This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/kAZmzQ0U-tWvr0f-02x69bXjUAU.roa File: kAZmzQ0U-tWvr0f-02x69bXjUAU.roa (raw, json) Hash identifier: 5WlvJHiQOeb7v4dnN4FdtefOtV8drHOu9JZO31PSCrM= Subject key identifier: 90:06:66:CD:0D:14:FA:D5:AF:AF:47:FE:D3:6C:7A:F5:B5:E3:50:05 Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103 Certificate serial: 019B7910B13DA9543FD96F2DCC891FF41CD1 Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/kAZmzQ0U-tWvr0f-02x69bXjUAU.roa Signing time: Thu 01 Jan 2026 10:18:15 +0000 ROA not before: Thu 01 Jan 2026 10:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41096 IP address blocks: 176.98.64.0/19 maxlen: 19 176.98.64.0/24 maxlen: 24 176.98.65.0/24 maxlen: 24 176.98.66.0/24 maxlen: 24 176.98.67.0/24 maxlen: 24 176.98.68.0/24 maxlen: 24 176.98.69.0/24 maxlen: 24 176.98.70.0/24 maxlen: 24 176.98.71.0/24 maxlen: 24 176.98.72.0/24 maxlen: 24 176.98.73.0/24 maxlen: 24 176.98.74.0/24 maxlen: 24 176.98.75.0/24 maxlen: 24 176.98.76.0/24 maxlen: 24 176.98.77.0/24 maxlen: 24 176.98.78.0/24 maxlen: 24 176.98.79.0/24 maxlen: 24 176.98.80.0/24 maxlen: 24 176.98.81.0/24 maxlen: 24 176.98.82.0/24 maxlen: 24 176.98.83.0/24 maxlen: 24 176.98.84.0/24 maxlen: 24 176.98.85.0/24 maxlen: 24 176.98.86.0/24 maxlen: 24 176.98.87.0/24 maxlen: 24 176.98.88.0/24 maxlen: 24 176.98.89.0/24 maxlen: 24 176.98.90.0/24 maxlen: 24 176.98.91.0/24 maxlen: 24 176.98.92.0/24 maxlen: 24 176.98.93.0/24 maxlen: 24 176.98.94.0/24 maxlen: 24 176.98.95.0/24 maxlen: 24 195.189.104.0/22 maxlen: 22 195.189.104.0/24 maxlen: 24 195.189.105.0/24 maxlen: 24 195.189.106.0/24 maxlen: 24 195.189.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b1:3d:a9:54:3f:d9:6f:2d:cc:89:1f:f4:1c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103 Validity Not Before: Jan 1 10:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=900666cd0d14fad5afaf47fed36c7af5b5e35005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:11:ca:f2:d8:c3:07:14:e8:e4:85:5c:75:07: 83:20:37:8e:f2:31:75:a5:75:48:fa:79:98:9f:63: d9:f8:fe:da:34:75:2e:5c:70:58:c7:4b:ce:f5:6f: 2b:35:68:b9:c3:ff:80:4d:65:f1:95:6a:59:6b:59: 10:b1:3c:60:b7:47:d7:41:b5:66:cf:95:a9:ab:07: fc:98:35:0c:c8:33:31:41:9f:a1:f1:e0:8f:fb:b1: 54:7f:24:bc:57:a4:ec:3a:37:53:8f:d4:b0:29:96: 5d:7a:90:7c:29:e0:1f:ff:fe:cf:5f:69:51:3e:c6: 7b:21:0c:6c:7d:7f:12:8e:f7:e4:4d:fa:a1:82:6a: 48:61:82:f8:a5:7d:22:78:12:f2:2c:72:a8:3e:e5: d4:ef:6b:6a:05:0b:6d:fa:b2:e5:3b:54:c9:07:de: df:29:b5:3a:c9:7e:6a:af:2e:8f:cb:81:19:d8:d2: 4b:55:64:dc:b7:70:42:4b:f0:7b:aa:07:8f:2d:aa: 32:d4:fd:72:37:41:3d:3a:89:19:41:8e:89:23:b6: 9b:51:aa:41:c3:78:ac:b7:ff:25:b0:34:5b:50:60: 07:ea:fe:2a:76:ff:8a:c4:90:08:c1:08:f9:25:ce: 99:52:43:9c:2a:11:7a:98:0b:99:b8:f9:32:64:6e: 7c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:06:66:CD:0D:14:FA:D5:AF:AF:47:FE:D3:6C:7A:F5:B5:E3:50:05 X509v3 Authority Key Identifier: keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/kAZmzQ0U-tWvr0f-02x69bXjUAU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.98.64.0/19 195.189.104.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:34:15:a8:cc:0e:ff:f9:f9:df:4d:a0:98:2b:d9:57:8f:a9: 34:72:7b:d5:2c:c9:fd:5c:aa:ff:aa:8b:08:1f:f1:d6:63:f3: 7a:f2:7c:3a:65:1b:36:c0:9b:54:86:37:57:89:7e:61:17:9a: 39:f9:63:b1:50:57:48:0f:ed:9b:2f:d7:1a:8d:00:dc:c8:88: a0:e0:51:92:65:54:8b:34:be:37:99:af:19:b6:e3:13:6b:a5: 7b:d4:27:4b:b5:7c:aa:d8:50:29:a8:52:a9:a7:96:81:f5:04: 06:0e:52:88:03:62:fd:4c:25:fc:eb:17:85:4e:a1:90:ce:26: 55:a7:76:15:12:3b:d5:21:84:89:54:0d:3b:72:33:23:0f:65: b6:9e:9b:97:0f:c5:85:7b:73:c8:8f:ab:80:3e:df:66:1e:4d: aa:49:38:8c:bc:4f:58:67:f8:8d:d1:af:e7:f0:5d:2f:5d:ec: 67:db:d9:b6:64:98:ec:6e:6b:79:11:c3:9f:2b:df:6d:14:87: 09:56:1d:4c:18:ae:e7:2f:a0:4b:20:2d:06:9e:d2:bd:80:6b: 94:d9:57:0a:fd:1c:56:a7:e9:12:0c:f0:af:4b:f4:3f:62:e3: 23:d9:ca:bc:e5:a4:a7:7e:51:9a:0c:22:84:84:cc:e8:ca:f6: 39:4f:1f:6b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ELE9qVQ/2W8tzIkf9BzRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZDVkZmRkZTRkNjc5YzcxMWNjZTA2ZWRmNDAzNmNhNGU1 Y2MxMDMwHhcNMjYwMTAxMTAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDA2NjZjZDBkMTRmYWQ1YWZhZjQ3ZmVkMzZjN2FmNWI1ZTM1MDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RHK8tjDBxTo5IVcdQeDIDeO8jF1 pXVI+nmYn2PZ+P7aNHUuXHBYx0vO9W8rNWi5w/+ATWXxlWpZa1kQsTxgt0fXQbVm z5Wpqwf8mDUMyDMxQZ+h8eCP+7FUfyS8V6TsOjdTj9SwKZZdepB8KeAf//7PX2lR PsZ7IQxsfX8SjvfkTfqhgmpIYYL4pX0ieBLyLHKoPuXU72tqBQtt+rLlO1TJB97f KbU6yX5qry6Py4EZ2NJLVWTct3BCS/B7qgePLaoy1P1yN0E9OokZQY6JI7abUapB w3ist/8lsDRbUGAH6v4qdv+KxJAIwQj5Jc6ZUkOcKhF6mAuZuPkyZG58RwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJAGZs0NFPrVr69H/tNsevW141AFMB8GA1UdIwQY MBaAFPDV393k1nnHEczgbt9ANspOXMEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjct ZTc0ZDQ0OTBhZjZjLzEva0FabXpRMFUtdFd2cjBmLTAyeDY5YlhqVUFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjctZTc0ZDQ0OTBhZjZj LzEvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFsGJAAwQC w71oMA0GCSqGSIb3DQEBCwUAA4IBAQANNBWozA7/+fnfTaCYK9lXj6k0cnvVLMn9 XKr/qosIH/HWY/N68nw6ZRs2wJtUhjdXiX5hF5o5+WOxUFdID+2bL9cajQDcyIig 4FGSZVSLNL43ma8ZtuMTa6V71CdLtXyq2FApqFKpp5aB9QQGDlKIA2L9TCX86xeF TqGQziZVp3YVEjvVIYSJVA07cjMjD2W2npuXD8WFe3PIj6uAPt9mHk2qSTiMvE9Y Z/iN0a/n8F0vXexn29m2ZJjsbmt5EcOfK99tFIcJVh1MGK7nL6BLIC0GntK9gGuU 2VcK/RxWp+kSDPCvS/Q/YuMj2cq85aSnflGaDCKEhMzoyvY5Tx9r -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:19 2026 by rpki-client