This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/Rq696N8NiJae_ixwW3DNWDQK-5I.roa File: Rq696N8NiJae_ixwW3DNWDQK-5I.roa (raw, json) Hash identifier: 8G+AAO8D+JWydyaPXEfoxJVXWUvhJ3zpB+8+KxSr940= Subject key identifier: 46:AE:BD:E8:DF:0D:88:96:9E:FE:2C:70:5B:70:CD:58:34:0A:FB:92 Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Certificate serial: 019B7C12AC17A59129273C16A82A3E64F2CF Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/Rq696N8NiJae_ixwW3DNWDQK-5I.roa Signing time: Fri 02 Jan 2026 00:19:17 +0000 ROA not before: Fri 02 Jan 2026 00:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39154 IP address blocks: 85.158.188.0/22 maxlen: 22 85.158.188.0/24 maxlen: 24 85.158.189.0/24 maxlen: 24 85.158.190.0/24 maxlen: 24 85.158.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ac:17:a5:91:29:27:3c:16:a8:2a:3e:64:f2:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Validity Not Before: Jan 2 00:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46aebde8df0d88969efe2c705b70cd58340afb92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fc:c3:dc:d8:f5:29:d2:0a:da:72:90:e6:85: 9e:a2:af:c6:21:f6:43:0b:85:9e:fc:a5:b0:e0:b0: 10:ad:0f:53:2b:0c:f5:d5:ce:8c:89:b1:23:52:29: c1:01:2a:7b:17:a0:3d:58:80:68:00:50:0f:1d:85: 20:f4:f4:69:0a:21:05:2a:c3:3c:c2:c2:78:b5:8b: 60:6c:d9:b4:c5:7f:90:f2:72:cf:12:b6:63:b0:d2: 2f:40:62:f9:cd:7a:31:52:29:88:9f:d2:20:68:0a: d8:5a:a8:eb:e7:33:19:07:f3:3a:04:37:30:5c:3a: 25:1f:45:22:4e:29:f3:f4:40:43:6d:af:65:5e:8b: 05:b9:8e:e7:4c:78:ab:f0:b1:d2:00:d9:2b:7f:ea: 8e:3d:47:28:dc:23:9a:27:ae:ff:b7:45:f9:ef:1d: e3:e8:64:14:a4:33:b3:69:68:da:c7:6a:90:e0:84: 3d:ff:7f:9c:c7:09:ae:80:bd:f0:07:30:5f:e1:e0: bb:e0:64:e0:d9:0a:ee:20:18:c0:e4:b7:e4:54:44: bc:a5:0c:ca:c5:61:03:44:9f:a3:f0:e2:f7:71:b1: 9c:27:d4:56:f1:3c:55:e2:88:14:c6:c6:56:c5:36: 06:53:e9:c6:9e:4d:d8:9f:d6:41:c1:b6:24:78:28: 95:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AE:BD:E8:DF:0D:88:96:9E:FE:2C:70:5B:70:CD:58:34:0A:FB:92 X509v3 Authority Key Identifier: keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/Rq696N8NiJae_ixwW3DNWDQK-5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.158.188.0/22 Signature Algorithm: sha256WithRSAEncryption 41:d6:15:37:7b:0d:f1:d7:72:47:fd:c0:db:11:b6:5b:c9:0f: b9:6f:c8:ad:ec:3b:e3:d7:41:c6:48:fe:d6:65:3e:26:f9:71: b5:83:26:3f:3c:ca:74:dc:1a:0d:d8:63:5c:19:a0:b0:50:5c: 65:90:d4:9e:ec:80:ce:d0:38:de:d8:4e:ab:2d:39:59:31:67: f4:76:cc:26:ec:1d:6a:f1:95:7d:ba:c5:66:7c:7d:85:99:22: 2c:43:cf:40:0c:49:02:4b:f1:87:47:27:49:25:d8:aa:63:ee: 85:fe:88:8d:e3:6e:38:a5:5f:f7:6c:f9:31:33:7d:b0:cc:2d: cc:b1:96:cc:ea:7d:ef:07:c2:ed:a2:38:e8:7d:88:b7:b7:b0: c1:cb:96:ff:f0:c5:af:44:b9:ed:9d:02:38:0a:5f:8c:26:98: 3a:90:bc:0e:1e:df:0a:81:b6:2f:ae:74:2b:17:1f:44:2e:4b: af:1f:7f:9e:f4:68:dd:d3:c6:fb:91:9c:ac:78:1f:c0:18:7f: 39:59:66:38:c2:d3:5f:30:d8:23:7e:0c:c8:90:9c:fa:cc:d5: 75:bb:54:e5:32:a4:0f:3a:cc:a8:a2:b2:41:78:89:e9:c6:c8: 8c:87:5b:43:e6:4c:08:be:e3:65:bf:89:b0:7d:26:86:84:c2: a7:06:37:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EqwXpZEpJzwWqCo+ZPLPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1 NTI2ZmEwHhcNMjYwMTAyMDAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmFlYmRlOGRmMGQ4ODk2OWVmZTJjNzA1YjcwY2Q1ODM0MGFmYjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPzD3Nj1KdIK2nKQ5oWeoq/GIfZD C4We/KWw4LAQrQ9TKwz11c6MibEjUinBASp7F6A9WIBoAFAPHYUg9PRpCiEFKsM8 wsJ4tYtgbNm0xX+Q8nLPErZjsNIvQGL5zXoxUimIn9IgaArYWqjr5zMZB/M6BDcw XDolH0UiTinz9EBDba9lXosFuY7nTHir8LHSANkrf+qOPUco3COaJ67/t0X57x3j 6GQUpDOzaWjax2qQ4IQ9/3+cxwmugL3wBzBf4eC74GTg2QruIBjA5LfkVES8pQzK xWEDRJ+j8OL3cbGcJ9RW8TxV4ogUxsZWxTYGU+nGnk3Yn9ZBwbYkeCiVnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEauvejfDYiWnv4scFtwzVg0CvuSMB8GA1UdIwQY MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct NmVkYzFiMjI1NjI1LzEvUnE2OTZOOE5pSmFlX2l4d1czRE5XRFFLLTVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTctNmVkYzFiMjI1NjI1 LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVZ68MA0G CSqGSIb3DQEBCwUAA4IBAQBB1hU3ew3x13JH/cDbEbZbyQ+5b8it7Dvj10HGSP7W ZT4m+XG1gyY/PMp03BoN2GNcGaCwUFxlkNSe7IDO0Dje2E6rLTlZMWf0dswm7B1q 8ZV9usVmfH2FmSIsQ89ADEkCS/GHRydJJdiqY+6F/oiN4244pV/3bPkxM32wzC3M sZbM6n3vB8LtojjofYi3t7DBy5b/8MWvRLntnQI4Cl+MJpg6kLwOHt8KgbYvrnQr Fx9ELkuvH3+e9Gjd08b7kZyseB/AGH85WWY4wtNfMNgjfgzIkJz6zNV1u1TlMqQP OsyoorJBeInpxsiMh1tD5kwIvuNlv4mwfSaGhMKnBjf8 -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:41 2026 by rpki-client