This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/DASQ8NU1yHanG6tnp7TCLgdJSB8.roa File: DASQ8NU1yHanG6tnp7TCLgdJSB8.roa (raw, json) Hash identifier: W/n6G98Zq5gjZZSilKHseC4jqvetgfkl6TxxF14gb54= Subject key identifier: 0C:04:90:F0:D5:35:C8:76:A7:1B:AB:67:A7:B4:C2:2E:07:49:48:1F Certificate issuer: /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6 Certificate serial: 019B7EA56FF0F68938D4F6FB804F6E5C8089 Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/DASQ8NU1yHanG6tnp7TCLgdJSB8.roa Signing time: Fri 02 Jan 2026 12:18:49 +0000 ROA not before: Fri 02 Jan 2026 12:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35242 IP address blocks: 193.29.130.0/23 maxlen: 23 193.29.132.0/22 maxlen: 22 193.29.132.0/24 maxlen: 24 194.45.208.0/21 maxlen: 21 194.113.148.0/23 maxlen: 23 195.80.239.0/24 maxlen: 24 2a00:7cc0::/32 maxlen: 32 2a00:7cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:6f:f0:f6:89:38:d4:f6:fb:80:4f:6e:5c:80:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6 Validity Not Before: Jan 2 12:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c0490f0d535c876a71bab67a7b4c22e0749481f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e3:63:b7:ba:aa:7b:35:dd:d2:a2:f1:70:62: c5:68:b9:66:2c:80:62:67:16:eb:21:fc:f7:61:f1: 60:c5:50:05:b3:6a:80:4b:76:03:22:03:05:e0:e1: 17:50:99:26:6d:ae:23:eb:8a:c9:1c:13:c8:b7:d6: 27:32:fe:81:8e:1b:1b:2c:d6:a7:09:6f:85:a0:3c: 58:39:81:cc:3e:fd:42:6c:b0:00:a3:7f:46:08:83: 12:96:e3:c3:14:ef:a9:cd:eb:54:1e:c1:cb:d0:6b: 13:27:46:15:c0:4a:da:c4:59:b1:70:b7:80:4f:32: 6d:63:a6:80:a6:99:0c:e4:68:a2:cd:86:ad:17:13: 89:29:ba:aa:6d:28:0e:1e:76:a6:f2:cb:4f:d6:f2: 6c:00:8a:47:d5:90:c8:94:12:e2:58:c8:9b:2e:ba: 3a:8b:69:ea:33:23:8e:c3:b4:b2:c4:a9:77:0a:b7: 6f:ac:28:be:61:fd:11:14:b1:a4:28:90:ea:d1:a7: aa:37:ef:8c:79:71:34:21:97:e5:a9:0a:da:f7:9a: e2:23:92:c8:e7:7a:6d:2e:1c:79:3a:8e:ea:0b:3c: 30:6f:d9:9e:41:06:92:6b:2b:7d:5a:b7:b0:2d:14: 23:d3:88:30:11:77:9e:cb:cb:b6:15:fb:05:40:0b: 73:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:04:90:F0:D5:35:C8:76:A7:1B:AB:67:A7:B4:C2:2E:07:49:48:1F X509v3 Authority Key Identifier: keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/DASQ8NU1yHanG6tnp7TCLgdJSB8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.29.130.0-193.29.135.255 194.45.208.0/21 194.113.148.0/23 195.80.239.0/24 IPv6: 2a00:7cc0::/32 Signature Algorithm: sha256WithRSAEncryption 9b:4b:48:58:01:fa:bb:61:90:f2:9d:af:60:be:4d:9b:ed:1d: bd:0a:6b:98:c4:ef:55:c1:df:de:d8:f9:99:09:bd:f7:22:37: be:be:1a:a4:46:4c:17:f9:4e:d1:2a:14:53:de:e4:38:fc:34: fd:9a:04:ea:6d:76:2f:2b:80:e7:64:6b:d6:e9:d0:57:37:59: c1:3d:65:0a:eb:84:6e:ef:ea:95:93:cb:24:5c:e8:cc:0d:98: c8:68:ec:fb:15:da:05:f5:60:72:cd:42:29:56:e6:45:34:5e: 29:48:a7:b9:dc:c7:2f:f5:35:11:82:ca:5b:15:fa:3b:8b:2a: fc:63:56:72:37:24:48:52:66:a6:43:47:ef:bc:36:75:5d:3a: 75:51:15:03:05:7b:1a:cb:84:99:45:31:c2:7f:ea:4c:52:02: 4e:cb:c9:d8:c8:fe:28:72:14:ec:b3:5c:c0:20:a7:e4:74:67: 40:20:06:f8:55:58:34:2b:d9:8e:78:88:82:86:29:c0:55:53: 8e:3e:28:bf:3c:d4:bc:d8:c1:e7:0a:6f:18:f5:75:e4:77:25: 09:a4:fa:84:45:48:f9:b0:60:e8:c9:29:bc:b0:25:93:99:05: bb:16:b5:c0:98:99:10:81:36:4e:29:a3:ea:49:f7:a8:5d:db: 9b:64:95:d0 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt+pW/w9ok41Pb7gE9uXICJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1N2MxYWFhZGI4MzIwZGQ4NDMyMzU0NThjZjJjNWNiZjQ3 MDRhZDYwHhcNMjYwMTAyMTIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzA0OTBmMGQ1MzVjODc2YTcxYmFiNjdhN2I0YzIyZTA3NDk0ODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+Njt7qqezXd0qLxcGLFaLlmLIBi ZxbrIfz3YfFgxVAFs2qAS3YDIgMF4OEXUJkmba4j64rJHBPIt9YnMv6BjhsbLNan CW+FoDxYOYHMPv1CbLAAo39GCIMSluPDFO+pzetUHsHL0GsTJ0YVwEraxFmxcLeA TzJtY6aAppkM5GiizYatFxOJKbqqbSgOHnam8stP1vJsAIpH1ZDIlBLiWMibLro6 i2nqMyOOw7SyxKl3CrdvrCi+Yf0RFLGkKJDq0aeqN++MeXE0IZflqQra95riI5LI 53ptLhx5Oo7qCzwwb9meQQaSayt9WrewLRQj04gwEXeey8u2FfsFQAtz5wIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFAwEkPDVNch2pxurZ6e0wi4HSUgfMB8GA1UdIwQY MBaAFPV8GqrbgyDdhDI1RYzyxcv0cErWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVh3YXF0dURJTjJFTWpWRmpQTEZ5X1J3U3RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jM2U4NzEtMjBjYy00NGY0LWJmYTAt YTE4NTZkZDdiNWQ4LzEvREFTUThOVTF5SGFuRzZ0bnA3VENMZ2RKU0I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jM2U4NzEtMjBjYy00NGY0LWJmYTAtYTE4NTZkZDdiNWQ4 LzEvOVh3YXF0dURJTjJFTWpWRmpQTEZ5X1J3U3RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgMAwDBAHBHYID BAPBHYADBAPCLdADBAHCcZQDBADDUO8wDQQCAAIwBwMFACoAfMAwDQYJKoZIhvcN AQELBQADggEBAJtLSFgB+rthkPKdr2C+TZvtHb0Ka5jE71XB397Y+ZkJvfciN76+ GqRGTBf5TtEqFFPe5Dj8NP2aBOptdi8rgOdka9bp0Fc3WcE9ZQrrhG7v6pWTyyRc 6MwNmMho7PsV2gX1YHLNQilW5kU0XilIp7ncxy/1NRGCylsV+juLKvxjVnI3JEhS ZqZDR++8NnVdOnVRFQMFexrLhJlFMcJ/6kxSAk7LydjI/ihyFOyzXMAgp+R0Z0Ag BvhVWDQr2Y54iIKGKcBVU44+KL881LzYwecKbxj1deR3JQmk+oRFSPmwYOjJKbyw JZOZBbsWtcCYmRCBNk4po+pJ96hd25tkldA= -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:21 2026 by rpki-client