This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/_qFWRZGsGHQ0Anl9EjQGEm1Dudk.roa File: _qFWRZGsGHQ0Anl9EjQGEm1Dudk.roa (raw, json) Hash identifier: V/uLoxzhE1hWseFAoWyuM6fnZrTDKbUDkcDJrITCvlg= Subject key identifier: FE:A1:56:45:91:AC:18:74:34:02:79:7D:12:34:06:12:6D:43:B9:D9 Certificate issuer: /CN=eab05011722d25c1249e658b2caecc118c29e822 Certificate serial: 019B7C12A243B1896EE7DD16E89CE432A4AA Authority key identifier: EA:B0:50:11:72:2D:25:C1:24:9E:65:8B:2C:AE:CC:11:8C:29:E8:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/_qFWRZGsGHQ0Anl9EjQGEm1Dudk.roa Signing time: Fri 02 Jan 2026 00:19:14 +0000 ROA not before: Fri 02 Jan 2026 00:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59543 IP address blocks: 194.53.166.0/23 maxlen: 23 194.53.168.0/22 maxlen: 22 2001:67c:2cec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a2:43:b1:89:6e:e7:dd:16:e8:9c:e4:32:a4:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eab05011722d25c1249e658b2caecc118c29e822 Validity Not Before: Jan 2 00:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fea1564591ac18743402797d123406126d43b9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ce:f6:27:73:bd:39:99:82:15:f9:e6:d4:c5: 15:ba:6f:ec:32:4b:61:a3:82:dd:e7:ae:2b:fa:97: b1:e6:e2:3e:2f:e2:97:f2:42:d9:da:24:50:9c:44: 56:bb:9f:da:8f:0b:36:e8:2d:6a:f7:9f:3e:7a:86: 58:d9:5b:b4:cc:49:7d:f9:6d:23:49:f9:2b:77:13: 66:6f:28:46:2f:a2:ae:c3:8a:7a:0e:2f:22:92:b9: db:1a:e1:79:8c:f1:64:49:1b:6d:51:7d:f0:0d:c3: 9f:96:83:3a:a6:c8:25:36:ba:75:5e:e7:55:4c:5f: d2:aa:41:db:f0:78:51:c9:aa:ae:25:7f:65:67:1d: f8:a6:d5:f1:30:c5:54:4b:c4:cb:52:86:ab:57:d9: 4f:d1:88:e7:55:68:71:a0:cf:46:d7:a3:27:67:30: 02:06:c4:ab:8d:85:37:dd:a5:9b:c9:f9:42:80:55: 50:c2:3d:1e:46:4e:8a:e5:f3:05:7e:47:e4:8c:80: 10:c5:29:cb:1f:76:bc:75:5f:4f:34:4a:8b:80:2f: af:87:df:bf:d1:2c:4b:cc:92:30:4c:46:8d:64:ec: 3a:1a:4f:52:12:78:93:2d:87:f1:b0:22:2a:9b:c9: 21:a8:74:0e:6c:31:f7:3a:df:bb:48:0a:51:88:65: 75:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A1:56:45:91:AC:18:74:34:02:79:7D:12:34:06:12:6D:43:B9:D9 X509v3 Authority Key Identifier: keyid:EA:B0:50:11:72:2D:25:C1:24:9E:65:8B:2C:AE:CC:11:8C:29:E8:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/_qFWRZGsGHQ0Anl9EjQGEm1Dudk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.53.166.0-194.53.171.255 IPv6: 2001:67c:2cec::/48 Signature Algorithm: sha256WithRSAEncryption 25:47:9e:52:77:1f:72:82:c0:75:52:87:ee:26:60:35:7a:96: b0:1b:f8:1f:a9:df:fb:a7:29:d7:bb:2a:13:77:13:25:e1:dd: 16:e2:6c:bb:46:d0:a9:31:79:51:01:ff:d7:c7:10:c6:d3:de: 3e:75:14:f4:c3:6d:9b:4c:fb:e7:a7:ee:80:4a:71:19:b1:16: 9f:ed:5a:58:53:87:4d:fe:ad:36:35:b8:32:29:66:5e:17:67: 26:a7:89:ec:08:bc:48:94:0f:5e:6a:b8:51:8a:6f:64:c4:1a: ec:40:8f:f3:5e:6e:18:34:50:26:0d:db:8c:17:26:0b:8c:51: fe:bd:ff:ee:ce:79:a9:d0:58:28:65:23:80:f6:4c:01:4d:14: 0b:fc:d7:bc:d6:91:50:71:85:d2:bd:b7:1e:cf:04:01:29:92: 47:80:11:dd:c1:3c:aa:e7:ea:1c:b2:70:f2:17:4c:31:5a:12: 06:1e:d2:81:54:d0:bf:63:22:87:d8:90:26:26:f5:07:25:0d: c6:28:3d:08:d2:e5:5b:30:a9:26:0b:99:39:b6:f1:a2:d2:a7: bd:09:8f:71:14:87:1c:b9:79:5f:c9:9c:c7:20:53:c6:26:91: 2b:e2:c5:77:cd:c7:dc:96:f5:95:dc:cf:73:4d:c8:7e:7b:56: 25:44:60:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8EqJDsYlu590W6JzkMqSqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYjA1MDExNzIyZDI1YzEyNDllNjU4YjJjYWVjYzExOGMy OWU4MjIwHhcNMjYwMTAyMDAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWExNTY0NTkxYWMxODc0MzQwMjc5N2QxMjM0MDYxMjZkNDNiOWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs72J3O9OZmCFfnm1MUVum/sMkth o4Ld564r+pex5uI+L+KX8kLZ2iRQnERWu5/ajws26C1q958+eoZY2Vu0zEl9+W0j SfkrdxNmbyhGL6Kuw4p6Di8ikrnbGuF5jPFkSRttUX3wDcOfloM6psglNrp1XudV TF/SqkHb8HhRyaquJX9lZx34ptXxMMVUS8TLUoarV9lP0YjnVWhxoM9G16MnZzAC BsSrjYU33aWbyflCgFVQwj0eRk6K5fMFfkfkjIAQxSnLH3a8dV9PNEqLgC+vh9+/ 0SxLzJIwTEaNZOw6Gk9SEniTLYfxsCIqm8khqHQObDH3Ot+7SApRiGV1MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6hVkWRrBh0NAJ5fRI0BhJtQ7nZMB8GA1UdIwQY MBaAFOqwUBFyLSXBJJ5liyyuzBGMKegiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnJCUUVYSXRKY0Vrbm1XTExLN01FWXdwNkNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zZjk1MjgtYmExYS00MjUzLTg1MDct N2RiOGY4MTZkMDc3LzEvX3FGV1JaR3NHSFEwQW5sOUVqUUdFbTFEdWRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8zZjk1MjgtYmExYS00MjUzLTg1MDctN2RiOGY4MTZkMDc3 LzEvNnJCUUVYSXRKY0Vrbm1XTExLN01FWXdwNkNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAHCNaYD BALCNagwDwQCAAIwCQMHACABBnws7DANBgkqhkiG9w0BAQsFAAOCAQEAJUeeUncf coLAdVKH7iZgNXqWsBv4H6nf+6cp17sqE3cTJeHdFuJsu0bQqTF5UQH/18cQxtPe PnUU9MNtm0z756fugEpxGbEWn+1aWFOHTf6tNjW4MilmXhdnJqeJ7Ai8SJQPXmq4 UYpvZMQa7ECP815uGDRQJg3bjBcmC4xR/r3/7s55qdBYKGUjgPZMAU0UC/zXvNaR UHGF0r23Hs8EASmSR4AR3cE8qufqHLJw8hdMMVoSBh7SgVTQv2Mih9iQJib1ByUN xig9CNLlWzCpJguZObbxotKnvQmPcRSHHLl5X8mcxyBTxiaRK+LFd83H3Jb1ldzP c03IfntWJURgMw== -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:48 2026 by rpki-client