This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/RQ5Cbf5xDKk_APMnlbM6ZHm4l7Q.roa File: RQ5Cbf5xDKk_APMnlbM6ZHm4l7Q.roa (raw, json) Hash identifier: l7hYvOlaLLwFZOpMeD6wZKlD7HWG7TlnqA+KkK5p5ho= Subject key identifier: 45:0E:42:6D:FE:71:0C:A9:3F:00:F3:27:95:B3:3A:64:79:B8:97:B4 Certificate issuer: /CN=49176c38341d8c713b795e58f5002ea675059728 Certificate serial: 019C0FBC15E4BF62BB7D89FB17CF005C6DDA Authority key identifier: 49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/RQ5Cbf5xDKk_APMnlbM6ZHm4l7Q.roa Signing time: Fri 30 Jan 2026 16:28:30 +0000 ROA not before: Fri 30 Jan 2026 16:28:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207234 IP address blocks: 185.60.196.0/22 maxlen: 22 185.60.196.0/24 maxlen: 24 185.60.197.0/24 maxlen: 24 185.60.198.0/24 maxlen: 24 185.60.199.0/24 maxlen: 24 194.39.178.0/23 maxlen: 23 194.39.178.0/24 maxlen: 24 194.39.179.0/24 maxlen: 24 194.39.212.0/23 maxlen: 23 194.39.212.0/24 maxlen: 24 194.39.213.0/24 maxlen: 24 2a02:7520::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0f:bc:15:e4:bf:62:bb:7d:89:fb:17:cf:00:5c:6d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49176c38341d8c713b795e58f5002ea675059728 Validity Not Before: Jan 30 16:28:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=450e426dfe710ca93f00f32795b33a6479b897b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d0:d8:78:12:53:93:fb:52:24:59:e2:1f:ef: 1f:0d:d1:d5:ac:3e:46:f1:ed:f2:8b:db:a4:fa:c2: 15:18:5b:98:8a:ca:bd:6c:0b:c5:bc:73:4e:d0:ac: 33:f5:5c:2a:b1:23:48:35:d7:0d:55:18:4a:2b:fa: 3b:01:b1:7c:18:94:6f:1f:58:04:b7:f1:1a:16:39: d8:9a:87:0f:53:eb:51:f0:02:d4:3a:29:01:48:5e: 5a:a1:71:e6:b6:28:aa:df:0f:55:e2:fb:9c:55:b8: 2a:90:26:65:0d:b1:f3:87:df:b0:71:44:00:ab:23: ab:3f:d8:3e:04:5b:2e:4a:c1:9f:28:1a:d8:9a:51: 4c:97:c0:e5:52:be:7d:d1:f1:42:b0:d2:c3:16:4e: 71:a0:c2:b3:a6:fc:f3:09:4c:cd:cf:82:a1:a5:1c: d5:28:9f:b7:1d:88:17:42:89:fd:8f:18:9d:aa:c5: 6a:fe:01:dc:a4:8a:28:df:c8:5a:32:29:03:20:52: c5:c8:13:da:23:a1:6c:47:f7:5b:5a:ad:53:7f:2a: 6f:16:03:2b:f5:6e:bd:27:a7:dd:a2:c5:60:f6:28: 29:e8:a2:58:bb:7d:53:93:f9:ea:e2:b5:5d:24:82: f0:ca:00:b1:53:7a:08:f9:23:0e:70:a0:29:a6:50: 57:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0E:42:6D:FE:71:0C:A9:3F:00:F3:27:95:B3:3A:64:79:B8:97:B4 X509v3 Authority Key Identifier: keyid:49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/RQ5Cbf5xDKk_APMnlbM6ZHm4l7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.196.0/22 194.39.178.0/23 194.39.212.0/23 IPv6: 2a02:7520::/32 Signature Algorithm: sha256WithRSAEncryption 53:67:29:c5:99:13:41:51:e8:48:bd:72:bb:00:7f:ea:73:4e: c8:46:39:6a:18:64:a6:18:34:7c:b3:b1:24:b5:b0:1a:14:ff: bf:6b:5d:dd:5e:b5:48:af:27:ba:44:04:96:a4:14:7d:77:d8: 31:f1:d5:3f:aa:c1:4b:7f:2d:1b:60:26:84:1d:05:50:97:d9: 52:52:b2:86:61:3e:b6:68:99:9d:c3:74:cc:b0:2c:18:3d:b9: 49:f4:7c:9a:59:95:1d:11:a7:53:2a:9d:63:f6:81:51:8d:21: c8:d7:ba:da:f8:d7:dc:21:72:7a:c8:dc:5a:cd:66:d3:d8:7b: 8a:db:b7:07:cc:0e:1b:2d:27:aa:7c:4f:d3:0c:b1:d3:e7:d5: 68:e1:c0:3f:76:6b:5c:24:a5:19:ef:c7:5c:03:97:d5:ab:16: 55:74:d8:32:94:85:dc:82:24:6a:d6:3a:a6:49:46:f2:ff:03: 51:2d:85:bb:45:f0:30:99:60:db:a1:d6:b5:a2:7e:39:56:a9: fb:a7:e3:89:07:cd:9f:7d:13:6e:4a:a1:99:a9:d9:29:43:cb: d0:de:39:f9:e9:67:e3:8c:3e:4d:80:f0:ba:f8:ff:32:30:36: 97:da:3d:d0:56:6c:66:fd:e7:b9:b5:6b:11:21:b9:45:6d:f3: 3f:b6:41:3f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZwPvBXkv2K7fYn7F88AXG3aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MTc2YzM4MzQxZDhjNzEzYjc5NWU1OGY1MDAyZWE2NzUw NTk3MjgwHhcNMjYwMTMwMTYyODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTBlNDI2ZGZlNzEwY2E5M2YwMGYzMjc5NWIzM2E2NDc5Yjg5N2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNDYeBJTk/tSJFniH+8fDdHVrD5G 8e3yi9uk+sIVGFuYisq9bAvFvHNO0Kwz9VwqsSNINdcNVRhKK/o7AbF8GJRvH1gE t/EaFjnYmocPU+tR8ALUOikBSF5aoXHmtiiq3w9V4vucVbgqkCZlDbHzh9+wcUQA qyOrP9g+BFsuSsGfKBrYmlFMl8DlUr590fFCsNLDFk5xoMKzpvzzCUzNz4KhpRzV KJ+3HYgXQon9jxidqsVq/gHcpIoo38haMikDIFLFyBPaI6FsR/dbWq1TfypvFgMr 9W69J6fdosVg9igp6KJYu31Tk/nq4rVdJILwygCxU3oI+SMOcKApplBXKQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFEUOQm3+cQypPwDzJ5WzOmR5uJe0MB8GA1UdIwQY MBaAFEkXbDg0HYxxO3leWPUALqZ1BZcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1Jkc09EUWRqSEU3ZVY1WTlRQXVwblVGbHlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9hZGZhN2ItY2YzNy00OWQyLTk2YWYt YmQ3Y2FmMDU0MWI4LzEvUlE1Q2JmNXhES2tfQVBNbmxiTTZaSG00bDdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9hZGZhN2ItY2YzNy00OWQyLTk2YWYtYmQ3Y2FmMDU0MWI4 LzEvU1Jkc09EUWRqSEU3ZVY1WTlRQXVwblVGbHlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuTzEAwQB wieyAwQBwifUMA0EAgACMAcDBQAqAnUgMA0GCSqGSIb3DQEBCwUAA4IBAQBTZynF mRNBUehIvXK7AH/qc07IRjlqGGSmGDR8s7EktbAaFP+/a13dXrVIrye6RASWpBR9 d9gx8dU/qsFLfy0bYCaEHQVQl9lSUrKGYT62aJmdw3TMsCwYPblJ9HyaWZUdEadT Kp1j9oFRjSHI17ra+NfcIXJ6yNxazWbT2HuK27cHzA4bLSeqfE/TDLHT59Vo4cA/ dmtcJKUZ78dcA5fVqxZVdNgylIXcgiRq1jqmSUby/wNRLYW7RfAwmWDboda1on45 Vqn7p+OJB82ffRNuSqGZqdkpQ8vQ3jn56WfjjD5NgPC6+P8yMDaX2j3QVmxm/ee5 tWsRIblFbfM/tkE/ -----END CERTIFICATE-----Generated at Mon Feb 2 07:54:28 2026 by rpki-client