This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/Sq8Hay0mGsBowKqwtDZvadunGsM.roa File: Sq8Hay0mGsBowKqwtDZvadunGsM.roa (raw, json) Hash identifier: X7j1mWxjchwdoCNGDPezAH5d5ppHerhR7WmtyOb/ZCk= Subject key identifier: 4A:AF:07:6B:2D:26:1A:C0:68:C0:AA:B0:B4:36:6F:69:DB:A7:1A:C3 Certificate issuer: /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc Certificate serial: 019B797F3549829C5DC49B48ED094DB7596B Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/Sq8Hay0mGsBowKqwtDZvadunGsM.roa Signing time: Thu 01 Jan 2026 12:18:58 +0000 ROA not before: Thu 01 Jan 2026 12:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14593 IP address blocks: 87.251.24.0/21 maxlen: 24 91.102.180.0/22 maxlen: 24 145.224.64.0/18 maxlen: 24 145.224.64.0/21 maxlen: 24 145.224.72.0/21 maxlen: 24 145.224.80.0/21 maxlen: 24 145.224.88.0/22 maxlen: 24 145.224.92.0/23 maxlen: 24 145.224.94.0/23 maxlen: 24 145.224.96.0/21 maxlen: 24 145.224.108.0/22 maxlen: 24 145.224.124.0/22 maxlen: 24 150.228.0.0/17 maxlen: 24 162.43.192.0/22 maxlen: 24 169.155.224.0/19 maxlen: 24 176.116.124.0/23 maxlen: 24 188.92.248.0/21 maxlen: 24 188.95.144.0/23 maxlen: 24 209.198.128.0/19 maxlen: 24 212.105.128.0/19 maxlen: 24 216.128.0.0/19 maxlen: 24 217.65.136.0/21 maxlen: 24 217.65.136.0/22 maxlen: 24 217.142.16.0/20 maxlen: 24 2a0d:3340::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:35:49:82:9c:5d:c4:9b:48:ed:09:4d:b7:59:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc Validity Not Before: Jan 1 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4aaf076b2d261ac068c0aab0b4366f69dba71ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5e:f2:e2:f8:c7:4e:8a:7c:ec:4d:f4:4a:8f: 35:77:00:2c:7e:a4:7f:46:74:70:5b:49:df:d1:0c: 2b:f0:ec:f4:ec:54:d1:ec:eb:c9:31:d2:95:0e:36: 2c:03:2f:0c:1b:45:fd:6e:91:d8:d4:fd:0c:1a:9a: ef:5d:7b:0d:4a:b0:de:09:dc:e9:7f:c0:cd:83:e5: b6:59:6c:b6:02:f7:18:4a:a6:6d:a5:aa:b6:28:9b: 0e:75:ae:73:40:17:3e:74:96:bc:33:06:5a:d5:3f: 97:0d:19:3b:76:96:90:a7:6b:58:9c:c8:b7:b3:d8: 65:34:58:f3:c4:14:20:ce:73:6e:14:64:7c:02:3f: a4:2f:22:d3:d6:44:9a:78:82:30:98:3f:da:82:a0: 54:d0:c3:0e:42:79:2c:8d:f8:aa:99:60:8b:ae:b8: ca:f5:14:3f:a2:d4:31:d9:ba:24:e0:13:1e:26:cc: 68:ce:85:ef:e3:25:48:fe:29:9a:14:7c:02:a6:eb: 9b:de:42:d3:5c:ae:72:53:c4:45:35:86:d1:ff:36: 2d:12:9a:97:f6:0a:a7:4c:e9:7e:41:90:96:78:83: da:6d:9d:ff:bb:c6:9f:da:62:7b:90:2d:43:03:e6: 33:89:d0:be:45:79:97:c1:2b:9f:4e:1f:c6:f3:6d: c6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AF:07:6B:2D:26:1A:C0:68:C0:AA:B0:B4:36:6F:69:DB:A7:1A:C3 X509v3 Authority Key Identifier: keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/Sq8Hay0mGsBowKqwtDZvadunGsM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.251.24.0/21 91.102.180.0/22 145.224.64.0/18 150.228.0.0/17 162.43.192.0/22 169.155.224.0/19 176.116.124.0/23 188.92.248.0/21 188.95.144.0/23 209.198.128.0/19 212.105.128.0/19 216.128.0.0/19 217.65.136.0/21 217.142.16.0/20 IPv6: 2a0d:3340::/29 Signature Algorithm: sha256WithRSAEncryption 55:54:56:b8:d1:9b:d3:00:e2:2b:16:9d:eb:39:fc:18:3b:de: ee:56:d8:2a:36:07:57:fe:87:a0:df:5f:9e:5a:8c:fc:54:a4: 78:60:d3:e6:6a:ca:0a:4a:32:28:3d:35:ec:7b:25:e9:f7:a8: 5d:56:3a:71:c4:1a:53:ba:24:83:c5:9b:79:dc:0b:b2:8b:42: 93:96:a0:aa:a4:50:a0:cd:5c:56:19:b3:e7:df:d7:99:36:e9: e3:fe:3b:75:1b:7c:44:b2:9d:73:0a:cc:52:f1:45:44:23:ba: f1:27:1a:d9:63:13:57:f1:50:ba:0e:1e:31:09:c4:ad:ac:65: a3:c5:ee:e9:9f:d9:1e:e8:a4:1c:f2:fe:29:c6:61:29:9c:f9: ee:a6:06:73:49:2b:29:22:ee:13:ca:10:31:a4:06:85:b2:4d: 2a:07:ec:07:bc:96:14:50:32:e0:7f:bf:f2:ed:2e:ad:d0:f6: 1f:43:c6:47:f0:2c:8e:e4:be:e7:b5:3f:b8:ab:2b:27:b2:79: dd:22:01:1c:ad:f5:7a:be:9b:8a:73:df:22:f1:a4:3d:f8:be: 03:4d:98:ad:92:87:57:14:65:05:26:ce:ee:c8:c0:1a:99:07: a4:e7:17:0a:a0:8e:c1:6f:97:b3:ef:f6:00:25:38:dc:a0:77: b0:02:08:0f -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgISAZt5fzVJgpxdxJtI7QlNt1lrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3OTliMzI3ZGQ2Y2RhMWFkMzdiYzFjMjI0YTQ1NGIwMmRl YTJhZmMwHhcNMjYwMTAxMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWFmMDc2YjJkMjYxYWMwNjhjMGFhYjBiNDM2NmY2OWRiYTcxYWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7V7y4vjHTop87E30So81dwAsfqR/ RnRwW0nf0Qwr8Oz07FTR7OvJMdKVDjYsAy8MG0X9bpHY1P0MGprvXXsNSrDeCdzp f8DNg+W2WWy2AvcYSqZtpaq2KJsOda5zQBc+dJa8MwZa1T+XDRk7dpaQp2tYnMi3 s9hlNFjzxBQgznNuFGR8Aj+kLyLT1kSaeIIwmD/agqBU0MMOQnksjfiqmWCLrrjK 9RQ/otQx2bok4BMeJsxozoXv4yVI/imaFHwCpuub3kLTXK5yU8RFNYbR/zYtEpqX 9gqnTOl+QZCWeIPabZ3/u8af2mJ7kC1DA+YzidC+RXmXwSufTh/G823GBQIDAQAB o4ICZjCCAmIwHQYDVR0OBBYEFEqvB2stJhrAaMCqsLQ2b2nbpxrDMB8GA1UdIwQY MBaAFFeZsyfdbNoa03vBwiSkVLAt6ir8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjVteko5MXMyaHJUZThIQ0pLUlVzQzNxS3Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84YzJhZTktMGE3Ny00OWViLWFkM2Et ZWExNTBlNzYzOGNlLzEvU3E4SGF5MG1Hc0Jvd0txd3REWnZhZHVuR3NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84YzJhZTktMGE3Ny00OWViLWFkM2EtZWExNTBlNzYzOGNl LzEvVjVteko5MXMyaHJUZThIQ0pLUlVzQzNxS3Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBaBAIAATBUAwQDV/sYAwQC W2a0AwQGkeBAAwQHluQAAwQCoivAAwQFqZvgAwQBsHR8AwQDvFz4AwQBvF+QAwQF 0caAAwQF1GmAAwQF2IAAAwQD2UGIAwQE2Y4QMA0EAgACMAcDBQMqDTNAMA0GCSqG SIb3DQEBCwUAA4IBAQBVVFa40ZvTAOIrFp3rOfwYO97uVtgqNgdX/oeg31+eWoz8 VKR4YNPmasoKSjIoPTXseyXp96hdVjpxxBpTuiSDxZt53Auyi0KTlqCqpFCgzVxW GbPn39eZNunj/jt1G3xEsp1zCsxS8UVEI7rxJxrZYxNX8VC6Dh4xCcStrGWjxe7p n9ke6KQc8v4pxmEpnPnupgZzSSspIu4TyhAxpAaFsk0qB+wHvJYUUDLgf7/y7S6t 0PYfQ8ZH8CyO5L7ntT+4qysnsnndIgEcrfV6vpuKc98i8aQ9+L4DTZitkodXFGUF Js7uyMAamQek5xcKoI7Bb5ez7/YAJTjcoHewAggP -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:03 2026 by rpki-client