This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/12r5iDgWvwsfOuY62IZTikj8QKg.roa File: 12r5iDgWvwsfOuY62IZTikj8QKg.roa (raw, json) Hash identifier: y5zUQQDYJqybKXwbKXQWR71NYli16e7rtRVTqKRI2pI= Subject key identifier: D7:6A:F9:88:38:16:BF:0B:1F:3A:E6:3A:D8:86:53:8A:48:FC:40:A8 Certificate issuer: /CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9 Certificate serial: 019B7A5B83DB6920D161BD44546269F9D61E Authority key identifier: CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/12r5iDgWvwsfOuY62IZTikj8QKg.roa Signing time: Thu 01 Jan 2026 16:19:36 +0000 ROA not before: Thu 01 Jan 2026 16:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215033 IP address blocks: 85.90.210.0/24 maxlen: 24 213.177.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:83:db:69:20:d1:61:bd:44:54:62:69:f9:d6:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9 Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d76af9883816bf0b1f3ae63ad886538a48fc40a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:52:5a:81:55:37:5d:e7:51:c6:4f:c3:56:96: bc:8c:2b:5d:2f:08:68:c6:58:dc:11:64:6f:1d:57: 6c:21:43:df:b3:11:4c:7f:d6:9f:71:6f:0d:54:f1: 49:de:00:71:6d:df:78:92:cd:2c:86:9f:bb:b8:c1: e9:c2:ed:36:a6:e9:57:8b:fd:fe:72:76:aa:29:ee: bf:6b:10:a5:cf:5f:52:f1:68:9b:71:fa:23:e9:e2: df:0f:b3:91:e6:1d:4b:ba:be:93:28:cc:5f:b3:5a: ec:b8:e4:ab:16:14:49:3a:8b:c0:f3:3a:25:91:5a: 7c:1e:16:dc:34:0e:cc:45:e8:4b:8c:dc:cf:9d:5d: ab:5d:5a:ce:11:e9:dc:1b:1b:ad:f6:f6:b0:36:22: 88:19:c0:20:2e:46:16:92:50:2d:c4:7f:7f:1a:45: a0:fd:9c:0d:5e:d0:bb:00:a7:98:77:46:0c:07:88: b1:0d:b2:12:3d:3e:ba:c3:ab:90:d3:3a:1e:75:cc: ce:16:d8:e8:cc:58:18:3e:28:2b:b4:ae:16:6c:dc: 16:8b:75:6b:c3:76:2d:4e:46:0b:19:1c:3d:cb:97: a2:04:70:e0:8e:0b:8b:d5:76:b4:7d:f2:3a:47:61: 08:4b:3b:c1:2b:23:19:73:b7:e7:ad:08:fa:52:6f: e0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6A:F9:88:38:16:BF:0B:1F:3A:E6:3A:D8:86:53:8A:48:FC:40:A8 X509v3 Authority Key Identifier: keyid:CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/12r5iDgWvwsfOuY62IZTikj8QKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.90.210.0/24 213.177.182.0/24 Signature Algorithm: sha256WithRSAEncryption af:a2:d1:4b:b0:1a:8a:f9:a4:a3:72:f2:86:77:b8:ea:93:7a: fb:bb:6b:72:58:03:fb:f5:38:e6:f6:71:e0:e9:a2:98:72:71: 8f:46:23:6f:cd:9d:a5:31:a0:85:26:14:c8:8e:99:45:7d:5e: b0:25:32:8b:f9:50:98:ba:44:7c:1a:a9:c6:84:1d:20:77:a8: db:fa:5e:4f:3d:da:5f:36:0f:23:dc:f4:21:84:60:84:f2:6c: 22:89:88:99:1f:3b:0f:f4:83:f2:3a:44:7c:67:15:cf:5f:c9: f3:60:48:a2:d0:89:b8:30:78:8a:3b:9e:ba:eb:ad:ca:17:54: c3:68:a8:33:a5:13:af:dc:99:5c:32:1d:47:d2:48:18:f2:11: 9a:0a:f6:a8:83:0f:7d:28:41:e1:84:de:a3:cc:12:ad:78:4a: 65:d4:22:11:e7:38:00:4b:2b:72:53:3b:de:3f:6c:fa:31:cf: 74:f3:2e:4b:08:8f:b0:f8:1e:f8:00:17:43:ae:87:89:ea:1b: f8:b2:d3:0c:df:51:96:08:7d:aa:d8:99:15:b6:8c:99:03:25: 17:d9:03:33:48:0d:89:45:07:01:72:a7:96:85:6d:74:ed:08: d7:6c:bd:8c:09:53:ad:b5:26:d3:26:23:48:f3:11:66:87:b2: 4f:04:75:2f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W4PbaSDRYb1EVGJp+dYeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZjk2ODhlMTc2Y2YzODY0MzZkN2JiODhkM2E0MDViNDZk MGUyYjkwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzZhZjk4ODM4MTZiZjBiMWYzYWU2M2FkODg2NTM4YTQ4ZmM0MGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VJagVU3XedRxk/DVpa8jCtdLwho xljcEWRvHVdsIUPfsxFMf9afcW8NVPFJ3gBxbd94ks0shp+7uMHpwu02pulXi/3+ cnaqKe6/axClz19S8Wibcfoj6eLfD7OR5h1Lur6TKMxfs1rsuOSrFhRJOovA8zol kVp8HhbcNA7MRehLjNzPnV2rXVrOEencGxut9vawNiKIGcAgLkYWklAtxH9/GkWg /ZwNXtC7AKeYd0YMB4ixDbISPT66w6uQ0zoedczOFtjozFgYPigrtK4WbNwWi3Vr w3YtTkYLGRw9y5eiBHDgjguL1Xa0ffI6R2EISzvBKyMZc7fnrQj6Um/gaQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNdq+Yg4Fr8LHzrmOtiGU4pI/ECoMB8GA1UdIwQY MBaAFMr5aI4XbPOGQ217uI06QFtG0OK5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXZsb2poZHM4NFpEYlh1NGpUcEFXMGJRNHJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iNGFhZjYtMTBmNC00MTcxLWFjNWEt YWIwYzFjNDQyZjVkLzEvMTJyNWlEZ1d2d3NmT3VZNjJJWlRpa2o4UUtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iNGFhZjYtMTBmNC00MTcxLWFjNWEtYWIwYzFjNDQyZjVk LzEveXZsb2poZHM4NFpEYlh1NGpUcEFXMGJRNHJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVVrSAwQA 1bG2MA0GCSqGSIb3DQEBCwUAA4IBAQCvotFLsBqK+aSjcvKGd7jqk3r7u2tyWAP7 9Tjm9nHg6aKYcnGPRiNvzZ2lMaCFJhTIjplFfV6wJTKL+VCYukR8GqnGhB0gd6jb +l5PPdpfNg8j3PQhhGCE8mwiiYiZHzsP9IPyOkR8ZxXPX8nzYEii0Im4MHiKO566 663KF1TDaKgzpROv3JlcMh1H0kgY8hGaCvaogw99KEHhhN6jzBKteEpl1CIR5zgA SytyUzveP2z6Mc908y5LCI+w+B74ABdDroeJ6hv4stMM31GWCH2q2JkVtoyZAyUX 2QMzSA2JRQcBcqeWhW107QjXbL2MCVOttSbTJiNI8xFmh7JPBHUv -----END CERTIFICATE-----Generated at Tue Feb 10 01:23:32 2026 by rpki-client