This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/qTpf6S-Df4WnD3GxtEZFBJ7i82c.roa File: qTpf6S-Df4WnD3GxtEZFBJ7i82c.roa (raw, json) Hash identifier: OuzXwAbmKAynIDu/QFRmd7J+ekh/mEkHcmMZ5BTrW/E= Subject key identifier: A9:3A:5F:E9:2F:83:7F:85:A7:0F:71:B1:B4:46:45:04:9E:E2:F3:67 Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714 Certificate serial: 019B7EA47AD0A961CD2C08BC57DF097386E5 Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/qTpf6S-Df4WnD3GxtEZFBJ7i82c.roa Signing time: Fri 02 Jan 2026 12:17:47 +0000 ROA not before: Fri 02 Jan 2026 12:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205673 IP address blocks: 176.39.96.0/20 maxlen: 21 176.39.96.0/22 maxlen: 23 185.210.84.0/22 maxlen: 23 185.235.132.0/22 maxlen: 23 185.244.168.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:7a:d0:a9:61:cd:2c:08:bc:57:df:09:73:86:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714 Validity Not Before: Jan 2 12:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a93a5fe92f837f85a70f71b1b44645049ee2f367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d8:f1:8e:4c:ed:cd:c6:79:27:75:18:37:70: 30:a9:4e:ca:51:4c:a3:cf:f7:3e:de:97:e1:00:52: 33:cc:e1:95:48:0e:79:c0:ce:0d:e4:b6:f9:54:98: a1:91:6e:81:dc:b6:1d:ee:2b:89:ee:fc:b1:8e:fb: ac:15:31:db:5d:41:0f:5c:9a:ad:a0:34:13:f4:0b: 0c:97:41:51:73:9e:62:f7:ef:c6:e4:bc:3c:3e:76: 49:6d:97:13:01:cd:43:67:bb:73:84:e4:18:7d:cd: 40:d2:c1:53:57:39:8c:ac:96:1f:d6:d5:e9:f3:ed: 1d:63:a3:2b:47:8c:1c:e1:88:bc:de:bf:14:2f:85: f3:a4:b4:58:b8:97:cd:42:db:83:48:00:eb:b8:18: 57:6a:56:aa:bc:b5:b8:39:96:99:b4:6e:bb:09:53: 16:56:a5:16:bd:8b:b5:92:8e:f3:9c:3f:3e:14:a9: be:ab:e0:f8:05:63:25:da:b4:29:15:97:de:94:94: 9e:8a:65:be:33:5e:aa:66:b3:d5:6d:b4:ba:bd:3b: b7:7c:d2:99:49:a6:2f:e4:2f:ba:b7:84:c7:e5:1f: 2f:ad:0e:8d:b5:93:af:3c:01:95:39:38:10:72:81: 2f:90:8a:7a:70:37:2a:e2:09:45:02:c6:8c:0b:74: 2e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3A:5F:E9:2F:83:7F:85:A7:0F:71:B1:B4:46:45:04:9E:E2:F3:67 X509v3 Authority Key Identifier: keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/qTpf6S-Df4WnD3GxtEZFBJ7i82c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.39.96.0/20 185.210.84.0/22 185.235.132.0/22 185.244.168.0/22 Signature Algorithm: sha256WithRSAEncryption 75:77:b2:11:3c:57:ee:4a:02:01:8a:65:21:fc:d5:c3:00:e1: 66:85:21:6a:df:3f:75:f7:ac:47:e2:87:69:56:92:56:2a:7a: 0c:b0:f8:bb:8e:c2:59:e5:23:23:0e:a7:68:ff:1e:ef:d5:fa: b0:77:3b:a6:d2:03:97:ed:67:e8:24:3a:75:6b:dd:33:35:be: 18:b9:b5:88:49:1d:3f:9e:fb:e9:2d:d6:f8:13:73:a1:88:91: 7e:8a:70:bc:ae:63:2c:03:86:9b:ad:e2:39:91:2f:b8:b0:02: be:b9:c3:fe:7a:ab:8d:68:b8:80:e8:1f:83:8a:89:e8:7d:6e: 1f:6f:06:a5:2b:53:f2:b0:2f:d0:03:14:30:94:71:d4:80:1c: 52:5c:76:f4:9d:03:ca:2b:8b:74:b6:9e:85:41:72:78:41:36: 05:30:63:4b:f6:66:68:57:30:dc:d6:5d:ab:1d:35:cf:aa:26: 16:1c:00:61:db:79:34:86:a9:3e:52:57:38:f1:6b:7c:e6:b5: 73:07:42:fe:92:7f:ba:0e:66:91:02:24:3f:81:fd:53:47:20: 1d:b3:cc:56:67:2b:05:bc:cd:7f:02:be:c0:95:12:2d:ea:8a: 2c:01:33:90:f8:3f:78:46:28:18:f9:5e:48:53:4d:fc:34:cc: f1:37:7c:1e -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+pHrQqWHNLAi8V98Jc4blMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NDEyODE0NmI3YmVjOGJkMTE4NWJiZTBjM2I5MzQwYWFm NWI3MTQwHhcNMjYwMTAyMTIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTNhNWZlOTJmODM3Zjg1YTcwZjcxYjFiNDQ2NDUwNDllZTJmMzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdjxjkztzcZ5J3UYN3AwqU7KUUyj z/c+3pfhAFIzzOGVSA55wM4N5Lb5VJihkW6B3LYd7iuJ7vyxjvusFTHbXUEPXJqt oDQT9AsMl0FRc55i9+/G5Lw8PnZJbZcTAc1DZ7tzhOQYfc1A0sFTVzmMrJYf1tXp 8+0dY6MrR4wc4Yi83r8UL4XzpLRYuJfNQtuDSADruBhXalaqvLW4OZaZtG67CVMW VqUWvYu1ko7znD8+FKm+q+D4BWMl2rQpFZfelJSeimW+M16qZrPVbbS6vTu3fNKZ SaYv5C+6t4TH5R8vrQ6NtZOvPAGVOTgQcoEvkIp6cDcq4glFAsaMC3QuMwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFKk6X+kvg3+Fpw9xsbRGRQSe4vNnMB8GA1UdIwQY MBaAFPhBKBRre+yL0Rhbvgw7k0Cq9bcUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1FRW9GR3Q3N0l2UkdGdS1ERHVUUUtyMXR4US5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQx LTEzODM5NjQwYTYwNC8xL3FUcGY2Uy1EZjRXbkQzR3h0RVpGQko3aTgyYy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQxLTEzODM5NjQwYTYw NC8xLzEtRUVvRkd0NzdJdlJHRnUtRER1VFFLcjF0eFEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBASwJ2AD BAK50lQDBAK564QDBAK59KgwDQYJKoZIhvcNAQELBQADggEBAHV3shE8V+5KAgGK ZSH81cMA4WaFIWrfP3X3rEfih2lWklYqegyw+LuOwlnlIyMOp2j/Hu/V+rB3O6bS A5ftZ+gkOnVr3TM1vhi5tYhJHT+e++kt1vgTc6GIkX6KcLyuYywDhput4jmRL7iw Ar65w/56q41ouIDoH4OKieh9bh9vBqUrU/KwL9ADFDCUcdSAHFJcdvSdA8ori3S2 noVBcnhBNgUwY0v2ZmhXMNzWXasdNc+qJhYcAGHbeTSGqT5SVzjxa3zmtXMHQv6S f7oOZpECJD+B/VNHIB2zzFZnKwW8zX8CvsCVEi3qiiwBM5D4P3hGKBj5XkhTTfw0 zPE3fB4= -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:25 2026 by rpki-client