This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/sFLHZGEgR5B6z0uHo1Ay7Q5_vWs.roa File: sFLHZGEgR5B6z0uHo1Ay7Q5_vWs.roa (raw, json) Hash identifier: tswRhyFVxtP5UBE+zxkH0gqlOKm86RXi8OEmfEEgHVU= Subject key identifier: B0:52:C7:64:61:20:47:90:7A:CF:4B:87:A3:50:32:ED:0E:7F:BD:6B Certificate issuer: /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51 Certificate serial: 019B7BA3B9A6919B11E5D6547904921E3025 Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/sFLHZGEgR5B6z0uHo1Ay7Q5_vWs.roa Signing time: Thu 01 Jan 2026 22:18:05 +0000 ROA not before: Thu 01 Jan 2026 22:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211528 IP address blocks: 84.234.126.0/24 maxlen: 24 185.251.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:b9:a6:91:9b:11:e5:d6:54:79:04:92:1e:30:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51 Validity Not Before: Jan 1 22:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b052c764612047907acf4b87a35032ed0e7fbd6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3c:3d:da:a7:e3:ec:8e:a6:1a:d9:b8:02:42: 7d:ac:e4:cf:ba:ed:b0:94:5e:f9:6e:19:d1:dc:9f: ba:8d:11:13:53:2f:10:60:9f:4d:9f:69:e4:ed:10: 8c:28:9b:6d:a4:b4:cc:3b:5c:7c:4e:7d:60:46:94: 44:f8:c6:73:3a:41:06:fd:63:0b:aa:61:52:bf:e4: 92:07:cd:ca:c9:9d:75:73:03:b1:db:f2:b4:0d:dc: 56:ca:a1:bf:a7:0b:01:43:d6:12:98:33:fd:38:1f: 2e:7d:7e:6c:0d:bb:44:d2:dc:c3:cb:73:1d:72:84: 1a:81:98:6a:b3:3a:6f:12:c4:52:46:cb:57:fe:90: a8:c0:a7:6b:af:d4:17:57:33:d1:a9:50:04:cb:b7: fa:b1:c2:40:3e:30:a9:0e:7b:e2:59:f2:41:f3:f2: 36:81:d3:91:e0:96:5e:2a:65:82:ad:0b:6a:6c:46: 9a:c6:26:8f:6c:0a:ae:ba:e0:a2:71:1f:d9:e0:14: 37:af:aa:d7:1e:8a:66:bc:87:e4:1b:ca:88:a6:1e: da:a0:65:e9:3a:c1:c7:f5:90:56:26:4d:10:8c:f7: 1a:ef:8a:e8:f6:87:27:7e:ab:1c:02:f7:30:eb:a0: 56:4c:d7:fc:8e:16:6e:e7:fb:21:3a:84:6a:14:0d: c0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:52:C7:64:61:20:47:90:7A:CF:4B:87:A3:50:32:ED:0E:7F:BD:6B X509v3 Authority Key Identifier: keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/sFLHZGEgR5B6z0uHo1Ay7Q5_vWs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.234.126.0/24 185.251.37.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:9e:6d:71:68:92:3a:88:3d:b2:05:d9:72:4c:c8:ed:48:8c: 21:7b:68:73:06:e7:49:56:6b:27:0f:a4:5f:6e:b4:51:3a:64: f6:99:0a:00:22:6b:ee:94:a0:37:24:2c:52:9b:22:76:6c:1c: c7:03:5e:d0:ac:2b:fa:fd:3d:c2:9b:fb:97:cd:df:64:6f:59: 64:f4:8e:96:bc:30:61:9c:6f:d0:31:44:92:ac:03:90:ea:50: 26:47:5a:e8:39:59:02:fa:c0:96:6a:47:1a:01:70:49:e5:20: ad:00:cf:42:4a:b1:cd:f7:1e:1a:b2:bb:5c:32:9a:8a:ea:1c: c7:eb:92:93:8e:88:f5:6e:2e:7f:61:65:32:ea:da:88:e1:9a: 39:4e:67:cf:f8:e9:b1:61:a2:81:95:e4:5c:6a:62:54:e9:de: 47:d0:3f:8c:80:c2:d6:97:7d:ca:3e:37:51:9e:3a:58:2c:5c: a9:2b:b0:64:e6:e3:0b:96:91:dc:03:30:94:4b:c9:55:0d:f4: 10:7c:e6:a8:d8:b2:04:d0:27:5e:86:3e:04:b9:69:64:e9:58: 03:e8:45:23:a8:6f:4a:45:94:84:4b:0d:7b:e3:fe:16:6b:ab: c8:e1:94:ba:2f:a5:b3:95:66:da:64:a0:21:7b:9f:77:53:fd: 06:5f:12:30 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7o7mmkZsR5dZUeQSSHjAlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZWMxNDY4ZWUzMTAzZmU1M2IxY2Y1YTk4NzVhZWNkNGUy OGFkNTEwHhcNMjYwMTAxMjIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDUyYzc2NDYxMjA0NzkwN2FjZjRiODdhMzUwMzJlZDBlN2ZiZDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTw92qfj7I6mGtm4AkJ9rOTPuu2w lF75bhnR3J+6jRETUy8QYJ9Nn2nk7RCMKJttpLTMO1x8Tn1gRpRE+MZzOkEG/WML qmFSv+SSB83KyZ11cwOx2/K0DdxWyqG/pwsBQ9YSmDP9OB8ufX5sDbtE0tzDy3Md coQagZhqszpvEsRSRstX/pCowKdrr9QXVzPRqVAEy7f6scJAPjCpDnviWfJB8/I2 gdOR4JZeKmWCrQtqbEaaxiaPbAquuuCicR/Z4BQ3r6rXHopmvIfkG8qIph7aoGXp OsHH9ZBWJk0QjPca74ro9ocnfqscAvcw66BWTNf8jhZu5/shOoRqFA3AJQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLBSx2RhIEeQes9Lh6NQMu0Of71rMB8GA1UdIwQY MBaAFPjsFGjuMQP+U7HPWph1rs1OKK1RMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Pd1VhTzR4QV81VHNjOWFtSFd1elU0b3JWRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvYjAyNGJkLTJkMGMtNDU3Mi1hNDlh LTU4NzhhODE3M2M0NC8xL3NGTEhaR0VnUjVCNnowdUhvMUF5N1E1X3ZXcy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZGUvYjAyNGJkLTJkMGMtNDU3Mi1hNDlhLTU4NzhhODE3M2M0 NC8xLzEtT3dVYU80eEFfNVRzYzlhbUhXdXpVNG9yVkUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABU6n4D BAC5+yUwDQYJKoZIhvcNAQELBQADggEBAB+ebXFokjqIPbIF2XJMyO1IjCF7aHMG 50lWaycPpF9utFE6ZPaZCgAia+6UoDckLFKbInZsHMcDXtCsK/r9PcKb+5fN32Rv WWT0jpa8MGGcb9AxRJKsA5DqUCZHWug5WQL6wJZqRxoBcEnlIK0Az0JKsc33Hhqy u1wymorqHMfrkpOOiPVuLn9hZTLq2ojhmjlOZ8/46bFhooGV5FxqYlTp3kfQP4yA wtaXfco+N1GeOlgsXKkrsGTm4wuWkdwDMJRLyVUN9BB85qjYsgTQJ16GPgS5aWTp WAPoRSOob0pFlIRLDXvj/hZrq8jhlLovpbOVZtpkoCF7n3dT/QZfEjA= -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:55 2026 by rpki-client