This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/tI5Q_pHNppa9IygLbs0z0gxs4tQ.roa File: tI5Q_pHNppa9IygLbs0z0gxs4tQ.roa (raw, json) Hash identifier: 42laiJa6YC1H/CwPJuianhlbqJN55nJRIX5XgJoyuRk= Subject key identifier: B4:8E:50:FE:91:CD:A6:96:BD:23:28:0B:6E:CD:33:D2:0C:6C:E2:D4 Certificate issuer: /CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0 Certificate serial: 019B797E69BC8D27F5CBFBB88BC9982EC13E Authority key identifier: A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/tI5Q_pHNppa9IygLbs0z0gxs4tQ.roa Signing time: Thu 01 Jan 2026 12:18:06 +0000 ROA not before: Thu 01 Jan 2026 12:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39684 IP address blocks: 81.88.80.0/22 maxlen: 22 81.88.84.0/24 maxlen: 24 81.88.85.0/24 maxlen: 24 81.88.86.0/24 maxlen: 24 81.88.87.0/24 maxlen: 24 81.88.88.0/24 maxlen: 24 81.88.89.0/24 maxlen: 24 81.88.94.0/24 maxlen: 24 81.88.95.0/24 maxlen: 24 185.200.140.0/24 maxlen: 24 185.200.141.0/24 maxlen: 24 185.200.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:69:bc:8d:27:f5:cb:fb:b8:8b:c9:98:2e:c1:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0 Validity Not Before: Jan 1 12:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b48e50fe91cda696bd23280b6ecd33d20c6ce2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f7:fa:f0:d0:d9:2d:5c:b2:55:16:e8:0a:b2: a0:20:fa:e2:8b:f0:9d:de:7d:a9:8a:81:0f:a1:00: 1d:79:88:a8:65:21:23:58:37:63:db:ad:f9:25:f6: ed:82:e2:3b:9b:9d:4a:8e:be:de:6b:1a:c5:20:ca: c5:61:3a:4f:ab:06:c3:7f:97:14:db:15:a7:c4:e8: ad:fd:a9:1c:7c:65:c1:69:b5:64:12:84:ac:3c:8a: d6:2b:47:6a:29:42:e5:82:c3:f9:63:a2:af:38:0e: 50:77:35:5d:55:68:5e:0b:75:c8:01:e1:09:28:ba: 4b:16:81:38:ee:03:69:9f:35:f3:8b:b9:43:da:98: b3:19:d9:05:ae:56:b8:e8:0e:d4:82:33:88:f1:93: 58:18:41:75:16:d0:4a:b5:da:ba:45:8e:81:8c:0e: 01:a6:44:01:ce:97:88:62:f5:c3:9e:bc:f4:41:2f: 49:9d:98:2c:7a:6f:01:b7:95:bd:60:ba:ca:18:2f: e4:77:e2:4e:75:97:cb:0b:8b:ce:f9:ef:11:63:b1: 0a:99:a7:fe:78:5f:43:07:b3:fb:8b:dd:95:21:f3: 96:7e:8b:3c:3f:5c:1b:10:89:35:30:7f:96:83:54: 9f:4e:7f:17:6d:d2:32:7b:31:52:11:8a:d3:50:c2: c8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8E:50:FE:91:CD:A6:96:BD:23:28:0B:6E:CD:33:D2:0C:6C:E2:D4 X509v3 Authority Key Identifier: keyid:A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/tI5Q_pHNppa9IygLbs0z0gxs4tQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.88.80.0-81.88.89.255 81.88.94.0/23 185.200.140.0-185.200.142.255 Signature Algorithm: sha256WithRSAEncryption d3:c6:be:a7:3d:52:84:9b:ba:7c:81:72:05:16:10:b5:06:cc: 5e:8e:98:17:c7:4e:75:4f:ff:8f:e5:bb:47:3e:49:63:cf:b7: 41:d3:98:2a:aa:c7:8d:d9:51:09:a5:19:96:ed:0a:76:b7:94: 77:05:79:2a:99:89:80:a8:15:0b:55:6c:ce:e9:25:0d:5a:69: 0a:4c:18:e0:9b:21:f9:f8:8f:7b:be:75:95:70:45:05:f2:01: 93:1b:32:db:55:b0:9e:b1:58:f8:33:aa:03:aa:e9:a9:4e:6d: 5e:eb:58:7d:37:bc:f8:b5:ef:dd:f8:49:6e:f0:5e:82:f0:92: 37:84:13:68:c5:64:a1:4c:61:e3:c9:bd:fc:b7:29:f7:62:44: 22:67:ad:f5:30:39:e0:75:f7:5e:9a:5d:8f:8a:39:ea:ce:bc: 5c:34:d8:d1:b0:60:57:d8:cf:b1:12:f5:5e:12:bf:96:b1:bd: 01:fe:eb:5a:2f:88:ea:b5:df:d7:e4:dc:cd:37:35:e7:6c:3b: f5:f8:29:86:47:39:2b:00:88:7f:0c:c2:4f:bf:34:db:d3:aa: 2e:9e:5c:65:f0:4d:78:b1:0a:a0:86:7e:77:8a:d1:f4:fd:5c: 09:d6:e0:4a:e1:ad:a9:af:be:4f:9e:46:2b:04:db:b1:24:20: b9:86:75:db -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt5fmm8jSf1y/u4i8mYLsE+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ODVjZGJkZGZkN2QxMzE2ODQ1YmViNGY3Mzk4ZjNjZTY0 ZmFjZDAwHhcNMjYwMTAxMTIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDhlNTBmZTkxY2RhNjk2YmQyMzI4MGI2ZWNkMzNkMjBjNmNlMmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwff68NDZLVyyVRboCrKgIPrii/Cd 3n2pioEPoQAdeYioZSEjWDdj2635JfbtguI7m51Kjr7eaxrFIMrFYTpPqwbDf5cU 2xWnxOit/akcfGXBabVkEoSsPIrWK0dqKULlgsP5Y6KvOA5QdzVdVWheC3XIAeEJ KLpLFoE47gNpnzXzi7lD2pizGdkFrla46A7UgjOI8ZNYGEF1FtBKtdq6RY6BjA4B pkQBzpeIYvXDnrz0QS9JnZgsem8Bt5W9YLrKGC/kd+JOdZfLC4vO+e8RY7EKmaf+ eF9DB7P7i92VIfOWfos8P1wbEIk1MH+Wg1SfTn8XbdIyezFSEYrTUMLISwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLSOUP6RzaaWvSMoC27NM9IMbOLUMB8GA1UdIwQY MBaAFKiFzb3f19ExaEW+tPc5jzzmT6zQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUlYTnZkX1gwVEZvUmI2MDl6bVBQT1pQck5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9iM2E1NzYtNTBjYi00ODY2LWJlODEt ZjQ4Mjc4MDBiMGM4LzEvdEk1UV9wSE5wcGE5SXlnTGJzMHowZ3hzNHRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9iM2E1NzYtNTBjYi00ODY2LWJlODEtZjQ4Mjc4MDBiMGM4 LzEvcUlYTnZkX1gwVEZvUmI2MDl6bVBQT1pQck5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBARRWFAD BAFRWFgDBAFRWF4wDAMEArnIjAMEALnIjjANBgkqhkiG9w0BAQsFAAOCAQEA08a+ pz1ShJu6fIFyBRYQtQbMXo6YF8dOdU//j+W7Rz5JY8+3QdOYKqrHjdlRCaUZlu0K dreUdwV5KpmJgKgVC1VszuklDVppCkwY4Jsh+fiPe751lXBFBfIBkxsy21WwnrFY +DOqA6rpqU5tXutYfTe8+LXv3fhJbvBegvCSN4QTaMVkoUxh48m9/Lcp92JEImet 9TA54HX3Xppdj4o56s68XDTY0bBgV9jPsRL1XhK/lrG9Af7rWi+I6rXf1+TczTc1 52w79fgphkc5KwCIfwzCT78029OqLp5cZfBNeLEKoIZ+d4rR9P1cCdbgSuGtqa++ T55GKwTbsSQguYZ12w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:07 2026 by rpki-client