This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/F2QV_66WehLc77NGIM3slPrBtto.roa File: F2QV_66WehLc77NGIM3slPrBtto.roa (raw, json) Hash identifier: RI+syZ61AIZz1Mq9S9WSzQDXN4nlB+IQhkx+eNA8cRA= Subject key identifier: 17:64:15:FF:AE:96:7A:12:DC:EF:B3:46:20:CD:EC:94:FA:C1:B6:DA Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e Certificate serial: 019C17FB49CD74CBB4AA8E2B643742D5A4F2 Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/F2QV_66WehLc77NGIM3slPrBtto.roa Signing time: Sun 01 Feb 2026 06:54:30 +0000 ROA not before: Sun 01 Feb 2026 06:54:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61173 IP address blocks: 5.182.44.0/24 maxlen: 24 5.182.45.0/24 maxlen: 24 5.182.46.0/24 maxlen: 24 45.159.112.0/24 maxlen: 24 45.159.113.0/24 maxlen: 24 45.159.114.0/24 maxlen: 24 45.159.115.0/24 maxlen: 24 62.3.42.0/24 maxlen: 24 85.208.252.0/24 maxlen: 24 85.208.253.0/24 maxlen: 24 85.208.254.0/24 maxlen: 24 85.208.255.0/24 maxlen: 24 91.247.174.0/24 maxlen: 24 185.4.28.0/24 maxlen: 24 185.4.29.0/24 maxlen: 24 185.4.30.0/24 maxlen: 24 185.4.31.0/24 maxlen: 24 185.50.37.0/24 maxlen: 24 185.50.38.0/24 maxlen: 24 185.50.39.0/24 maxlen: 24 185.116.160.0/24 maxlen: 24 185.116.161.0/24 maxlen: 24 185.116.162.0/24 maxlen: 24 185.116.163.0/24 maxlen: 24 185.213.164.0/24 maxlen: 24 185.213.165.0/24 maxlen: 24 185.213.166.0/24 maxlen: 24 185.213.167.0/24 maxlen: 24 185.255.88.0/24 maxlen: 24 185.255.89.0/24 maxlen: 24 185.255.90.0/24 maxlen: 24 185.255.91.0/24 maxlen: 24 193.141.64.0/24 maxlen: 24 193.141.65.0/24 maxlen: 24 193.141.126.0/24 maxlen: 24 193.141.127.0/24 maxlen: 24 2a05:ab80::/48 maxlen: 48 2a05:ab80:1::/48 maxlen: 48 2a05:ab80:3::/48 maxlen: 48 2a05:ab80:4::/48 maxlen: 48 2a05:ab80:100::/48 maxlen: 48 2a05:ab80:200::/48 maxlen: 48 2a05:ab80:300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 19:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:17:fb:49:cd:74:cb:b4:aa:8e:2b:64:37:42:d5:a4:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e Validity Not Before: Feb 1 06:54:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=176415ffae967a12dcefb34620cdec94fac1b6da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:de:31:a3:99:91:0a:aa:c2:95:67:bc:79:aa: 39:6a:92:20:f4:bf:cf:83:07:c4:0c:75:20:1c:a3: ce:e0:eb:e7:b2:40:af:22:8a:36:9a:b8:d3:69:60: 82:67:ba:4a:43:d3:cb:0a:4c:38:f4:b4:f9:8b:5d: 1a:99:55:13:f4:5d:77:9e:3b:7e:a5:03:11:22:3c: 16:e2:dc:d2:48:53:62:d2:a5:8c:c4:75:20:41:a7: 0b:84:41:0e:2e:09:a5:b4:9c:e5:ad:8d:ea:5e:7a: 2c:33:5b:b4:fb:7c:24:51:bf:9f:88:dc:a8:1a:88: 5d:12:b5:e5:a8:8d:e4:c4:fa:f3:b9:cd:0e:c4:25: d0:8c:47:9c:5a:65:f1:4f:e9:60:db:c0:39:d6:39: 95:9f:dc:ce:82:c4:c5:0b:83:1d:55:0e:f5:00:f4: f3:b2:b1:66:b0:78:8b:77:63:c6:95:03:29:61:39: 68:e9:9c:11:83:77:b8:d0:ca:5c:33:b7:94:f0:b1: be:bc:83:79:f6:d8:1b:65:5f:53:16:a4:02:00:af: ad:6a:61:e4:7d:9a:3d:49:79:c5:ee:2c:f1:7e:e2: 55:0b:ea:3f:66:4d:ee:c9:3a:dc:97:31:21:e9:ad: 5a:85:20:a9:f9:39:76:3d:16:13:a8:cb:ee:ee:4d: 58:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:64:15:FF:AE:96:7A:12:DC:EF:B3:46:20:CD:EC:94:FA:C1:B6:DA X509v3 Authority Key Identifier: keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/F2QV_66WehLc77NGIM3slPrBtto.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.44.0-5.182.46.255 45.159.112.0/22 62.3.42.0/24 85.208.252.0/22 91.247.174.0/24 185.4.28.0/22 185.50.37.0-185.50.39.255 185.116.160.0/22 185.213.164.0/22 185.255.88.0/22 193.141.64.0/23 193.141.126.0/23 IPv6: 2a05:ab80::/47 2a05:ab80:3::-2a05:ab80:4:ffff:ffff:ffff:ffff:ffff 2a05:ab80:100::/48 2a05:ab80:200::/48 2a05:ab80:300::/48 Signature Algorithm: sha256WithRSAEncryption 7b:31:d9:cc:53:4b:bd:10:02:cb:8e:4f:79:35:d1:a2:35:bd: 3e:49:5c:9f:d5:1c:df:ea:c6:32:69:0f:77:44:17:11:54:fa: e3:b1:68:cc:b0:50:dd:22:64:65:ab:89:fe:23:c2:4a:84:ab: e8:dc:9f:a5:4d:cd:72:42:e7:57:28:1d:52:6a:27:b1:c3:b1: 48:f4:48:e0:22:4d:c1:ba:93:f5:74:ac:b7:c6:c7:69:0b:db: e6:aa:75:27:f4:34:96:3c:d9:24:0c:ad:5a:92:21:fd:80:b5: 82:63:4f:34:11:76:00:b6:0f:7e:08:84:67:1b:65:50:aa:5d: f9:27:0b:6d:c3:7a:ce:6b:18:4c:68:3a:49:a0:61:30:49:73: 08:cc:df:06:a0:94:b2:7f:01:f0:f8:54:f0:fd:d9:e1:ca:89: 1e:eb:08:da:7a:8e:51:68:8a:2a:64:d1:08:d3:fb:44:0c:92: 7e:1f:e5:5a:cf:7f:91:49:91:d8:84:b7:e3:03:67:49:46:0d: f8:7c:8a:08:e3:58:b4:d9:c6:f9:b6:ea:97:dd:98:9c:fc:57: 68:81:cf:12:25:d2:97:ec:84:4c:4f:c1:7f:f7:0e:da:f3:76: 2e:80:53:d3:7c:72:7b:1e:c0:47:af:fc:73:d3:94:3b:f8:6b: 76:70:73:ad -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZwX+0nNdMu0qo4rZDdC1aTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZmQzODA0ZTAwYjllMDZhODJjZWQ5ZjA3YjM0ZmUzZmQ4 MDM5NGUwHhcNMjYwMjAxMDY1NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzY0MTVmZmFlOTY3YTEyZGNlZmIzNDYyMGNkZWM5NGZhYzFiNmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN4xo5mRCqrClWe8eao5apIg9L/P gwfEDHUgHKPO4OvnskCvIoo2mrjTaWCCZ7pKQ9PLCkw49LT5i10amVUT9F13njt+ pQMRIjwW4tzSSFNi0qWMxHUgQacLhEEOLgmltJzlrY3qXnosM1u0+3wkUb+fiNyo GohdErXlqI3kxPrzuc0OxCXQjEecWmXxT+lg28A51jmVn9zOgsTFC4MdVQ71APTz srFmsHiLd2PGlQMpYTlo6ZwRg3e40MpcM7eU8LG+vIN59tgbZV9TFqQCAK+tamHk fZo9SXnF7izxfuJVC+o/Zk3uyTrclzEh6a1ahSCp+Tl2PRYTqMvu7k1YYwIDAQAB o4ICnjCCApowHQYDVR0OBBYEFBdkFf+ulnoS3O+zRiDN7JT6wbbaMB8GA1UdIwQY MBaAFBX9OATgC54GqCztnwezT+P9gDlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iZTNjNDAtMTIxMC00MjcyLWE1ZWEt NzgzNWQzMjA4Mzk2LzEvRjJRVl82NldlaExjNzdOR0lNM3NsUHJCdHRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9iZTNjNDAtMTIxMC00MjcyLWE1ZWEtNzgzNWQzMjA4Mzk2 LzEvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDBeBAIAATBYMAwDBAIF tiwDBAAFti4DBAItn3ADBAA+AyoDBAJV0PwDBABb964DBAK5BBwwDAMEALkyJQME A7kyIAMEArl0oAMEArnVpAMEArn/WAMEAcGNQAMEAcGNfjA+BAIAAjA4AwcBKgWr gAAAMBIDBwAqBauAAAMDBwAqBauAAAQDBwAqBauAAQADBwAqBauAAgADBwAqBauA AwAwDQYJKoZIhvcNAQELBQADggEBAHsx2cxTS70QAsuOT3k10aI1vT5JXJ/VHN/q xjJpD3dEFxFU+uOxaMywUN0iZGWrif4jwkqEq+jcn6VNzXJC51coHVJqJ7HDsUj0 SOAiTcG6k/V0rLfGx2kL2+aqdSf0NJY82SQMrVqSIf2AtYJjTzQRdgC2D34IhGcb ZVCqXfknC23Des5rGExoOkmgYTBJcwjM3waglLJ/AfD4VPD92eHKiR7rCNp6jlFo iipk0QjT+0QMkn4f5VrPf5FJkdiEt+MDZ0lGDfh8igjjWLTZxvm26pfdmJz8V2iB zxIl0pfshExPwX/3Dtrzdi6AU9N8cnsewEev/HPTlDv4a3Zwc60= -----END CERTIFICATE-----Generated at Wed Feb 4 03:45:16 2026 by rpki-client