This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/aQAtN8hisUl-Fr4KbF-LGPKAj8s.roa File: aQAtN8hisUl-Fr4KbF-LGPKAj8s.roa (raw, json) Hash identifier: mLF2Kf7anYzulE7sB7wSf5Xv7XVNp9u3/BFnkY4aoaI= Subject key identifier: 69:00:2D:37:C8:62:B1:49:7E:16:BE:0A:6C:5F:8B:18:F2:80:8F:CB Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c Certificate serial: 019B76EB2B69FFB7F1F661B8955A18A62C2A Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/aQAtN8hisUl-Fr4KbF-LGPKAj8s.roa Signing time: Thu 01 Jan 2026 00:18:02 +0000 ROA not before: Thu 01 Jan 2026 00:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196670 IP address blocks: 91.213.26.0/24 maxlen: 24 194.36.92.0/24 maxlen: 24 195.200.254.0/23 maxlen: 23 195.200.254.0/24 maxlen: 24 195.200.255.0/24 maxlen: 24 2a04:9140:3001::/48 maxlen: 48 2a04:9140:3041::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2b:69:ff:b7:f1:f6:61:b8:95:5a:18:a6:2c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c Validity Not Before: Jan 1 00:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69002d37c862b1497e16be0a6c5f8b18f2808fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:62:01:f9:c6:f4:34:20:61:5b:26:4c:86:4b: 47:a2:bf:4d:4f:b3:32:8a:a3:5c:e5:b1:9a:b7:71: 47:8e:52:52:52:f8:0b:75:2c:37:bc:da:fa:58:4e: be:0a:ff:19:7b:33:82:cf:e0:b3:36:96:3b:83:c4: ed:87:3d:67:4f:92:3c:a6:ed:45:e2:a8:a5:ce:49: e6:b7:fb:85:48:1a:82:58:08:d5:70:f4:f9:92:9b: 5f:7d:d3:8b:c6:d0:6f:57:d0:60:eb:4b:96:51:1c: f7:43:0e:38:1f:0f:ad:dc:dc:f5:22:49:f3:f5:07: 57:ae:ef:20:bd:e8:12:2b:76:7e:23:5c:a5:f1:21: 48:c5:fc:c1:cd:e7:6d:cd:2b:30:a0:18:a7:e9:31: ec:2a:c4:27:f6:53:b4:d9:40:d3:af:f1:f0:c2:e4: 26:db:ef:28:38:53:1a:7c:71:84:ec:6b:ff:be:56: 36:e2:97:54:72:7f:d9:87:5f:ef:df:ab:d8:cd:ee: 9d:16:52:fc:b9:83:7a:61:b6:2e:71:63:94:c7:c9: 6a:f4:4d:7f:1f:68:82:e1:e3:27:35:88:49:d3:9b: fb:f6:1e:f5:fb:0e:a1:cd:39:a8:db:63:02:8e:8d: 0f:10:60:20:e5:73:56:05:21:3c:67:7f:e0:14:20: 2a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:00:2D:37:C8:62:B1:49:7E:16:BE:0A:6C:5F:8B:18:F2:80:8F:CB X509v3 Authority Key Identifier: keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/aQAtN8hisUl-Fr4KbF-LGPKAj8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.26.0/24 194.36.92.0/24 195.200.254.0/23 IPv6: 2a04:9140:3001::/48 2a04:9140:3041::/48 Signature Algorithm: sha256WithRSAEncryption 0c:e5:65:7d:76:4a:d6:b6:8e:6e:86:1e:67:66:8e:47:41:e7: 94:dc:b5:da:d4:68:e0:4c:d4:62:2c:73:e7:5b:23:b9:64:c9: 95:e2:9d:53:62:26:05:e0:76:4d:49:c9:66:73:22:cb:00:6d: 07:dd:87:3d:f8:57:d5:f6:ee:db:c2:39:22:52:b8:d4:5b:e8: 15:a1:04:42:69:e4:a5:a9:85:a4:54:03:65:3b:23:73:12:b8: d9:0c:ab:c1:85:72:15:85:15:50:8e:20:ee:1c:64:27:f8:3e: c1:da:a9:42:fe:54:52:d3:64:e6:c4:7e:18:01:dc:f1:fd:da: 2f:78:80:5c:7d:87:d3:2e:fd:e3:3d:5d:d3:eb:bf:6f:04:42: 5c:5b:5d:20:df:ea:d5:fb:c2:5f:81:d4:95:94:08:d4:12:b1: cd:ef:05:0b:e0:57:0a:45:9c:83:35:3d:32:59:75:cb:00:68: 45:ba:d5:3e:50:22:b1:5f:fe:fc:82:90:06:e1:ac:67:ce:11: 59:fa:52:85:bd:fa:b2:b5:af:87:72:02:d9:ca:c0:cf:01:48: 40:93:1c:c6:56:92:e7:21:62:ed:da:a5:81:c4:4a:3d:ae:7f: 8d:64:e3:f8:03:89:03:c1:06:0e:50:a1:38:01:f5:5e:ae:09: 59:32:01:f5 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt26ytp/7fx9mG4lVoYpiwqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZWIzOGUzNGJiZTE3ZTE1NzcyNzA2YzdhOTYxYTg1ZTVk MThiNWMwHhcNMjYwMTAxMDAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTAwMmQzN2M4NjJiMTQ5N2UxNmJlMGE2YzVmOGIxOGYyODA4ZmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmIB+cb0NCBhWyZMhktHor9NT7My iqNc5bGat3FHjlJSUvgLdSw3vNr6WE6+Cv8ZezOCz+CzNpY7g8Tthz1nT5I8pu1F 4qilzknmt/uFSBqCWAjVcPT5kptffdOLxtBvV9Bg60uWURz3Qw44Hw+t3Nz1Iknz 9QdXru8gvegSK3Z+I1yl8SFIxfzBzedtzSswoBin6THsKsQn9lO02UDTr/HwwuQm 2+8oOFMafHGE7Gv/vlY24pdUcn/Zh1/v36vYze6dFlL8uYN6YbYucWOUx8lq9E1/ H2iC4eMnNYhJ05v79h71+w6hzTmo22MCjo0PEGAg5XNWBSE8Z3/gFCAq1QIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFGkALTfIYrFJfha+CmxfixjygI/LMB8GA1UdIwQY MBaAFAvrOONLvhfhV3JwbHqWGoXl0YtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQy1zNDQwdS1GLUZYY25Cc2VwWWFoZVhSaTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zNzMxNDYtMmM5ZC00NWNjLTg1Y2Mt OWI3OTk3NDgxZjcyLzEvYVFBdE44aGlzVWwtRnI0S2JGLUxHUEtBajhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zNzMxNDYtMmM5ZC00NWNjLTg1Y2MtOWI3OTk3NDgxZjcy LzEvQy1zNDQwdS1GLUZYY25Cc2VwWWFoZVhSaTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQAW9UaAwQA wiRcAwQBw8j+MBgEAgACMBIDBwAqBJFAMAEDBwAqBJFAMEEwDQYJKoZIhvcNAQEL BQADggEBAAzlZX12Sta2jm6GHmdmjkdB55TctdrUaOBM1GIsc+dbI7lkyZXinVNi JgXgdk1JyWZzIssAbQfdhz34V9X27tvCOSJSuNRb6BWhBEJp5KWphaRUA2U7I3MS uNkMq8GFchWFFVCOIO4cZCf4PsHaqUL+VFLTZObEfhgB3PH92i94gFx9h9Mu/eM9 XdPrv28EQlxbXSDf6tX7wl+B1JWUCNQSsc3vBQvgVwpFnIM1PTJZdcsAaEW61T5Q IrFf/vyCkAbhrGfOEVn6UoW9+rK1r4dyAtnKwM8BSECTHMZWkuchYu3apYHESj2u f41k4/gDiQPBBg5QoTgB9V6uCVkyAfU= -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:34 2026 by rpki-client