This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a9a51a-e8e3-497a-aba2-e799c23aac20/1/FQ4np3Uu_U8HBc_wlmyGfaHB8_k.roa File: FQ4np3Uu_U8HBc_wlmyGfaHB8_k.roa (raw, json) Hash identifier: ZMkh1EkPj0lBhpV7GegP5F1AQLzZZxZ3YJL9c+bLr0k= Subject key identifier: 15:0E:27:A7:75:2E:FD:4F:07:05:CF:F0:96:6C:86:7D:A1:C1:F3:F9 Certificate issuer: /CN=4364e7b0eef204835c7df2a89f60c02be1d89add Certificate serial: 019B7EA51F2AC7083E4F5481737C6F2365C7 Authority key identifier: 43:64:E7:B0:EE:F2:04:83:5C:7D:F2:A8:9F:60:C0:2B:E1:D8:9A:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2TnsO7yBINcffKon2DAK-HYmt0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a9a51a-e8e3-497a-aba2-e799c23aac20/1/FQ4np3Uu_U8HBc_wlmyGfaHB8_k.roa Signing time: Fri 02 Jan 2026 12:18:29 +0000 ROA not before: Fri 02 Jan 2026 12:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213500 IP address blocks: 94.232.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a9a51a-e8e3-497a-aba2-e799c23aac20/1/Q2TnsO7yBINcffKon2DAK-HYmt0.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/a9a51a-e8e3-497a-aba2-e799c23aac20/1/Q2TnsO7yBINcffKon2DAK-HYmt0.mft rsync://rpki.ripe.net/repository/DEFAULT/Q2TnsO7yBINcffKon2DAK-HYmt0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:1f:2a:c7:08:3e:4f:54:81:73:7c:6f:23:65:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4364e7b0eef204835c7df2a89f60c02be1d89add Validity Not Before: Jan 2 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=150e27a7752efd4f0705cff0966c867da1c1f3f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:75:d2:0f:d7:8d:cd:d2:91:72:1c:2d:22:75: b2:67:18:0c:87:1d:8a:8a:0f:2b:cf:e4:cf:43:59: 0e:40:29:06:e9:02:51:02:06:11:19:32:f1:dd:05: 6e:0d:46:85:92:9f:44:7c:7f:1a:da:7f:0b:04:0c: 7e:a5:b1:89:2b:fc:a3:8b:8c:85:80:37:fb:1f:b2: 0c:71:91:a4:e2:a6:8c:70:10:ca:1f:dc:00:8f:ea: b6:78:59:5d:30:eb:8a:0f:d7:34:6c:c6:33:f6:a1: e0:bc:81:4e:f1:34:10:a1:ba:28:0b:b1:e2:49:21: 70:ef:a9:40:69:f7:e0:69:9d:ce:63:2e:9b:25:e2: f8:f3:ff:ca:8c:3f:76:4f:c5:6c:17:41:1a:9e:5b: 97:14:c9:dd:9f:d0:e6:4c:bd:f2:a4:f0:d3:67:70: 25:49:36:b1:d3:04:4b:17:34:20:aa:4d:a5:50:ce: 17:00:7a:ed:7d:52:e8:00:57:23:01:3b:ca:e3:4d: 99:e7:ab:83:1d:ab:c9:be:90:46:14:fc:64:8e:4a: 9e:d9:62:c2:5c:8b:73:1d:42:ac:41:ec:5d:b9:46: a1:bc:56:22:73:52:93:22:68:e1:64:42:e1:9c:12: 78:64:70:e4:cc:f3:7e:41:57:21:c1:58:e9:c7:f6: ea:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0E:27:A7:75:2E:FD:4F:07:05:CF:F0:96:6C:86:7D:A1:C1:F3:F9 X509v3 Authority Key Identifier: keyid:43:64:E7:B0:EE:F2:04:83:5C:7D:F2:A8:9F:60:C0:2B:E1:D8:9A:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2TnsO7yBINcffKon2DAK-HYmt0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a9a51a-e8e3-497a-aba2-e799c23aac20/1/FQ4np3Uu_U8HBc_wlmyGfaHB8_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a9a51a-e8e3-497a-aba2-e799c23aac20/1/Q2TnsO7yBINcffKon2DAK-HYmt0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.232.252.0/24 Signature Algorithm: sha256WithRSAEncryption 53:e3:08:73:c9:f6:36:2b:93:9c:09:3b:18:a4:2e:79:1d:cc: 44:8d:0d:3e:07:92:87:98:a2:08:e7:11:0f:17:99:37:1f:8b: 9c:2c:1a:ff:2f:4c:ec:d2:89:4c:e0:ab:31:d9:80:22:02:b8: 5b:c0:d2:40:a9:f6:51:f0:2f:07:ca:78:a8:97:2f:45:a9:9e: c7:ff:61:a5:32:91:0e:3e:f5:81:fb:5d:6b:06:12:ed:5e:07: 7c:ac:ee:13:7d:96:0c:40:bb:2d:b6:73:7a:a8:dc:2e:6f:eb: ac:3e:d6:61:6a:1e:60:91:fc:a4:31:8b:af:97:d0:b1:8e:2f: e0:fd:ac:d0:5f:04:70:dc:a5:41:e0:5c:a5:da:6b:d1:fc:49: e0:91:5a:e6:b5:e2:d7:9e:5c:61:45:3f:22:04:d3:5c:c5:15: f2:44:60:86:c5:50:85:88:5b:ee:d8:9e:9f:19:d9:c7:95:91: 9a:18:d9:40:4a:65:23:cc:fa:fe:49:52:23:97:c7:ed:5c:3c: a3:2b:2e:3e:f7:f4:cb:15:68:fe:b1:83:cf:1b:0a:2f:be:cf: b8:29:37:2b:ce:a3:9e:d9:3b:67:2f:77:31:bc:dd:cf:11:63: 59:16:51:7c:9e:39:86:5d:27:85:1d:d4:67:5c:04:10:e5:dd: 83:c1:3b:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pR8qxwg+T1SBc3xvI2XHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNjRlN2IwZWVmMjA0ODM1YzdkZjJhODlmNjBjMDJiZTFk ODlhZGQwHhcNMjYwMTAyMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTBlMjdhNzc1MmVmZDRmMDcwNWNmZjA5NjZjODY3ZGExYzFmM2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nXSD9eNzdKRchwtInWyZxgMhx2K ig8rz+TPQ1kOQCkG6QJRAgYRGTLx3QVuDUaFkp9EfH8a2n8LBAx+pbGJK/yji4yF gDf7H7IMcZGk4qaMcBDKH9wAj+q2eFldMOuKD9c0bMYz9qHgvIFO8TQQobooC7Hi SSFw76lAaffgaZ3OYy6bJeL48//KjD92T8VsF0EanluXFMndn9DmTL3ypPDTZ3Al STax0wRLFzQgqk2lUM4XAHrtfVLoAFcjATvK402Z56uDHavJvpBGFPxkjkqe2WLC XItzHUKsQexduUahvFYic1KTImjhZELhnBJ4ZHDkzPN+QVchwVjpx/bqnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBUOJ6d1Lv1PBwXP8JZshn2hwfP5MB8GA1UdIwQY MBaAFENk57Du8gSDXH3yqJ9gwCvh2JrdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTJUbnNPN3lCSU5jZmZLb24yREFLLUhZbXQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hOWE1MWEtZThlMy00OTdhLWFiYTIt ZTc5OWMyM2FhYzIwLzEvRlE0bnAzVXVfVThIQmNfd2xteUdmYUhCOF9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hOWE1MWEtZThlMy00OTdhLWFiYTItZTc5OWMyM2FhYzIw LzEvUTJUbnNPN3lCSU5jZmZLb24yREFLLUhZbXQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXuj8MA0G CSqGSIb3DQEBCwUAA4IBAQBT4whzyfY2K5OcCTsYpC55HcxEjQ0+B5KHmKII5xEP F5k3H4ucLBr/L0zs0olM4Ksx2YAiArhbwNJAqfZR8C8Hynioly9FqZ7H/2GlMpEO PvWB+11rBhLtXgd8rO4TfZYMQLsttnN6qNwub+usPtZhah5gkfykMYuvl9Cxji/g /azQXwRw3KVB4Fyl2mvR/EngkVrmteLXnlxhRT8iBNNcxRXyRGCGxVCFiFvu2J6f GdnHlZGaGNlASmUjzPr+SVIjl8ftXDyjKy4+9/TLFWj+sYPPGwovvs+4KTcrzqOe 2TtnL3cxvN3PEWNZFlF8njmGXSeFHdRnXAQQ5d2DwTuJ -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:30 2026 by rpki-client