This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/K1FdA87T8eFrwlS20DD-axC_KRg.roa File: K1FdA87T8eFrwlS20DD-axC_KRg.roa (raw, json) Hash identifier: UelE8kISfcUjG8bRU19xRhDTFmmSIXEMYIXQuI26se4= Subject key identifier: 2B:51:5D:03:CE:D3:F1:E1:6B:C2:54:B6:D0:30:FE:6B:10:BF:29:18 Certificate issuer: /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc Certificate serial: 019B7D5CE7B84A9FC96026AEC3E510E5CD27 Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/K1FdA87T8eFrwlS20DD-axC_KRg.roa Signing time: Fri 02 Jan 2026 06:19:59 +0000 ROA not before: Fri 02 Jan 2026 06:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42514 IP address blocks: 46.22.240.0/20 maxlen: 20 89.232.180.0/22 maxlen: 22 94.102.16.0/20 maxlen: 20 95.141.176.0/20 maxlen: 20 128.204.160.0/19 maxlen: 19 178.17.128.0/20 maxlen: 20 185.12.84.0/22 maxlen: 22 213.166.76.0/22 maxlen: 22 2a02:2648::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e7:b8:4a:9f:c9:60:26:ae:c3:e5:10:e5:cd:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b515d03ced3f1e16bc254b6d030fe6b10bf2918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a8:f8:ee:3e:13:cf:50:ae:9c:01:11:af:be: f4:09:08:19:70:a0:66:4b:45:5d:3e:0d:87:9b:b2: 8d:8b:e2:8d:a4:56:b0:0d:0b:ae:d4:ae:33:9f:b6: 5c:5b:19:bb:cd:08:db:a8:a5:22:91:26:15:f2:a6: 7c:a9:8b:e1:17:62:6e:30:20:78:c9:38:8f:9b:a6: af:55:8b:db:ae:fd:4d:7e:6a:02:f0:c5:b6:3f:7c: 0d:75:f6:df:db:95:99:86:7f:58:4a:8a:e7:fd:4f: 02:83:f4:a4:48:f5:b5:55:4c:a8:aa:7c:47:de:b5: 29:a7:f2:08:5d:71:33:75:c8:9b:29:c8:ae:df:37: bc:ed:3b:c1:30:88:f6:74:4c:60:6b:a5:ef:14:b7: 2b:d2:39:c8:ea:ac:71:2e:e2:e9:e3:a0:d8:b2:f3: f8:7e:07:2f:c5:dd:b6:fd:39:e6:d0:d7:d2:f3:83: bc:35:cf:51:72:cc:3a:02:cb:66:f9:1a:26:6b:52: a0:3d:8d:b7:4f:46:b6:d7:b3:a6:f1:bc:17:01:71: 1b:92:0c:43:76:b6:e1:95:64:d2:35:9e:d1:fc:ee: 38:1d:b8:50:33:0f:1e:2a:10:0e:5e:3a:5d:41:a4: 8c:7c:22:fe:6d:57:d6:5c:d7:7c:3b:de:ac:30:5a: 0e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:51:5D:03:CE:D3:F1:E1:6B:C2:54:B6:D0:30:FE:6B:10:BF:29:18 X509v3 Authority Key Identifier: keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/K1FdA87T8eFrwlS20DD-axC_KRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.22.240.0/20 89.232.180.0/22 94.102.16.0/20 95.141.176.0/20 128.204.160.0/19 178.17.128.0/20 185.12.84.0/22 213.166.76.0/22 IPv6: 2a02:2648::/29 Signature Algorithm: sha256WithRSAEncryption 3a:87:22:20:29:4f:24:9d:5b:81:da:de:c6:56:64:46:eb:1c: 80:6c:d4:d7:ac:d1:01:59:02:51:7e:e6:1d:83:60:6b:85:9f: d2:1c:7e:4d:fd:64:d6:e2:19:56:3d:09:b3:61:2b:75:e1:b4: 36:e4:8f:ab:ea:bd:b5:a7:c3:3b:03:28:1e:a6:86:2e:1f:15: 9b:22:db:30:56:0e:0d:91:ce:79:0a:d9:5e:a8:70:a9:01:ba: cf:ea:ef:2c:aa:01:5a:d7:ec:cc:21:84:a5:e7:5b:00:84:c3: 9a:e1:42:04:28:41:d1:63:2c:a2:5a:f0:d5:5b:33:02:64:26: b6:5b:76:ee:25:39:db:bf:fc:26:66:3b:e6:e0:8f:ab:42:13: a2:a8:d2:a2:d0:15:89:b3:81:ae:1a:94:37:10:7d:26:2e:e9: af:2d:7e:97:54:99:c2:35:4f:32:26:b6:9b:fd:4e:5a:44:26: f0:0c:13:0d:10:b8:1c:50:a3:e9:ed:e5:83:d1:2b:5c:36:27: a5:e5:95:07:ce:ba:f9:b0:3c:83:5b:b2:65:df:96:c9:13:77: 6b:20:5b:23:a5:64:c2:36:ad:4a:5f:ea:91:e6:70:65:5a:0f: 74:06:eb:ab:f9:b6:6f:5e:06:95:8b:1e:57:76:46:c7:3f:c6: 9d:6a:c1:6c -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt9XOe4Sp/JYCauw+UQ5c0nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwOTZjNDMzNjQwMDNlYzNmN2Y3YzZlYTgxNTdiOGE1MGY0 NDBlY2MwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjUxNWQwM2NlZDNmMWUxNmJjMjU0YjZkMDMwZmU2YjEwYmYyOTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqj47j4Tz1CunAERr770CQgZcKBm S0VdPg2Hm7KNi+KNpFawDQuu1K4zn7ZcWxm7zQjbqKUikSYV8qZ8qYvhF2JuMCB4 yTiPm6avVYvbrv1NfmoC8MW2P3wNdfbf25WZhn9YSorn/U8Cg/SkSPW1VUyoqnxH 3rUpp/IIXXEzdcibKciu3ze87TvBMIj2dExga6XvFLcr0jnI6qxxLuLp46DYsvP4 fgcvxd22/Tnm0NfS84O8Nc9Rcsw6Astm+Roma1KgPY23T0a217Om8bwXAXEbkgxD drbhlWTSNZ7R/O44HbhQMw8eKhAOXjpdQaSMfCL+bVfWXNd8O96sMFoO4QIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFCtRXQPO0/Hha8JUttAw/msQvykYMB8GA1UdIwQY MBaAFOCWxDNkAD7D9/fG6oFXuKUPRA7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEpiRU0yUUFQc1AzOThicWdWZTRwUTlFRHN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jM2JjZTYtNThmYi00ODc0LThiM2Ut M2E4NWVlNGM4OWJjLzEvSzFGZEE4N1Q4ZUZyd2xTMjBERC1heENfS1JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jM2JjZTYtNThmYi00ODc0LThiM2UtM2E4NWVlNGM4OWJj LzEvNEpiRU0yUUFQc1AzOThicWdWZTRwUTlFRHN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQELhbwAwQC Wei0AwQEXmYQAwQEX42wAwQFgMygAwQEshGAAwQCuQxUAwQC1aZMMA0EAgACMAcD BQMqAiZIMA0GCSqGSIb3DQEBCwUAA4IBAQA6hyIgKU8knVuB2t7GVmRG6xyAbNTX rNEBWQJRfuYdg2BrhZ/SHH5N/WTW4hlWPQmzYSt14bQ25I+r6r21p8M7AygepoYu HxWbItswVg4Nkc55CtleqHCpAbrP6u8sqgFa1+zMIYSl51sAhMOa4UIEKEHRYyyi WvDVWzMCZCa2W3buJTnbv/wmZjvm4I+rQhOiqNKi0BWJs4GuGpQ3EH0mLumvLX6X VJnCNU8yJrab/U5aRCbwDBMNELgcUKPp7eWD0StcNiel5ZUHzrr5sDyDW7Jl35bJ E3drIFsjpWTCNq1KX+qR5nBlWg90Buur+bZvXgaVix5XdkbHP8adasFs -----END CERTIFICATE-----Generated at Mon Feb 9 22:14:59 2026 by rpki-client