This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/RpFQVqs6AhWj2RTqUCdH4sWGuGU.roa File: RpFQVqs6AhWj2RTqUCdH4sWGuGU.roa (raw, json) Hash identifier: j5JWbGxhiLws6+4v7Q+xQtpFTmvjadNSZy3J+QPjD2E= Subject key identifier: 46:91:50:56:AB:3A:02:15:A3:D9:14:EA:50:27:47:E2:C5:86:B8:65 Certificate issuer: /CN=e875464e89816ef00b0369502018a7e59ce2d36c Certificate serial: 019B76EB0E2F8A8F1B7F0FB8B019B7984FEA Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/RpFQVqs6AhWj2RTqUCdH4sWGuGU.roa Signing time: Thu 01 Jan 2026 00:17:54 +0000 ROA not before: Thu 01 Jan 2026 00:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57304 IP address blocks: 87.245.192.0/20 maxlen: 20 139.45.224.0/19 maxlen: 19 185.134.72.0/22 maxlen: 22 2a02:2d9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0e:2f:8a:8f:1b:7f:0f:b8:b0:19:b7:98:4f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c Validity Not Before: Jan 1 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46915056ab3a0215a3d914ea502747e2c586b865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fc:41:57:8f:04:db:3f:58:64:56:02:37:a3: 43:c9:3d:38:96:93:b8:12:85:59:19:00:61:bf:59: b4:93:cd:85:94:4a:a2:e4:ec:6f:c8:33:53:e8:90: 22:5c:d6:f7:ed:7d:d3:c4:ab:6c:e1:1a:2a:9b:5d: 63:f9:f3:98:80:dd:b9:67:2a:f4:9f:0b:f5:a0:d9: 73:64:e0:1c:07:e5:8d:c5:56:b0:41:83:b8:7c:f8: 50:b6:83:63:15:db:11:65:41:48:d6:b8:8d:68:e7: 0b:e1:3c:0f:24:e0:dc:dd:db:25:c2:c4:28:c3:a1: cf:06:0d:64:85:d7:14:4a:b6:76:01:9e:84:11:6a: d0:6b:ce:8b:dd:89:55:a5:79:81:14:dd:69:b0:39: 93:aa:6b:d8:1f:ef:db:c1:66:ae:95:a9:0b:bb:0c: eb:14:cb:05:3c:e8:ae:ab:fc:8c:8e:a4:05:bb:f4: 33:a4:38:41:ea:c6:4b:a3:53:5c:3c:13:c0:4e:35: e4:4a:43:eb:e9:e9:a5:26:3f:79:37:cf:1d:33:34: 62:ad:fb:8b:9c:64:4f:60:d9:dd:77:da:0b:d5:27: 49:da:29:0b:9f:54:2c:f8:9a:8e:5b:b3:3f:dd:13: a7:21:5d:58:8b:53:b2:7d:3b:66:0a:93:5b:ae:25: 66:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:91:50:56:AB:3A:02:15:A3:D9:14:EA:50:27:47:E2:C5:86:B8:65 X509v3 Authority Key Identifier: keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/RpFQVqs6AhWj2RTqUCdH4sWGuGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.245.192.0/20 139.45.224.0/19 185.134.72.0/22 IPv6: 2a02:2d9::/32 Signature Algorithm: sha256WithRSAEncryption 48:b1:30:40:8a:d3:8e:fd:50:2a:40:98:37:a6:07:0d:cc:06: f9:bf:8f:eb:19:2f:10:29:96:5f:20:b9:d4:c1:1b:8c:37:9a: 8d:fc:07:33:12:be:60:2e:3f:dc:59:86:67:82:9b:3e:57:e7: a7:85:1b:44:44:86:06:93:d5:b1:4e:4d:73:9f:5d:95:21:50: d1:1c:e3:59:91:2e:c0:39:55:1e:f7:9e:9f:44:52:1c:bf:99: 66:8d:b0:70:1c:9c:fd:a9:8f:3c:ec:7b:f8:92:80:6d:ad:ad: 16:b4:33:0c:f8:af:a2:36:3a:77:63:a2:fb:a8:b8:52:a8:a3: 3a:9f:3d:5b:62:52:71:49:43:8f:fc:7a:00:68:4f:cc:cd:fd: ef:94:59:a6:19:e7:0f:1b:c9:91:d5:06:af:1d:01:1c:09:1e: 2c:b6:7f:77:4f:c7:5e:84:a0:25:03:4e:9e:e3:f8:a2:fb:93: b1:0a:b4:a9:c8:c7:51:c9:35:54:df:44:4d:36:35:33:df:47: 67:a4:ee:1b:dd:8b:21:30:21:66:a0:08:06:40:01:fd:04:08: 55:75:57:91:1e:aa:66:fd:63:59:69:89:d0:31:5e:57:67:95: 22:ae:ee:84:e1:a7:6e:9f:0b:a3:84:a6:84:80:24:18:0e:ad: 4e:5a:88:01 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt26w4vio8bfw+4sBm3mE/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NzU0NjRlODk4MTZlZjAwYjAzNjk1MDIwMThhN2U1OWNl MmQzNmMwHhcNMjYwMTAxMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjkxNTA1NmFiM2EwMjE1YTNkOTE0ZWE1MDI3NDdlMmM1ODZiODY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvxBV48E2z9YZFYCN6NDyT04lpO4 EoVZGQBhv1m0k82FlEqi5OxvyDNT6JAiXNb37X3TxKts4Roqm11j+fOYgN25Zyr0 nwv1oNlzZOAcB+WNxVawQYO4fPhQtoNjFdsRZUFI1riNaOcL4TwPJODc3dslwsQo w6HPBg1khdcUSrZ2AZ6EEWrQa86L3YlVpXmBFN1psDmTqmvYH+/bwWaulakLuwzr FMsFPOiuq/yMjqQFu/QzpDhB6sZLo1NcPBPATjXkSkPr6emlJj95N88dMzRirfuL nGRPYNndd9oL1SdJ2ikLn1Qs+JqOW7M/3ROnIV1Yi1OyfTtmCpNbriVm3QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFEaRUFarOgIVo9kU6lAnR+LFhrhlMB8GA1UdIwQY MBaAFOh1Rk6JgW7wCwNpUCAYp+Wc4tNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkhWR1RvbUJidkFMQTJsUUlCaW41WnppMDJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jMzA2OWUtNWZmYy00YzhjLTkxZGMt MzFkMTk3ZjEzOWQ4LzEvUnBGUVZxczZBaFdqMlJUcVVDZEg0c1dHdUdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9jMzA2OWUtNWZmYy00YzhjLTkxZGMtMzFkMTk3ZjEzOWQ4 LzEvNkhWR1RvbUJidkFMQTJsUUlCaW41WnppMDJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEV/XAAwQF iy3gAwQCuYZIMA0EAgACMAcDBQAqAgLZMA0GCSqGSIb3DQEBCwUAA4IBAQBIsTBA itOO/VAqQJg3pgcNzAb5v4/rGS8QKZZfILnUwRuMN5qN/AczEr5gLj/cWYZngps+ V+enhRtERIYGk9WxTk1zn12VIVDRHONZkS7AOVUe956fRFIcv5lmjbBwHJz9qY88 7Hv4koBtra0WtDMM+K+iNjp3Y6L7qLhSqKM6nz1bYlJxSUOP/HoAaE/Mzf3vlFmm GecPG8mR1QavHQEcCR4stn93T8dehKAlA06e4/ii+5OxCrSpyMdRyTVU30RNNjUz 30dnpO4b3YshMCFmoAgGQAH9BAhVdVeRHqpm/WNZaYnQMV5XZ5Uiru6E4adunwuj hKaEgCQYDq1OWogB -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:30 2026 by rpki-client