This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/DsE2Pr9IN7rJIvUK10gbOEMiDww.roa File: DsE2Pr9IN7rJIvUK10gbOEMiDww.roa (raw, json) Hash identifier: 3j8bdASeJ0zHcaqofBlBljdvHSO6WNTIHFBrgkx01dA= Subject key identifier: 0E:C1:36:3E:BF:48:37:BA:C9:22:F5:0A:D7:48:1B:38:43:22:0F:0C Certificate issuer: /CN=ae1eb280d1722846a44124c4c62d0059f61af242 Certificate serial: 019B7F8216B346C6FE811B23336ECA59646D Authority key identifier: AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/DsE2Pr9IN7rJIvUK10gbOEMiDww.roa Signing time: Fri 02 Jan 2026 16:19:50 +0000 ROA not before: Fri 02 Jan 2026 16:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42428 IP address blocks: 87.230.128.0/19 maxlen: 19 87.230.160.0/19 maxlen: 19 87.230.192.0/18 maxlen: 18 88.84.96.0/19 maxlen: 19 88.84.96.0/20 maxlen: 20 88.84.96.0/22 maxlen: 22 88.84.100.0/22 maxlen: 22 88.84.104.0/21 maxlen: 21 88.84.112.0/20 maxlen: 20 185.90.16.0/22 maxlen: 22 212.11.160.0/23 maxlen: 23 212.11.162.0/24 maxlen: 24 212.11.163.0/24 maxlen: 24 212.11.164.0/24 maxlen: 24 212.11.165.0/24 maxlen: 24 212.11.166.0/24 maxlen: 24 212.11.167.0/24 maxlen: 24 212.11.168.0/23 maxlen: 23 212.11.170.0/24 maxlen: 24 212.11.171.0/24 maxlen: 24 212.11.172.0/24 maxlen: 24 212.11.173.0/24 maxlen: 24 212.11.174.0/23 maxlen: 23 212.11.176.0/24 maxlen: 24 212.11.177.0/24 maxlen: 24 212.11.178.0/23 maxlen: 23 212.11.180.0/24 maxlen: 24 212.11.181.0/24 maxlen: 24 212.11.182.0/24 maxlen: 24 212.11.183.0/24 maxlen: 24 212.11.184.0/24 maxlen: 24 212.11.185.0/24 maxlen: 24 212.11.186.0/23 maxlen: 23 212.11.188.0/22 maxlen: 22 2a02:fc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:16:b3:46:c6:fe:81:1b:23:33:6e:ca:59:64:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae1eb280d1722846a44124c4c62d0059f61af242 Validity Not Before: Jan 2 16:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ec1363ebf4837bac922f50ad7481b3843220f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ea:34:fb:3a:ec:96:33:25:ca:0c:49:8e:1a: f4:8f:18:30:5f:3a:17:cf:27:cf:ea:e8:04:0c:00: e3:b7:d0:c7:b0:0e:6f:46:a8:b7:ee:6e:40:33:82: 60:f4:c3:45:a1:62:58:9a:0a:f1:59:9b:7f:b5:01: e1:6c:3a:a8:86:25:11:f9:85:3d:47:86:5b:38:d4: 2d:08:ba:30:b2:4d:e9:02:0d:19:49:62:bb:1e:9c: a4:cc:1c:ea:c3:8b:44:c8:51:72:3c:f3:34:a3:8e: 39:d0:26:6d:25:61:0e:24:81:84:fa:8a:37:90:97: 9e:f6:d1:e7:84:30:1a:f2:90:bb:83:9c:47:89:f3: 13:14:d9:b2:ce:63:30:62:63:a0:29:fc:63:24:45: e9:21:52:f8:40:9b:c1:22:a4:09:de:5e:6b:6d:e8: 98:dc:f4:ae:c7:66:3f:fb:3f:43:a3:98:da:16:4a: 48:88:78:0b:5e:f8:f2:4f:d9:ce:f9:98:04:fd:a9: 19:35:71:03:5c:a4:dc:ea:ed:10:b8:c1:7b:5d:0c: c0:8c:ae:8e:dc:77:cf:ea:55:74:d4:b3:9e:97:74: 02:46:37:d4:44:61:de:ef:e1:51:07:c5:01:d5:44: b6:04:d4:bd:b6:b5:4b:21:c2:9d:7e:aa:2c:d4:f4: 6d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C1:36:3E:BF:48:37:BA:C9:22:F5:0A:D7:48:1B:38:43:22:0F:0C X509v3 Authority Key Identifier: keyid:AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/DsE2Pr9IN7rJIvUK10gbOEMiDww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.230.128.0/17 88.84.96.0/19 185.90.16.0/22 212.11.160.0/19 IPv6: 2a02:fc0::/29 Signature Algorithm: sha256WithRSAEncryption 85:a5:4e:7c:09:f3:62:58:32:c7:ca:11:30:55:88:1f:27:49: 88:24:a5:66:05:75:a3:1a:68:f1:b1:ba:1c:c5:4b:5b:44:8a: 3a:33:aa:3f:34:cd:cc:9d:df:33:55:d7:22:01:f4:38:49:ef: 3d:07:c2:d3:d9:2c:3c:2e:9b:05:f2:e8:69:ab:69:d6:b7:e5: 2a:e9:f9:a9:e8:6d:41:02:2b:57:e1:05:89:b3:30:01:91:39: e3:35:56:a2:c1:48:fe:50:5c:a9:df:26:75:f9:da:0e:15:d7: 90:ff:cb:40:53:b8:a0:67:2f:41:93:a3:f9:a4:7b:3f:57:b0: fe:7c:86:ac:8c:72:9c:2b:ae:9a:cb:cd:0f:3a:12:35:fc:2c: 04:b5:6b:6f:28:59:b0:ee:44:2f:d4:0f:61:98:77:fc:46:82: e0:2f:26:81:49:11:06:be:74:d6:e8:82:e8:a5:da:70:ce:6d: b5:cd:ec:93:99:21:82:f2:c0:23:ea:41:ce:1c:42:42:98:96: 5e:05:70:00:6b:b6:80:e7:8a:84:70:c1:7b:02:34:b8:cf:ac: f4:06:09:41:0c:e5:52:f1:65:b2:57:c8:de:28:3c:f2:10:83: 5f:35:bb:a0:cd:72:7e:15:6c:3c:c6:51:5d:b1:5c:65:14:74: af:e9:44:e9 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/ghazRsb+gRsjM27KWWRtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMWViMjgwZDE3MjI4NDZhNDQxMjRjNGM2MmQwMDU5ZjYx YWYyNDIwHhcNMjYwMTAyMTYxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWMxMzYzZWJmNDgzN2JhYzkyMmY1MGFkNzQ4MWIzODQzMjIwZjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuo0+zrsljMlygxJjhr0jxgwXzoX zyfP6ugEDADjt9DHsA5vRqi37m5AM4Jg9MNFoWJYmgrxWZt/tQHhbDqohiUR+YU9 R4ZbONQtCLowsk3pAg0ZSWK7HpykzBzqw4tEyFFyPPM0o4450CZtJWEOJIGE+oo3 kJee9tHnhDAa8pC7g5xHifMTFNmyzmMwYmOgKfxjJEXpIVL4QJvBIqQJ3l5rbeiY 3PSux2Y/+z9Do5jaFkpIiHgLXvjyT9nO+ZgE/akZNXEDXKTc6u0QuMF7XQzAjK6O 3HfP6lV01LOel3QCRjfURGHe7+FRB8UB1US2BNS9trVLIcKdfqos1PRtTQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFA7BNj6/SDe6ySL1CtdIGzhDIg8MMB8GA1UdIwQY MBaAFK4esoDRcihGpEEkxMYtAFn2GvJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmg2eWdORnlLRWFrUVNURXhpMEFXZllhOGtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xZmRmMDQtOGI0ZS00MzMyLWE0ZGUt Nzc5M2I5ZWZiMWJkLzEvRHNFMlByOUlON3JKSXZVSzEwZ2JPRU1pRHd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8xZmRmMDQtOGI0ZS00MzMyLWE0ZGUtNzc5M2I5ZWZiMWJk LzEvcmg2eWdORnlLRWFrUVNURXhpMEFXZllhOGtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQHV+aAAwQF WFRgAwQCuVoQAwQF1AugMA0EAgACMAcDBQMqAg/AMA0GCSqGSIb3DQEBCwUAA4IB AQCFpU58CfNiWDLHyhEwVYgfJ0mIJKVmBXWjGmjxsbocxUtbRIo6M6o/NM3Mnd8z VdciAfQ4Se89B8LT2Sw8LpsF8uhpq2nWt+Uq6fmp6G1BAitX4QWJszABkTnjNVai wUj+UFyp3yZ1+doOFdeQ/8tAU7igZy9Bk6P5pHs/V7D+fIasjHKcK66ay80POhI1 /CwEtWtvKFmw7kQv1A9hmHf8RoLgLyaBSREGvnTW6ILopdpwzm21zeyTmSGC8sAj 6kHOHEJCmJZeBXAAa7aA54qEcMF7AjS4z6z0BglBDOVS8WWyV8jeKDzyEINfNbug zXJ+FWw8xlFdsVxlFHSv6UTp -----END CERTIFICATE-----Generated at Tue Feb 10 05:55:10 2026 by rpki-client