This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/0qSgEj9RKFqvqN-inwjjWZFI1pg.roa File: 0qSgEj9RKFqvqN-inwjjWZFI1pg.roa (raw, json) Hash identifier: k4mc0z9gAu2JzOR/GrWxi/A3ANg5O3FYVYf/5aBTRK4= Subject key identifier: D2:A4:A0:12:3F:51:28:5A:AF:A8:DF:A2:9F:08:E3:59:91:48:D6:98 Certificate issuer: /CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92 Certificate serial: 019B7CECDA6253686838A8A53794D0078D5A Authority key identifier: 4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/0qSgEj9RKFqvqN-inwjjWZFI1pg.roa Signing time: Fri 02 Jan 2026 04:17:35 +0000 ROA not before: Fri 02 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20953 IP address blocks: 80.79.192.0/20 maxlen: 20 195.246.219.0/24 maxlen: 24 2a02:1d8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:da:62:53:68:68:38:a8:a5:37:94:d0:07:8d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92 Validity Not Before: Jan 2 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2a4a0123f51285aafa8dfa29f08e3599148d698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:36:3d:72:41:f5:22:4b:ca:9b:0f:e8:3e:b5: 35:46:f1:5e:cc:9b:18:a9:da:95:d4:20:96:a8:14: ec:d2:e6:4c:95:ba:7c:86:06:65:84:6d:2b:5a:bc: 5b:82:9d:76:b0:fa:c2:82:3e:db:f3:15:c9:63:f9: d9:53:15:a7:14:75:dd:16:10:59:50:b6:dd:69:ee: 93:6c:e5:92:65:f2:a9:9c:33:5a:d6:be:de:6b:aa: 20:f7:20:94:f6:3d:07:d1:98:03:f5:a0:5a:45:6c: 0b:8d:0c:39:42:07:54:27:85:47:0a:45:79:7e:1c: c5:89:75:76:72:d6:6b:c1:7a:8f:0f:fd:c2:e4:0c: 3d:71:f3:bc:8e:fb:19:c2:f0:bf:51:e2:a5:b1:3c: cc:e9:0c:bc:be:ab:a8:d2:20:22:36:38:30:87:ed: 83:48:a6:18:8d:7f:25:be:4e:30:86:70:9b:6d:36: b2:db:18:ea:f1:a2:9f:ae:9a:b6:0f:c8:bd:9a:c4: 0d:fe:ec:6d:7c:38:ca:92:16:58:da:c0:48:03:24: 1c:a7:df:53:cf:c2:bc:c2:84:e3:6c:8d:55:41:2b: f5:9b:1b:af:39:78:93:87:12:a2:fd:19:e0:c5:5f: 8e:a3:f6:bf:7d:23:a0:63:e3:59:a8:31:7d:fa:e8: a7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A4:A0:12:3F:51:28:5A:AF:A8:DF:A2:9F:08:E3:59:91:48:D6:98 X509v3 Authority Key Identifier: keyid:4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/0qSgEj9RKFqvqN-inwjjWZFI1pg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.79.192.0/20 195.246.219.0/24 IPv6: 2a02:1d8::/32 Signature Algorithm: sha256WithRSAEncryption 42:a9:b2:5a:12:11:e8:c9:a7:2d:9a:21:98:4b:dd:1d:90:91: f8:af:08:75:42:84:6c:b0:1a:30:f1:6d:a5:d8:6d:78:1d:bd: c0:f6:ee:00:95:97:34:b0:bc:0d:35:c7:6c:62:f4:e9:86:1b: 8b:ca:39:65:40:16:97:f2:c4:ad:1d:b2:7f:9d:67:2d:a8:4c: ce:6e:e3:30:ef:02:cf:0e:1b:43:e7:0b:32:0a:55:93:6b:75: ec:0c:f9:45:d0:f9:4e:2a:0c:e7:22:bb:d1:ab:ca:6b:45:9a: a4:64:4b:1f:a7:7e:be:83:d2:99:f0:b2:bc:a9:e0:2e:ed:14: 9f:ff:ac:8c:1b:04:1b:15:df:09:0e:b9:24:ce:b6:c1:36:1f: ed:6b:8f:91:f0:6b:b5:09:2d:af:2f:c7:d5:57:0f:c9:e0:08: b7:37:8b:bd:20:7d:09:1d:ab:49:2a:62:b3:96:ad:02:97:be: e2:77:2d:48:50:12:fa:65:de:e7:12:f7:0b:f7:5c:a6:19:f6: a6:46:ca:f1:3b:90:3e:36:69:a8:b2:e5:0d:20:54:8a:8c:29: e0:a8:2c:db:ff:50:06:ea:8e:d0:66:f2:d3:01:d9:98:9f:af: 07:08:34:1b:17:2e:9f:19:85:8b:39:b0:f9:8e:00:f7:2c:30: 00:f7:ba:2c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87NpiU2hoOKilN5TQB41aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZWZiOTlkMmEwNmVlOTlkZWE5NTY2ZjE2YmYyMjZkYjNl NTZjOTIwHhcNMjYwMTAyMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmE0YTAxMjNmNTEyODVhYWZhOGRmYTI5ZjA4ZTM1OTkxNDhkNjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzY9ckH1IkvKmw/oPrU1RvFezJsY qdqV1CCWqBTs0uZMlbp8hgZlhG0rWrxbgp12sPrCgj7b8xXJY/nZUxWnFHXdFhBZ ULbdae6TbOWSZfKpnDNa1r7ea6og9yCU9j0H0ZgD9aBaRWwLjQw5QgdUJ4VHCkV5 fhzFiXV2ctZrwXqPD/3C5Aw9cfO8jvsZwvC/UeKlsTzM6Qy8vquo0iAiNjgwh+2D SKYYjX8lvk4whnCbbTay2xjq8aKfrpq2D8i9msQN/uxtfDjKkhZY2sBIAyQcp99T z8K8woTjbI1VQSv1mxuvOXiThxKi/RngxV+Oo/a/fSOgY+NZqDF9+uinmwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNKkoBI/UShar6jfop8I41mRSNaYMB8GA1UdIwQY MBaAFErvuZ0qBu6Z3qlWbxa/Im2z5WySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3UtNW5Tb0c3cG5lcVZadkZyOGliYlBsYkpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xNjlhM2ItNmE3My00OWVjLWFmZmEt ZWQwYTdhYmE4Y2IyLzEvMHFTZ0VqOVJLRnF2cU4taW53ampXWkZJMXBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xNjlhM2ItNmE3My00OWVjLWFmZmEtZWQwYTdhYmE4Y2Iy LzEvU3UtNW5Tb0c3cG5lcVZadkZyOGliYlBsYkpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUE/AAwQA w/bbMA0EAgACMAcDBQAqAgHYMA0GCSqGSIb3DQEBCwUAA4IBAQBCqbJaEhHoyact miGYS90dkJH4rwh1QoRssBow8W2l2G14Hb3A9u4AlZc0sLwNNcdsYvTphhuLyjll QBaX8sStHbJ/nWctqEzObuMw7wLPDhtD5wsyClWTa3XsDPlF0PlOKgznIrvRq8pr RZqkZEsfp36+g9KZ8LK8qeAu7RSf/6yMGwQbFd8JDrkkzrbBNh/ta4+R8Gu1CS2v L8fVVw/J4Ai3N4u9IH0JHatJKmKzlq0Cl77idy1IUBL6Zd7nEvcL91ymGfamRsrx O5A+NmmosuUNIFSKjCngqCzb/1AG6o7QZvLTAdmYn68HCDQbFy6fGYWLObD5jgD3 LDAA97os -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:24 2026 by rpki-client