This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/auIoQ7iXjBP_CxYzqJVH1lya_dg.roa File: auIoQ7iXjBP_CxYzqJVH1lya_dg.roa (raw, json) Hash identifier: 815w/JWNOtoWzmvClgMWjmgWYHPkBesTa7X2WZXHV4I= Subject key identifier: 6A:E2:28:43:B8:97:8C:13:FF:0B:16:33:A8:95:47:D6:5C:9A:FD:D8 Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019C3782503601827BE79B3025B85E3747F3 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/auIoQ7iXjBP_CxYzqJVH1lya_dg.roa Signing time: Sat 07 Feb 2026 09:50:13 +0000 ROA not before: Sat 07 Feb 2026 09:50:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 217.147.167.0/24 maxlen: 24 217.147.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:37:82:50:36:01:82:7b:e7:9b:30:25:b8:5e:37:47:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Feb 7 09:50:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ae22843b8978c13ff0b1633a89547d65c9afdd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:41:72:3f:32:08:5c:a1:97:8c:8f:2b:40:81: b7:89:14:fc:5e:55:5d:60:21:64:61:63:2b:ff:64: b1:7d:87:06:ae:19:8a:c3:b9:27:ad:66:dc:c7:6f: 11:68:74:cb:9c:31:2a:3f:b2:dc:1a:94:02:53:6f: d7:bd:83:df:8d:87:74:61:2a:09:a7:22:f5:ac:4b: 9b:84:b7:e8:7c:f4:ef:40:9e:fa:84:b8:2f:54:78: 73:d5:6e:90:92:9e:42:42:75:7b:07:ce:b6:bf:ed: ae:a7:6f:f4:79:47:a4:4f:05:d8:21:78:5f:ec:7f: 36:bd:d0:16:d5:df:6a:19:0d:41:e8:56:f3:b0:b7: 43:6f:48:3a:ea:0a:2b:27:37:ff:83:ab:36:f3:08: c7:28:61:7a:63:21:cb:e2:a6:bf:d6:b0:b4:1a:c9: 7a:84:84:d3:86:c0:86:a2:e5:9f:76:3f:c4:b7:38: c1:38:00:d1:53:36:23:e6:e0:fa:a8:f1:5e:82:cb: 76:be:0e:2f:6b:34:f7:c7:17:11:7e:09:4b:d3:b2: e9:9d:d7:30:40:0c:58:fb:fc:af:67:35:7f:91:07: 02:f5:97:56:00:44:d4:b2:b9:88:9a:37:24:42:f5: f4:36:1d:86:54:fe:f2:11:f3:51:cb:76:8e:20:f8: 25:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E2:28:43:B8:97:8C:13:FF:0B:16:33:A8:95:47:D6:5C:9A:FD:D8 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/auIoQ7iXjBP_CxYzqJVH1lya_dg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.147.167.0-217.147.168.255 Signature Algorithm: sha256WithRSAEncryption 40:88:4f:8f:df:f7:78:af:e9:7c:51:6b:f5:f9:1c:17:1f:98: d5:3b:e5:a6:c5:23:3e:f6:fc:28:e6:d0:e8:1f:58:56:b5:69: b7:07:54:0b:5c:6a:27:b2:6a:11:7f:f2:3e:b1:e8:73:16:f6: 73:75:49:83:6b:83:d8:a7:09:5c:06:3f:b0:a9:67:73:fe:2e: 60:ec:77:f3:84:39:a9:e2:9a:3c:9f:80:3a:21:b8:68:dd:06: 56:14:39:ec:b8:f7:31:f3:87:26:3b:79:56:4a:16:93:75:1d: 83:12:95:f4:e8:b5:24:13:11:81:e1:0d:db:6a:fb:bc:05:7c: ae:91:a9:fe:f4:61:87:b3:96:c0:53:17:5e:4d:bb:a2:cc:20: ea:57:d1:9a:e7:95:11:9e:0a:2a:84:72:5c:ee:d6:ba:d2:69: 3a:29:d4:0b:45:cb:8c:e1:64:2d:34:a7:d2:c8:ac:d7:f9:d1: 2e:55:60:ef:48:9b:a6:d3:ec:07:3e:a3:b1:13:00:7b:92:b6: 2c:4b:81:bb:f3:f1:4b:9e:a4:0c:8f:1b:54:3b:84:d2:b7:0a: fb:1b:32:ab:3f:30:a1:5c:52:88:da:95:2a:79:46:ce:2c:17: ca:cf:1f:e8:a7:d6:f1:68:a2:2a:cb:c6:b9:5d:b5:8b:53:fa: 79:de:87:40 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZw3glA2AYJ755swJbheN0fzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjYwMjA3MDk1MDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWUyMjg0M2I4OTc4YzEzZmYwYjE2MzNhODk1NDdkNjVjOWFmZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUFyPzIIXKGXjI8rQIG3iRT8XlVd YCFkYWMr/2SxfYcGrhmKw7knrWbcx28RaHTLnDEqP7LcGpQCU2/XvYPfjYd0YSoJ pyL1rEubhLfofPTvQJ76hLgvVHhz1W6Qkp5CQnV7B862v+2up2/0eUekTwXYIXhf 7H82vdAW1d9qGQ1B6FbzsLdDb0g66gorJzf/g6s28wjHKGF6YyHL4qa/1rC0Gsl6 hITThsCGouWfdj/EtzjBOADRUzYj5uD6qPFegst2vg4vazT3xxcRfglL07Lpndcw QAxY+/yvZzV/kQcC9ZdWAETUsrmImjckQvX0Nh2GVP7yEfNRy3aOIPglJwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGriKEO4l4wT/wsWM6iVR9Zcmv3YMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvYXVJb1E3aVhqQlBfQ3hZenFKVkgxbHlhX2RnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADZk6cD BADZk6gwDQYJKoZIhvcNAQELBQADggEBAECIT4/f93iv6XxRa/X5HBcfmNU75abF Iz72/Cjm0OgfWFa1abcHVAtcaieyahF/8j6x6HMW9nN1SYNrg9inCVwGP7CpZ3P+ LmDsd/OEOanimjyfgDohuGjdBlYUOey49zHzhyY7eVZKFpN1HYMSlfTotSQTEYHh Ddtq+7wFfK6Rqf70YYezlsBTF15Nu6LMIOpX0ZrnlRGeCiqEclzu1rrSaTop1AtF y4zhZC00p9LIrNf50S5VYO9Im6bT7Ac+o7ETAHuStixLgbvz8UuepAyPG1Q7hNK3 CvsbMqs/MKFcUojalSp5Rs4sF8rPH+in1vFooirLxrldtYtT+nneh0A= -----END CERTIFICATE-----Generated at Sat Feb 14 17:25:19 2026 by rpki-client