This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/L4kfSEGXNlCcZ5Bv_gccGyYOo20.roa File: L4kfSEGXNlCcZ5Bv_gccGyYOo20.roa (raw, json) Hash identifier: 94ab+iSQW4b6u4MH+qxb3JV5K2x+WLjioOCefs4nzCI= Subject key identifier: 2F:89:1F:48:41:97:36:50:9C:67:90:6F:FE:07:1C:1B:26:0E:A3:6D Certificate issuer: /CN=b986028c9feb6f142b3fecb64667f48874ba9c37 Certificate serial: 019B79100D2B7DD3F1630B5B0E81A7F79F32 Authority key identifier: B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/L4kfSEGXNlCcZ5Bv_gccGyYOo20.roa Signing time: Thu 01 Jan 2026 10:17:33 +0000 ROA not before: Thu 01 Jan 2026 10:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34362 IP address blocks: 85.94.64.0/22 maxlen: 22 85.94.68.0/22 maxlen: 22 85.94.72.0/22 maxlen: 22 85.94.76.0/22 maxlen: 22 85.94.80.0/22 maxlen: 22 85.94.84.0/22 maxlen: 22 85.94.88.0/22 maxlen: 22 85.94.92.0/22 maxlen: 22 176.62.0.0/22 maxlen: 22 176.62.4.0/22 maxlen: 22 176.62.8.0/22 maxlen: 22 176.62.12.0/22 maxlen: 22 176.62.16.0/22 maxlen: 22 176.62.20.0/22 maxlen: 22 176.62.24.0/22 maxlen: 22 176.62.28.0/24 maxlen: 24 176.62.29.0/24 maxlen: 24 176.62.30.0/24 maxlen: 24 176.62.32.0/22 maxlen: 22 176.62.36.0/22 maxlen: 22 176.62.40.0/22 maxlen: 22 176.62.44.0/22 maxlen: 22 185.80.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0d:2b:7d:d3:f1:63:0b:5b:0e:81:a7:f7:9f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b986028c9feb6f142b3fecb64667f48874ba9c37 Validity Not Before: Jan 1 10:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f891f48419736509c67906ffe071c1b260ea36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b1:21:a9:f0:f2:05:2a:f7:61:4c:01:76:d2: 72:48:d9:51:7c:a0:df:60:fc:0c:1e:24:00:72:e5: 9d:db:07:d3:14:6f:71:97:fe:53:6d:1d:21:7a:04: 0e:d8:53:8e:98:7c:00:5e:ac:e9:d2:5a:c7:5d:7e: dc:ab:db:6f:6e:4f:fe:93:06:f6:2e:84:24:80:80: 5d:b6:f4:90:31:f5:8e:56:06:17:ee:8c:01:5b:0f: 50:5e:a2:ad:10:a1:9a:3a:9b:33:16:70:1f:8a:eb: 51:2e:a2:7c:4e:46:b1:01:ad:75:ac:36:96:4a:49: 05:e8:ef:15:56:f5:4b:b3:62:54:44:94:4e:8f:d2: 7c:a1:fb:c6:2e:00:f5:44:60:95:f9:f0:e1:18:6b: 90:b8:3b:39:57:43:90:4a:37:71:7c:9e:e4:a5:b8: b5:c0:2f:d2:22:ed:1f:ba:22:e1:3e:bf:8a:f4:35: c3:91:64:e9:1a:a2:08:31:4f:b3:e7:ef:57:aa:bd: a4:1b:22:fd:4c:87:e1:f9:96:1d:5e:de:d2:41:e5: e9:11:1e:7e:8e:ec:cc:77:e4:e2:a5:bd:11:93:aa: 79:82:e6:42:e3:fc:49:d1:47:7f:d9:13:c1:44:ef: c1:0b:00:b0:46:85:2d:13:0c:a4:13:41:3c:1a:1e: 88:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:89:1F:48:41:97:36:50:9C:67:90:6F:FE:07:1C:1B:26:0E:A3:6D X509v3 Authority Key Identifier: keyid:B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/L4kfSEGXNlCcZ5Bv_gccGyYOo20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.94.64.0/19 176.62.0.0-176.62.30.255 176.62.32.0/20 185.80.192.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:9d:11:73:bc:6a:e5:af:d1:33:41:90:06:75:b7:50:42:15: 3e:be:a2:9f:bd:2a:c1:cd:4c:f6:f6:a9:e3:86:55:b0:6e:62: c3:a1:d6:d3:f0:78:a2:2e:d2:15:b7:09:d3:8a:4b:5a:ee:3e: 11:3c:37:7b:4d:48:af:ae:15:c7:7a:66:de:01:d6:1a:2b:08: 61:54:65:39:c2:2d:75:f8:c2:d2:4f:ab:d7:e6:a9:9b:01:cb: 5f:3d:81:0d:9c:27:8b:16:cd:3a:67:28:6a:c9:9f:d9:15:3c: 25:b6:73:c0:47:95:99:46:76:7f:8f:3c:50:04:c2:b8:64:01: 7f:34:91:73:59:cd:b8:f3:fa:7f:a9:a6:47:16:77:26:5f:a4: 96:e2:2e:3c:10:7d:66:eb:16:35:ca:38:b6:64:61:de:f8:51: 6d:d7:64:7a:1e:1a:45:d0:cb:bf:d6:26:56:25:db:d1:f7:04: 04:fd:84:90:82:e6:02:42:a7:7d:2e:96:19:35:1f:5c:10:9a: 9a:d2:3c:73:bb:94:eb:69:4e:ed:26:a1:d1:c9:dd:27:77:7d: 95:1a:81:42:15:ea:6c:c7:17:93:90:da:3e:93:95:b2:6b:fc: aa:d0:c9:fe:20:14:fb:19:d8:d9:3b:54:75:73:07:57:c2:20: 67:31:a6:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5EA0rfdPxYwtbDoGn958yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ODYwMjhjOWZlYjZmMTQyYjNmZWNiNjQ2NjdmNDg4NzRi YTljMzcwHhcNMjYwMTAxMTAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjg5MWY0ODQxOTczNjUwOWM2NzkwNmZmZTA3MWMxYjI2MGVhMzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLEhqfDyBSr3YUwBdtJySNlRfKDf YPwMHiQAcuWd2wfTFG9xl/5TbR0hegQO2FOOmHwAXqzp0lrHXX7cq9tvbk/+kwb2 LoQkgIBdtvSQMfWOVgYX7owBWw9QXqKtEKGaOpszFnAfiutRLqJ8TkaxAa11rDaW SkkF6O8VVvVLs2JURJROj9J8ofvGLgD1RGCV+fDhGGuQuDs5V0OQSjdxfJ7kpbi1 wC/SIu0fuiLhPr+K9DXDkWTpGqIIMU+z5+9Xqr2kGyL9TIfh+ZYdXt7SQeXpER5+ juzMd+Tipb0Rk6p5guZC4/xJ0Ud/2RPBRO/BCwCwRoUtEwykE0E8Gh6INQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+JH0hBlzZQnGeQb/4HHBsmDqNtMB8GA1UdIwQY MBaAFLmGAoyf628UKz/stkZn9Ih0upw3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVlZQ2pKX3JieFFyUC15MlJtZjBpSFM2bkRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8yODU4NTAtNzU1MS00MjI5LTg3YjYt M2E0NDY4YzRkZmRmLzEvTDRrZlNFR1hObENjWjVCdl9nY2NHeVlPbzIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8yODU4NTAtNzU1MS00MjI5LTg3YjYtM2E0NDY4YzRkZmRm LzEvdVlZQ2pKX3JieFFyUC15MlJtZjBpSFM2bkRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAlBAIAATAfAwQFVV5AMAsD AwGwPgMEALA+HgMEBLA+IAMEArlQwDANBgkqhkiG9w0BAQsFAAOCAQEAPp0Rc7xq 5a/RM0GQBnW3UEIVPr6in70qwc1M9vap44ZVsG5iw6HW0/B4oi7SFbcJ04pLWu4+ ETw3e01Ir64Vx3pm3gHWGisIYVRlOcItdfjC0k+r1+apmwHLXz2BDZwnixbNOmco asmf2RU8JbZzwEeVmUZ2f488UATCuGQBfzSRc1nNuPP6f6mmRxZ3Jl+kluIuPBB9 ZusWNco4tmRh3vhRbddkeh4aRdDLv9YmViXb0fcEBP2EkILmAkKnfS6WGTUfXBCa mtI8c7uU62lO7Sah0cndJ3d9lRqBQhXqbMcXk5DaPpOVsmv8qtDJ/iAU+xnY2TtU dXMHV8IgZzGmgA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:02 2026 by rpki-client