This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/pQkeOCldJON1bEi4a2WMMaalKQQ.roa File: pQkeOCldJON1bEi4a2WMMaalKQQ.roa (raw, json) Hash identifier: 72ocHiEt31RfsJktzPnYu56a2X+W6BrY0WnSPYRnr1o= Subject key identifier: A5:09:1E:38:29:5D:24:E3:75:6C:48:B8:6B:65:8C:31:A6:A5:29:04 Certificate issuer: /CN=5ae4341e23a3315ed4455a545d1a48cef29e7893 Certificate serial: 019B7C128DD129162E5360CB11F917AB4733 Authority key identifier: 5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/pQkeOCldJON1bEi4a2WMMaalKQQ.roa Signing time: Fri 02 Jan 2026 00:19:09 +0000 ROA not before: Fri 02 Jan 2026 00:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206863 IP address blocks: 86.62.40.0/22 maxlen: 24 185.169.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:8d:d1:29:16:2e:53:60:cb:11:f9:17:ab:47:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ae4341e23a3315ed4455a545d1a48cef29e7893 Validity Not Before: Jan 2 00:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5091e38295d24e3756c48b86b658c31a6a52904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ae:da:10:dd:5e:9a:34:ec:32:7a:20:a2:d9: 89:1b:f5:9c:4c:94:60:05:db:17:1c:be:48:81:b6: e0:69:98:24:2a:80:d9:98:64:bd:60:c3:c8:70:48: 05:15:ee:88:49:c7:f3:85:7a:b2:e4:c7:49:c1:57: 5a:f6:2a:a3:3b:1b:e8:a8:70:02:fb:73:a9:28:1a: 0a:6b:79:1d:93:36:0d:ef:b1:2c:75:a5:b3:95:82: 65:5c:dc:f0:d5:75:2d:51:cd:28:b8:8a:b4:1d:5a: bf:7e:37:1b:f9:73:0a:78:a7:2f:6a:18:76:04:c8: da:3a:75:7e:72:eb:c9:8c:b8:a8:3c:64:f3:77:25: 67:5a:bf:4d:ce:a3:f3:c3:23:27:0d:2c:5d:56:2a: 2d:4c:17:b6:a6:75:62:59:b2:68:0b:7e:10:a4:a8: 02:1e:a7:8f:3a:86:15:6e:14:2b:85:ca:dc:1b:7b: f0:37:98:f5:a2:cd:f6:26:8a:e1:da:7b:97:11:27: 7b:f5:42:9d:55:3f:e2:07:2a:4d:d6:84:42:b0:b3: 79:42:c6:4f:2e:a4:96:bf:1f:1c:9d:73:ea:c0:da: 4e:88:8a:d1:f4:1e:bd:e4:52:c9:d1:cf:43:62:29: eb:03:81:e5:fa:a6:97:a0:92:92:78:7e:04:bb:97: ed:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:09:1E:38:29:5D:24:E3:75:6C:48:B8:6B:65:8C:31:A6:A5:29:04 X509v3 Authority Key Identifier: keyid:5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/pQkeOCldJON1bEi4a2WMMaalKQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.62.40.0/22 185.169.136.0/22 Signature Algorithm: sha256WithRSAEncryption 03:15:91:2d:c4:1e:d2:1c:a1:16:d9:73:20:df:84:e7:e5:dc: d0:4f:80:4b:1c:2b:cb:f6:ef:62:da:d8:c5:16:12:27:8c:55: e3:2c:d7:b5:a2:3f:e4:65:01:f1:8b:20:3b:23:08:42:d6:7c: ed:db:e6:a4:3a:67:4f:d4:d8:89:a1:49:e6:ad:00:89:45:23: 4a:9b:02:f6:e2:b7:3a:85:fa:d8:28:72:64:47:12:b4:25:a9: d5:2c:82:81:68:55:74:b3:d0:84:24:95:97:ee:4c:3c:24:69: a4:3e:39:49:ac:a4:ac:b7:0c:25:80:44:6c:56:31:de:13:0a: 18:13:3c:26:bc:e6:16:90:69:2b:23:1a:44:27:93:9b:ae:64: a5:72:96:21:ec:de:e5:97:72:2e:5e:e7:56:25:63:95:d3:9d: 56:a9:07:b7:d9:ce:67:cc:32:43:21:d4:17:76:02:1c:32:21: 5a:4c:89:93:c7:d9:e3:fc:8c:4d:c6:46:d2:25:fd:34:ac:fb: 08:23:cf:ab:34:be:bf:4b:75:b5:cd:85:cf:75:e2:5a:f5:10: f0:98:65:a9:e7:8f:6d:b2:3a:aa:87:da:e2:0e:a6:37:09:4f: 18:8d:bc:28:72:b1:d1:bc:13:55:fb:b9:b4:c1:18:2e:8e:db: 5f:6a:82:70 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Eo3RKRYuU2DLEfkXq0czMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZTQzNDFlMjNhMzMxNWVkNDQ1NWE1NDVkMWE0OGNlZjI5 ZTc4OTMwHhcNMjYwMTAyMDAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTA5MWUzODI5NWQyNGUzNzU2YzQ4Yjg2YjY1OGMzMWE2YTUyOTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy67aEN1emjTsMnogotmJG/WcTJRg BdsXHL5IgbbgaZgkKoDZmGS9YMPIcEgFFe6IScfzhXqy5MdJwVda9iqjOxvoqHAC +3OpKBoKa3kdkzYN77EsdaWzlYJlXNzw1XUtUc0ouIq0HVq/fjcb+XMKeKcvahh2 BMjaOnV+cuvJjLioPGTzdyVnWr9NzqPzwyMnDSxdViotTBe2pnViWbJoC34QpKgC HqePOoYVbhQrhcrcG3vwN5j1os32Jorh2nuXESd79UKdVT/iBypN1oRCsLN5QsZP LqSWvx8cnXPqwNpOiIrR9B695FLJ0c9DYinrA4Hl+qaXoJKSeH4Eu5ftowIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKUJHjgpXSTjdWxIuGtljDGmpSkEMB8GA1UdIwQY MBaAFFrkNB4jozFe1EVaVF0aSM7ynniTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3VRMEhpT2pNVjdVUlZwVVhScEl6dktlZUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mMGVhMmMtZDI3ZC00ZWNmLWJhMjUt MWUwOGRmZDIzNWM3LzEvcFFrZU9DbGRKT04xYkVpNGEyV01NYWFsS1FRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mMGVhMmMtZDI3ZC00ZWNmLWJhMjUtMWUwOGRmZDIzNWM3 LzEvV3VRMEhpT2pNVjdVUlZwVVhScEl6dktlZUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVj4oAwQC uamIMA0GCSqGSIb3DQEBCwUAA4IBAQADFZEtxB7SHKEW2XMg34Tn5dzQT4BLHCvL 9u9i2tjFFhInjFXjLNe1oj/kZQHxiyA7IwhC1nzt2+akOmdP1NiJoUnmrQCJRSNK mwL24rc6hfrYKHJkRxK0JanVLIKBaFV0s9CEJJWX7kw8JGmkPjlJrKSstwwlgERs VjHeEwoYEzwmvOYWkGkrIxpEJ5ObrmSlcpYh7N7ll3IuXudWJWOV051WqQe32c5n zDJDIdQXdgIcMiFaTImTx9nj/IxNxkbSJf00rPsII8+rNL6/S3W1zYXPdeJa9RDw mGWp549tsjqqh9riDqY3CU8YjbwocrHRvBNV+7m0wRgujttfaoJw -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:06 2026 by rpki-client