This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/prXJxfNGOfhBAafrZxzXejtK89Q.roa File: prXJxfNGOfhBAafrZxzXejtK89Q.roa (raw, json) Hash identifier: ODutQ0k0mib3bpTTiK76gkwrQKBzBwaL/WseoM5mqrs= Subject key identifier: A6:B5:C9:C5:F3:46:39:F8:41:01:A7:EB:67:1C:D7:7A:3B:4A:F3:D4 Certificate issuer: /CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e Certificate serial: 019C320A7894A764DA7CCA75966E7BF55E6B Authority key identifier: 2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/prXJxfNGOfhBAafrZxzXejtK89Q.roa Signing time: Fri 06 Feb 2026 08:21:12 +0000 ROA not before: Fri 06 Feb 2026 08:21:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58096 IP address blocks: 45.93.4.0/22 maxlen: 22 91.213.168.0/24 maxlen: 24 91.220.69.0/24 maxlen: 24 94.141.124.0/22 maxlen: 24 168.222.204.0/22 maxlen: 22 185.33.228.0/22 maxlen: 32 185.154.72.0/22 maxlen: 32 185.216.192.0/23 maxlen: 32 193.105.114.0/24 maxlen: 32 193.160.204.0/23 maxlen: 32 195.170.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:32:0a:78:94:a7:64:da:7c:ca:75:96:6e:7b:f5:5e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e Validity Not Before: Feb 6 08:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6b5c9c5f34639f84101a7eb671cd77a3b4af3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:94:64:83:34:ca:1d:1a:3f:90:47:44:5c:46: 67:e1:7d:54:41:bd:f2:2b:46:73:da:6e:93:bf:4c: 37:19:a9:ee:b4:69:b1:b0:74:1d:e1:de:e7:c6:3b: 63:12:ca:f7:12:7c:35:c9:1e:54:e6:be:63:0e:bd: 03:62:63:88:3f:2f:b7:7c:7f:3b:85:97:ff:8f:44: 61:ce:56:dd:f1:43:c6:33:83:c3:c7:84:cd:c0:8c: 71:d0:46:21:2d:7b:3a:ff:9f:4e:36:ac:63:c5:21: 53:20:5a:3a:6c:21:fe:b9:ad:7d:3e:c8:0a:7d:cc: c5:1c:32:97:73:ee:73:dc:09:79:99:ef:13:f9:41: 84:b1:f9:12:a7:c8:dc:ca:bd:fb:e2:0e:d5:c0:9e: a7:13:94:d7:1f:1a:7d:f7:ff:8c:f8:87:2e:dc:8f: 1d:01:1f:5b:b9:1f:da:9a:ff:cb:ee:34:01:fa:bf: 7b:bc:da:29:9e:44:54:a6:66:cf:56:84:df:bc:9b: 86:f9:e3:95:56:20:f5:12:31:67:d2:64:e2:fe:28: 0e:73:20:f5:01:06:2d:44:93:00:5d:1e:bb:c2:6d: af:4e:c1:f6:78:43:91:da:19:0d:0e:3f:ce:6c:85: fb:a8:3c:13:a2:aa:a6:5e:81:8f:4e:69:ec:1d:5b: c4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B5:C9:C5:F3:46:39:F8:41:01:A7:EB:67:1C:D7:7A:3B:4A:F3:D4 X509v3 Authority Key Identifier: keyid:2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/prXJxfNGOfhBAafrZxzXejtK89Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.4.0/22 91.213.168.0/24 91.220.69.0/24 94.141.124.0/22 168.222.204.0/22 185.33.228.0/22 185.154.72.0/22 185.216.192.0/23 193.105.114.0/24 193.160.204.0/23 195.170.204.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:9b:11:14:12:fa:c7:4d:5e:53:67:22:1d:0d:95:13:ee:3d: 75:a7:45:f5:0b:4d:56:7a:0d:da:a5:ae:5c:6a:a0:4f:dc:7e: cc:a3:10:96:7c:11:70:72:20:e7:f4:7b:61:c2:9d:b5:71:32: ad:0f:b1:d3:b7:99:3b:9c:ea:dc:45:4e:b5:6c:b7:bd:72:55: cc:7d:b9:6b:27:d3:07:28:8c:64:43:c8:e5:5f:63:26:b2:10: 85:98:71:8d:5d:22:fb:9d:54:1f:74:be:85:d3:98:6c:d2:e7: 3e:24:0a:6a:e0:f5:f6:53:86:ea:c0:f3:c0:89:a7:4c:81:e8: 0a:de:f7:46:71:fa:71:92:45:75:be:f1:04:b0:ff:c2:b9:04: a1:fb:5a:e2:2a:08:70:ee:97:a2:0c:ce:cc:74:b6:3e:04:f1: 9f:ee:2f:d1:6b:81:eb:f3:42:0a:33:ba:b3:bf:6d:f1:91:75: 98:d1:2f:e0:70:4c:1c:69:ce:8b:ea:26:7c:49:67:2b:10:1a: 69:dc:6c:d7:4e:f2:91:86:61:c1:24:14:09:04:be:be:5e:e6: 66:a0:02:e8:71:7c:38:4b:a1:62:25:69:4d:6c:4e:b4:00:5d: ac:cf:52:ca:1f:e6:81:be:a0:df:25:b9:de:c1:9f:09:98:5e: dc:29:07:e8 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZwyCniUp2TafMp1lm579V5rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjODhkYjgxZmRmYmVjY2VlNzVmNGE5ZjY5OGEzYzFiM2E4 NDYyNmUwHhcNMjYwMjA2MDgyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmI1YzljNWYzNDYzOWY4NDEwMWE3ZWI2NzFjZDc3YTNiNGFmM2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZRkgzTKHRo/kEdEXEZn4X1UQb3y K0Zz2m6Tv0w3GanutGmxsHQd4d7nxjtjEsr3Enw1yR5U5r5jDr0DYmOIPy+3fH87 hZf/j0Rhzlbd8UPGM4PDx4TNwIxx0EYhLXs6/59ONqxjxSFTIFo6bCH+ua19PsgK fczFHDKXc+5z3Al5me8T+UGEsfkSp8jcyr374g7VwJ6nE5TXHxp99/+M+Icu3I8d AR9buR/amv/L7jQB+r97vNopnkRUpmbPVoTfvJuG+eOVViD1EjFn0mTi/igOcyD1 AQYtRJMAXR67wm2vTsH2eEOR2hkNDj/ObIX7qDwToqqmXoGPTmnsHVvE7wIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFKa1ycXzRjn4QQGn62cc13o7SvPUMB8GA1UdIwQY MBaAFCyI24H9++zO519Kn2mKPBs6hGJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTElqYmdmMzc3TTduWDBxZmFZbzhHenFFWW00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hOGUwNGItMGRiYS00MGVjLWIxMjYt ZjQ1N2Q0MDRhZTJmLzEvcHJYSnhmTkdPZmhCQWFmclp4elhlanRLODlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hOGUwNGItMGRiYS00MGVjLWIxMjYtZjQ1N2Q0MDRhZTJm LzEvTElqYmdmMzc3TTduWDBxZmFZbzhHenFFWW00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQCLV0EAwQA W9WoAwQAW9xFAwQCXo18AwQCqN7MAwQCuSHkAwQCuZpIAwQBudjAAwQAwWlyAwQB waDMAwQCw6rMMA0GCSqGSIb3DQEBCwUAA4IBAQBOmxEUEvrHTV5TZyIdDZUT7j11 p0X1C01Weg3apa5caqBP3H7MoxCWfBFwciDn9Hthwp21cTKtD7HTt5k7nOrcRU61 bLe9clXMfblrJ9MHKIxkQ8jlX2MmshCFmHGNXSL7nVQfdL6F05hs0uc+JApq4PX2 U4bqwPPAiadMgegK3vdGcfpxkkV1vvEEsP/CuQSh+1riKghw7peiDM7MdLY+BPGf 7i/Ra4Hr80IKM7qzv23xkXWY0S/gcEwcac6L6iZ8SWcrEBpp3GzXTvKRhmHBJBQJ BL6+XuZmoALocXw4S6FiJWlNbE60AF2sz1LKH+aBvqDfJbnewZ8JmF7cKQfo -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:14 2026 by rpki-client