This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/0qLd6qJExCvSjydiJaKIdzUIOv8.roa File: 0qLd6qJExCvSjydiJaKIdzUIOv8.roa (raw, json) Hash identifier: DaQxlNBSMrQyDUoUIX1mIQesMA6875WgZdP3i+f9HgE= Subject key identifier: D2:A2:DD:EA:A2:44:C4:2B:D2:8F:27:62:25:A2:88:77:35:08:3A:FF Certificate issuer: /CN=20d2633bffb16da2d75edaf49bc821187cfb88ef Certificate serial: 019B7F827125D4553EDC2EBC9E51060F8030 Authority key identifier: 20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/0qLd6qJExCvSjydiJaKIdzUIOv8.roa Signing time: Fri 02 Jan 2026 16:20:13 +0000 ROA not before: Fri 02 Jan 2026 16:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47895 IP address blocks: 78.142.232.0/22 maxlen: 22 91.205.128.0/22 maxlen: 22 91.205.131.0/24 maxlen: 24 185.34.20.0/22 maxlen: 22 185.34.21.0/24 maxlen: 24 185.189.100.0/22 maxlen: 22 185.244.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:71:25:d4:55:3e:dc:2e:bc:9e:51:06:0f:80:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20d2633bffb16da2d75edaf49bc821187cfb88ef Validity Not Before: Jan 2 16:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2a2ddeaa244c42bd28f276225a2887735083aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2f:47:83:a1:24:54:b4:b4:04:27:ca:5b:8d: 90:0e:d6:25:5d:df:4d:60:03:53:50:a2:72:5f:a4: 52:48:c7:b0:ce:37:a0:8e:ec:7a:eb:23:b6:1f:73: 39:2a:2c:57:7a:be:2a:eb:63:c6:71:b1:f6:0d:ba: 38:43:96:be:92:22:1a:cb:56:3b:33:d8:39:f1:f1: 5a:75:18:73:e0:b6:dd:29:26:0e:1c:ca:e7:4e:0a: 5b:5d:86:ee:18:e9:87:7d:dd:85:4c:85:cf:8e:5b: 3d:cd:a8:0f:74:91:6c:98:51:31:71:b5:c5:a0:37: a1:c4:66:13:ba:1d:04:7d:cf:cd:58:01:be:dc:67: e5:cd:a7:30:29:19:8e:ce:29:73:4c:04:29:7f:ba: f7:56:0c:2b:1b:b3:ef:19:38:5b:3e:83:6a:ef:50: 45:67:62:c0:e1:6b:ec:96:3c:c1:2e:38:72:49:b9: 2b:13:91:e1:0c:38:07:b7:0a:64:c4:fd:96:6e:4f: 31:bd:c0:9a:98:92:45:5c:6f:75:75:62:86:54:03: 57:ff:74:c9:87:d1:35:39:bb:21:2e:8c:dc:66:e0: 99:11:c7:c3:4c:31:e5:58:d0:bd:59:ff:a8:09:d5: a0:cf:18:ce:58:70:d8:61:59:95:0c:08:80:db:76: 5f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A2:DD:EA:A2:44:C4:2B:D2:8F:27:62:25:A2:88:77:35:08:3A:FF X509v3 Authority Key Identifier: keyid:20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/0qLd6qJExCvSjydiJaKIdzUIOv8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.142.232.0/22 91.205.128.0/22 185.34.20.0/22 185.189.100.0/22 185.244.20.0/22 Signature Algorithm: sha256WithRSAEncryption 81:55:19:3d:1b:f6:7e:b8:6d:e0:69:11:a0:ce:f2:e3:73:e7: 5b:24:b7:2d:a4:78:00:38:cc:5c:80:10:fc:94:2c:48:87:2b: 82:23:f7:a6:3e:e2:bf:66:6d:18:df:e2:40:8a:62:6b:bc:67: 9b:34:d1:7a:90:7e:f2:ed:d7:d9:0f:c9:dd:c4:57:2c:97:f7: 9e:f0:9f:b0:51:94:1e:e4:e3:e2:8a:42:ac:e0:5b:1a:05:be: 9e:aa:98:fb:53:8c:29:3c:cb:40:53:73:e8:d4:e1:2d:ec:01: 35:5a:c1:29:95:81:68:26:22:90:61:b5:ae:ae:90:27:9d:a6: 20:32:44:bb:b2:09:15:89:58:8c:f2:65:5d:13:61:78:e8:21: a5:30:33:54:1a:1e:7b:4d:5e:86:40:de:8b:ce:2f:9a:a1:73: b2:0c:95:a7:e6:c6:35:2e:89:eb:17:79:21:a3:79:06:4c:36: b1:c0:fa:6f:69:d0:cd:99:b1:32:42:f4:40:40:46:d8:be:f1: 33:e8:22:2f:5d:d2:b3:7a:cb:f9:b2:61:cf:11:8f:4d:67:0b: 8d:38:0c:57:df:6f:06:03:93:50:26:30:75:b9:cb:68:bd:6c: ad:23:bc:a5:f5:ac:e6:a4:fe:ad:56:a4:42:69:aa:db:e2:c7: 0d:f3:13:22 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/gnEl1FU+3C68nlEGD4AwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZDI2MzNiZmZiMTZkYTJkNzVlZGFmNDliYzgyMTE4N2Nm Yjg4ZWYwHhcNMjYwMTAyMTYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmEyZGRlYWEyNDRjNDJiZDI4ZjI3NjIyNWEyODg3NzM1MDgzYWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC9Hg6EkVLS0BCfKW42QDtYlXd9N YANTUKJyX6RSSMewzjegjux66yO2H3M5KixXer4q62PGcbH2Dbo4Q5a+kiIay1Y7 M9g58fFadRhz4LbdKSYOHMrnTgpbXYbuGOmHfd2FTIXPjls9zagPdJFsmFExcbXF oDehxGYTuh0Efc/NWAG+3GflzacwKRmOzilzTAQpf7r3VgwrG7PvGThbPoNq71BF Z2LA4WvsljzBLjhySbkrE5HhDDgHtwpkxP2Wbk8xvcCamJJFXG91dWKGVANX/3TJ h9E1ObshLozcZuCZEcfDTDHlWNC9Wf+oCdWgzxjOWHDYYVmVDAiA23Zf7QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFNKi3eqiRMQr0o8nYiWiiHc1CDr/MB8GA1UdIwQY MBaAFCDSYzv/sW2i117a9JvIIRh8+4jvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU5Kak9fLXhiYUxYWHRyMG04Z2hHSHo3aU84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi83ZjA0NjQtMjI2ZC00ZjQ5LWEyNzAt MWNkNmM4NzFjMWU4LzEvMHFMZDZxSkV4Q3ZTanlkaUphS0lkelVJT3Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi83ZjA0NjQtMjI2ZC00ZjQ5LWEyNzAtMWNkNmM4NzFjMWU4 LzEvSU5Kak9fLXhiYUxYWHRyMG04Z2hHSHo3aU84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCTo7oAwQC W82AAwQCuSIUAwQCub1kAwQCufQUMA0GCSqGSIb3DQEBCwUAA4IBAQCBVRk9G/Z+ uG3gaRGgzvLjc+dbJLctpHgAOMxcgBD8lCxIhyuCI/emPuK/Zm0Y3+JAimJrvGeb NNF6kH7y7dfZD8ndxFcsl/ee8J+wUZQe5OPiikKs4FsaBb6eqpj7U4wpPMtAU3Po 1OEt7AE1WsEplYFoJiKQYbWurpAnnaYgMkS7sgkViViM8mVdE2F46CGlMDNUGh57 TV6GQN6Lzi+aoXOyDJWn5sY1LonrF3kho3kGTDaxwPpvadDNmbEyQvRAQEbYvvEz 6CIvXdKzesv5smHPEY9NZwuNOAxX328GA5NQJjB1uctovWytI7yl9azmpP6tVqRC aarb4scN8xMi -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:15 2026 by rpki-client