This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/F7l4tr5Xsw1eJiS4b8v2iSHb9so.roa File: F7l4tr5Xsw1eJiS4b8v2iSHb9so.roa (raw, json) Hash identifier: mGOFXVQd242opKlKyStpGpFMHOVMgAYtT/epFT5XLKg= Subject key identifier: 17:B9:78:B6:BE:57:B3:0D:5E:26:24:B8:6F:CB:F6:89:21:DB:F6:CA Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019C2E8C0189BE8F785FE7CB2D06A0868A88 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/F7l4tr5Xsw1eJiS4b8v2iSHb9so.roa Signing time: Thu 05 Feb 2026 16:04:13 +0000 ROA not before: Thu 05 Feb 2026 16:04:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.8.23.0/24 maxlen: 24 45.90.17.0/24 maxlen: 24 45.131.134.0/24 maxlen: 24 185.108.204.0/24 maxlen: 24 185.126.82.0/24 maxlen: 24 185.199.54.0/24 maxlen: 24 185.199.158.0/24 maxlen: 24 185.199.159.0/24 maxlen: 24 185.206.251.0/24 maxlen: 24 185.209.38.0/24 maxlen: 24 185.209.73.0/24 maxlen: 24 185.209.74.0/24 maxlen: 24 185.209.75.0/24 maxlen: 24 185.210.233.0/24 maxlen: 24 185.210.235.0/24 maxlen: 24 185.214.108.0/24 maxlen: 24 185.218.20.0/24 maxlen: 24 185.218.101.0/24 maxlen: 24 185.220.248.0/24 maxlen: 24 185.220.249.0/24 maxlen: 24 185.220.250.0/23 maxlen: 24 185.221.20.0/24 maxlen: 24 185.222.28.0/24 maxlen: 24 185.222.29.0/24 maxlen: 24 185.223.80.0/24 maxlen: 24 185.223.82.0/24 maxlen: 24 185.223.155.0/24 maxlen: 24 185.225.0.0/23 maxlen: 23 185.225.1.0/24 maxlen: 24 185.225.2.0/24 maxlen: 24 185.225.3.0/24 maxlen: 24 185.226.104.0/24 maxlen: 24 185.226.105.0/24 maxlen: 24 185.226.107.0/24 maxlen: 24 185.227.144.0/24 maxlen: 24 185.227.146.0/23 maxlen: 24 185.227.147.0/24 maxlen: 24 185.228.72.0/24 maxlen: 24 185.228.75.0/24 maxlen: 24 185.232.206.0/24 maxlen: 24 185.234.22.0/24 maxlen: 24 185.246.112.0/24 maxlen: 24 193.8.112.0/23 maxlen: 24 193.8.112.0/24 maxlen: 24 193.8.114.0/24 maxlen: 24 193.58.144.0/24 maxlen: 24 193.58.146.0/23 maxlen: 24 193.58.146.0/24 maxlen: 24 194.5.67.0/24 maxlen: 24 194.76.169.0/24 maxlen: 24 194.76.172.0/24 maxlen: 24 194.124.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 16:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2e:8c:01:89:be:8f:78:5f:e7:cb:2d:06:a0:86:8a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Feb 5 16:04:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17b978b6be57b30d5e2624b86fcbf68921dbf6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2f:82:3d:4f:10:29:05:1f:df:19:b9:87:15: 1b:27:a2:54:0c:14:bf:e1:2c:16:b6:31:78:88:60: 2e:da:cc:d3:4d:37:38:4e:d9:fe:97:24:27:12:35: 37:d3:19:42:1c:4a:24:c7:fb:e2:65:af:e1:5c:73: 36:e7:4b:bf:fb:6c:c5:e3:6a:3c:2d:c3:d5:49:ca: 65:ae:32:d2:4c:8d:69:66:71:af:9b:63:97:7d:a6: 9b:03:c9:b0:1b:aa:9c:11:e4:77:b0:53:a3:4f:d4: 8b:b1:0e:6e:cc:06:b0:3a:2c:41:63:dd:47:d7:f6: bd:c5:9f:a8:dd:6e:de:0d:72:a4:5e:35:03:6f:ba: 04:d4:cd:47:23:cc:59:88:3e:a7:08:ec:e1:15:1d: 9f:72:c5:20:7e:1f:06:5c:ce:f5:25:52:2e:02:0b: 0c:5c:13:f9:56:f1:08:6b:53:3e:91:9a:4e:06:68: d1:bd:d7:d0:9d:6d:af:c5:78:2c:82:05:d8:08:98: 60:07:0a:7d:7e:df:ca:e8:d3:50:81:53:28:fa:5c: f2:bf:9a:ae:2c:01:33:39:7d:99:6e:bc:42:3a:e5: f5:27:cd:fd:96:a0:80:7c:b9:41:c1:7c:4b:a9:e8: c8:83:56:d4:7c:06:4f:85:46:0d:90:99:2e:e3:7e: ef:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B9:78:B6:BE:57:B3:0D:5E:26:24:B8:6F:CB:F6:89:21:DB:F6:CA X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/F7l4tr5Xsw1eJiS4b8v2iSHb9so.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.23.0/24 45.90.17.0/24 45.131.134.0/24 185.108.204.0/24 185.126.82.0/24 185.199.54.0/24 185.199.158.0/23 185.206.251.0/24 185.209.38.0/24 185.209.73.0-185.209.75.255 185.210.233.0/24 185.210.235.0/24 185.214.108.0/24 185.218.20.0/24 185.218.101.0/24 185.220.248.0/22 185.221.20.0/24 185.222.28.0/23 185.223.80.0/24 185.223.82.0/24 185.223.155.0/24 185.225.0.0/22 185.226.104.0/23 185.226.107.0/24 185.227.144.0/24 185.227.146.0/23 185.228.72.0/24 185.228.75.0/24 185.232.206.0/24 185.234.22.0/24 185.246.112.0/24 193.8.112.0-193.8.114.255 193.58.144.0/24 193.58.146.0/23 194.5.67.0/24 194.76.169.0/24 194.76.172.0/24 194.124.69.0/24 Signature Algorithm: sha256WithRSAEncryption 30:e1:0e:4d:89:8b:5f:b1:14:df:9c:9a:24:9b:82:69:63:d8: 69:fe:71:28:6d:e2:2b:a6:9a:c4:79:1a:54:dc:54:f1:06:a6: 32:af:58:2b:93:c8:66:e9:fd:57:6c:25:08:24:b9:ab:46:df: 4f:20:f4:6b:58:4a:ba:5f:96:a7:4a:26:d1:ff:7a:4d:ef:ca: d1:85:36:52:e6:3b:c9:c3:ec:e4:64:4b:be:4c:71:83:8a:b2: 7b:33:55:4b:bb:17:42:ca:92:ca:df:5e:9b:35:ee:28:85:1b: 56:06:b1:01:a6:39:34:03:09:cc:c9:e6:c2:8d:44:37:2b:26: f1:0b:63:46:0f:92:05:d9:f5:25:3b:4d:02:69:7b:38:17:0f: 07:9f:e9:ef:7e:59:83:63:74:f9:e9:a1:93:53:65:5a:0d:c0: c6:b9:11:93:9b:ef:e4:f8:a8:6a:fa:3b:6c:54:dd:4a:5b:f3: ad:f7:df:50:97:48:fb:78:3e:ab:5f:b3:f5:c6:13:ae:32:ea: 74:15:7c:8d:3e:7a:ca:c7:81:7b:18:93:c9:76:56:50:04:6b: 4f:69:2a:1e:65:0d:4e:9e:5d:8c:4b:dc:1f:f9:74:69:98:90: 05:95:fa:df:5a:92:ad:84:96:b4:0a:91:32:b7:ef:3d:92:72: 97:da:c5:2f -----BEGIN CERTIFICATE----- MIIF8jCCBNqgAwIBAgISAZwujAGJvo94X+fLLQaghoqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMjA1MTYwNDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2I5NzhiNmJlNTdiMzBkNWUyNjI0Yjg2ZmNiZjY4OTIxZGJmNmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS+CPU8QKQUf3xm5hxUbJ6JUDBS/ 4SwWtjF4iGAu2szTTTc4Ttn+lyQnEjU30xlCHEokx/viZa/hXHM250u/+2zF42o8 LcPVScplrjLSTI1pZnGvm2OXfaabA8mwG6qcEeR3sFOjT9SLsQ5uzAawOixBY91H 1/a9xZ+o3W7eDXKkXjUDb7oE1M1HI8xZiD6nCOzhFR2fcsUgfh8GXM71JVIuAgsM XBP5VvEIa1M+kZpOBmjRvdfQnW2vxXgsggXYCJhgBwp9ft/K6NNQgVMo+lzyv5qu LAEzOX2ZbrxCOuX1J839lqCAfLlBwXxLqejIg1bUfAZPhUYNkJku437vLQIDAQAB o4IC/jCCAvowHQYDVR0OBBYEFBe5eLa+V7MNXiYkuG/L9okh2/bKMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvRjdsNHRyNVhzdzFlSmlTNGI4djJpU0hiOXNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBEgYIKwYBBQUHAQcBAf8EggEBMIH+MIH7BAIAATCB9AME AC0IFwMEAC1aEQMEAC2DhgMEALlszAMEALl+UgMEALnHNgMEAbnHngMEALnO+wME ALnRJjAMAwQAudFJAwQCudFIAwQAudLpAwQAudLrAwQAudZsAwQAudoUAwQAudpl AwQCudz4AwQAud0UAwQBud4cAwQAud9QAwQAud9SAwQAud+bAwQCueEAAwQBueJo AwQAueJrAwQAueOQAwQBueOSAwQAueRIAwQAueRLAwQAuejOAwQAueoWAwQAufZw MAwDBATBCHADBADBCHIDBADBOpADBAHBOpIDBADCBUMDBADCTKkDBADCTKwDBADC fEUwDQYJKoZIhvcNAQELBQADggEBADDhDk2Ji1+xFN+cmiSbgmlj2Gn+cSht4ium msR5GlTcVPEGpjKvWCuTyGbp/VdsJQgkuatG308g9GtYSrpflqdKJtH/ek3vytGF NlLmO8nD7ORkS75McYOKsnszVUu7F0LKksrfXps17iiFG1YGsQGmOTQDCczJ5sKN RDcrJvELY0YPkgXZ9SU7TQJpezgXDwef6e9+WYNjdPnpoZNTZVoNwMa5EZOb7+T4 qGr6O2xU3Upb863331CXSPt4Pqtfs/XGE64y6nQVfI0+esrHgXsYk8l2VlAEa09p Kh5lDU6eXYxL3B/5dGmYkAWV+t9akq2ElrQKkTK37z2ScpfaxS8= -----END CERTIFICATE-----Generated at Fri Feb 6 03:05:55 2026 by rpki-client