This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/F99ntdp2qRkWyX4GCUSsxJD7WV8.roa File: F99ntdp2qRkWyX4GCUSsxJD7WV8.roa (raw, json) Hash identifier: XZkkSfzBXZ21L3XovvCMvlzirbHA8+n/5A9z1OK+IY8= Subject key identifier: 17:DF:67:B5:DA:76:A9:19:16:C9:7E:06:09:44:AC:C4:90:FB:59:5F Certificate issuer: /CN=70c12309ee98d442ec8a7650127eb0e621894df1 Certificate serial: 019B7EA66DB717B3B6B006264D59F59BE90B Authority key identifier: 70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/F99ntdp2qRkWyX4GCUSsxJD7WV8.roa Signing time: Fri 02 Jan 2026 12:19:54 +0000 ROA not before: Fri 02 Jan 2026 12:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42692 IP address blocks: 185.164.178.0/24 maxlen: 24 185.164.179.0/24 maxlen: 24 2a0a:ec02:101::/48 maxlen: 48 2a0a:ec02:201::/48 maxlen: 48 2a0a:ec02:202::/48 maxlen: 48 2a0a:ec02:301::/48 maxlen: 48 2a0a:ec02:401::/48 maxlen: 48 2a0a:ec02:501::/48 maxlen: 48 2a0a:ec02:701::/48 maxlen: 48 2a0a:ec02:801::/48 maxlen: 48 2a0a:ec02:901::/48 maxlen: 48 2a0a:ec02:902::/48 maxlen: 48 2a0a:ec02:a01::/48 maxlen: 48 2a0a:ec02:b01::/48 maxlen: 48 2a0a:ec02:c01::/48 maxlen: 48 2a0a:ec02:ff00::/48 maxlen: 48 2a0a:ec02:ff01::/48 maxlen: 48 2a0a:ec04::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:6d:b7:17:b3:b6:b0:06:26:4d:59:f5:9b:e9:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70c12309ee98d442ec8a7650127eb0e621894df1 Validity Not Before: Jan 2 12:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17df67b5da76a91916c97e060944acc490fb595f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:63:3f:51:0b:57:a1:d4:0a:84:0a:49:d9:32: b2:3f:fb:97:67:20:3c:06:41:0b:83:32:25:df:53: c5:e1:78:27:54:b1:81:ba:ac:0f:66:f8:dc:70:b2: 35:f0:03:d4:b6:ed:ad:15:e2:e3:af:e8:d0:36:cd: 5c:dc:4e:b1:5f:af:27:95:b6:b7:8a:ce:8a:5c:d9: e9:3e:d5:da:94:0e:45:f9:90:22:85:10:3c:02:c0: 2e:f8:7a:7a:a1:23:9f:ef:75:44:6b:35:64:40:f3: 10:82:fd:bd:99:a6:f6:a0:8e:4e:98:84:ff:c1:33: b5:f1:b7:7b:55:93:e0:ad:39:42:3a:12:94:89:60: 4a:11:ef:92:23:02:72:73:47:64:7b:b1:d8:1f:88: df:e9:51:97:d6:89:92:e5:cd:5c:10:80:f4:ed:ba: 13:36:31:41:66:ca:56:9d:55:c9:18:b6:29:08:78: b4:64:fd:4a:91:19:19:e8:5f:0d:c8:90:5d:90:e3: 17:4f:f0:87:ff:f9:a8:f2:8a:82:16:3d:6c:2a:d1: 7c:2d:4d:9e:b4:14:1c:88:d3:1e:fb:0d:4b:38:8e: 7c:4e:c3:53:e7:ea:00:e1:e6:df:2b:c6:be:d5:40: bd:b7:54:63:5f:09:d2:b0:34:10:50:53:27:e5:af: ce:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DF:67:B5:DA:76:A9:19:16:C9:7E:06:09:44:AC:C4:90:FB:59:5F X509v3 Authority Key Identifier: keyid:70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/F99ntdp2qRkWyX4GCUSsxJD7WV8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.178.0/23 IPv6: 2a0a:ec02:101::/48 2a0a:ec02:201::-2a0a:ec02:202:ffff:ffff:ffff:ffff:ffff 2a0a:ec02:301::/48 2a0a:ec02:401::/48 2a0a:ec02:501::/48 2a0a:ec02:701::/48 2a0a:ec02:801::/48 2a0a:ec02:901::-2a0a:ec02:902:ffff:ffff:ffff:ffff:ffff 2a0a:ec02:a01::/48 2a0a:ec02:b01::/48 2a0a:ec02:c01::/48 2a0a:ec02:ff00::/47 2a0a:ec04::/32 Signature Algorithm: sha256WithRSAEncryption 56:6d:a8:3f:76:b6:ab:40:33:5e:af:bd:fe:a9:66:96:b9:64: 98:f9:a9:74:f5:45:20:dd:a8:9d:d5:37:c0:ca:a8:1c:3d:40: 22:ff:dc:1c:24:3c:ab:4a:8b:00:80:98:c3:76:8e:45:27:e7: b8:d0:fd:a1:18:dc:e3:1e:88:78:0a:1e:dc:a8:92:5f:b5:ca: a5:85:91:4e:0d:65:e1:e3:e4:00:64:d2:00:d1:b5:2b:a9:30: 5c:b3:9c:a1:7e:04:35:78:74:db:fa:fe:ae:6d:16:9a:93:10: 0b:5c:e2:75:6a:ca:7d:67:3f:29:95:1e:e0:37:88:97:ab:c3: 48:b7:4f:d9:0b:84:22:68:0f:26:6d:d5:b1:65:18:af:e6:11: 5b:0b:47:0e:fa:fb:c8:71:3c:24:d2:e7:4c:3d:bd:f1:fc:f8: e4:9b:25:bd:9b:26:5b:b2:30:3f:16:fc:89:1a:69:52:e4:3c: cd:36:d4:4e:69:74:d3:72:7a:48:98:92:a3:9a:8c:eb:3e:7e: ca:3d:f2:58:a0:51:94:ff:69:b4:6a:72:41:91:46:1d:cc:17: 04:d1:23:99:3c:e9:ad:1a:3e:fb:15:2e:6a:a2:cf:e9:ac:58: 33:45:eb:71:e2:8b:b9:cc:0b:71:5b:26:ab:6f:d1:5d:1f:cd: 3a:09:b5:7b -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt+pm23F7O2sAYmTVn1m+kLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYzEyMzA5ZWU5OGQ0NDJlYzhhNzY1MDEyN2ViMGU2MjE4 OTRkZjEwHhcNMjYwMTAyMTIxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2RmNjdiNWRhNzZhOTE5MTZjOTdlMDYwOTQ0YWNjNDkwZmI1OTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2M/UQtXodQKhApJ2TKyP/uXZyA8 BkELgzIl31PF4XgnVLGBuqwPZvjccLI18APUtu2tFeLjr+jQNs1c3E6xX68nlba3 is6KXNnpPtXalA5F+ZAihRA8AsAu+Hp6oSOf73VEazVkQPMQgv29mab2oI5OmIT/ wTO18bd7VZPgrTlCOhKUiWBKEe+SIwJyc0dke7HYH4jf6VGX1omS5c1cEID07boT NjFBZspWnVXJGLYpCHi0ZP1KkRkZ6F8NyJBdkOMXT/CH//mo8oqCFj1sKtF8LU2e tBQciNMe+w1LOI58TsNT5+oA4ebfK8a+1UC9t1RjXwnSsDQQUFMn5a/OowIDAQAB o4ICnzCCApswHQYDVR0OBBYEFBffZ7XadqkZFsl+BglErMSQ+1lfMB8GA1UdIwQY MBaAFHDBIwnumNRC7Ip2UBJ+sOYhiU3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY01FakNlNlkxRUxzaW5aUUVuNnc1aUdKVGZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi82OWIyOTAtZDM3NS00ZTg5LThmYjUt ZmIyMzVkYmE3YjE4LzEvRjk5bnRkcDJxUmtXeVg0R0NVU3N4SkQ3V1Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi82OWIyOTAtZDM3NS00ZTg5LThmYjUtZmIyMzVkYmE3YjE4 LzEvY01FakNlNlkxRUxzaW5aUUVuNnc1aUdKVGZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG0BggrBgEFBQcBBwEB/wSBpDCBoTAMBAIAATAGAwQBuaSy MIGQBAIAAjCBiQMHACoK7AIBATASAwcAKgrsAgIBAwcAKgrsAgICAwcAKgrsAgMB AwcAKgrsAgQBAwcAKgrsAgUBAwcAKgrsAgcBAwcAKgrsAggBMBIDBwAqCuwCCQED BwAqCuwCCQIDBwAqCuwCCgEDBwAqCuwCCwEDBwAqCuwCDAEDBwEqCuwC/wADBQAq CuwEMA0GCSqGSIb3DQEBCwUAA4IBAQBWbag/drarQDNer73+qWaWuWSY+al09UUg 3aid1TfAyqgcPUAi/9wcJDyrSosAgJjDdo5FJ+e40P2hGNzjHoh4Ch7cqJJftcql hZFODWXh4+QAZNIA0bUrqTBcs5yhfgQ1eHTb+v6ubRaakxALXOJ1asp9Zz8plR7g N4iXq8NIt0/ZC4QiaA8mbdWxZRiv5hFbC0cO+vvIcTwk0udMPb3x/PjkmyW9myZb sjA/FvyJGmlS5DzNNtROaXTTcnpImJKjmozrPn7KPfJYoFGU/2m0anJBkUYdzBcE 0SOZPOmtGj77FS5qos/prFgzRetx4ou5zAtxWyarb9FdH806CbV7 -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:18 2026 by rpki-client