This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/A_qMp1Z14Eo4YybYC7Vj77PU9K8.roa File: A_qMp1Z14Eo4YybYC7Vj77PU9K8.roa (raw, json) Hash identifier: aNl3FqttAjZ15pu6lmuN+OGy+dDFilFCjj/yiQ9YQls= Subject key identifier: 03:FA:8C:A7:56:75:E0:4A:38:63:26:D8:0B:B5:63:EF:B3:D4:F4:AF Certificate issuer: /CN=59602e4b08594c5caffbeb50d1e0a9d470eb92e5 Certificate serial: 019B7A5B21D3A3AF6917B81BF4B99B7DA9DA Authority key identifier: 59:60:2E:4B:08:59:4C:5C:AF:FB:EB:50:D1:E0:A9:D4:70:EB:92:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWAuSwhZTFyv--tQ0eCp1HDrkuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/A_qMp1Z14Eo4YybYC7Vj77PU9K8.roa Signing time: Thu 01 Jan 2026 16:19:11 +0000 ROA not before: Thu 01 Jan 2026 16:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56923 IP address blocks: 185.200.16.0/22 maxlen: 22 185.200.16.0/24 maxlen: 24 185.200.17.0/24 maxlen: 24 185.200.18.0/24 maxlen: 24 185.200.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft rsync://rpki.ripe.net/repository/DEFAULT/WWAuSwhZTFyv--tQ0eCp1HDrkuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:21:d3:a3:af:69:17:b8:1b:f4:b9:9b:7d:a9:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59602e4b08594c5caffbeb50d1e0a9d470eb92e5 Validity Not Before: Jan 1 16:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03fa8ca75675e04a386326d80bb563efb3d4f4af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:48:56:39:da:13:a0:e2:46:98:a5:e2:f2:ef: e3:95:d0:98:83:dd:2e:0b:f7:6d:8c:e4:d5:0e:9e: f7:ee:2f:7c:60:55:f8:e7:5c:9b:50:1c:4c:ba:ff: bc:6d:9f:19:f3:2a:67:a2:2e:83:09:98:42:66:76: ac:73:3b:52:10:09:88:e1:d8:c2:be:b9:41:46:59: 66:66:8e:fe:5f:c6:0f:8b:83:34:4e:3b:b2:b4:f8: ff:b7:f0:cf:5f:79:19:7c:28:c9:e9:06:c0:5b:27: 5f:76:f2:1b:9d:af:3a:51:ba:9e:d3:6e:da:40:11: 00:ee:96:ca:14:ea:ca:54:c5:ed:e2:34:00:4a:fb: 77:36:b1:fc:6a:59:27:d5:cd:30:38:ff:2e:e0:44: 0c:85:3d:29:f9:d4:36:ca:2b:f3:b3:a9:f0:c4:18: 6d:15:a9:68:6a:c7:7a:49:9f:66:d6:de:2b:07:22: 75:6f:96:9b:30:94:4c:63:05:37:f8:ae:7e:0a:0d: fb:d1:4c:59:c8:40:1b:98:4f:09:ba:a0:d3:3e:f4: f9:09:3b:33:c4:e8:c0:98:eb:14:28:2f:e7:ef:60: 54:17:93:40:e5:92:0d:78:37:06:b7:26:fb:48:95: c1:c2:f2:ae:57:18:cd:56:a2:f8:f3:43:20:d3:ca: f3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FA:8C:A7:56:75:E0:4A:38:63:26:D8:0B:B5:63:EF:B3:D4:F4:AF X509v3 Authority Key Identifier: keyid:59:60:2E:4B:08:59:4C:5C:AF:FB:EB:50:D1:E0:A9:D4:70:EB:92:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWAuSwhZTFyv--tQ0eCp1HDrkuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/A_qMp1Z14Eo4YybYC7Vj77PU9K8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.200.16.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:16:e7:e7:75:5a:a8:45:e9:ba:5a:50:3f:a2:cb:07:5d:df: 40:a4:6e:1e:07:43:06:78:29:51:07:b7:a1:fd:17:c1:8e:90: e1:e7:53:16:f9:9c:0a:e2:c6:2a:a2:34:67:7a:ea:ce:73:ae: 97:a1:c4:ba:9c:9d:a0:cb:0f:fc:f1:4e:81:e9:71:d6:3a:29: 0e:f7:f8:34:35:9f:18:2c:9e:fb:08:68:07:cf:dc:a0:15:6f: aa:7f:85:28:dd:05:e1:e0:ae:35:34:8d:3d:81:1e:95:73:44: 4d:38:54:a9:dd:96:6d:d0:77:1e:5d:b9:6f:64:7b:35:23:ea: c8:88:a3:fd:cb:aa:c3:47:9b:91:30:8b:89:27:80:d3:ab:b0: 64:36:39:e5:8c:87:b1:74:2b:af:2b:23:d0:cc:e3:fc:5c:b5: 04:ab:4d:14:74:65:01:11:7b:79:45:24:15:1a:ef:a9:c6:2e: c7:91:11:cc:d3:52:2b:63:79:85:9c:03:f4:f0:4e:ac:84:01: 67:c5:5b:e4:a2:56:53:2f:be:86:c8:c8:83:ba:fe:08:cb:ab: 90:f8:17:4e:f5:ca:3a:80:ad:61:7b:da:18:bb:56:5c:dd:36: 3a:57:4e:3f:ad:45:d2:bb:b0:f7:f5:c8:b1:62:85:a9:1b:95: d8:8a:42:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WyHTo69pF7gb9LmbfanaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NjAyZTRiMDg1OTRjNWNhZmZiZWI1MGQxZTBhOWQ0NzBl YjkyZTUwHhcNMjYwMTAxMTYxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2ZhOGNhNzU2NzVlMDRhMzg2MzI2ZDgwYmI1NjNlZmIzZDRmNGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkhWOdoToOJGmKXi8u/jldCYg90u C/dtjOTVDp737i98YFX451ybUBxMuv+8bZ8Z8ypnoi6DCZhCZnascztSEAmI4djC vrlBRllmZo7+X8YPi4M0TjuytPj/t/DPX3kZfCjJ6QbAWydfdvIbna86Ubqe027a QBEA7pbKFOrKVMXt4jQASvt3NrH8alkn1c0wOP8u4EQMhT0p+dQ2yivzs6nwxBht Faloasd6SZ9m1t4rByJ1b5abMJRMYwU3+K5+Cg370UxZyEAbmE8JuqDTPvT5CTsz xOjAmOsUKC/n72BUF5NA5ZINeDcGtyb7SJXBwvKuVxjNVqL480Mg08rzDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAP6jKdWdeBKOGMm2Au1Y++z1PSvMB8GA1UdIwQY MBaAFFlgLksIWUxcr/vrUNHgqdRw65LlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1dBdVN3aFpURnl2LS10UTBlQ3AxSERya3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yNzkxMWItMDY0Zi00ZDYyLWJhMWMt ZTY2MjZhZjc1OWI3LzEvQV9xTXAxWjE0RW80WXliWUM3Vmo3N1BVOUs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yNzkxMWItMDY0Zi00ZDYyLWJhMWMtZTY2MjZhZjc1OWI3 LzEvV1dBdVN3aFpURnl2LS10UTBlQ3AxSERya3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucgQMA0G CSqGSIb3DQEBCwUAA4IBAQBKFufndVqoRem6WlA/ossHXd9ApG4eB0MGeClRB7eh /RfBjpDh51MW+ZwK4sYqojRneurOc66XocS6nJ2gyw/88U6B6XHWOikO9/g0NZ8Y LJ77CGgHz9ygFW+qf4Uo3QXh4K41NI09gR6Vc0RNOFSp3ZZt0HceXblvZHs1I+rI iKP9y6rDR5uRMIuJJ4DTq7BkNjnljIexdCuvKyPQzOP8XLUEq00UdGUBEXt5RSQV Gu+pxi7HkRHM01IrY3mFnAP08E6shAFnxVvkolZTL76GyMiDuv4Iy6uQ+BdO9co6 gK1he9oYu1Zc3TY6V04/rUXSu7D39cixYoWpG5XYikIO -----END CERTIFICATE-----Generated at Mon Feb 9 20:11:15 2026 by rpki-client