This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/WqEnKFzBfeJzGRg3q0xQA818br8.roa File: WqEnKFzBfeJzGRg3q0xQA818br8.roa (raw, json) Hash identifier: p62OMTqeflTKBBGHK0BkC6wtW0ZeWTlpmF+DHVQ50XM= Subject key identifier: 5A:A1:27:28:5C:C1:7D:E2:73:19:18:37:AB:4C:50:03:CD:7C:6E:BF Certificate issuer: /CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341 Certificate serial: 019B78A2C1078DA4F6DCB1344BCE7FF48529 Authority key identifier: D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/WqEnKFzBfeJzGRg3q0xQA818br8.roa Signing time: Thu 01 Jan 2026 08:18:10 +0000 ROA not before: Thu 01 Jan 2026 08:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41346 IP address blocks: 195.114.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c1:07:8d:a4:f6:dc:b1:34:4b:ce:7f:f4:85:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341 Validity Not Before: Jan 1 08:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5aa127285cc17de273191837ab4c5003cd7c6ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9d:bd:3f:cd:bc:46:61:1c:e1:66:75:fb:cf: 74:5f:99:70:53:a6:b8:27:60:51:57:c6:72:c1:ab: c1:7e:93:24:6a:47:0c:c8:ff:1e:89:4d:c6:89:eb: f6:d8:bc:96:88:c3:45:7e:85:1d:d3:f0:17:73:7a: f1:a8:23:a5:58:15:d9:ad:9e:69:50:3a:87:63:d3: a5:f6:85:b8:89:4e:34:2d:ae:a1:56:1f:54:0b:a6: 7e:15:21:70:c4:a9:e3:a9:01:c3:ae:55:08:77:8f: ef:51:a5:9a:35:d1:ab:2c:07:f0:91:10:b9:0c:3d: 67:9f:66:a4:f4:65:b3:0a:b5:b3:4b:04:e1:a5:be: 10:39:8f:c2:52:d5:53:7b:71:ef:d9:4f:d7:c8:5d: 4f:1b:59:c7:4f:e1:5f:80:7c:c4:b1:3e:97:6d:20: 33:5f:ea:a5:08:06:fe:a8:6e:c2:ef:be:ac:ac:98: 68:e5:c3:54:f1:58:43:b1:63:ce:20:ca:38:7c:85: 1f:29:0c:a9:25:61:d3:4f:5c:64:89:90:a8:16:81: a8:90:59:9b:b4:80:bd:70:ae:b0:7d:85:76:d4:bc: 6d:67:68:a0:d9:ff:b4:66:51:da:99:86:eb:3a:2d: 43:de:9b:36:98:c2:a9:81:e7:9d:eb:01:68:1c:91: f0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A1:27:28:5C:C1:7D:E2:73:19:18:37:AB:4C:50:03:CD:7C:6E:BF X509v3 Authority Key Identifier: keyid:D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/WqEnKFzBfeJzGRg3q0xQA818br8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.114.28.0/23 Signature Algorithm: sha256WithRSAEncryption 35:50:10:ef:5d:8b:bc:34:df:09:89:a5:38:a9:39:2d:90:dd: 2f:1a:14:28:6b:35:29:4a:38:f1:2e:dd:8f:9a:5c:c7:29:05: 03:6d:f5:f7:c0:f6:bb:5d:2e:fd:52:35:b4:29:2e:c8:f9:9c: d3:c0:20:37:f4:90:d5:05:de:49:75:7d:5e:7a:e5:10:c9:2f: 1a:46:c2:4f:03:59:28:a2:7e:7c:b4:c4:1c:ba:ee:ec:9b:90: 84:57:97:4d:18:ad:d6:7a:c0:28:94:1c:f1:53:68:46:09:96: b1:31:75:45:02:e9:55:45:ee:e9:f6:a0:11:6a:5f:22:d9:d3: 99:8f:93:dd:14:ff:ef:8c:6d:27:c5:69:d4:84:8b:e6:7a:ea: 86:09:f6:34:a9:fd:aa:60:1e:59:6e:fa:30:d3:26:bb:97:93: 65:3b:6f:41:28:f7:c3:22:c6:7b:40:3d:42:b1:67:2a:89:57: ad:b7:ba:a3:48:24:6d:b9:b9:5e:16:ec:b7:6a:1d:31:d6:51: 3d:ea:13:ee:f6:4f:83:49:96:ff:1b:8b:dd:02:6e:95:ac:7f: 33:a2:ba:3f:d1:89:c7:4c:fb:b3:46:d8:1f:29:60:6b:a7:a0: 40:4d:f3:f9:df:fd:b8:ec:b9:5a:89:ad:57:84:64:a6:d6:94: 40:5b:90:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4osEHjaT23LE0S85/9IUpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YzdjNGVhYjVjMDc5NDhjYmY0NGE4YTAxYzZhODI3ZmRh ZTkzNDEwHhcNMjYwMTAxMDgxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWExMjcyODVjYzE3ZGUyNzMxOTE4MzdhYjRjNTAwM2NkN2M2ZWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ29P828RmEc4WZ1+890X5lwU6a4 J2BRV8ZywavBfpMkakcMyP8eiU3Giev22LyWiMNFfoUd0/AXc3rxqCOlWBXZrZ5p UDqHY9Ol9oW4iU40La6hVh9UC6Z+FSFwxKnjqQHDrlUId4/vUaWaNdGrLAfwkRC5 DD1nn2ak9GWzCrWzSwThpb4QOY/CUtVTe3Hv2U/XyF1PG1nHT+FfgHzEsT6XbSAz X+qlCAb+qG7C776srJho5cNU8VhDsWPOIMo4fIUfKQypJWHTT1xkiZCoFoGokFmb tIC9cK6wfYV21LxtZ2ig2f+0ZlHamYbrOi1D3ps2mMKpgeed6wFoHJHwSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFqhJyhcwX3icxkYN6tMUAPNfG6/MB8GA1UdIwQY MBaAFNTHxOq1wHlIy/RKigHGqCf9rpNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU1mRTZyWEFlVWpMOUVxS0FjYW9KXzJ1azBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81ODYzZWEtNDE5YS00YzI5LThlM2Ut OGQ1MjVhNTYzZTYxLzEvV3FFbktGekJmZUp6R1JnM3EweFFBODE4YnI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81ODYzZWEtNDE5YS00YzI5LThlM2UtOGQ1MjVhNTYzZTYx LzEvMU1mRTZyWEFlVWpMOUVxS0FjYW9KXzJ1azBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw3IcMA0G CSqGSIb3DQEBCwUAA4IBAQA1UBDvXYu8NN8JiaU4qTktkN0vGhQoazUpSjjxLt2P mlzHKQUDbfX3wPa7XS79UjW0KS7I+ZzTwCA39JDVBd5JdX1eeuUQyS8aRsJPA1ko on58tMQcuu7sm5CEV5dNGK3WesAolBzxU2hGCZaxMXVFAulVRe7p9qARal8i2dOZ j5PdFP/vjG0nxWnUhIvmeuqGCfY0qf2qYB5Zbvow0ya7l5NlO29BKPfDIsZ7QD1C sWcqiVett7qjSCRtubleFuy3ah0x1lE96hPu9k+DSZb/G4vdAm6VrH8zoro/0YnH TPuzRtgfKWBrp6BATfP53/247Llaia1XhGSm1pRAW5Dk -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:46 2026 by rpki-client