This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/8qURvhbURFqQhTipEQhvqic1Rjg.roa File: 8qURvhbURFqQhTipEQhvqic1Rjg.roa (raw, json) Hash identifier: ApBgxUKn6ILqzgArNYuAOilqc1LglRrQeJhEVrK//8s= Subject key identifier: F2:A5:11:BE:16:D4:44:5A:90:85:38:A9:11:08:6F:AA:27:35:46:38 Certificate issuer: /CN=1f88b5e93522b898e76f45f478443c348f57b916 Certificate serial: 019B7B3587E44C7CDFE5C62AB513D9212DC0 Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/8qURvhbURFqQhTipEQhvqic1Rjg.roa Signing time: Thu 01 Jan 2026 20:17:44 +0000 ROA not before: Thu 01 Jan 2026 20:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50366 IP address blocks: 109.95.136.0/24 maxlen: 24 109.95.137.0/24 maxlen: 24 109.95.138.0/24 maxlen: 24 109.95.139.0/24 maxlen: 24 109.95.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:87:e4:4c:7c:df:e5:c6:2a:b5:13:d9:21:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916 Validity Not Before: Jan 1 20:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2a511be16d4445a908538a911086faa27354638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:42:0e:11:78:64:75:ba:e8:a5:0e:32:e9:8e: 7c:27:86:f5:72:c7:55:fb:56:36:df:51:df:6a:34: da:74:d7:36:e5:f1:b1:75:18:16:bd:aa:55:c8:17: 9c:a3:2a:5b:96:aa:ae:3b:4b:65:d1:d0:b7:9b:c4: b0:54:2e:a3:db:83:47:d8:4d:3d:7c:38:44:44:9c: dc:79:a0:cc:2e:83:26:98:30:fa:d3:2f:8d:da:7c: 2f:63:00:1c:23:6f:8b:45:9c:5c:b7:0a:99:dc:b5: 03:96:c4:1e:ef:bb:ea:88:ad:b9:a3:03:7a:42:d4: c5:53:9e:f0:4b:43:1c:41:a0:b8:8b:b3:2c:0f:54: d6:34:c8:e1:ab:61:4f:68:b6:29:10:79:06:fe:f8: 69:ab:1e:98:08:99:38:92:ba:14:fd:a7:13:ef:14: 66:2d:76:53:c6:04:94:b3:19:62:41:df:67:bd:30: b5:19:52:3e:05:92:24:06:b3:36:b6:39:b6:c3:a1: 8f:8a:a9:a2:cd:ba:9a:24:79:04:5f:0a:0b:f2:2d: 2c:47:6b:c9:eb:bb:f1:71:f7:48:f6:66:e6:66:e3: c9:28:ff:72:a4:e1:00:0a:27:9f:02:45:64:2e:3a: af:a7:d8:9a:33:e8:52:84:f8:70:d1:36:67:ad:02: 15:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A5:11:BE:16:D4:44:5A:90:85:38:A9:11:08:6F:AA:27:35:46:38 X509v3 Authority Key Identifier: keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/8qURvhbURFqQhTipEQhvqic1Rjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.95.136.0-109.95.140.255 Signature Algorithm: sha256WithRSAEncryption 69:c1:a8:6a:b6:2c:ca:48:7b:37:81:0b:ce:bb:88:f2:6b:55: 2f:06:a8:b9:1c:dc:48:48:a4:b3:a4:b7:95:a8:f9:14:d3:2a: 04:b5:ab:48:65:90:0b:af:74:27:08:ca:10:38:11:82:06:08: db:11:72:74:3f:9b:82:ea:c6:6b:96:e9:35:e3:b8:db:ea:c6: 58:f3:e2:0c:eb:7e:91:cb:0a:b0:2e:09:16:8b:6e:b4:12:51: 38:e7:3e:7b:e3:58:5e:b1:d5:3c:c0:9f:73:45:01:7b:ca:ad: 6f:7d:56:18:d0:47:73:bd:f7:23:95:7d:66:fd:17:ce:c6:0c: ba:46:d5:d9:1c:0a:52:e2:64:70:66:db:21:d2:11:c3:a2:8e: 85:af:9e:06:19:96:e9:b8:ce:23:8b:c7:39:9e:36:21:21:9c: aa:df:32:c8:d1:31:de:d0:84:b4:c3:a4:7e:2b:94:f2:da:3a: f8:f9:70:7e:d8:b5:3f:b4:0d:4d:ed:79:26:c6:8d:6b:38:99: 4c:8b:26:26:8d:4f:38:8d:40:a8:3c:68:a4:8b:41:ef:d9:dc: 87:a0:e6:6a:fe:51:46:f4:4f:65:1d:0c:a4:57:91:b6:aa:de: 2c:6d:5e:26:21:3e:98:6a:f3:6b:c9:bf:2b:59:f3:4c:cc:8a: 55:83:db:eb -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NYfkTHzf5cYqtRPZIS3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmODhiNWU5MzUyMmI4OThlNzZmNDVmNDc4NDQzYzM0OGY1 N2I5MTYwHhcNMjYwMTAxMjAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmE1MTFiZTE2ZDQ0NDVhOTA4NTM4YTkxMTA4NmZhYTI3MzU0NjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkIOEXhkdbropQ4y6Y58J4b1csdV +1Y231HfajTadNc25fGxdRgWvapVyBecoypblqquO0tl0dC3m8SwVC6j24NH2E09 fDhERJzceaDMLoMmmDD60y+N2nwvYwAcI2+LRZxctwqZ3LUDlsQe77vqiK25owN6 QtTFU57wS0McQaC4i7MsD1TWNMjhq2FPaLYpEHkG/vhpqx6YCJk4kroU/acT7xRm LXZTxgSUsxliQd9nvTC1GVI+BZIkBrM2tjm2w6GPiqmizbqaJHkEXwoL8i0sR2vJ 67vxcfdI9mbmZuPJKP9ypOEACiefAkVkLjqvp9iaM+hShPhw0TZnrQIVjQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFPKlEb4W1ERakIU4qREIb6onNUY4MB8GA1UdIwQY MBaAFB+Itek1IriY529F9HhEPDSPV7kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDRpMTZUVWl1SmpuYjBYMGVFUThOSTlYdVJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82YTAxYjctYTRlZC00YjcxLTgwYjYt Y2QzOTJiMGRlZGNmLzEvOHFVUnZoYlVSRnFRaFRpcEVRaHZxaWMxUmpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC82YTAxYjctYTRlZC00YjcxLTgwYjYtY2QzOTJiMGRlZGNm LzEvSDRpMTZUVWl1SmpuYjBYMGVFUThOSTlYdVJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANtX4gD BABtX4wwDQYJKoZIhvcNAQELBQADggEBAGnBqGq2LMpIezeBC867iPJrVS8GqLkc 3EhIpLOkt5Wo+RTTKgS1q0hlkAuvdCcIyhA4EYIGCNsRcnQ/m4LqxmuW6TXjuNvq xljz4gzrfpHLCrAuCRaLbrQSUTjnPnvjWF6x1TzAn3NFAXvKrW99VhjQR3O99yOV fWb9F87GDLpG1dkcClLiZHBm2yHSEcOijoWvngYZlum4ziOLxzmeNiEhnKrfMsjR Md7QhLTDpH4rlPLaOvj5cH7YtT+0DU3teSbGjWs4mUyLJiaNTziNQKg8aKSLQe/Z 3Ieg5mr+UUb0T2UdDKRXkbaq3ixtXiYhPphq82vJvytZ80zMilWD2+s= -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:37 2026 by rpki-client