This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/hqL2_Cp_966-Nf1xdK0ELQH3lNQ.roa File: hqL2_Cp_966-Nf1xdK0ELQH3lNQ.roa (raw, json) Hash identifier: lMjEmScvr6aJ0unz4g+pWkszHQy3LFWSbgQbOr7UsIM= Subject key identifier: 86:A2:F6:FC:2A:7F:F7:AE:BE:35:FD:71:74:AD:04:2D:01:F7:94:D4 Certificate issuer: /CN=3f56a63331552ef91d8a0005a338ec982df37c8b Certificate serial: 019B7BA545DAEDFFF3C6BA0BB423C3A2B522 Authority key identifier: 3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/hqL2_Cp_966-Nf1xdK0ELQH3lNQ.roa Signing time: Thu 01 Jan 2026 22:19:47 +0000 ROA not before: Thu 01 Jan 2026 22:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198575 IP address blocks: 194.146.66.0/23 maxlen: 23 194.146.66.0/24 maxlen: 24 194.146.67.0/24 maxlen: 24 2a00:6e40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:45:da:ed:ff:f3:c6:ba:0b:b4:23:c3:a2:b5:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f56a63331552ef91d8a0005a338ec982df37c8b Validity Not Before: Jan 1 22:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86a2f6fc2a7ff7aebe35fd7174ad042d01f794d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:af:76:77:c0:90:57:6d:97:95:52:ee:8d:8a: c6:23:46:fe:2a:8e:a6:8c:a3:6d:95:5e:32:ff:05: 4c:8a:05:cb:15:29:1a:24:dd:6a:cc:d3:de:a9:5b: d6:6d:fb:2e:91:2c:a5:b8:ba:1e:2c:bc:6b:21:53: c3:c9:55:99:56:e8:9b:26:86:d1:2b:02:aa:d4:f2: 26:b0:06:c0:a2:91:bd:49:82:63:11:e3:8a:1b:2b: 09:6e:55:b1:eb:6a:4c:ba:53:ea:a0:98:1d:2c:5b: 8d:8a:d6:f2:29:5e:33:6e:e0:60:b9:db:4a:4b:4d: 48:d2:8e:d2:4e:8f:62:03:b4:78:8c:69:a3:ce:3b: 40:76:64:5c:87:f0:1b:38:e5:e7:69:4d:ea:f2:af: cb:3f:3e:5f:ab:e1:21:bf:bb:a1:75:11:a3:b9:56: d5:0e:2c:98:e2:6c:87:65:bf:11:a4:78:40:31:f3: 9d:5c:15:d3:9c:39:1d:09:fc:1b:4d:7d:ce:df:81: 59:51:0f:b3:4f:0d:f7:12:0c:66:b4:ca:d1:83:f3: 4b:00:47:94:41:d1:39:5f:6f:5c:16:55:d1:0f:17: 5e:0b:6a:54:6d:fd:56:71:8f:07:06:5b:fd:3b:9b: 24:a2:cc:ac:e9:d4:0c:24:07:6c:0b:2a:2f:b9:66: 6a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A2:F6:FC:2A:7F:F7:AE:BE:35:FD:71:74:AD:04:2D:01:F7:94:D4 X509v3 Authority Key Identifier: keyid:3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/hqL2_Cp_966-Nf1xdK0ELQH3lNQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.146.66.0/23 IPv6: 2a00:6e40::/32 Signature Algorithm: sha256WithRSAEncryption 3c:1d:0b:03:3b:3f:9b:38:f1:10:c2:e9:c7:3a:a9:61:d2:d7: 69:66:8b:9b:ac:17:3b:08:31:85:96:2f:b5:46:24:7e:45:9f: b7:59:82:ea:cc:57:e8:bb:b0:bf:53:d1:15:69:88:77:dd:25: b9:c9:0a:ae:9c:ae:a5:c3:34:24:a5:0f:66:9d:22:ba:41:ec: 57:0f:bd:8c:ef:2b:7d:6f:14:a3:fc:98:d8:ac:ec:40:96:4b: 78:2e:b6:bb:61:42:cf:61:c1:b3:8e:ce:05:a7:97:86:2e:da: d2:96:e0:b6:cc:9b:dc:f4:36:e8:55:20:19:49:25:57:c3:99: ab:d7:c5:11:d0:7e:00:b0:95:f6:00:57:5a:8d:a5:23:78:bd: 12:56:02:15:66:3a:16:f4:ae:75:db:ab:bd:8e:1b:77:08:1b: e4:2f:8c:96:87:4f:f7:e1:8e:80:6d:b1:ea:19:a2:c7:f4:78: 8f:e8:f6:be:f6:fb:5a:0e:54:bb:16:d6:cd:b3:7b:fd:2f:f6: a7:8b:1f:9f:00:2a:78:c1:41:27:aa:45:32:72:35:f8:1a:17: 6a:23:e5:a9:6d:84:78:b6:4b:b3:3b:8e:63:84:e4:64:d2:d3: f3:17:df:54:86:b3:10:42:2b:c6:1d:f5:b1:6a:19:00:e1:21: ea:ca:33:e2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pUXa7f/zxroLtCPDorUiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNTZhNjMzMzE1NTJlZjkxZDhhMDAwNWEzMzhlYzk4MmRm MzdjOGIwHhcNMjYwMTAxMjIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmEyZjZmYzJhN2ZmN2FlYmUzNWZkNzE3NGFkMDQyZDAxZjc5NGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt692d8CQV22XlVLujYrGI0b+Ko6m jKNtlV4y/wVMigXLFSkaJN1qzNPeqVvWbfsukSyluLoeLLxrIVPDyVWZVuibJobR KwKq1PImsAbAopG9SYJjEeOKGysJblWx62pMulPqoJgdLFuNitbyKV4zbuBgudtK S01I0o7STo9iA7R4jGmjzjtAdmRch/AbOOXnaU3q8q/LPz5fq+Ehv7uhdRGjuVbV DiyY4myHZb8RpHhAMfOdXBXTnDkdCfwbTX3O34FZUQ+zTw33EgxmtMrRg/NLAEeU QdE5X29cFlXRDxdeC2pUbf1WcY8HBlv9O5skosys6dQMJAdsCyovuWZqhwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIai9vwqf/euvjX9cXStBC0B95TUMB8GA1UdIwQY MBaAFD9WpjMxVS75HYoABaM47Jgt83yLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDFhbU16RlZMdmtkaWdBRm96anNtQzN6ZklzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yYjE3OWMtMmQyZC00NDIzLWI2ZDYt YjA4MzdhN2Q0NjQxLzEvaHFMMl9DcF85NjYtTmYxeGRLMEVMUUgzbE5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8yYjE3OWMtMmQyZC00NDIzLWI2ZDYtYjA4MzdhN2Q0NjQx LzEvUDFhbU16RlZMdmtkaWdBRm96anNtQzN6ZklzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBwpJCMA0E AgACMAcDBQAqAG5AMA0GCSqGSIb3DQEBCwUAA4IBAQA8HQsDOz+bOPEQwunHOqlh 0tdpZoubrBc7CDGFli+1RiR+RZ+3WYLqzFfou7C/U9EVaYh33SW5yQqunK6lwzQk pQ9mnSK6QexXD72M7yt9bxSj/JjYrOxAlkt4Lra7YULPYcGzjs4Fp5eGLtrSluC2 zJvc9DboVSAZSSVXw5mr18UR0H4AsJX2AFdajaUjeL0SVgIVZjoW9K5126u9jht3 CBvkL4yWh0/34Y6AbbHqGaLH9HiP6Pa+9vtaDlS7FtbNs3v9L/anix+fACp4wUEn qkUycjX4GhdqI+WpbYR4tkuzO45jhORk0tPzF99UhrMQQivGHfWxahkA4SHqyjPi -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:15 2026 by rpki-client