This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/_n04tbHejANq8Ug_J-BPx0EeIOY.roa File: _n04tbHejANq8Ug_J-BPx0EeIOY.roa (raw, json) Hash identifier: XtKxscitCuMv9T8d0VZ6njYDJbqu3csyAljLvKPr+l0= Subject key identifier: FE:7D:38:B5:B1:DE:8C:03:6A:F1:48:3F:27:E0:4F:C7:41:1E:20:E6 Certificate issuer: /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc Certificate serial: 019B7BA52646A975C537D1CBB856FD583DD7 Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/_n04tbHejANq8Ug_J-BPx0EeIOY.roa Signing time: Thu 01 Jan 2026 22:19:39 +0000 ROA not before: Thu 01 Jan 2026 22:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48173 IP address blocks: 5.39.240.0/21 maxlen: 24 5.179.200.0/21 maxlen: 24 5.179.208.0/21 maxlen: 24 5.179.216.0/21 maxlen: 24 5.179.224.0/21 maxlen: 24 5.179.232.0/21 maxlen: 24 5.179.240.0/21 maxlen: 24 5.179.248.0/21 maxlen: 24 46.23.232.0/21 maxlen: 24 46.231.176.0/21 maxlen: 24 79.174.136.0/21 maxlen: 24 79.174.144.0/21 maxlen: 24 80.82.200.0/21 maxlen: 24 94.198.56.0/21 maxlen: 24 185.68.124.0/22 maxlen: 24 194.9.184.0/22 maxlen: 24 194.9.216.0/22 maxlen: 24 194.11.188.0/22 maxlen: 24 194.11.248.0/22 maxlen: 24 194.13.68.0/23 maxlen: 24 194.13.124.0/22 maxlen: 24 194.13.136.0/22 maxlen: 24 194.13.232.0/22 maxlen: 24 194.15.76.0/22 maxlen: 24 212.45.104.0/21 maxlen: 24 2a00:cd0::/32 maxlen: 48 2a03:7a40::/32 maxlen: 48 2a03:7c40::/32 maxlen: 48 2a03:8a40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:26:46:a9:75:c5:37:d1:cb:b8:56:fd:58:3d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc Validity Not Before: Jan 1 22:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe7d38b5b1de8c036af1483f27e04fc7411e20e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c7:cc:7f:6f:4b:32:2f:af:7f:55:a4:e0:0a: 4b:a0:14:ae:78:7b:1e:2e:ba:5b:8f:94:33:68:78: 6f:75:1a:a3:bd:04:35:4e:12:2f:e9:04:16:a0:05: ab:e4:82:66:3c:d7:f9:d0:3a:f5:ae:d9:c3:65:61: c2:ba:f5:67:9b:ef:5b:0b:0a:18:98:b5:10:00:38: 58:87:63:8b:b5:74:2e:7e:f9:dd:7c:05:de:44:fb: 62:03:fb:23:28:8c:97:cb:28:fe:12:c4:82:08:37: 48:3e:86:1e:6b:ce:62:3d:5b:52:22:34:e3:40:b9: 86:52:7f:2e:52:a2:59:75:c6:76:dd:4c:b2:11:11: f8:d6:8c:81:d1:5f:f1:67:54:d3:2c:1d:b0:ab:ba: 65:80:f7:25:98:81:2a:43:70:ee:35:fe:12:b4:43: d8:00:e0:c3:10:e7:31:4f:8c:ff:c2:df:8a:a0:fe: 86:b4:e6:5b:e2:60:96:6f:41:f3:72:c3:0e:cb:30: 3d:1e:f5:4c:c9:85:92:0a:cd:38:fd:d4:f2:c8:aa: 7a:9c:8a:f7:06:57:f7:aa:d8:fc:72:70:f7:7f:cc: bb:64:d4:2f:32:a1:cc:8d:e1:21:38:73:f6:5e:9b: a6:71:4a:2d:44:3c:b6:0b:7c:d0:4e:08:8b:66:19: d3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7D:38:B5:B1:DE:8C:03:6A:F1:48:3F:27:E0:4F:C7:41:1E:20:E6 X509v3 Authority Key Identifier: keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/_n04tbHejANq8Ug_J-BPx0EeIOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.39.240.0/21 5.179.200.0-5.179.255.255 46.23.232.0/21 46.231.176.0/21 79.174.136.0-79.174.151.255 80.82.200.0/21 94.198.56.0/21 185.68.124.0/22 194.9.184.0/22 194.9.216.0/22 194.11.188.0/22 194.11.248.0/22 194.13.68.0/23 194.13.124.0/22 194.13.136.0/22 194.13.232.0/22 194.15.76.0/22 212.45.104.0/21 IPv6: 2a00:cd0::/32 2a03:7a40::/32 2a03:7c40::/32 2a03:8a40::/32 Signature Algorithm: sha256WithRSAEncryption 00:87:2a:de:dc:82:21:91:02:03:74:be:1f:bf:55:ac:d7:55: d1:54:90:c9:02:1e:60:a5:e9:f3:c4:2e:61:66:d4:ed:72:1c: 7c:65:a8:70:9e:b1:d6:52:03:3f:84:11:d0:a5:75:ea:e5:11: 94:f6:30:70:f4:96:82:4f:5f:67:75:37:30:21:74:ad:fc:9b: 84:4b:99:2c:22:38:99:cd:fa:74:61:1c:2c:28:61:9c:26:a4: 5b:e7:ea:8e:ab:cf:fe:31:fc:d6:1d:5d:5e:f4:7a:45:06:47: 87:52:8f:6b:08:33:e3:07:55:20:4b:20:f6:a0:8c:8e:22:ed: 0f:bb:87:93:86:c8:8d:93:45:21:2e:46:8a:9d:fa:0f:12:38: 89:a9:b2:e9:2c:2b:11:28:d9:b4:d2:63:3d:ed:ca:ef:36:f2: 0c:50:18:49:d1:c1:a9:f6:0e:ee:6d:2e:3f:f7:34:1d:c2:0e: ce:65:82:28:c6:c9:46:77:f3:95:a5:56:dd:09:f8:1f:ae:24: f3:aa:b9:63:2d:51:e2:40:55:ec:35:d6:32:78:b3:2a:fc:09: ba:ba:d4:39:27:57:2c:a0:24:73:74:35:53:e4:ae:3a:57:82: 44:af:94:2b:17:05:98:ea:19:07:2d:a3:cd:a9:13:8c:4b:9d: b4:fa:e5:c9 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt7pSZGqXXFN9HLuFb9WD3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZTcxMWNlMzQwMjZlNTdhZjMyOTBjN2RlMmNkMjFkYzY3 MWUwZmMwHhcNMjYwMTAxMjIxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTdkMzhiNWIxZGU4YzAzNmFmMTQ4M2YyN2UwNGZjNzQxMWUyMGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sfMf29LMi+vf1Wk4ApLoBSueHse Lrpbj5QzaHhvdRqjvQQ1ThIv6QQWoAWr5IJmPNf50Dr1rtnDZWHCuvVnm+9bCwoY mLUQADhYh2OLtXQufvndfAXeRPtiA/sjKIyXyyj+EsSCCDdIPoYea85iPVtSIjTj QLmGUn8uUqJZdcZ23UyyERH41oyB0V/xZ1TTLB2wq7plgPclmIEqQ3DuNf4StEPY AODDEOcxT4z/wt+KoP6GtOZb4mCWb0HzcsMOyzA9HvVMyYWSCs04/dTyyKp6nIr3 Blf3qtj8cnD3f8y7ZNQvMqHMjeEhOHP2XpumcUotRDy2C3zQTgiLZhnT3QIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFP59OLWx3owDavFIPyfgT8dBHiDmMB8GA1UdIwQY MBaAFCfnEc40Am5XrzKQx94s0h3GceD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSi1jUnpqUUNibGV2TXBESDNpelNIY1p4NFB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNmMwZjktMjRhNC00NmZkLTgwNDIt YjcyZTVmZWY4ODZhLzEvX24wNHRiSGVqQU5xOFVnX0otQlB4MEVlSU9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8yNmMwZjktMjRhNC00NmZkLTgwNDItYjcyZTVmZWY4ODZh LzEvSi1jUnpqUUNibGV2TXBESDNpelNIY1p4NFB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBgQQCAAEwewMEAwUn 8DALAwQDBbPIAwMCBbADBAMuF+gDBAMu57AwDAMEA0+uiAMEA0+ukAMEA1BSyAME A17GOAMEArlEfAMEAsIJuAMEAsIJ2AMEAsILvAMEAsIL+AMEAcINRAMEAsINfAME AsINiAMEAsIN6AMEAsIPTAMEA9QtaDAiBAIAAjAcAwUAKgAM0AMFACoDekADBQAq A3xAAwUAKgOKQDANBgkqhkiG9w0BAQsFAAOCAQEAAIcq3tyCIZECA3S+H79VrNdV 0VSQyQIeYKXp88QuYWbU7XIcfGWocJ6x1lIDP4QR0KV16uURlPYwcPSWgk9fZ3U3 MCF0rfybhEuZLCI4mc36dGEcLChhnCakW+fqjqvP/jH81h1dXvR6RQZHh1KPawgz 4wdVIEsg9qCMjiLtD7uHk4bIjZNFIS5Gip36DxI4iamy6SwrESjZtNJjPe3K7zby DFAYSdHBqfYO7m0uP/c0HcIOzmWCKMbJRnfzlaVW3Qn4H64k86q5Yy1R4kBV7DXW MnizKvwJurrUOSdXLKAkc3Q1U+SuOleCRK+UKxcFmOoZBy2jzakTjEudtPrlyQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:51 2026 by rpki-client