This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/xlFYwotI5LT7U1ruSVgb-S5VJbc.roa File: xlFYwotI5LT7U1ruSVgb-S5VJbc.roa (raw, json) Hash identifier: q+/WCbLPl7YfFx8PdlPWZvXVYgpytcYGjRYRlu/2J98= Subject key identifier: C6:51:58:C2:8B:48:E4:B4:FB:53:5A:EE:49:58:1B:F9:2E:55:25:B7 Certificate issuer: /CN=32157d6b8c12c05b41bc41241d0615040af241e1 Certificate serial: 019B7EA4DBE295FB1F5E38F65E5822D7D2DD Authority key identifier: 32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/xlFYwotI5LT7U1ruSVgb-S5VJbc.roa Signing time: Fri 02 Jan 2026 12:18:11 +0000 ROA not before: Fri 02 Jan 2026 12:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2376 IP address blocks: 86.232.0.0/16 maxlen: 16 90.72.0.0/16 maxlen: 16 90.97.0.0/17 maxlen: 17 2a01:dfff::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:db:e2:95:fb:1f:5e:38:f6:5e:58:22:d7:d2:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32157d6b8c12c05b41bc41241d0615040af241e1 Validity Not Before: Jan 2 12:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c65158c28b48e4b4fb535aee49581bf92e5525b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:95:f2:f6:fe:4e:25:55:32:26:0b:86:eb:ce: 96:7d:db:e0:de:fc:36:fa:0e:0d:ca:f3:4c:2c:c6: 0d:1c:e8:6a:52:f7:a9:0f:bf:63:f3:f2:f6:89:e5: d8:d2:00:42:80:a3:da:8a:49:ca:cf:e1:a6:fa:d0: 86:cd:c3:b4:d5:4e:55:d8:27:f9:92:cf:a0:f7:28: 19:de:52:87:77:fe:6d:53:6d:ca:95:95:c1:3e:88: 31:ee:19:1f:fe:0e:1e:f5:3a:65:d0:36:ce:5c:35: d8:17:dc:54:84:9e:ba:41:f2:81:84:ff:2a:f3:1c: e8:03:f4:68:c1:4d:89:6e:e8:53:05:9b:46:96:eb: 52:50:78:21:59:20:96:34:bf:3d:ab:bd:5d:50:0a: c6:af:9e:0c:7e:84:59:1d:c1:78:76:50:12:ff:b8: be:0a:cc:94:39:1e:5c:79:86:58:de:2f:55:1f:f9: 69:48:09:55:2b:22:ec:5a:7e:bd:ea:7f:1e:21:a0: d6:33:73:9d:db:05:15:a1:01:ae:7f:ac:f6:bb:e5: 88:8b:7d:9b:76:ee:08:6a:d2:cb:51:45:49:ab:64: 0b:ed:5b:c4:f5:1d:0a:f8:3c:69:27:76:9b:bf:c9: fb:ea:63:56:3e:6c:78:51:3f:d2:c3:64:8b:a9:82: 4d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:51:58:C2:8B:48:E4:B4:FB:53:5A:EE:49:58:1B:F9:2E:55:25:B7 X509v3 Authority Key Identifier: keyid:32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/xlFYwotI5LT7U1ruSVgb-S5VJbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.232.0.0/16 90.72.0.0/16 90.97.0.0/17 IPv6: 2a01:dfff::/32 Signature Algorithm: sha256WithRSAEncryption 83:a3:b0:e4:95:90:fc:ca:a9:22:ec:82:cb:49:21:ea:b3:0e: 25:7a:7c:9a:4d:4c:6b:6a:56:61:4a:3e:b5:e1:cc:1d:65:d9: 1b:13:71:c3:6e:58:66:13:d9:0b:e8:4c:68:6e:a6:86:7b:5c: b7:2d:8f:7f:bb:f0:5a:92:91:72:b3:f1:c1:1e:5f:70:8b:65: a1:3a:b1:77:e7:10:38:48:34:ba:b3:09:b8:15:b9:43:c3:37: cd:72:36:58:13:4e:ba:c6:c3:b8:9e:1b:ca:47:ed:49:1e:b1: a9:a0:ae:81:b3:9b:bd:89:b8:8c:a6:64:5a:7e:d4:3f:88:b6: 39:17:09:70:da:b4:8f:c3:7c:d2:de:35:7d:dd:15:6d:ae:05: ab:7e:6c:04:2f:a4:fd:48:5b:9e:0b:81:14:9e:fc:d4:49:bd: cc:b7:b4:66:1c:77:65:60:7b:e9:fc:9e:06:9b:58:42:fe:ee: ed:3b:2a:1e:c6:b6:83:19:0c:77:5c:88:f1:9a:34:18:a2:77: 97:5f:46:7d:c3:d5:b0:6d:d1:7b:9e:90:c6:50:8d:3b:b2:e1: 81:b0:66:98:e1:63:78:f8:4d:39:5d:42:7a:8a:a2:41:fb:3c: 4f:4c:ac:43:31:4d:82:52:fd:ab:03:1f:ce:fa:57:83:9e:5a: 6e:e6:70:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt+pNvilfsfXjj2Xlgi19LdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMTU3ZDZiOGMxMmMwNWI0MWJjNDEyNDFkMDYxNTA0MGFm MjQxZTEwHhcNMjYwMTAyMTIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjUxNThjMjhiNDhlNGI0ZmI1MzVhZWU0OTU4MWJmOTJlNTUyNWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJXy9v5OJVUyJguG686Wfdvg3vw2 +g4NyvNMLMYNHOhqUvepD79j8/L2ieXY0gBCgKPaiknKz+Gm+tCGzcO01U5V2Cf5 ks+g9ygZ3lKHd/5tU23KlZXBPogx7hkf/g4e9Tpl0DbOXDXYF9xUhJ66QfKBhP8q 8xzoA/RowU2JbuhTBZtGlutSUHghWSCWNL89q71dUArGr54MfoRZHcF4dlAS/7i+ CsyUOR5ceYZY3i9VH/lpSAlVKyLsWn696n8eIaDWM3Od2wUVoQGuf6z2u+WIi32b du4IatLLUUVJq2QL7VvE9R0K+DxpJ3abv8n76mNWPmx4UT/Sw2SLqYJN/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZRWMKLSOS0+1Na7klYG/kuVSW3MB8GA1UdIwQY MBaAFDIVfWuMEsBbQbxBJB0GFQQK8kHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWhWOWE0d1N3RnRCdkVFa0hRWVZCQXJ5UWVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80MTZhODAtZGM1Ni00NTE0LThiYzAt MjdmOWM4MjNlZGVhLzEveGxGWXdvdEk1TFQ3VTFydVNWZ2ItUzVWSmJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC80MTZhODAtZGM1Ni00NTE0LThiYzAtMjdmOWM4MjNlZGVh LzEvTWhWOWE0d1N3RnRCdkVFa0hRWVZCQXJ5UWVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAWBAIAATAQAwMAVugDAwBa SAMEB1phADANBAIAAjAHAwUAKgHf/zANBgkqhkiG9w0BAQsFAAOCAQEAg6Ow5JWQ /MqpIuyCy0kh6rMOJXp8mk1Ma2pWYUo+teHMHWXZGxNxw25YZhPZC+hMaG6mhntc ty2Pf7vwWpKRcrPxwR5fcItloTqxd+cQOEg0urMJuBW5Q8M3zXI2WBNOusbDuJ4b ykftSR6xqaCugbObvYm4jKZkWn7UP4i2ORcJcNq0j8N80t41fd0Vba4Fq35sBC+k /UhbnguBFJ781Em9zLe0Zhx3ZWB76fyeBptYQv7u7TsqHsa2gxkMd1yI8Zo0GKJ3 l19GfcPVsG3Re56QxlCNO7LhgbBmmOFjePhNOV1CeoqiQfs8T0ysQzFNglL9qwMf zvpXg55abuZw3Q== -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:16 2026 by rpki-client