This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/5o42lxEDEDt3W8NdF-yOn7UvTZc.roa File: 5o42lxEDEDt3W8NdF-yOn7UvTZc.roa (raw, json) Hash identifier: oNLBYQIHXcwUoe2IZOdpad4iTA7mmS0+SZkfH4CWA+E= Subject key identifier: E6:8E:36:97:11:03:10:3B:77:5B:C3:5D:17:EC:8E:9F:B5:2F:4D:97 Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804 Certificate serial: 019B77C726B8749B5E7937D992A597A4951F Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/5o42lxEDEDt3W8NdF-yOn7UvTZc.roa Signing time: Thu 01 Jan 2026 04:18:18 +0000 ROA not before: Thu 01 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58350 IP address blocks: 195.150.48.0/20 maxlen: 20 195.150.76.0/23 maxlen: 23 2001:6df:fff0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:26:b8:74:9b:5e:79:37:d9:92:a5:97:a4:95:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804 Validity Not Before: Jan 1 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e68e36971103103b775bc35d17ec8e9fb52f4d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:97:2b:76:5a:60:25:0e:a0:86:68:77:9b:6f: c1:11:c5:89:95:d5:84:cb:f6:00:d0:5f:a3:47:ec: 89:80:ac:82:52:ea:85:b0:c4:f5:f4:01:b8:80:4e: b0:7b:d7:92:2c:8d:35:fd:0c:91:96:f8:23:2d:91: 90:92:95:18:f1:b7:ed:5b:7e:d2:b7:b2:08:f0:e5: b8:9e:b5:e0:f1:e4:f4:f6:a7:17:2d:86:68:60:7a: 60:12:15:e9:37:4c:c0:f3:7a:07:cc:16:74:1a:e8: f0:be:4d:1c:80:7e:a6:68:23:59:ab:03:40:82:2f: 8f:18:56:f1:45:48:df:c3:03:9b:3f:12:d8:76:e6: cb:b9:9f:9d:09:f8:9e:d2:d2:00:c9:39:05:3e:63: 50:3e:6a:35:be:6a:18:a3:b8:4b:73:ae:fe:44:79: a3:9d:75:e4:c8:25:b7:b4:3e:41:9a:3e:41:db:5b: 68:9a:30:1c:96:2b:d2:a2:77:ec:97:d4:5e:34:67: 63:50:4c:89:79:e2:f8:df:0f:84:f8:7e:56:0c:b6: 6e:78:52:49:f7:e8:e0:ee:46:42:c0:dd:79:dc:0e: 6b:ab:2e:63:13:5c:2b:52:83:24:57:80:90:18:52: 7c:f4:c4:35:4c:b3:da:ae:32:f0:de:08:a8:f3:b5: 4f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8E:36:97:11:03:10:3B:77:5B:C3:5D:17:EC:8E:9F:B5:2F:4D:97 X509v3 Authority Key Identifier: keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/5o42lxEDEDt3W8NdF-yOn7UvTZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.150.48.0/20 195.150.76.0/23 IPv6: 2001:6df:fff0::/44 Signature Algorithm: sha256WithRSAEncryption 4d:fd:22:4c:c8:d9:d7:46:88:04:72:38:09:6f:ba:36:d5:4f: 13:a2:a2:34:28:b5:da:6c:3f:66:3c:49:f4:08:ae:09:d8:4e: 64:ae:cd:e2:a8:a3:a3:1e:74:96:1a:de:f0:44:90:45:05:e1: ba:1c:84:e0:5b:17:95:ee:90:94:37:e9:5c:06:c0:01:98:ec: 2b:bb:f3:75:66:98:0e:75:21:d4:f0:b1:cf:11:3f:96:21:26: ea:cf:84:bc:4d:5e:2a:8e:7d:5e:3a:81:23:73:03:a5:63:15: e7:dc:7d:d3:7d:ef:37:37:4e:86:86:a2:c2:ea:f6:8b:dd:ae: cb:58:b2:58:7e:37:36:a9:10:bd:c4:e2:18:8d:c5:b4:3c:2e: 2c:6d:a7:f0:25:c2:80:39:ed:45:a3:4f:f2:15:c2:8f:c6:11: 3b:e5:1b:3d:f9:ee:f6:cc:2d:7e:2d:66:09:5c:96:28:0d:8a: 11:9a:9f:d6:5e:9e:47:18:53:b4:29:85:07:0b:2d:da:98:cd: 9f:a6:52:26:b3:6a:b3:95:42:87:06:59:9b:19:4b:58:2c:76: 70:03:e0:cf:a4:a1:b1:ac:ba:51:dd:11:b4:ec:da:3b:67:00: 4d:e4:ab:e5:d5:6f:fb:6b:c1:1e:09:b9:23:60:28:fe:c9:e7: 4d:66:80:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3xya4dJteeTfZkqWXpJUfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZjE5ZTIyNGM3M2Y4M2M0ZmRkMTk2ZDA2NjA4YWViM2E4 ODE4MDQwHhcNMjYwMTAxMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjhlMzY5NzExMDMxMDNiNzc1YmMzNWQxN2VjOGU5ZmI1MmY0ZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupcrdlpgJQ6ghmh3m2/BEcWJldWE y/YA0F+jR+yJgKyCUuqFsMT19AG4gE6we9eSLI01/QyRlvgjLZGQkpUY8bftW37S t7II8OW4nrXg8eT09qcXLYZoYHpgEhXpN0zA83oHzBZ0Gujwvk0cgH6maCNZqwNA gi+PGFbxRUjfwwObPxLYdubLuZ+dCfie0tIAyTkFPmNQPmo1vmoYo7hLc67+RHmj nXXkyCW3tD5Bmj5B21tomjAclivSonfsl9ReNGdjUEyJeeL43w+E+H5WDLZueFJJ 9+jg7kZCwN153A5rqy5jE1wrUoMkV4CQGFJ89MQ1TLParjLw3gio87VPmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaONpcRAxA7d1vDXRfsjp+1L02XMB8GA1UdIwQY MBaAFPjxniJMc/g8T90ZbQZgius6iBgEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QR2VJa3h6LUR4UDNSbHRCbUNLNnpxSUdBUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUx LTE2Y2Q4ZjRmYjRiOS8xLzVvNDJseEVERUR0M1c4TmRGLXlPbjdVdlRaYy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUxLTE2Y2Q4ZjRmYjRi OS8xLzEtUEdlSWt4ei1EeFAzUmx0Qm1DSzZ6cUlHQVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwDBATDljAD BAHDlkwwDwQCAAIwCQMHBCABBt//8DANBgkqhkiG9w0BAQsFAAOCAQEATf0iTMjZ 10aIBHI4CW+6NtVPE6KiNCi12mw/ZjxJ9AiuCdhOZK7N4qijox50lhre8ESQRQXh uhyE4FsXle6QlDfpXAbAAZjsK7vzdWaYDnUh1PCxzxE/liEm6s+EvE1eKo59XjqB I3MDpWMV59x9033vNzdOhoaiwur2i92uy1iyWH43NqkQvcTiGI3FtDwuLG2n8CXC gDntRaNP8hXCj8YRO+UbPfnu9swtfi1mCVyWKA2KEZqf1l6eRxhTtCmFBwst2pjN n6ZSJrNqs5VChwZZmxlLWCx2cAPgz6Shsay6Ud0RtOzaO2cATeSr5dVv+2vBHgm5 I2Ao/snnTWaAwg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:34 2026 by rpki-client