This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/V3G71UC8xUJzfEK-hF2a1Yy949k.roa File: V3G71UC8xUJzfEK-hF2a1Yy949k.roa (raw, json) Hash identifier: yY9pBQvp1vLjACvkKNCIEskOtDHt2fp1vqTKV4RgjCM= Subject key identifier: 57:71:BB:D5:40:BC:C5:42:73:7C:42:BE:84:5D:9A:D5:8C:BD:E3:D9 Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940 Certificate serial: 019C3205E4815503FA0C58E784FB8CAD3CEF Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/V3G71UC8xUJzfEK-hF2a1Yy949k.roa Signing time: Fri 06 Feb 2026 08:16:12 +0000 ROA not before: Fri 06 Feb 2026 08:16:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9183 IP address blocks: 139.15.0.0/16 maxlen: 24 185.112.176.0/22 maxlen: 24 193.108.217.0/24 maxlen: 24 193.141.57.0/24 maxlen: 24 194.39.218.0/23 maxlen: 24 2a03:cc00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:32:05:e4:81:55:03:fa:0c:58:e7:84:fb:8c:ad:3c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940 Validity Not Before: Feb 6 08:16:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5771bbd540bcc542737c42be845d9ad58cbde3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a0:33:2a:08:2f:87:07:5a:a7:43:87:ef:b8: b6:35:12:61:b7:78:82:d1:3a:66:08:81:b2:f5:da: 0f:74:a7:dc:0b:74:02:b8:0c:d8:53:b4:17:ce:47: a3:6f:fd:92:76:f9:7e:e2:aa:a8:da:c8:ec:ac:93: 62:3f:96:a7:95:77:ee:51:fd:42:c2:c2:4f:c4:e0: 11:73:f9:77:ad:06:0f:fe:1f:d7:4d:bf:d0:51:63: ea:13:32:8e:0d:f9:df:c3:bd:4a:31:33:7b:3a:bc: ac:c7:5b:7b:25:e3:2b:66:ff:8e:15:86:55:79:3b: e4:a2:9b:0e:65:98:7c:2a:d4:7a:09:74:b2:44:b9: 27:62:41:11:59:3f:1e:61:ef:34:b2:b7:9e:cd:d0: 57:b4:39:c0:39:32:85:ce:64:b6:e1:48:72:22:6c: 72:b1:1d:a5:43:91:7b:7e:18:cd:16:d8:da:73:ff: 2d:e9:27:02:c6:ce:cb:e1:7c:4b:24:aa:0b:37:b3: d4:82:6d:9a:d4:9c:a4:52:33:82:ba:e0:2d:d4:8e: d3:8f:4f:3c:3b:92:8d:ad:6c:7e:2e:a0:15:80:07: 1b:20:33:dd:5f:5e:d1:2e:2c:13:16:68:42:2a:6d: 3a:31:68:43:02:80:cf:2b:df:a1:fa:05:17:5c:7a: 8e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:71:BB:D5:40:BC:C5:42:73:7C:42:BE:84:5D:9A:D5:8C:BD:E3:D9 X509v3 Authority Key Identifier: keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/V3G71UC8xUJzfEK-hF2a1Yy949k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.15.0.0/16 185.112.176.0/22 193.108.217.0/24 193.141.57.0/24 194.39.218.0/23 IPv6: 2a03:cc00::/32 Signature Algorithm: sha256WithRSAEncryption 5a:6c:3a:67:07:9f:58:7f:ac:17:cc:a9:37:9b:f8:9d:21:75: 67:54:40:81:26:ab:d6:74:59:a0:20:31:54:e1:a4:58:fd:b2: 7f:15:75:7a:64:29:8d:d0:b1:7b:77:16:0a:72:ec:f1:f7:5d: 8e:d3:63:67:ae:3b:71:05:c1:d4:1d:4d:be:8f:07:89:90:4c: a4:ba:ee:cd:9b:6c:06:3a:9f:ed:86:c1:b2:3f:02:da:48:a7: bb:c8:79:e4:59:f7:07:78:f1:f5:9b:98:8f:c0:9b:bd:3d:df: a3:bc:65:55:93:1a:93:33:51:1f:6c:42:da:82:01:9b:22:9a: 8e:dc:d8:cf:35:7f:a1:29:42:ad:a2:7f:c4:f1:5d:32:b4:04: b7:12:e4:83:83:0c:f9:4a:2a:a4:76:71:da:d6:9d:ba:b2:f7: 58:cc:bb:1d:36:df:cb:84:5b:1e:f6:cf:ea:4f:ad:20:5a:e4: 19:dc:12:f1:90:bc:2c:a4:22:e7:ad:d0:c6:f1:e5:6c:bb:9d: a0:1d:e3:43:57:a7:dd:26:93:d0:0d:6c:df:b0:b1:45:89:19: bb:d5:9b:8a:3a:58:8a:1b:c8:69:c6:fd:1a:25:20:4a:94:6f: 9a:6c:e7:3b:9f:b7:24:eb:b2:b6:9b:4f:66:51:1a:6a:0f:00: e2:e1:31:88 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZwyBeSBVQP6DFjnhPuMrTzvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NDkyOGEzOTYyN2NkNWVlNWY5NzViZDg5N2MyZDc3NWFi Mjk5NDAwHhcNMjYwMjA2MDgxNjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzcxYmJkNTQwYmNjNTQyNzM3YzQyYmU4NDVkOWFkNThjYmRlM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaAzKggvhwdap0OH77i2NRJht3iC 0TpmCIGy9doPdKfcC3QCuAzYU7QXzkejb/2Sdvl+4qqo2sjsrJNiP5anlXfuUf1C wsJPxOARc/l3rQYP/h/XTb/QUWPqEzKODfnfw71KMTN7Orysx1t7JeMrZv+OFYZV eTvkopsOZZh8KtR6CXSyRLknYkERWT8eYe80sreezdBXtDnAOTKFzmS24UhyImxy sR2lQ5F7fhjNFtjac/8t6ScCxs7L4XxLJKoLN7PUgm2a1JykUjOCuuAt1I7Tj088 O5KNrWx+LqAVgAcbIDPdX17RLiwTFmhCKm06MWhDAoDPK9+h+gUXXHqOCwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFFdxu9VAvMVCc3xCvoRdmtWMvePZMB8GA1UdIwQY MBaAFIlJKKOWJ81e5fl1vYl8LXdasplAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEt MTU5M2Q0MDQ1Y2JjLzEvVjNHNzFVQzh4VUp6ZkVLLWhGMmExWXk5NDlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEtMTU5M2Q0MDQ1Y2Jj LzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAjBAIAATAdAwMAiw8DBAK5 cLADBADBbNkDBADBjTkDBAHCJ9owDQQCAAIwBwMFACoDzAAwDQYJKoZIhvcNAQEL BQADggEBAFpsOmcHn1h/rBfMqTeb+J0hdWdUQIEmq9Z0WaAgMVThpFj9sn8VdXpk KY3QsXt3Fgpy7PH3XY7TY2euO3EFwdQdTb6PB4mQTKS67s2bbAY6n+2GwbI/AtpI p7vIeeRZ9wd48fWbmI/Am70936O8ZVWTGpMzUR9sQtqCAZsimo7c2M81f6EpQq2i f8TxXTK0BLcS5IODDPlKKqR2cdrWnbqy91jMux0238uEWx72z+pPrSBa5BncEvGQ vCykIuet0Mbx5Wy7naAd40NXp90mk9ANbN+wsUWJGbvVm4o6WIobyGnG/RolIEqU b5ps5zuftyTrsrabT2ZRGmoPAOLhMYg= -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:12 2026 by rpki-client