This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/_igUKCILIjVQGGkM5QULk2U3nBo.roa File: _igUKCILIjVQGGkM5QULk2U3nBo.roa (raw, json) Hash identifier: 20wqHq8/cCP5c8/7zi0IPefhfTG7SQ/Exh3yYB/ZfYM= Subject key identifier: FE:28:14:28:22:0B:22:35:50:18:69:0C:E5:05:0B:93:65:37:9C:1A Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac Certificate serial: 019B76EB6F22391CD5C96AA21C84E7762778 Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/_igUKCILIjVQGGkM5QULk2U3nBo.roa Signing time: Thu 01 Jan 2026 00:18:19 +0000 ROA not before: Thu 01 Jan 2026 00:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61053 IP address blocks: 91.211.244.0/22 maxlen: 22 91.225.104.0/22 maxlen: 22 93.115.11.0/24 maxlen: 24 94.176.188.0/24 maxlen: 24 94.176.189.0/24 maxlen: 24 185.34.52.0/22 maxlen: 22 185.80.128.0/22 maxlen: 22 185.111.180.0/24 maxlen: 24 185.111.181.0/24 maxlen: 24 185.111.182.0/24 maxlen: 24 185.111.183.0/24 maxlen: 24 185.169.140.0/22 maxlen: 22 185.172.156.0/24 maxlen: 24 185.172.157.0/24 maxlen: 24 185.172.158.0/24 maxlen: 24 185.172.159.0/24 maxlen: 24 185.233.204.0/22 maxlen: 22 2a05:7cc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:6f:22:39:1c:d5:c9:6a:a2:1c:84:e7:76:27:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac Validity Not Before: Jan 1 00:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe281428220b22355018690ce5050b9365379c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7a:d3:58:e5:58:26:ff:3e:5f:a5:ed:69:54: 28:44:f2:1a:c4:6c:39:51:16:76:c1:fc:a5:61:17: 5a:49:6a:69:6e:5f:f0:8c:7f:43:e8:f8:b2:f0:f9: 1c:24:e9:5a:5f:85:e2:1a:70:42:7f:88:8e:07:63: d6:69:75:e0:37:7d:62:de:bd:6a:94:71:9b:f7:3a: 68:e4:39:5e:6c:46:97:f0:93:5f:9f:3c:6b:a7:66: 24:61:7d:fd:bc:35:b5:07:09:60:6d:8d:6b:97:c1: d8:3b:18:4e:d3:df:08:be:e4:64:7c:87:76:a0:40: 0e:0d:85:19:a8:20:48:5f:aa:1f:88:80:26:3e:8f: 8e:df:8e:74:35:84:5c:53:88:c6:69:99:29:93:0a: 69:03:3f:eb:06:68:de:00:6e:4a:27:d3:d0:2d:48: 25:35:35:ef:13:5a:4d:fa:38:d8:9d:49:0c:07:3a: 54:73:f1:ab:81:6e:9c:a1:41:81:65:3f:58:17:2c: e8:86:24:59:bb:bf:9e:4b:1a:81:46:6b:e6:19:67: f8:4a:61:29:d1:1d:68:c7:8f:41:4e:4b:6f:be:94: e5:b7:63:a2:2e:89:ce:29:45:2e:17:e6:e4:88:31: 64:a3:32:6d:20:89:d3:cc:88:05:b1:fe:54:42:4a: 17:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:28:14:28:22:0B:22:35:50:18:69:0C:E5:05:0B:93:65:37:9C:1A X509v3 Authority Key Identifier: keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/_igUKCILIjVQGGkM5QULk2U3nBo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.244.0/22 91.225.104.0/22 93.115.11.0/24 94.176.188.0/23 185.34.52.0/22 185.80.128.0/22 185.111.180.0/22 185.169.140.0/22 185.172.156.0/22 185.233.204.0/22 IPv6: 2a05:7cc0::/29 Signature Algorithm: sha256WithRSAEncryption 0c:42:dc:bb:99:a0:2d:b5:2a:a6:57:66:f6:8b:f6:be:cb:aa: 67:ea:d8:e3:13:1c:61:69:4c:d9:9c:16:46:3c:82:db:63:d9: a6:77:fa:d2:7a:d6:20:27:ba:fe:26:9f:95:25:67:20:db:24: 68:af:0e:2f:3d:27:d5:1e:df:19:79:ed:26:0c:b0:ea:47:8f: 79:58:4e:af:11:fe:c1:12:89:e3:8d:58:20:9a:01:a4:40:53: 73:6f:2b:1f:51:10:70:0f:20:0c:aa:a2:7d:60:1c:e6:b7:dd: 4b:f9:d4:64:dd:0a:64:09:79:1c:9d:e2:ff:44:e6:e9:5b:d7: 9a:33:5e:e8:46:df:19:95:17:c8:8a:3f:67:4e:b2:ca:b2:14: ab:46:75:ee:66:af:6b:77:bb:75:d9:9c:d8:85:19:23:8c:a2: 34:f2:b5:57:96:50:22:b1:c8:69:2e:99:e4:94:04:75:34:4b: 04:59:33:6d:06:cc:c6:d1:76:3f:b3:4b:49:30:3f:2e:d1:28: 1f:06:bb:28:2b:7c:88:12:b6:be:91:c4:4e:28:c6:bd:f1:1c: 30:2f:8d:26:01:3a:d0:21:d9:8d:98:78:d3:31:e2:e1:1d:29: ec:df:e3:fb:73:15:0d:e4:60:63:55:d5:9b:57:cf:d2:ea:8e: c1:35:ba:a8 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt2628iORzVyWqiHITndid4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNTZhOWVkYjJkOWFkZTIwNGQ4MjMxM2NjZTk4YjY2MjNh OWQ4YWMwHhcNMjYwMTAxMDAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTI4MTQyODIyMGIyMjM1NTAxODY5MGNlNTA1MGI5MzY1Mzc5YzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHrTWOVYJv8+X6XtaVQoRPIaxGw5 URZ2wfylYRdaSWppbl/wjH9D6Piy8PkcJOlaX4XiGnBCf4iOB2PWaXXgN31i3r1q lHGb9zpo5DlebEaX8JNfnzxrp2YkYX39vDW1BwlgbY1rl8HYOxhO098IvuRkfId2 oEAODYUZqCBIX6ofiIAmPo+O3450NYRcU4jGaZkpkwppAz/rBmjeAG5KJ9PQLUgl NTXvE1pN+jjYnUkMBzpUc/GrgW6coUGBZT9YFyzohiRZu7+eSxqBRmvmGWf4SmEp 0R1ox49BTktvvpTlt2OiLonOKUUuF+bkiDFkozJtIInTzIgFsf5UQkoXqwIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFP4oFCgiCyI1UBhpDOUFC5NlN5waMB8GA1UdIwQY MBaAFPJWqe2y2a3iBNgjE8zpi2YjqdisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGxhcDdiTFpyZUlFMkNNVHpPbUxaaU9wMkt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8xMjZjOWUtNGZhNy00OWQ0LTkyOGMt OTEwN2M5MTJkN2Q4LzEvX2lnVUtDSUxJalZRR0drTTVRVUxrMlUzbkJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8xMjZjOWUtNGZhNy00OWQ0LTkyOGMtOTEwN2M5MTJkN2Q4 LzEvOGxhcDdiTFpyZUlFMkNNVHpPbUxaaU9wMkt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQCW9P0AwQC W+FoAwQAXXMLAwQBXrC8AwQCuSI0AwQCuVCAAwQCuW+0AwQCuamMAwQCuaycAwQC uenMMA0EAgACMAcDBQMqBXzAMA0GCSqGSIb3DQEBCwUAA4IBAQAMQty7maAttSqm V2b2i/a+y6pn6tjjExxhaUzZnBZGPILbY9mmd/rSetYgJ7r+Jp+VJWcg2yRorw4v PSfVHt8Zee0mDLDqR495WE6vEf7BEonjjVggmgGkQFNzbysfURBwDyAMqqJ9YBzm t91L+dRk3QpkCXkcneL/RObpW9eaM17oRt8ZlRfIij9nTrLKshSrRnXuZq9rd7t1 2ZzYhRkjjKI08rVXllAischpLpnklAR1NEsEWTNtBszG0XY/s0tJMD8u0SgfBrso K3yIEra+kcROKMa98RwwL40mATrQIdmNmHjTMeLhHSns3+P7cxUN5GBjVdWbV8/S 6o7BNbqo -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:50 2026 by rpki-client