This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/EsO0QD5CXdUij-anfc3uyizv1Bk.roa File: EsO0QD5CXdUij-anfc3uyizv1Bk.roa (raw, json) Hash identifier: na5euGHkt4xmwLlsK1/BfSuIKC6+hS0782FB4HsFc5w= Subject key identifier: 12:C3:B4:40:3E:42:5D:D5:22:8F:E6:A7:7D:CD:EE:CA:2C:EF:D4:19 Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019C31B813CFF84CB6A895BFDCE36953FA17 Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/EsO0QD5CXdUij-anfc3uyizv1Bk.roa Signing time: Fri 06 Feb 2026 06:51:12 +0000 ROA not before: Fri 06 Feb 2026 06:51:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 87.248.132.0/24 maxlen: 24 87.248.134.0/24 maxlen: 24 87.248.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:31:b8:13:cf:f8:4c:b6:a8:95:bf:dc:e3:69:53:fa:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Feb 6 06:51:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12c3b4403e425dd5228fe6a77dcdeeca2cefd419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1c:bf:19:36:3b:41:06:0f:04:29:03:14:16: 19:a7:05:da:6d:ff:55:f6:c5:12:2e:24:17:5c:72: 64:61:d3:c1:b0:80:0c:7d:e1:62:a6:6f:30:3a:5b: ab:2e:12:e0:7c:5b:23:90:fa:42:5f:d0:e2:95:63: 53:9d:0e:99:6b:08:2c:c1:df:47:68:89:e3:92:c2: 03:dc:34:84:87:30:e3:d6:f3:fb:20:3d:6b:7f:62: 87:37:76:52:bc:35:43:c8:b7:b0:e1:f5:2c:76:3b: a4:7b:09:f8:bf:83:47:78:ef:8f:95:1a:c7:72:7b: 26:df:df:46:52:e4:f7:9a:de:ef:18:2c:2e:4d:de: 5b:b2:d8:42:de:11:b4:54:83:d5:89:fb:42:5e:a3: 0e:73:e3:2c:86:44:21:40:df:18:e1:2a:4d:60:88: 7f:31:f6:f1:be:b3:82:d5:a5:fe:be:d9:c4:24:94: d7:25:cb:41:d2:d2:f8:6b:85:93:7a:4f:84:56:5a: 95:e5:2c:fc:5e:6b:df:f3:57:7f:2d:b1:8a:cf:44: dc:24:09:c3:f9:16:d3:65:f6:4a:8f:7c:40:20:b1: f9:2c:e0:8d:d1:49:10:de:9d:aa:84:18:f3:0e:99: 28:9f:4c:22:d7:55:82:8c:98:44:9c:fa:0a:71:70: 19:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C3:B4:40:3E:42:5D:D5:22:8F:E6:A7:7D:CD:EE:CA:2C:EF:D4:19 X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/EsO0QD5CXdUij-anfc3uyizv1Bk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.248.132.0/24 87.248.134.0/24 87.248.143.0/24 Signature Algorithm: sha256WithRSAEncryption 07:79:d2:01:0c:d1:50:a2:22:db:6a:e9:b5:8c:c4:d9:28:79: c6:c1:5f:e2:49:ae:85:25:6a:08:f9:b2:7c:be:ec:22:65:1a: c5:2b:68:76:1c:7e:fd:36:59:3d:28:cc:48:62:ec:1a:45:d5: e8:63:5f:fe:5c:87:8f:28:b2:d2:86:61:fd:47:20:cc:43:eb: 73:53:41:40:6a:59:56:46:13:ac:04:44:c7:9c:cb:8a:51:36: 21:c3:04:54:97:d3:cf:ea:05:7b:47:c4:46:7b:70:a9:e4:da: 8d:71:11:f8:8e:77:9f:46:ab:e9:8c:54:e4:9e:09:89:5d:a8: 24:ed:bb:1e:ff:67:79:e7:5f:74:85:3c:81:d8:7f:54:6e:7a: 11:45:6d:11:7b:3c:64:d1:db:7a:96:5e:6c:34:03:a0:10:77: 27:7f:3e:1f:80:5c:fa:71:10:0f:f4:42:ca:3b:de:ee:72:bb: 2c:c5:9f:ef:c6:73:7b:a0:18:7c:98:c6:0a:91:f0:a6:da:ab: 83:41:82:33:a7:61:05:35:75:92:8c:4d:2f:75:4d:2a:a4:2d: 8b:c5:fc:49:3b:9c:97:78:23:fb:04:4d:23:ec:4c:f3:da:1d: 0b:e7:d4:83:e0:f0:c4:8e:b2:a6:c2:58:26:f5:28:86:9e:b1: 85:93:e4:03 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZwxuBPP+Ey2qJW/3ONpU/oXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjYwMjA2MDY1MTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmMzYjQ0MDNlNDI1ZGQ1MjI4ZmU2YTc3ZGNkZWVjYTJjZWZkNDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBy/GTY7QQYPBCkDFBYZpwXabf9V 9sUSLiQXXHJkYdPBsIAMfeFipm8wOlurLhLgfFsjkPpCX9DilWNTnQ6Zawgswd9H aInjksID3DSEhzDj1vP7ID1rf2KHN3ZSvDVDyLew4fUsdjukewn4v4NHeO+PlRrH cnsm399GUuT3mt7vGCwuTd5bsthC3hG0VIPViftCXqMOc+MshkQhQN8Y4SpNYIh/ MfbxvrOC1aX+vtnEJJTXJctB0tL4a4WTek+EVlqV5Sz8Xmvf81d/LbGKz0TcJAnD +RbTZfZKj3xAILH5LOCN0UkQ3p2qhBjzDpkon0wi11WCjJhEnPoKcXAZ+QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBLDtEA+Ql3VIo/mp33N7sos79QZMB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvRXNPMFFENUNYZFVpai1hbmZjM3V5aXp2MUJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV/iEAwQA V/iGAwQAV/iPMA0GCSqGSIb3DQEBCwUAA4IBAQAHedIBDNFQoiLbaum1jMTZKHnG wV/iSa6FJWoI+bJ8vuwiZRrFK2h2HH79Nlk9KMxIYuwaRdXoY1/+XIePKLLShmH9 RyDMQ+tzU0FAallWRhOsBETHnMuKUTYhwwRUl9PP6gV7R8RGe3Cp5NqNcRH4jnef RqvpjFTkngmJXagk7bse/2d55190hTyB2H9UbnoRRW0Rezxk0dt6ll5sNAOgEHcn fz4fgFz6cRAP9ELKO97ucrssxZ/vxnN7oBh8mMYKkfCm2quDQYIzp2EFNXWSjE0v dU0qpC2LxfxJO5yXeCP7BE0j7Ezz2h0L59SD4PDEjrKmwlgm9SiGnrGFk+QD -----END CERTIFICATE-----Generated at Sat Feb 14 17:23:53 2026 by rpki-client