This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/z0QAGClogihB3W-zAzL6xgls6ko.roa File: z0QAGClogihB3W-zAzL6xgls6ko.roa (raw, json) Hash identifier: fuMklyfUot+dHjODiv8mp7OwICNiKJEa1iwTJOTMA8Y= Subject key identifier: CF:44:00:18:29:68:82:28:41:DD:6F:B3:03:32:FA:C6:09:6C:EA:4A Certificate issuer: /CN=bc75052b50256ba562904e6f134350d3e75ded58 Certificate serial: 019B7F13B2A27E189B13A97918AA8AFB4452 Authority key identifier: BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/z0QAGClogihB3W-zAzL6xgls6ko.roa Signing time: Fri 02 Jan 2026 14:19:15 +0000 ROA not before: Fri 02 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16356 IP address blocks: 217.144.32.0/20 maxlen: 20 217.144.32.0/21 maxlen: 21 217.144.33.0/24 maxlen: 24 217.144.34.0/24 maxlen: 24 217.144.40.0/22 maxlen: 22 217.144.44.0/24 maxlen: 24 217.144.45.0/24 maxlen: 24 217.144.46.0/24 maxlen: 24 217.144.47.0/24 maxlen: 24 2a02:2a10::/32 maxlen: 32 2a02:2a10::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:b2:a2:7e:18:9b:13:a9:79:18:aa:8a:fb:44:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc75052b50256ba562904e6f134350d3e75ded58 Validity Not Before: Jan 2 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf4400182968822841dd6fb30332fac6096cea4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:2d:9b:f7:4c:93:4b:ff:40:22:64:36:42: 69:5b:50:17:ee:48:81:72:57:7c:d4:80:42:eb:80: 25:42:58:c1:2b:72:71:f1:94:da:9d:14:97:f7:cd: 29:c8:c4:b3:2b:b3:28:24:a7:08:10:ef:8b:94:fe: 9c:eb:2b:46:40:51:83:4a:db:c8:eb:cb:38:8d:b5: 92:dd:40:bf:8e:7b:41:1d:b3:ff:21:0f:00:4f:c7: 00:2d:2f:43:db:7c:df:10:4c:9c:bd:81:a0:b5:ff: e5:b1:3f:fc:36:7a:5c:29:33:7f:93:2f:8a:63:1c: 72:1c:8f:2b:45:e8:e2:7e:33:1d:04:e3:9f:c3:0d: 81:9e:b3:77:1f:44:40:7e:ad:85:25:d1:b3:d9:66: 70:16:15:6f:a8:f2:6d:d8:3c:b2:98:bb:9e:26:12: ff:47:f7:45:da:82:07:1a:b5:2b:89:47:c5:51:ac: 3a:a8:df:9a:cc:22:61:e1:c4:d3:fd:94:67:bc:b3: 37:d4:9a:ad:43:41:f1:fd:9b:ff:21:18:ae:32:73: b6:6a:c8:95:f3:62:c6:46:ee:82:92:63:0e:46:c6: 63:e0:ac:41:d1:a6:60:42:24:d1:5f:d0:a2:80:f6: ae:4d:13:e7:4c:ec:b5:69:45:91:36:d8:fc:9a:72: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:44:00:18:29:68:82:28:41:DD:6F:B3:03:32:FA:C6:09:6C:EA:4A X509v3 Authority Key Identifier: keyid:BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/z0QAGClogihB3W-zAzL6xgls6ko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.144.32.0/20 IPv6: 2a02:2a10::/32 Signature Algorithm: sha256WithRSAEncryption ad:13:02:77:fa:b4:49:5e:64:bd:0b:66:0d:be:ed:fd:cd:4d: 03:94:1c:57:ae:ff:5f:d4:7a:b6:f1:a5:88:19:c0:2a:cc:ae: e1:0e:33:89:43:ca:49:43:3c:cd:03:4b:26:2d:93:88:d3:07: b2:b1:2c:54:16:a6:2e:cb:ce:4b:6e:89:4f:09:89:14:10:b2: 82:98:fa:d9:5c:3b:0a:3a:d8:79:b3:07:65:c1:97:16:14:b2: a0:09:f7:fe:d6:b1:51:6f:60:11:0b:59:ef:c4:84:c0:f4:c2: e5:7a:3e:b8:34:83:42:a5:a0:98:78:d2:96:1a:58:c4:50:4c: 0f:4a:f7:4c:2c:7e:d8:0a:3c:fb:09:99:20:81:86:06:e7:2b: 8f:c4:f4:46:37:2b:1b:b5:c4:5e:98:22:48:1d:ed:8d:a1:96: 1e:fb:30:86:44:7e:91:d7:c0:12:60:1a:ae:76:c0:aa:62:42: c0:53:d2:b6:90:0d:2b:94:ac:f8:71:12:2d:6e:7e:3e:15:b1: c8:4d:22:08:32:75:b7:57:e5:8f:a6:65:fe:bd:76:39:3f:b1: 4f:9b:7f:07:8d:38:ba:62:b7:03:ff:69:50:17:7b:ce:43:94: e5:b8:f3:ab:a0:9b:7f:a3:05:9f:68:c6:21:08:25:29:98:ab: f2:57:cb:90 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/E7KifhibE6l5GKqK+0RSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNzUwNTJiNTAyNTZiYTU2MjkwNGU2ZjEzNDM1MGQzZTc1 ZGVkNTgwHhcNMjYwMTAyMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjQ0MDAxODI5Njg4MjI4NDFkZDZmYjMwMzMyZmFjNjA5NmNlYTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK4tm/dMk0v/QCJkNkJpW1AX7kiB cld81IBC64AlQljBK3Jx8ZTanRSX980pyMSzK7MoJKcIEO+LlP6c6ytGQFGDStvI 68s4jbWS3UC/jntBHbP/IQ8AT8cALS9D23zfEEycvYGgtf/lsT/8NnpcKTN/ky+K YxxyHI8rRejifjMdBOOfww2BnrN3H0RAfq2FJdGz2WZwFhVvqPJt2DyymLueJhL/ R/dF2oIHGrUriUfFUaw6qN+azCJh4cTT/ZRnvLM31JqtQ0Hx/Zv/IRiuMnO2asiV 82LGRu6CkmMORsZj4KxB0aZgQiTRX9CigPauTRPnTOy1aUWRNtj8mnLZ3QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM9EABgpaIIoQd1vswMy+sYJbOpKMB8GA1UdIwQY MBaAFLx1BStQJWulYpBObxNDUNPnXe1YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkhVRksxQWxhNlZpa0U1dkUwTlEwLWRkN1ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84ZmU4MmYtZTZjZi00YTYyLTg3ZGQt ZWExM2ViNzk3ZThjLzEvejBRQUdDbG9naWhCM1ctekF6TDZ4Z2xzNmtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS84ZmU4MmYtZTZjZi00YTYyLTg3ZGQtZWExM2ViNzk3ZThj LzEvdkhVRksxQWxhNlZpa0U1dkUwTlEwLWRkN1ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQE2ZAgMA0E AgACMAcDBQAqAioQMA0GCSqGSIb3DQEBCwUAA4IBAQCtEwJ3+rRJXmS9C2YNvu39 zU0DlBxXrv9f1Hq28aWIGcAqzK7hDjOJQ8pJQzzNA0smLZOI0weysSxUFqYuy85L bolPCYkUELKCmPrZXDsKOth5swdlwZcWFLKgCff+1rFRb2ARC1nvxITA9MLlej64 NINCpaCYeNKWGljEUEwPSvdMLH7YCjz7CZkggYYG5yuPxPRGNysbtcRemCJIHe2N oZYe+zCGRH6R18ASYBqudsCqYkLAU9K2kA0rlKz4cRItbn4+FbHITSIIMnW3V+WP pmX+vXY5P7FPm38HjTi6YrcD/2lQF3vOQ5TluPOroJt/owWfaMYhCCUpmKvyV8uQ -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:51 2026 by rpki-client