This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/F2IsQbg11ZmJTAfceLyJa_u04dg.roa File: F2IsQbg11ZmJTAfceLyJa_u04dg.roa (raw, json) Hash identifier: yrXOIgV2Evo1BQL02zZOaj4XM50H8UtRL74oK0VXAus= Subject key identifier: 17:62:2C:41:B8:35:D5:99:89:4C:07:DC:78:BC:89:6B:FB:B4:E1:D8 Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CECFA58ECB66C5364EB545B1D4388AF Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/F2IsQbg11ZmJTAfceLyJa_u04dg.roa Signing time: Fri 02 Jan 2026 04:17:43 +0000 ROA not before: Fri 02 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8617 IP address blocks: 195.251.128.0/18 maxlen: 18 195.251.152.0/21 maxlen: 21 195.251.160.0/21 maxlen: 21 195.251.168.0/21 maxlen: 21 195.251.176.0/21 maxlen: 21 195.251.184.0/21 maxlen: 21 2001:648:2050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:fa:58:ec:b6:6c:53:64:eb:54:5b:1d:43:88:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17622c41b835d599894c07dc78bc896bfbb4e1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f1:31:c5:c7:ea:2d:12:40:c7:24:a0:10:0d: 62:da:d2:50:29:94:04:1d:c3:3b:77:bd:fe:d9:0f: 65:f4:eb:b4:8d:c4:01:b5:64:47:1e:59:8e:5b:4f: ab:2c:e8:08:3c:14:44:e4:90:6f:1d:02:6c:74:d9: 60:8c:c6:ba:20:7f:a3:15:61:cd:27:b9:14:ed:01: 83:23:2f:44:86:66:3f:bf:42:0e:61:5e:8b:7a:27: c2:b8:9a:e6:28:b7:22:4e:f4:66:67:15:84:c3:e2: 24:c8:20:e3:ba:23:e7:f6:4d:46:81:7a:d0:64:64: fd:0b:dd:ae:38:ef:9d:c3:6a:3b:41:03:87:e4:ee: 01:57:a5:e5:e3:23:85:53:fd:92:0d:f9:e6:d3:40: 27:f2:64:c9:bc:05:98:e8:fe:f2:35:d9:cf:ec:5e: e1:3d:3d:c4:b1:e4:44:3b:4f:12:38:b8:7e:05:24: e2:63:ee:a0:97:5f:13:b8:c6:76:ff:32:9d:9f:ca: e4:13:0d:a7:86:00:f3:e5:6c:7f:05:60:73:30:38: ff:02:64:71:38:7a:fa:ab:2a:5b:53:e4:b3:5b:9a: 0b:46:cd:e3:7a:9b:e5:2d:91:c8:fd:70:bd:b6:de: 2b:5d:91:e4:b4:a1:4d:28:ad:4b:6f:ba:17:ba:d0: b1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:62:2C:41:B8:35:D5:99:89:4C:07:DC:78:BC:89:6B:FB:B4:E1:D8 X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/F2IsQbg11ZmJTAfceLyJa_u04dg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.251.128.0/18 IPv6: 2001:648:2050::/48 Signature Algorithm: sha256WithRSAEncryption 9f:b7:7e:42:0e:ed:01:3b:c6:3a:94:29:f2:57:cb:fa:4d:7c: 91:6e:ef:01:c7:8f:62:03:06:24:a5:82:30:32:c8:f0:dc:e2: 19:05:c2:1f:a5:87:07:1f:ce:41:a4:a2:27:fa:68:7e:14:7d: 42:0e:b0:0a:0a:2d:18:17:1c:94:23:1e:a6:c5:ab:41:ef:c9: aa:bc:5a:52:83:c5:e1:4e:31:16:e6:3e:58:f9:ce:c2:2d:6e: 49:27:42:51:26:26:7c:06:93:64:2f:a8:3a:8e:92:e7:d8:8b: 3f:96:99:d7:3e:e6:ce:a2:60:d5:7b:89:35:2d:c7:29:d5:d2: bd:28:5b:c9:f8:25:c9:63:18:7d:52:7d:ac:e1:56:dc:46:f3: bb:aa:4a:7a:f3:4e:a0:95:51:ca:13:b0:d3:68:e3:18:e5:f6: 08:7a:f8:6d:b5:86:1d:e5:bf:9a:aa:d5:43:bd:6c:ec:e3:af: bb:c1:40:a4:38:2d:90:29:6b:11:c9:cc:99:c4:59:b6:ea:9e: 8c:30:c5:54:c6:66:b6:c8:d9:2d:15:c1:a0:d1:61:da:1e:9b: 5f:ad:dc:c7:2c:f3:d4:e9:31:22:b9:20:54:e1:10:c2:72:fb: 4a:59:e5:51:36:6b:54:fc:b1:cd:bc:0b:61:07:d8:5c:7a:1a: ad:d4:cb:ae -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt87PpY7LZsU2TrVFsdQ4ivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzYyMmM0MWI4MzVkNTk5ODk0YzA3ZGM3OGJjODk2YmZiYjRlMWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvExxcfqLRJAxySgEA1i2tJQKZQE HcM7d73+2Q9l9Ou0jcQBtWRHHlmOW0+rLOgIPBRE5JBvHQJsdNlgjMa6IH+jFWHN J7kU7QGDIy9EhmY/v0IOYV6LeifCuJrmKLciTvRmZxWEw+IkyCDjuiPn9k1GgXrQ ZGT9C92uOO+dw2o7QQOH5O4BV6Xl4yOFU/2SDfnm00An8mTJvAWY6P7yNdnP7F7h PT3EseREO08SOLh+BSTiY+6gl18TuMZ2/zKdn8rkEw2nhgDz5Wx/BWBzMDj/AmRx OHr6qypbU+SzW5oLRs3jepvlLZHI/XC9tt4rXZHktKFNKK1Lb7oXutCx0QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBdiLEG4NdWZiUwH3Hi8iWv7tOHYMB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvRjJJc1FiZzExWm1KVEFmY2VMeUphX3UwNGRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQGw/uAMA8E AgACMAkDBwAgAQZIIFAwDQYJKoZIhvcNAQELBQADggEBAJ+3fkIO7QE7xjqUKfJX y/pNfJFu7wHHj2IDBiSlgjAyyPDc4hkFwh+lhwcfzkGkoif6aH4UfUIOsAoKLRgX HJQjHqbFq0Hvyaq8WlKDxeFOMRbmPlj5zsItbkknQlEmJnwGk2QvqDqOkufYiz+W mdc+5s6iYNV7iTUtxynV0r0oW8n4JcljGH1SfazhVtxG87uqSnrzTqCVUcoTsNNo 4xjl9gh6+G21hh3lv5qq1UO9bOzjr7vBQKQ4LZApaxHJzJnEWbbqnowwxVTGZrbI 2S0VwaDRYdoem1+t3Mcs89TpMSK5IFThEMJy+0pZ5VE2a1T8sc28C2EH2Fx6Gq3U y64= -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:01 2026 by rpki-client