This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/FqEPqAF1w4Xbi11RnoaKy9R4Z40.roa File: FqEPqAF1w4Xbi11RnoaKy9R4Z40.roa (raw, json) Hash identifier: GRwxJaIJLS4eVDlQIIx4t+X6+buzHRZw5GpMOZnwve4= Subject key identifier: 16:A1:0F:A8:01:75:C3:85:DB:8B:5D:51:9E:86:8A:CB:D4:78:67:8D Certificate issuer: /CN=e312f441382d5ba1d80df459bd46c0a31590e72f Certificate serial: 019B7C8060540915502B7A6D3A6F827AA340 Authority key identifier: E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/FqEPqAF1w4Xbi11RnoaKy9R4Z40.roa Signing time: Fri 02 Jan 2026 02:19:06 +0000 ROA not before: Fri 02 Jan 2026 02:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202643 IP address blocks: 185.116.115.0/24 maxlen: 24 2a0e:bec0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 02:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:60:54:09:15:50:2b:7a:6d:3a:6f:82:7a:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e312f441382d5ba1d80df459bd46c0a31590e72f Validity Not Before: Jan 2 02:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16a10fa80175c385db8b5d519e868acbd478678d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e0:37:03:a4:6d:82:32:07:d7:b3:ad:d7:ef: 94:03:db:74:d0:d1:aa:0d:b2:d6:76:f3:19:12:90: 26:56:a1:55:73:be:a6:db:f6:a0:22:3a:24:65:b4: d3:c0:d5:07:f3:be:d8:86:72:45:5a:23:da:3c:54: 4e:77:1d:d6:20:1e:9f:7c:11:d3:f8:7d:b5:f9:5d: 98:8e:9f:59:41:6a:1c:bc:1d:76:8a:78:42:55:8e: b3:c7:26:4f:98:9b:98:17:fc:6d:4d:26:d8:44:ed: 78:7c:ff:3b:c1:b0:e4:5c:26:73:98:50:cb:c4:7e: 5c:7d:7e:88:b0:7a:62:45:d1:98:26:aa:bc:c0:ec: 0a:5a:ab:2f:8a:2c:2f:fc:e8:a8:bc:b0:60:cc:5c: f9:45:e6:43:f3:79:d7:03:93:4c:86:64:c3:14:7b: 43:c3:17:4f:a2:ac:4f:f6:41:cf:d8:38:d4:c6:35: bb:27:0a:58:3f:33:ac:e4:b1:53:47:2f:e9:24:9a: 00:e4:41:b7:ec:70:be:60:7b:78:71:b0:97:e6:3b: e8:af:2c:1e:b0:06:0e:3e:ff:90:0c:83:93:25:87: c6:27:7e:67:6c:a1:5b:59:20:52:61:79:c3:e6:47: 7d:fc:5c:e1:97:11:63:17:fd:4e:af:98:ae:dc:9d: c6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A1:0F:A8:01:75:C3:85:DB:8B:5D:51:9E:86:8A:CB:D4:78:67:8D X509v3 Authority Key Identifier: keyid:E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/FqEPqAF1w4Xbi11RnoaKy9R4Z40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.116.115.0/24 IPv6: 2a0e:bec0::/29 Signature Algorithm: sha256WithRSAEncryption 5c:c0:b8:0e:45:a1:7a:d5:ed:d7:35:8b:cb:0d:2e:05:c0:84: c8:78:dd:8d:4b:cf:2b:e8:ee:e4:82:66:fc:e5:de:fc:ad:5f: 10:27:50:d3:9a:4a:06:ed:99:85:e1:22:65:c1:76:99:10:6a: 59:43:ad:05:18:7f:35:46:33:37:e3:89:f4:b9:53:14:63:b0: 0b:1c:18:3c:2f:c0:55:81:dd:d8:f7:18:13:aa:ca:00:ab:2f: 96:70:8c:89:06:79:dc:2e:8e:6b:1c:33:1c:ee:ff:7f:dc:e4: 60:1d:a4:73:19:79:41:df:89:de:52:41:d2:27:b0:21:e1:c4: 82:2f:da:66:51:a3:85:dc:5f:b6:fb:d0:37:9f:fc:7e:4a:a3: e8:2f:f1:58:b2:72:6a:72:5d:ab:7f:24:c9:47:fc:45:30:73: 5c:30:1b:bb:94:09:36:24:f7:51:93:77:f5:0c:c3:29:9b:7d: 12:98:be:d9:99:a2:7b:42:83:95:cf:ee:1f:0c:5a:e6:e4:9c: bf:4e:24:7f:17:65:43:eb:ed:54:e1:72:dd:a5:e1:bd:5d:cf: 0b:eb:65:bc:90:92:8d:6c:9e:68:db:9f:f1:8b:3e:25:7d:99: f2:24:04:64:39:1a:66:a7:eb:f6:39:da:4a:f5:58:f6:ca:ae: 9b:5a:fa:ef -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gGBUCRVQK3ptOm+CeqNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMTJmNDQxMzgyZDViYTFkODBkZjQ1OWJkNDZjMGEzMTU5 MGU3MmYwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmExMGZhODAxNzVjMzg1ZGI4YjVkNTE5ZTg2OGFjYmQ0Nzg2NzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOA3A6RtgjIH17Ot1++UA9t00NGq DbLWdvMZEpAmVqFVc76m2/agIjokZbTTwNUH877YhnJFWiPaPFROdx3WIB6ffBHT +H21+V2Yjp9ZQWocvB12inhCVY6zxyZPmJuYF/xtTSbYRO14fP87wbDkXCZzmFDL xH5cfX6IsHpiRdGYJqq8wOwKWqsviiwv/OiovLBgzFz5ReZD83nXA5NMhmTDFHtD wxdPoqxP9kHP2DjUxjW7JwpYPzOs5LFTRy/pJJoA5EG37HC+YHt4cbCX5jvorywe sAYOPv+QDIOTJYfGJ35nbKFbWSBSYXnD5kd9/FzhlxFjF/1Or5iu3J3GSwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBahD6gBdcOF24tdUZ6GisvUeGeNMB8GA1UdIwQY MBaAFOMS9EE4LVuh2A30Wb1GwKMVkOcvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhMMFFUZ3RXNkhZRGZSWnZVYkFveFdRNXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMTYyZTctNGY3NC00ZTY5LWJhOTkt YjgwZWZiZDY4YmZkLzEvRnFFUHFBRjF3NFhiaTExUm5vYUt5OVI0WjQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8xMTYyZTctNGY3NC00ZTY5LWJhOTktYjgwZWZiZDY4YmZk LzEvNHhMMFFUZ3RXNkhZRGZSWnZVYkFveFdRNXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuXRzMA0E AgACMAcDBQMqDr7AMA0GCSqGSIb3DQEBCwUAA4IBAQBcwLgORaF61e3XNYvLDS4F wITIeN2NS88r6O7kgmb85d78rV8QJ1DTmkoG7ZmF4SJlwXaZEGpZQ60FGH81RjM3 44n0uVMUY7ALHBg8L8BVgd3Y9xgTqsoAqy+WcIyJBnncLo5rHDMc7v9/3ORgHaRz GXlB34neUkHSJ7Ah4cSCL9pmUaOF3F+2+9A3n/x+SqPoL/FYsnJqcl2rfyTJR/xF MHNcMBu7lAk2JPdRk3f1DMMpm30SmL7ZmaJ7QoOVz+4fDFrm5Jy/TiR/F2VD6+1U 4XLdpeG9Xc8L62W8kJKNbJ5o25/xiz4lfZnyJARkORpmp+v2OdpK9Vj2yq6bWvrv -----END CERTIFICATE-----Generated at Thu Jan 8 11:28:22 2026 by rpki-client