This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/FYi2op6EKF00E1GgCH9P1pwsWKA.roa
File: FYi2op6EKF00E1GgCH9P1pwsWKA.roa (raw, json)
Hash identifier: SVnGJLKooRqonEdOpAassNIuL9GssfXn7HsbxdU+WUA=
Subject key identifier: 15:88:B6:A2:9E:84:28:5D:34:13:51:A0:08:7F:4F:D6:9C:2C:58:A0
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 019C4144CAD14BDA0CD2081D16E39F38B2BE
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/FYi2op6EKF00E1GgCH9P1pwsWKA.roa
Signing time: Mon 09 Feb 2026 07:19:13 +0000
ROA not before: Mon 09 Feb 2026 07:19:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28917
IP address blocks: 62.140.224.0/19 maxlen: 19
62.140.250.0/24 maxlen: 24
80.77.164.0/22 maxlen: 24
80.77.167.0/24 maxlen: 24
80.77.169.0/24 maxlen: 24
93.191.8.0/21 maxlen: 21
93.191.11.0/24 maxlen: 24
93.191.12.0/23 maxlen: 23
185.221.44.0/22 maxlen: 22
2a02:2518::/29 maxlen: 29
2a02:2518::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:44:ca:d1:4b:da:0c:d2:08:1d:16:e3:9f:38:b2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Feb 9 07:19:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1588b6a29e84285d341351a0087f4fd69c2c58a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:df:26:28:dc:4e:18:69:d9:76:12:35:a9:
c6:79:6c:5b:b6:8c:e3:7e:b9:2d:8b:45:f3:c2:94:
e4:c8:fb:92:0f:e7:96:6a:6a:0c:1c:a3:bc:dc:5c:
42:ac:62:fd:46:9a:27:44:8c:42:48:ac:ea:c8:71:
b7:d8:ea:de:7a:8c:99:c9:ef:d1:cf:82:7b:8a:17:
0f:f4:4c:7c:81:03:60:9b:01:6a:d6:53:b1:ff:58:
db:02:fd:b9:87:18:29:86:9f:b4:07:0d:f5:83:55:
95:ff:90:96:ac:94:be:68:b7:71:33:e1:0a:e4:ab:
b3:57:5e:cc:26:76:a0:e1:2e:da:51:bc:99:87:0f:
a6:3a:83:d5:3d:31:ff:0c:80:71:93:a0:42:1b:75:
ed:cb:cd:f7:5c:e0:c1:72:4f:17:a7:b1:33:42:ad:
dc:ba:7f:6a:9f:e6:63:d1:92:50:60:97:fc:27:7f:
df:ad:3b:e0:27:98:3e:97:d2:00:88:ad:8f:34:7b:
f2:0c:65:db:d3:12:12:91:22:a1:2a:7f:fe:de:6a:
08:5c:2d:fd:2f:13:4e:a8:e1:52:c6:1a:ab:83:e5:
be:0a:9c:dc:45:c8:f2:31:db:ba:65:31:0d:a8:94:
13:b9:91:de:cd:5d:58:41:53:9b:e2:f2:05:da:3c:
05:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:88:B6:A2:9E:84:28:5D:34:13:51:A0:08:7F:4F:D6:9C:2C:58:A0
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/FYi2op6EKF00E1GgCH9P1pwsWKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.140.224.0/19
80.77.164.0/22
80.77.169.0/24
93.191.8.0/21
185.221.44.0/22
IPv6:
2a02:2518::/29
Signature Algorithm: sha256WithRSAEncryption
a8:b2:06:37:a8:d6:46:04:5f:31:40:50:7d:63:d8:ae:0b:3e:
97:86:de:34:f5:9b:2f:2b:75:e8:62:2b:a4:d4:f9:2f:eb:da:
85:ab:35:c7:0e:0a:73:d5:17:db:bc:f8:6c:24:19:18:ff:1f:
d7:9d:bf:9c:cb:a4:35:d1:79:95:e9:1e:46:a4:39:98:43:1c:
85:71:64:a3:b5:94:08:3e:91:fa:e3:1d:18:4b:5c:b6:3e:dd:
78:85:7d:74:2d:41:87:d4:99:39:c0:64:80:ff:4c:b4:9e:cb:
c7:c0:41:86:bd:da:26:c3:b3:ef:2d:d2:a9:86:e7:ce:a2:89:
0d:43:e8:60:c5:ab:13:01:99:36:a3:ff:25:68:25:03:08:56:
34:26:c1:46:a8:ff:a6:99:85:ac:65:b0:40:fe:e0:c9:f5:77:
66:25:e6:52:7d:5b:38:b8:c1:2e:27:d8:63:69:20:ae:d5:e1:
cd:ab:5a:27:49:e3:c9:f8:8d:3f:4d:c1:33:49:a0:a9:4a:86:
02:de:12:03:c4:77:e2:28:11:d5:a6:0e:dd:c1:8a:3b:99:b4:
2a:c6:78:da:db:b3:57:de:b3:ea:a1:4c:2a:7d:d0:fe:d0:f2:
39:87:68:48:5c:c2:70:a0:71:a9:f1:da:82:04:2c:00:82:48:
e4:b5:39:6f
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZxBRMrRS9oM0ggdFuOfOLK+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0
MzE3MjUwHhcNMjYwMjA5MDcxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTg4YjZhMjllODQyODVkMzQxMzUxYTAwODdmNGZkNjljMmM1OGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloTfJijcThhp2XYSNanGeWxbtozj
frkti0XzwpTkyPuSD+eWamoMHKO83FxCrGL9RponRIxCSKzqyHG32OreeoyZye/R
z4J7ihcP9Ex8gQNgmwFq1lOx/1jbAv25hxgphp+0Bw31g1WV/5CWrJS+aLdxM+EK
5KuzV17MJnag4S7aUbyZhw+mOoPVPTH/DIBxk6BCG3Xty833XODBck8Xp7EzQq3c
un9qn+Zj0ZJQYJf8J3/frTvgJ5g+l9IAiK2PNHvyDGXb0xISkSKhKn/+3moIXC39
LxNOqOFSxhqrg+W+CpzcRcjyMdu6ZTENqJQTuZHezV1YQVOb4vIF2jwFMwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFBWItqKehChdNBNRoAh/T9acLFigMB8GA1UdIwQY
MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt
ZjRjNWZjM2NhMmM0LzEvRllpMm9wNkVLRjAwRTFHZ0NIOVAxcHdzV0tBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0
LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFPozgAwQC
UE2kAwQAUE2pAwQDXb8IAwQCud0sMA0EAgACMAcDBQMqAiUYMA0GCSqGSIb3DQEB
CwUAA4IBAQCosgY3qNZGBF8xQFB9Y9iuCz6Xht409ZsvK3XoYiuk1Pkv69qFqzXH
Dgpz1RfbvPhsJBkY/x/Xnb+cy6Q10XmV6R5GpDmYQxyFcWSjtZQIPpH64x0YS1y2
Pt14hX10LUGH1Jk5wGSA/0y0nsvHwEGGvdomw7PvLdKphufOookNQ+hgxasTAZk2
o/8laCUDCFY0JsFGqP+mmYWsZbBA/uDJ9XdmJeZSfVs4uMEuJ9hjaSCu1eHNq1on
SePJ+I0/TcEzSaCpSoYC3hIDxHfiKBHVpg7dwYo7mbQqxnja27NX3rPqoUwqfdD+
0PI5h2hIXMJwoHGp8dqCBCwAgkjktTlv
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:27 2026 by rpki-client