This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/rf6n8rR_IGjgaV0dY9RAe_eoXuQ.roa File: rf6n8rR_IGjgaV0dY9RAe_eoXuQ.roa (raw, json) Hash identifier: h34ncx2/ZVU6/2WFeoHZWwK1+eEDb80qBYHdb3kT8TQ= Subject key identifier: AD:FE:A7:F2:B4:7F:20:68:E0:69:5D:1D:63:D4:40:7B:F7:A8:5E:E4 Certificate issuer: /CN=4044fd1980ba01788a353a26fef8954ed7c11f96 Certificate serial: 019B7E378D00D11809E7DE9ED1C3EDE3ED03 Authority key identifier: 40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/rf6n8rR_IGjgaV0dY9RAe_eoXuQ.roa Signing time: Fri 02 Jan 2026 10:18:48 +0000 ROA not before: Fri 02 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212952 IP address blocks: 194.233.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:8d:00:d1:18:09:e7:de:9e:d1:c3:ed:e3:ed:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4044fd1980ba01788a353a26fef8954ed7c11f96 Validity Not Before: Jan 2 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adfea7f2b47f2068e0695d1d63d4407bf7a85ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:67:6b:aa:04:da:4f:3a:22:7f:e3:66:b2:a3: aa:c6:af:e6:52:bf:7f:7b:ec:e3:30:d5:94:8b:c4: 96:eb:e2:a1:e9:3b:e8:45:11:7a:ca:79:37:ae:71: c5:a5:4a:fe:76:4f:c4:a5:40:0e:72:b2:67:19:7e: cc:38:ad:c5:ae:ef:20:9a:b7:a5:d7:64:21:3d:fa: 9a:e2:23:3d:0e:ab:85:0b:ab:ef:51:7a:7b:7a:61: 51:cb:f5:aa:7f:82:7d:17:58:7d:ff:a3:79:ee:f9: fb:cd:96:62:96:40:ef:ed:89:96:41:00:57:09:19: 91:77:19:be:ca:b1:eb:f3:70:ec:ed:4f:1a:b7:62: 40:7c:5e:20:5b:96:ae:49:1e:cc:e8:5e:bc:03:b5: 4b:9e:71:41:c5:0a:48:cd:7c:f0:e1:4d:b4:10:3e: 1f:93:64:24:bb:2a:02:32:71:60:2e:c1:ea:cb:0d: 99:c2:a4:c2:1d:8f:a5:7f:d5:5f:01:1d:12:8e:f2: 9f:05:30:7b:b3:31:5d:85:60:3d:7c:b6:63:26:45: ab:73:26:cc:29:11:e0:ad:80:41:1b:d6:2e:0d:1e: b8:1b:48:1f:7c:d3:42:49:35:de:8a:24:f6:72:8d: cc:d0:a8:0b:3a:13:07:bf:d6:21:8a:cd:99:70:4e: 44:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FE:A7:F2:B4:7F:20:68:E0:69:5D:1D:63:D4:40:7B:F7:A8:5E:E4 X509v3 Authority Key Identifier: keyid:40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/rf6n8rR_IGjgaV0dY9RAe_eoXuQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.233.104.0/22 Signature Algorithm: sha256WithRSAEncryption 96:32:53:49:34:f2:31:3e:1f:2a:ab:86:bb:44:a5:a1:fe:68: ae:f8:08:65:f8:f6:7a:44:96:67:95:9a:8d:4b:41:f6:2e:16: 63:61:4d:85:d7:0f:a2:5c:3a:92:60:4a:96:57:d6:f8:7f:33: bc:38:b4:7e:6e:3f:b3:a6:5f:e2:0c:6b:0c:68:97:48:80:7a: e8:03:ca:bc:31:08:6c:9b:91:05:72:10:8d:e9:8c:8f:be:98: e1:0c:9d:24:b9:ac:0d:d2:f3:d7:df:87:4d:76:4b:72:41:c6: 7a:0f:09:c6:55:1d:86:c3:b7:71:a6:0e:ae:e8:e1:cf:0f:62: a3:27:88:78:44:91:d9:29:d8:11:5b:67:09:3f:96:c0:86:2b: 72:8d:8e:78:c1:f8:f7:db:5d:22:83:59:dd:f2:6e:eb:1b:77: 45:61:5e:f1:3d:22:fc:f0:4d:be:87:c7:e0:3e:ba:4c:18:b6: 92:d3:2f:1d:1c:9e:c5:dd:55:df:ef:b9:89:cc:85:7f:42:88: 6e:92:08:c6:c8:1f:94:70:f9:8c:98:ae:42:ad:07:16:d8:0b: 63:b8:2a:0d:d5:f0:b7:86:51:4e:2e:a2:77:15:d1:40:40:46: e7:09:60:ee:ad:97:d8:0e:db:44:fe:e1:fd:54:e6:23:25:72: 45:f4:41:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N40A0RgJ596e0cPt4+0DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNDRmZDE5ODBiYTAxNzg4YTM1M2EyNmZlZjg5NTRlZDdj MTFmOTYwHhcNMjYwMTAyMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGZlYTdmMmI0N2YyMDY4ZTA2OTVkMWQ2M2Q0NDA3YmY3YTg1ZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22drqgTaTzoif+NmsqOqxq/mUr9/ e+zjMNWUi8SW6+Kh6TvoRRF6ynk3rnHFpUr+dk/EpUAOcrJnGX7MOK3Fru8gmrel 12QhPfqa4iM9DquFC6vvUXp7emFRy/Wqf4J9F1h9/6N57vn7zZZilkDv7YmWQQBX CRmRdxm+yrHr83Ds7U8at2JAfF4gW5auSR7M6F68A7VLnnFBxQpIzXzw4U20ED4f k2QkuyoCMnFgLsHqyw2ZwqTCHY+lf9VfAR0SjvKfBTB7szFdhWA9fLZjJkWrcybM KRHgrYBBG9YuDR64G0gffNNCSTXeiiT2co3M0KgLOhMHv9Yhis2ZcE5E2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK3+p/K0fyBo4GldHWPUQHv3qF7kMB8GA1UdIwQY MBaAFEBE/RmAugF4ijU6Jv74lU7XwR+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUVUOUdZQzZBWGlLTlRvbV92aVZUdGZCSDVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8xNWIxNmEtZjc2Yi00MWE0LTg4YmMt OTFjZjYxNmQyYzUyLzEvcmY2bjhyUl9JR2pnYVYwZFk5UkFlX2VvWHVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8xNWIxNmEtZjc2Yi00MWE0LTg4YmMtOTFjZjYxNmQyYzUy LzEvUUVUOUdZQzZBWGlLTlRvbV92aVZUdGZCSDVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwuloMA0G CSqGSIb3DQEBCwUAA4IBAQCWMlNJNPIxPh8qq4a7RKWh/miu+Ahl+PZ6RJZnlZqN S0H2LhZjYU2F1w+iXDqSYEqWV9b4fzO8OLR+bj+zpl/iDGsMaJdIgHroA8q8MQhs m5EFchCN6YyPvpjhDJ0kuawN0vPX34dNdktyQcZ6DwnGVR2Gw7dxpg6u6OHPD2Kj J4h4RJHZKdgRW2cJP5bAhityjY54wfj3210ig1nd8m7rG3dFYV7xPSL88E2+h8fg PrpMGLaS0y8dHJ7F3VXf77mJzIV/QohukgjGyB+UcPmMmK5CrQcW2AtjuCoN1fC3 hlFOLqJ3FdFAQEbnCWDurZfYDttE/uH9VOYjJXJF9EGa -----END CERTIFICATE-----Generated at Mon Feb 9 22:29:30 2026 by rpki-client