This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/IWqOv6y-FG5f7yp9nH6xdgnpv8E.roa File: IWqOv6y-FG5f7yp9nH6xdgnpv8E.roa (raw, json) Hash identifier: gkV9ez5h044OMkSTspKV9neDGkCTAKH1+BcOktle2ts= Subject key identifier: 21:6A:8E:BF:AC:BE:14:6E:5F:EF:2A:7D:9C:7E:B1:76:09:E9:BF:C1 Certificate issuer: /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2 Certificate serial: 019B797EE3C3CE7651A609BFE69D65A3B501 Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/IWqOv6y-FG5f7yp9nH6xdgnpv8E.roa Signing time: Thu 01 Jan 2026 12:18:37 +0000 ROA not before: Thu 01 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1741 IP address blocks: 86.50.0.0/16 maxlen: 16 128.214.0.0/16 maxlen: 16 185.229.128.0/22 maxlen: 22 193.166.0.0/15 maxlen: 15 193.166.4.0/24 maxlen: 24 195.148.0.0/16 maxlen: 16 2001:708::/32 maxlen: 32 2001:708:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e3:c3:ce:76:51:a6:09:bf:e6:9d:65:a3:b5:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2 Validity Not Before: Jan 1 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=216a8ebfacbe146e5fef2a7d9c7eb17609e9bfc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:73:d5:b2:3a:35:12:48:b4:2b:74:40:0b:6a: 89:c3:71:33:ee:1e:dc:f6:e1:01:e9:19:f3:72:51: 36:12:15:0f:ad:00:bf:66:91:e3:f8:93:ed:4c:a6: 59:40:fb:1d:80:b8:e5:8c:b8:07:a4:f5:4d:19:9e: 8c:a6:79:46:e6:61:a2:fd:44:b2:e8:16:19:3e:f0: f7:5d:87:b3:80:1e:1c:37:ff:e4:6a:6e:bf:c8:1d: 3a:4c:78:95:70:7c:9c:c3:77:a5:88:f6:28:34:12: dc:da:c3:ad:92:13:17:e4:29:4c:1e:f9:7a:a2:ee: 54:77:82:ce:da:d5:f4:fc:66:89:f0:36:5e:2b:94: df:ad:bf:b9:ea:86:ed:c2:71:b1:73:4e:04:8b:d0: e7:8e:fd:b6:80:a6:11:cb:ac:b6:2c:5d:2d:91:c2: 9c:e0:ae:b1:e5:df:a9:f6:db:25:74:86:54:e0:e4: ac:ff:6b:39:d5:49:4e:67:d9:73:36:c4:0b:3a:63: d2:5e:03:0b:3a:38:d2:37:e6:ca:66:b3:24:12:f1: 47:a7:ee:3f:46:89:b0:17:6d:43:59:8e:9f:be:c5: 02:c1:45:c5:70:79:52:79:4f:12:06:43:77:c1:e3: 88:25:d4:fd:94:6e:a5:31:8d:20:ee:a1:b4:5c:33: a7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6A:8E:BF:AC:BE:14:6E:5F:EF:2A:7D:9C:7E:B1:76:09:E9:BF:C1 X509v3 Authority Key Identifier: keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/IWqOv6y-FG5f7yp9nH6xdgnpv8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.50.0.0/16 128.214.0.0/16 185.229.128.0/22 193.166.0.0/15 195.148.0.0/16 IPv6: 2001:708::/32 Signature Algorithm: sha256WithRSAEncryption 40:6b:95:51:f4:d1:69:7e:b8:a9:3a:9e:0b:6a:79:25:60:d4: 53:7e:1c:aa:c1:26:9d:d3:df:e8:e8:55:ef:0e:db:55:0d:71: 47:8b:46:fe:ae:3c:69:ba:00:3f:3f:bb:5d:fb:5a:c8:d7:47: c9:5c:c2:5d:a1:34:0a:17:ee:11:66:13:7b:17:97:bb:85:47: f5:cf:62:02:a2:de:e6:8e:e5:3b:d1:fd:e3:51:10:9d:b2:3b: 13:a5:f2:83:93:b3:12:e6:45:2b:e9:8a:c7:4c:f0:f7:e5:00: fe:41:7c:19:14:31:ac:ef:0e:05:9c:09:7d:35:e3:31:39:57: 37:5f:1b:9b:eb:c6:8f:cb:3b:f2:52:01:18:c0:e7:aa:3e:67: fa:26:89:b2:5b:cf:b7:cb:e9:b0:c9:e7:9a:c6:9e:a1:4a:25: 32:35:12:06:4b:07:02:21:88:34:d5:8b:fc:cd:80:d5:f3:64: 57:b1:22:1b:52:de:38:91:34:dd:81:a5:db:df:7b:65:61:52: f3:69:9a:6c:a7:e5:02:5d:5e:f4:5d:7b:d9:37:ea:5c:64:3f: 54:11:b3:43:ad:fe:52:a7:ce:85:34:92:5f:ae:02:44:18:09: f4:91:ea:1f:e3:0d:d0:bd:1f:c4:67:10:71:40:1f:fc:d8:99: a1:09:ab:e0 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt5fuPDznZRpgm/5p1lo7UBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OWZhNmE2YjFlYzdhZTZlYThiNDQ5MzRjZjdjM2Q0ZmE1 MDhlZjIwHhcNMjYwMTAxMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTZhOGViZmFjYmUxNDZlNWZlZjJhN2Q5YzdlYjE3NjA5ZTliZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HPVsjo1Eki0K3RAC2qJw3Ez7h7c 9uEB6RnzclE2EhUPrQC/ZpHj+JPtTKZZQPsdgLjljLgHpPVNGZ6MpnlG5mGi/USy 6BYZPvD3XYezgB4cN//kam6/yB06THiVcHycw3eliPYoNBLc2sOtkhMX5ClMHvl6 ou5Ud4LO2tX0/GaJ8DZeK5Tfrb+56obtwnGxc04Ei9Dnjv22gKYRy6y2LF0tkcKc 4K6x5d+p9tsldIZU4OSs/2s51UlOZ9lzNsQLOmPSXgMLOjjSN+bKZrMkEvFHp+4/ RomwF21DWY6fvsUCwUXFcHlSeU8SBkN3weOIJdT9lG6lMY0g7qG0XDOn1QIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFCFqjr+svhRuX+8qfZx+sXYJ6b/BMB8GA1UdIwQY MBaAFAWfpqax7Hrm6otEk0z3w9T6UI7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlotbXBySHNldWJxaTBTVFRQZkQxUHBRanZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjAwY2EtYTY4MC00NGQ5LTkyZjkt OGQ2NGRmMDFjMGM0LzEvSVdxT3Y2eS1GRzVmN3lwOW5INnhkZ25wdjhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy85MjAwY2EtYTY4MC00NGQ5LTkyZjktOGQ2NGRmMDFjMGM0 LzEvQlotbXBySHNldWJxaTBTVFRQZkQxUHBRanZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwMAVjIDAwCA 1gMEArnlgAMDAcGmAwMAw5QwDQQCAAIwBwMFACABBwgwDQYJKoZIhvcNAQELBQAD ggEBAEBrlVH00Wl+uKk6ngtqeSVg1FN+HKrBJp3T3+joVe8O21UNcUeLRv6uPGm6 AD8/u137WsjXR8lcwl2hNAoX7hFmE3sXl7uFR/XPYgKi3uaO5TvR/eNREJ2yOxOl 8oOTsxLmRSvpisdM8PflAP5BfBkUMazvDgWcCX014zE5VzdfG5vrxo/LO/JSARjA 56o+Z/omibJbz7fL6bDJ55rGnqFKJTI1EgZLBwIhiDTVi/zNgNXzZFexIhtS3jiR NN2Bpdvfe2VhUvNpmmyn5QJdXvRde9k36lxkP1QRs0Ot/lKnzoU0kl+uAkQYCfSR 6h/jDdC9H8RnEHFAH/zYmaEJq+A= -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:11 2026 by rpki-client