This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/APCk2laCGFfMuTiTLJTS7PgO0o4.roa File: APCk2laCGFfMuTiTLJTS7PgO0o4.roa (raw, json) Hash identifier: qTLADkN10C14iQ5+IkYWOVMCMzOa8E+Qo2uagMSPpIY= Subject key identifier: 00:F0:A4:DA:56:82:18:57:CC:B9:38:93:2C:94:D2:EC:F8:0E:D2:8E Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019C4C6C51E4A22E8B8C6299B0886AA74DA8 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/APCk2laCGFfMuTiTLJTS7PgO0o4.roa Signing time: Wed 11 Feb 2026 11:18:12 +0000 ROA not before: Wed 11 Feb 2026 11:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50670 IP address blocks: 62.72.161.0/24 maxlen: 24 62.72.162.0/24 maxlen: 24 62.72.170.0/24 maxlen: 24 62.72.171.0/24 maxlen: 24 62.72.174.0/24 maxlen: 24 81.21.8.0/22 maxlen: 22 81.21.8.0/24 maxlen: 24 81.21.9.0/24 maxlen: 24 81.21.10.0/24 maxlen: 24 81.21.11.0/24 maxlen: 24 81.21.12.0/24 maxlen: 24 81.21.13.0/24 maxlen: 24 81.21.14.0/24 maxlen: 24 81.21.15.0/24 maxlen: 24 109.237.192.0/20 maxlen: 24 109.237.192.0/24 maxlen: 24 109.237.193.0/24 maxlen: 24 109.237.194.0/24 maxlen: 24 109.237.195.0/24 maxlen: 24 109.237.196.0/24 maxlen: 24 109.237.197.0/24 maxlen: 24 109.237.198.0/24 maxlen: 24 109.237.199.0/24 maxlen: 24 109.237.200.0/24 maxlen: 24 109.237.201.0/24 maxlen: 24 109.237.202.0/24 maxlen: 24 109.237.203.0/24 maxlen: 24 109.237.204.0/24 maxlen: 24 109.237.205.0/24 maxlen: 24 109.237.206.0/24 maxlen: 24 109.237.207.0/24 maxlen: 24 176.241.64.0/21 maxlen: 24 176.241.64.0/24 maxlen: 24 176.241.65.0/24 maxlen: 24 176.241.66.0/24 maxlen: 24 176.241.67.0/24 maxlen: 24 176.241.68.0/24 maxlen: 24 176.241.69.0/24 maxlen: 24 176.241.70.0/24 maxlen: 24 176.241.71.0/24 maxlen: 24 178.20.184.0/21 maxlen: 24 178.20.184.0/24 maxlen: 24 178.20.185.0/24 maxlen: 24 178.20.186.0/24 maxlen: 24 178.20.187.0/24 maxlen: 24 178.20.188.0/24 maxlen: 24 178.20.189.0/24 maxlen: 24 178.20.190.0/24 maxlen: 24 178.20.191.0/24 maxlen: 24 185.51.212.0/22 maxlen: 22 185.51.212.0/24 maxlen: 24 185.51.213.0/24 maxlen: 24 185.51.214.0/24 maxlen: 24 185.51.215.0/24 maxlen: 24 185.193.176.0/22 maxlen: 22 185.193.176.0/24 maxlen: 24 185.193.177.0/24 maxlen: 24 185.193.178.0/24 maxlen: 24 185.193.179.0/24 maxlen: 24 2a01:1d0::/29 maxlen: 29 2a01:1d0::/32 maxlen: 32 2a0a:2740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Feb 2026 09:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:4c:6c:51:e4:a2:2e:8b:8c:62:99:b0:88:6a:a7:4d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Feb 11 11:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00f0a4da56821857ccb938932c94d2ecf80ed28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ef:41:8b:3f:34:ec:b9:3a:83:ef:9e:df:e9: 75:1c:d8:f8:ce:d7:4c:71:bc:74:41:e8:c6:5f:1c: b3:2c:45:22:92:57:ae:2e:c9:6b:0a:e6:d5:e1:51: db:e1:ad:85:6d:ac:94:c5:98:63:e4:93:1e:45:8d: 54:85:59:5e:90:ec:a9:97:b2:ab:b6:47:15:4d:a8: bd:d5:54:c2:49:aa:05:c3:97:af:87:ce:fb:79:7d: a2:64:44:78:7c:9f:22:af:ba:03:d6:d7:d0:45:d9: 8b:be:ff:0b:ed:a3:2e:7e:9b:9a:83:2e:cb:73:55: 7d:a2:4d:e2:b5:77:6e:9b:6d:d7:40:c8:c5:e0:42: 4a:9c:98:8e:9a:bc:34:75:9f:b6:82:8f:af:ad:94: cf:67:ba:70:d9:bc:96:9f:05:e6:82:bd:83:77:eb: f9:e8:f1:7e:a3:47:36:3d:0e:5a:04:f8:a8:32:2c: 10:e0:54:26:cb:5b:4d:c7:37:95:9a:8b:2d:bf:cf: 79:e4:67:ad:80:b6:c9:de:26:8e:4f:4d:a7:ac:b8: 6c:a2:a9:9d:66:81:5a:92:a3:c3:c9:08:e8:b0:c1: 5d:da:f5:ae:66:b1:2f:b1:49:df:7f:ba:6f:a4:6f: 7a:2c:84:39:b1:52:5a:85:dd:83:d2:e6:5d:c7:aa: df:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F0:A4:DA:56:82:18:57:CC:B9:38:93:2C:94:D2:EC:F8:0E:D2:8E X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/APCk2laCGFfMuTiTLJTS7PgO0o4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.72.161.0-62.72.162.255 62.72.170.0/23 62.72.174.0/24 81.21.8.0/21 109.237.192.0/20 176.241.64.0/21 178.20.184.0/21 185.51.212.0/22 185.193.176.0/22 IPv6: 2a01:1d0::/29 2a0a:2740::/29 Signature Algorithm: sha256WithRSAEncryption 72:cc:87:42:df:62:81:90:34:3e:a8:94:d2:fe:5e:b3:56:39: d7:d1:ad:b3:d7:22:4e:b3:1f:4e:b5:e5:f6:58:8f:c5:67:db: c8:cd:8d:05:61:e6:e1:3c:df:1c:83:15:a6:d0:a4:91:6e:c1: e6:44:10:09:19:5b:94:ea:0f:eb:98:2a:05:01:00:8f:d4:f5: a0:da:80:5f:7e:39:70:b2:82:87:ef:49:9e:f2:a9:b4:2c:ff: bb:78:51:75:80:8c:71:93:67:d1:bc:ce:11:eb:03:84:e4:27: c8:70:d2:fa:01:c4:1b:35:f6:ad:d9:ec:f9:14:95:c3:98:75: 28:a2:52:7e:ae:4b:4e:80:4e:af:30:f0:44:99:cc:b7:52:af: a3:82:af:ad:1c:87:c4:d5:47:8a:75:08:f2:58:a4:eb:9f:6a: f3:e1:8a:e9:3e:30:f7:05:d8:4f:6f:c4:5f:1b:7b:98:79:09: ed:f3:78:de:0a:f7:7b:59:bc:15:1e:73:7e:f7:61:e3:66:df: 9d:96:e8:43:98:e8:e8:1f:80:bf:26:32:4c:1a:d8:6c:c8:43: 45:a8:be:44:3a:1e:49:aa:bf:57:32:7f:2e:2c:76:bc:dd:18: b9:01:1d:84:85:0c:9c:73:23:aa:25:7d:a2:ef:b7:16:a8:dc: 90:00:f8:7e -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZxMbFHkoi6LjGKZsIhqp02oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMjExMTExODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGYwYTRkYTU2ODIxODU3Y2NiOTM4OTMyYzk0ZDJlY2Y4MGVkMjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O9Biz807Lk6g++e3+l1HNj4ztdM cbx0QejGXxyzLEUikleuLslrCubV4VHb4a2FbayUxZhj5JMeRY1UhVlekOypl7Kr tkcVTai91VTCSaoFw5evh877eX2iZER4fJ8ir7oD1tfQRdmLvv8L7aMufpuagy7L c1V9ok3itXdum23XQMjF4EJKnJiOmrw0dZ+2go+vrZTPZ7pw2byWnwXmgr2Dd+v5 6PF+o0c2PQ5aBPioMiwQ4FQmy1tNxzeVmostv8955GetgLbJ3iaOT02nrLhsoqmd ZoFakqPDyQjosMFd2vWuZrEvsUnff7pvpG96LIQ5sVJahd2D0uZdx6rf9QIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFADwpNpWghhXzLk4kyyU0uz4DtKOMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvQVBDazJsYUNHRmZNdVRpVExKVFM3UGdPMG80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBEBAIAATA+MAwDBAA+SKED BAA+SKIDBAE+SKoDBAA+SK4DBANRFQgDBARt7cADBAOw8UADBAOyFLgDBAK5M9QD BAK5wbAwFAQCAAIwDgMFAyoBAdADBQMqCidAMA0GCSqGSIb3DQEBCwUAA4IBAQBy zIdC32KBkDQ+qJTS/l6zVjnX0a2z1yJOsx9OteX2WI/FZ9vIzY0FYebhPN8cgxWm 0KSRbsHmRBAJGVuU6g/rmCoFAQCP1PWg2oBffjlwsoKH70me8qm0LP+7eFF1gIxx k2fRvM4R6wOE5CfIcNL6AcQbNfat2ez5FJXDmHUoolJ+rktOgE6vMPBEmcy3Uq+j gq+tHIfE1UeKdQjyWKTrn2rz4YrpPjD3BdhPb8RfG3uYeQnt83jeCvd7WbwVHnN+ 92HjZt+dluhDmOjoH4C/JjJMGthsyENFqL5EOh5Jqr9XMn8uLHa83Ri5AR2EhQyc cyOqJX2i77cWqNyQAPh+ -----END CERTIFICATE-----Generated at Thu Feb 12 15:35:29 2026 by rpki-client