This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/SsijrrcZeuQhP_HaD4XVk_EWwn4.roa File: SsijrrcZeuQhP_HaD4XVk_EWwn4.roa (raw, json) Hash identifier: zKAAiwYgXYcXj2UxjxtGejsCb+VWZb5M4yKkcDyDWw4= Subject key identifier: 4A:C8:A3:AE:B7:19:7A:E4:21:3F:F1:DA:0F:85:D5:93:F1:16:C2:7E Certificate issuer: /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4 Certificate serial: 019B797E8650E9DE1F09B0958E296E6CFA01 Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/SsijrrcZeuQhP_HaD4XVk_EWwn4.roa Signing time: Thu 01 Jan 2026 12:18:13 +0000 ROA not before: Thu 01 Jan 2026 12:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16154 IP address blocks: 80.95.29.0/24 maxlen: 24 80.95.30.0/24 maxlen: 24 88.213.195.0/24 maxlen: 24 88.213.204.0/22 maxlen: 24 217.79.64.0/22 maxlen: 24 217.79.72.0/24 maxlen: 24 217.79.77.0/24 maxlen: 24 217.79.78.0/23 maxlen: 24 217.79.83.0/24 maxlen: 24 217.79.86.0/23 maxlen: 23 217.79.86.0/24 maxlen: 24 217.79.87.0/24 maxlen: 24 217.79.88.0/24 maxlen: 24 217.79.90.0/24 maxlen: 24 217.79.92.0/24 maxlen: 24 217.79.95.0/24 maxlen: 24 2a02:7900::/32 maxlen: 48 2a02:7900:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:86:50:e9:de:1f:09:b0:95:8e:29:6e:6c:fa:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4 Validity Not Before: Jan 1 12:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ac8a3aeb7197ae4213ff1da0f85d593f116c27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:54:35:06:0e:70:49:4c:1f:7e:76:75:f3:32: ae:4a:77:e4:9c:be:ad:f6:58:f6:1f:17:54:98:fb: 35:52:ae:a1:78:7f:42:8b:bd:79:69:7c:88:03:f7: e2:d3:51:0c:b2:d1:09:b0:d7:2a:b7:59:2d:44:61: d5:b5:dc:04:15:b3:3d:38:4e:4a:ed:e5:88:e8:e0: 17:a2:e9:77:64:5c:3f:70:48:36:f0:0e:1f:95:1a: 39:3e:db:9f:43:7e:74:4e:92:04:8a:7e:ed:12:6d: c9:01:40:a1:bf:60:38:ce:54:2a:b3:ef:8a:53:58: de:3a:5e:79:c7:74:5b:e6:04:38:13:90:89:3c:e8: b9:68:cd:2f:05:6a:eb:42:bb:e7:aa:a0:a0:35:12: 7d:2a:dd:32:6c:35:ae:19:a2:6c:94:fa:a7:52:be: 29:21:e9:ce:ca:e4:6a:e7:c3:a0:cf:07:0d:14:84: e1:3c:48:01:10:ae:d9:a6:01:cc:d5:c2:e7:a5:bc: 0c:0f:f0:0e:18:73:36:4a:84:b7:4e:2c:90:72:b2: ea:78:03:6d:f7:f7:9d:c9:b8:f5:4d:7e:ac:88:08: a9:9c:72:30:a2:cd:ad:2e:48:cb:10:a7:df:b0:bc: cb:82:0d:ab:c6:41:49:34:1f:6f:20:36:be:02:6e: 6e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C8:A3:AE:B7:19:7A:E4:21:3F:F1:DA:0F:85:D5:93:F1:16:C2:7E X509v3 Authority Key Identifier: keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/SsijrrcZeuQhP_HaD4XVk_EWwn4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.95.29.0-80.95.30.255 88.213.195.0/24 88.213.204.0/22 217.79.64.0/22 217.79.72.0/24 217.79.77.0-217.79.79.255 217.79.83.0/24 217.79.86.0-217.79.88.255 217.79.90.0/24 217.79.92.0/24 217.79.95.0/24 IPv6: 2a02:7900::/32 Signature Algorithm: sha256WithRSAEncryption 4d:fd:c3:7d:77:31:43:40:47:e7:fa:90:21:07:e7:08:05:ab: 12:a5:6a:33:d1:bb:e2:a7:f3:86:be:0f:de:7f:40:65:44:7a: 4b:79:3a:40:66:25:29:43:14:4b:26:8a:7c:5b:9b:4a:c7:f4: b3:3c:59:98:7e:77:eb:f2:77:54:45:99:e7:65:bc:2c:a1:bc: e6:84:c7:8f:c1:46:b5:6b:77:28:0e:ab:c0:10:e7:2e:ad:69: 07:ad:09:03:17:d6:06:e8:e7:e1:7b:02:8f:48:61:56:bf:84: dc:03:c9:6c:1c:10:46:b3:82:7e:c6:d8:47:95:86:f7:f0:02: f6:6b:77:25:85:db:16:f6:f0:50:ac:bf:ef:e7:76:07:20:18: d1:f0:af:eb:bc:38:cd:6a:c6:05:91:d1:86:4d:da:66:00:3e: cf:b3:42:52:d1:69:7d:6f:ce:56:c2:c7:74:1d:16:4b:40:9b: c7:39:a3:ca:f4:d4:a7:f3:f2:28:ba:18:99:b3:88:08:32:7a: 56:c4:a9:a8:2e:5d:ff:f7:20:36:c9:d0:49:e1:c7:0f:d8:1c: 45:d7:e5:89:48:4f:09:c1:e1:c6:bb:af:a7:95:ca:c7:f0:32: 35:da:48:00:39:0e:ba:e3:ef:e3:f4:e7:89:0d:9b:1f:b1:17: 3f:5f:5f:20 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZt5foZQ6d4fCbCVjilubPoBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MjQxZGQ4M2Q4YWMwODBiNjY1MDRiZjkzNzQ1OWZmY2Vj NGNjYzQwHhcNMjYwMTAxMTIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWM4YTNhZWI3MTk3YWU0MjEzZmYxZGEwZjg1ZDU5M2YxMTZjMjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lQ1Bg5wSUwffnZ18zKuSnfknL6t 9lj2HxdUmPs1Uq6heH9Ci715aXyIA/fi01EMstEJsNcqt1ktRGHVtdwEFbM9OE5K 7eWI6OAXoul3ZFw/cEg28A4flRo5PtufQ350TpIEin7tEm3JAUChv2A4zlQqs++K U1jeOl55x3Rb5gQ4E5CJPOi5aM0vBWrrQrvnqqCgNRJ9Kt0ybDWuGaJslPqnUr4p IenOyuRq58OgzwcNFIThPEgBEK7ZpgHM1cLnpbwMD/AOGHM2SoS3TiyQcrLqeANt 9/edybj1TX6siAipnHIwos2tLkjLEKffsLzLgg2rxkFJNB9vIDa+Am5uiQIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFErIo663GXrkIT/x2g+F1ZPxFsJ+MB8GA1UdIwQY MBaAFBYkHdg9isCAtmUEv5N0Wf/OxMzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmlRZDJEMkt3SUMyWlFTX2szUlpfODdFek1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iOTAwNjAtNWFhYS00M2VhLWJjZWIt NWU3NDlmNDM0MWE0LzEvU3NpanJyY1pldVFoUF9IYUQ0WFZrX0VXd240LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9iOTAwNjAtNWFhYS00M2VhLWJjZWItNWU3NDlmNDM0MWE0 LzEvRmlRZDJEMkt3SUMyWlFTX2szUlpfODdFek1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwYAQCAAEwWjAMAwQAUF8d AwQAUF8eAwQAWNXDAwQCWNXMAwQC2U9AAwQA2U9IMAwDBADZT00DBATZT0ADBADZ T1MwDAMEAdlPVgMEANlPWAMEANlPWgMEANlPXAMEANlPXzANBAIAAjAHAwUAKgJ5 ADANBgkqhkiG9w0BAQsFAAOCAQEATf3DfXcxQ0BH5/qQIQfnCAWrEqVqM9G74qfz hr4P3n9AZUR6S3k6QGYlKUMUSyaKfFubSsf0szxZmH536/J3VEWZ52W8LKG85oTH j8FGtWt3KA6rwBDnLq1pB60JAxfWBujn4XsCj0hhVr+E3APJbBwQRrOCfsbYR5WG 9/AC9mt3JYXbFvbwUKy/7+d2ByAY0fCv67w4zWrGBZHRhk3aZgA+z7NCUtFpfW/O VsLHdB0WS0CbxzmjyvTUp/PyKLoYmbOICDJ6VsSpqC5d//cgNsnQSeHHD9gcRdfl iUhPCcHhxruvp5XKx/AyNdpIADkOuuPv4/TniQ2bH7EXP19fIA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:32 2026 by rpki-client