This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/FqwORBPk6r44lZLm9dt7Wvqx_PA.roa File: FqwORBPk6r44lZLm9dt7Wvqx_PA.roa (raw, json) Hash identifier: 7Y8WYPnD9S34g7ljPzxI1LKxdoYV7LrTfUQDWOnoo5M= Subject key identifier: 16:AC:0E:44:13:E4:EA:BE:38:95:92:E6:F5:DB:7B:5A:FA:B1:FC:F0 Certificate issuer: /CN=198204d1c25a011236bea0741e4c60139d349b10 Certificate serial: 019B7F855DE729DD0E24A44F298312501D6F Authority key identifier: 19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/FqwORBPk6r44lZLm9dt7Wvqx_PA.roa Signing time: Fri 02 Jan 2026 16:23:25 +0000 ROA not before: Fri 02 Jan 2026 16:23:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34790 IP address blocks: 185.188.172.0/22 maxlen: 22 195.162.20.0/23 maxlen: 23 217.72.112.0/20 maxlen: 20 2a00:d000::/29 maxlen: 29 2a00:df00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:5d:e7:29:dd:0e:24:a4:4f:29:83:12:50:1d:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=198204d1c25a011236bea0741e4c60139d349b10 Validity Not Before: Jan 2 16:23:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16ac0e4413e4eabe389592e6f5db7b5afab1fcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b1:1c:e9:1e:f5:d0:41:9a:d9:c2:92:d5:fc: c9:6a:61:f0:9f:7b:bb:a1:9c:b7:8c:af:fd:cd:8c: f2:ff:b1:fd:ba:76:54:90:0b:4b:8c:5b:06:3f:10: 79:eb:1d:00:14:8c:ab:e7:40:98:3b:fb:19:6d:fc: 8f:a6:44:f0:a5:8f:d7:f9:e7:f8:ad:b1:7a:1f:b5: 1b:25:8c:b9:57:a5:7b:62:05:bc:8a:5c:7d:ce:d3: 16:da:a4:cf:7f:1f:30:4e:fd:48:9e:54:e0:f3:78: 88:df:7d:bd:17:83:97:a0:1c:c4:37:a4:3e:b0:57: 89:73:14:19:12:71:9b:74:15:2b:82:72:11:cc:36: 0d:66:60:2d:a2:b1:97:df:6b:dd:ef:6e:e0:09:c7: 5c:4b:54:59:a4:b2:29:07:86:f5:1f:bd:1b:cc:12: 43:07:d1:d9:c7:53:2a:dc:d9:92:a9:bb:41:a5:3c: 4c:6b:40:25:db:18:9c:8f:06:10:dc:8d:e9:cd:aa: 27:e1:06:0f:1a:22:f2:af:bb:21:41:97:a2:4a:80: 1c:54:16:7f:14:ff:44:70:38:80:f2:bf:0a:1d:25: 21:75:3b:7f:df:06:82:57:57:31:54:82:e0:61:0d: 47:b0:32:2b:96:a7:6e:c4:b2:5c:1e:0e:ff:83:1b: 11:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AC:0E:44:13:E4:EA:BE:38:95:92:E6:F5:DB:7B:5A:FA:B1:FC:F0 X509v3 Authority Key Identifier: keyid:19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/FqwORBPk6r44lZLm9dt7Wvqx_PA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.172.0/22 195.162.20.0/23 217.72.112.0/20 IPv6: 2a00:d000::/29 2a00:df00::/29 Signature Algorithm: sha256WithRSAEncryption 9d:c5:a1:b6:43:c0:af:ad:03:2d:01:61:d9:f7:0b:7b:6b:63: 67:25:54:eb:ec:c8:3e:9f:00:ca:a5:2b:33:c8:62:98:16:fe: f9:01:18:f7:6a:36:e6:17:91:ee:52:51:53:c0:e9:36:7a:d4: 40:9b:0f:1e:49:84:ce:75:f4:15:47:6b:3b:b5:04:c3:0a:29: 39:d0:2b:f6:b2:1d:67:e9:32:54:00:c4:f2:18:bf:80:49:31: 38:18:d6:f6:67:d4:b5:32:af:96:7e:18:89:e3:13:8c:92:7a: c8:59:15:90:9d:e6:4d:9a:d8:f0:6a:29:0d:01:98:df:7d:31: dd:63:9a:27:aa:98:2b:16:fe:64:e6:34:fb:a4:bb:9f:79:a9: df:d9:d4:cc:17:f2:26:cc:ba:5e:98:08:6a:2b:2d:92:83:57: 00:05:c8:b9:78:5c:4c:f0:0b:70:ea:3c:71:85:e6:3c:26:44: 4d:cc:b6:3b:33:2c:4e:31:c4:9f:a2:2d:f8:61:4d:12:4c:ce: 08:99:0e:f2:fb:dd:99:f0:b0:74:7d:d7:a7:a6:e5:b7:23:d4: 37:f4:b2:68:5d:32:b8:8b:bf:fc:9b:b6:b2:be:40:79:6b:ad: 56:2e:a2:23:85:13:79:1c:d0:c3:38:02:31:0c:0b:a7:e2:16: 97:d6:c1:a6 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt/hV3nKd0OJKRPKYMSUB1vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ODIwNGQxYzI1YTAxMTIzNmJlYTA3NDFlNGM2MDEzOWQz NDliMTAwHhcNMjYwMTAyMTYyMzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmFjMGU0NDEzZTRlYWJlMzg5NTkyZTZmNWRiN2I1YWZhYjFmY2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bEc6R710EGa2cKS1fzJamHwn3u7 oZy3jK/9zYzy/7H9unZUkAtLjFsGPxB56x0AFIyr50CYO/sZbfyPpkTwpY/X+ef4 rbF6H7UbJYy5V6V7YgW8ilx9ztMW2qTPfx8wTv1InlTg83iI3329F4OXoBzEN6Q+ sFeJcxQZEnGbdBUrgnIRzDYNZmAtorGX32vd727gCcdcS1RZpLIpB4b1H70bzBJD B9HZx1Mq3NmSqbtBpTxMa0Al2xicjwYQ3I3pzaon4QYPGiLyr7shQZeiSoAcVBZ/ FP9EcDiA8r8KHSUhdTt/3waCV1cxVILgYQ1HsDIrlqduxLJcHg7/gxsRNwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFBasDkQT5Oq+OJWS5vXbe1r6sfzwMB8GA1UdIwQY MBaAFBmCBNHCWgESNr6gdB5MYBOdNJsQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1lJRTBjSmFBUkkydnFCMEhreGdFNTAwbXhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNmYwYTgtOThmMi00OWZiLTg1MDYt NDJhZDNiNGM4ZDBjLzEvRnF3T1JCUGs2cjQ0bFpMbTlkdDdXdnF4X1BBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNmYwYTgtOThmMi00OWZiLTg1MDYtNDJhZDNiNGM4ZDBj LzEvR1lJRTBjSmFBUkkydnFCMEhreGdFNTAwbXhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCubysAwQB w6IUAwQE2UhwMBQEAgACMA4DBQMqANAAAwUDKgDfADANBgkqhkiG9w0BAQsFAAOC AQEAncWhtkPAr60DLQFh2fcLe2tjZyVU6+zIPp8AyqUrM8himBb++QEY92o25heR 7lJRU8DpNnrUQJsPHkmEznX0FUdrO7UEwwopOdAr9rIdZ+kyVADE8hi/gEkxOBjW 9mfUtTKvln4YieMTjJJ6yFkVkJ3mTZrY8GopDQGY330x3WOaJ6qYKxb+ZOY0+6S7 n3mp39nUzBfyJsy6XpgIaistkoNXAAXIuXhcTPALcOo8cYXmPCZETcy2OzMsTjHE n6It+GFNEkzOCJkO8vvdmfCwdH3Xp6bltyPUN/SyaF0yuIu//Ju2sr5AeWutVi6i I4UTeRzQwzgCMQwLp+IWl9bBpg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:39 2026 by rpki-client