This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/CQYbA6MTIgDA1QnhJw2tzaXFN4Q.roa File: CQYbA6MTIgDA1QnhJw2tzaXFN4Q.roa (raw, json) Hash identifier: 27bYI9yNdjBuvKUE1PPW14H77RbPrbsTAC7BJPd8dbU= Subject key identifier: 09:06:1B:03:A3:13:22:00:C0:D5:09:E1:27:0D:AD:CD:A5:C5:37:84 Certificate issuer: /CN=f3f6a57ea2a902eb4912de927df80304c355ab12 Certificate serial: 019B7CEE11DF5B4437059A2C8903B597406C Authority key identifier: F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/CQYbA6MTIgDA1QnhJw2tzaXFN4Q.roa Signing time: Fri 02 Jan 2026 04:18:55 +0000 ROA not before: Fri 02 Jan 2026 04:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200062 IP address blocks: 80.209.244.0/22 maxlen: 22 91.103.12.0/22 maxlen: 22 158.181.48.0/21 maxlen: 21 185.9.128.0/22 maxlen: 22 185.64.112.0/22 maxlen: 22 185.127.116.0/22 maxlen: 22 188.64.56.0/21 maxlen: 21 2a00:6140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:11:df:5b:44:37:05:9a:2c:89:03:b5:97:40:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3f6a57ea2a902eb4912de927df80304c355ab12 Validity Not Before: Jan 2 04:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09061b03a3132200c0d509e1270dadcda5c53784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f5:21:f6:dc:08:3b:aa:eb:f5:59:de:cd:f2: e4:2b:17:ac:81:ca:9c:0b:c8:96:16:88:f3:f2:ba: f4:38:12:4f:6e:5a:d3:04:bd:70:db:45:69:09:8b: 62:0d:16:d6:0e:25:4d:eb:d5:95:10:f0:28:26:3f: d4:fb:22:21:15:db:f0:8e:ed:ae:5c:dc:3c:cd:e1: 59:23:fc:f9:88:67:b8:cb:43:f3:c5:75:2d:e4:75: 91:24:39:01:7d:99:51:02:88:3d:67:55:4d:28:a4: d2:d7:a5:2f:2e:67:89:39:fc:d5:05:6b:ba:2c:32: bc:0b:59:b5:ca:09:a0:ad:81:07:8b:f1:59:1f:a8: 13:7e:c8:6a:73:24:e5:20:c4:65:ae:3e:ee:55:5c: 9f:c3:23:52:25:7b:1d:ed:7c:1d:08:09:dc:04:ab: 3d:96:22:fb:83:61:c9:40:c3:da:7a:54:09:a8:90: bf:d6:ef:b9:af:4f:d9:b7:1f:12:0c:71:70:ad:04: ab:1c:b4:fa:13:0e:c5:cd:f7:b7:bb:c1:85:ce:ae: 5f:1d:76:3f:ee:d4:c2:9d:eb:67:ad:33:20:02:82: 9f:3c:c1:0d:99:74:38:ff:14:2e:4c:c5:68:52:31: ba:18:b5:00:50:7f:9b:60:14:14:3c:00:35:8b:b2: 6d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:06:1B:03:A3:13:22:00:C0:D5:09:E1:27:0D:AD:CD:A5:C5:37:84 X509v3 Authority Key Identifier: keyid:F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/CQYbA6MTIgDA1QnhJw2tzaXFN4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.209.244.0/22 91.103.12.0/22 158.181.48.0/21 185.9.128.0/22 185.64.112.0/22 185.127.116.0/22 188.64.56.0/21 IPv6: 2a00:6140::/32 Signature Algorithm: sha256WithRSAEncryption 0e:07:55:9b:69:f7:06:15:b4:1c:ba:a6:b5:09:62:2a:70:21: 5c:f5:b0:b0:49:ef:f3:12:60:a5:f7:f1:76:1e:72:83:f4:bc: 12:0a:93:f7:78:a3:26:3a:f0:99:f6:fc:42:0e:47:c0:f6:a0: 52:41:a4:e8:32:97:a2:cb:bb:38:b4:43:d6:cf:76:14:b0:9d: 70:e4:07:93:e4:ab:f8:5a:35:7a:6b:65:66:07:39:6f:a0:8b: 28:c2:7e:56:a5:93:aa:b2:9e:f8:2b:11:bc:6b:58:d5:e4:ed: 37:6b:9d:83:5f:df:bd:bf:ea:5d:ed:8d:96:4e:6b:27:08:50: b9:08:59:d2:5a:96:78:1f:1a:4d:b9:b7:90:b2:79:e5:e1:01: c9:cc:eb:4c:ff:85:7b:b0:9c:98:fc:49:a0:e5:90:22:84:aa: 4a:79:4a:38:fc:13:38:13:86:19:88:18:0f:5d:fe:4a:eb:21: 28:ed:23:47:9e:fe:2a:94:25:fe:06:0c:ae:5a:ee:fd:62:50: 57:d9:60:0c:78:d4:90:33:4a:00:66:84:e7:f2:a1:c0:50:b5: 8d:c2:42:41:41:84:3e:ef:18:cd:92:c6:a4:e7:88:b2:d1:1e: 21:42:93:82:c8:bc:ea:e2:d1:84:16:87:0c:d5:06:4f:62:0c: 4a:07:da:77 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt87hHfW0Q3BZosiQO1l0BsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZjZhNTdlYTJhOTAyZWI0OTEyZGU5MjdkZjgwMzA0YzM1 NWFiMTIwHhcNMjYwMTAyMDQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTA2MWIwM2EzMTMyMjAwYzBkNTA5ZTEyNzBkYWRjZGE1YzUzNzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fUh9twIO6rr9VnezfLkKxesgcqc C8iWFojz8rr0OBJPblrTBL1w20VpCYtiDRbWDiVN69WVEPAoJj/U+yIhFdvwju2u XNw8zeFZI/z5iGe4y0PzxXUt5HWRJDkBfZlRAog9Z1VNKKTS16UvLmeJOfzVBWu6 LDK8C1m1ygmgrYEHi/FZH6gTfshqcyTlIMRlrj7uVVyfwyNSJXsd7XwdCAncBKs9 liL7g2HJQMPaelQJqJC/1u+5r0/Ztx8SDHFwrQSrHLT6Ew7Fzfe3u8GFzq5fHXY/ 7tTCnetnrTMgAoKfPMENmXQ4/xQuTMVoUjG6GLUAUH+bYBQUPAA1i7JtnwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFAkGGwOjEyIAwNUJ4ScNrc2lxTeEMB8GA1UdIwQY MBaAFPP2pX6iqQLrSRLekn34AwTDVasSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOF9hbGZxS3BBdXRKRXQ2U2ZmZ0RCTU5WcXhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84YmYzODktODEzYy00OWJhLTg1MGMt OTQwYzZiOGI1MDJhLzEvQ1FZYkE2TVRJZ0RBMVFuaEp3MnR6YVhGTjRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS84YmYzODktODEzYy00OWJhLTg1MGMtOTQwYzZiOGI1MDJh LzEvOF9hbGZxS3BBdXRKRXQ2U2ZmZ0RCTU5WcXhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQCUNH0AwQC W2cMAwQDnrUwAwQCuQmAAwQCuUBwAwQCuX90AwQDvEA4MA0EAgACMAcDBQAqAGFA MA0GCSqGSIb3DQEBCwUAA4IBAQAOB1WbafcGFbQcuqa1CWIqcCFc9bCwSe/zEmCl 9/F2HnKD9LwSCpP3eKMmOvCZ9vxCDkfA9qBSQaToMpeiy7s4tEPWz3YUsJ1w5AeT 5Kv4WjV6a2VmBzlvoIsown5WpZOqsp74KxG8a1jV5O03a52DX9+9v+pd7Y2WTmsn CFC5CFnSWpZ4HxpNubeQsnnl4QHJzOtM/4V7sJyY/Emg5ZAihKpKeUo4/BM4E4YZ iBgPXf5K6yEo7SNHnv4qlCX+BgyuWu79YlBX2WAMeNSQM0oAZoTn8qHAULWNwkJB QYQ+7xjNksak54iy0R4hQpOCyLzq4tGEFocM1QZPYgxKB9p3 -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:14 2026 by rpki-client