c:32:68:07:a0:c9:5f:11: 07:04:72:29:c4:90:af:f8:41:9f:13:82:6f:93:7c:9f:f8:58: b5:a8:0c:8b:03:f9:eb:38:d1:f4:b8:89:e9:6e:0c:5e:01:63: 92:79:fe:24:b0:7f:24:23:cc:9f:2b:98:e7:50:90:30:a8:55: 7e:fb:49:1d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt265MqsC3T9xbHRMH3fsoYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OWY0ZjcxNDNiNDA2NzgwNWNiYTlhNDBmNjM5NzMyZWU3 ZDQyZTUwHhcNMjYwMTAxMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2FmZDFhYjIwMGFiZTRlZTdkY2UwY2IyMTlkMTYyZWIxODkzM2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5BPC1mcQcGVbppT5v9399Uyxvlt Uzw7o8syWQ9gusmRypbU8qjuU8xmD3K7HZO/pK7MCJjiaaU0LYtgd2oq041s/d92 HyP8IMKQRokIhqonTTWy3g0ms05+XW2pPG60m10t27jNtbCuGGI5ARWqZC3MZCk5 NDZ0qaK/HeJC0O8rwNrbbnR02iisfYZc11pvAQDAFMyRvpWiuyBSIIvssALP1JCM 6gznAgDCJHK9JPSzaKt2LRv4O29e2RABoBgtV3Z18LS8BguhV859dzfJ1ZAPofph 3rEmnDNFwmJOKc7ZJO+QWz3raanHSh6jijFozH7ecV83iuASrLCmoM0FKQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHyv0asgCr5O59zgyyGdFi6xiTPMMB8GA1UdIwQY MBaAFCafT3FDtAZ4BcuppA9jlzLufULlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnA5UGNVTzBCbmdGeTZta0QyT1hNdTU5UXVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jOTA4NjAtODEzOC00MzNjLWIyNGYt OTJjNzgwY2EzMjYwLzEvZktfUnF5QUt2azduM09ETElaMFdMckdKTTh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9jOTA4NjAtODEzOC00MzNjLWIyNGYtOTJjNzgwY2EzMjYw LzEvSnA5UGNVTzBCbmdGeTZta0QyT1hNdTU5UXVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvECQMA0E AgACMAcDBQAqABEgMA0GCSqGSIb3DQEBCwUAA4IBAQAesxGXpAMJxYiWHjDMJIYJ DMHKnN3laeR4AjkKa/RtMHyybOPH1Xq3O0gklLOmsfTx538YxE3yqX7fVFXry8ak rGKAj9DYtqhJtkzJ/3Knfm3VMwPhoN26GRKNSKAF40/5XpQG+p3TDvCHa1aU9RKf htz+Nwxp/jvm9fF49mBRW+oCJtNIt0CBbY8Hc+wx5ccRbH5WFBpdw11YgpyWMONL RC9lz0fSYY+fdvSPIb2EWYk4p0XMU40U7DyaP46YHDJoB6DJXxEHBHIpxJCv+EGf E4Jvk3yf+Fi1qAyLA/nrONH0uInpbgxeAWOSef4ksH8kI8yfK5jnUJAwqFV++0kd -----END CERTIFICATE-----Generated at Mon Feb 9 22:24:17 2026 by rpki-client