This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/qCf2kL5HR_0TFcYIAu90nJaNoM8.roa File: qCf2kL5HR_0TFcYIAu90nJaNoM8.roa (raw, json) Hash identifier: t35XD35S8HKBRQvAYSF43vFRrgaSHFB5oatLbXcAg60= Subject key identifier: A8:27:F6:90:BE:47:47:FD:13:15:C6:08:02:EF:74:9C:96:8D:A0:CF Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6 Certificate serial: 019B7B360B40062D10CA601E3DFDD81978B9 Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/qCf2kL5HR_0TFcYIAu90nJaNoM8.roa Signing time: Thu 01 Jan 2026 20:18:17 +0000 ROA not before: Thu 01 Jan 2026 20:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133073 IP address blocks: 45.15.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:0b:40:06:2d:10:ca:60:1e:3d:fd:d8:19:78:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6 Validity Not Before: Jan 1 20:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a827f690be4747fd1315c60802ef749c968da0cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:94:22:16:b5:da:e6:58:10:06:02:76:69:92: 25:1f:b7:07:e7:c9:99:0e:70:ef:01:e9:69:06:4d: 4e:0d:3c:56:b2:bb:11:94:f6:70:77:c4:02:62:37: 6e:17:fc:db:26:9d:3b:39:fb:8f:57:1b:7b:52:27: c6:8f:38:a2:f7:f0:52:fc:d7:1a:ad:45:cf:b2:d7: 33:fd:13:d4:8d:85:4c:98:7c:fe:a0:d3:6f:ec:24: c6:92:85:69:d7:d6:d3:a0:f6:d6:09:1e:f3:66:46: 04:af:9c:68:4d:39:80:d6:2c:72:ac:3b:bc:6d:f7: a5:9c:27:e5:01:4e:f9:d5:cd:6b:1c:af:11:d6:12: ea:08:1a:6c:9a:1a:74:ee:0b:06:84:4d:3e:5a:ab: 5d:44:d1:cd:42:58:4a:4f:fd:e0:cc:01:28:07:1f: 26:ed:7f:ee:49:6c:53:c8:fd:2b:07:fe:a3:e6:50: e5:61:ea:51:71:32:5f:3b:48:16:63:f1:c1:0e:17: 4d:e4:32:b3:16:4e:20:30:b9:3e:7e:05:09:af:7f: 18:c6:f3:0c:43:cf:19:0b:00:e9:e7:5c:7a:cb:fa: dc:b1:73:2d:aa:3a:19:4c:a7:a6:d2:ee:ab:50:3c: 30:e9:ab:88:02:cd:f1:21:2d:ce:f5:23:c2:f0:fb: d0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:27:F6:90:BE:47:47:FD:13:15:C6:08:02:EF:74:9C:96:8D:A0:CF X509v3 Authority Key Identifier: keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/qCf2kL5HR_0TFcYIAu90nJaNoM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.9.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:77:82:90:cf:fa:9f:46:f4:97:a3:da:4f:88:73:a4:08:9b: d3:ca:00:fd:b3:31:01:9f:a8:f9:9e:24:f6:3b:e0:9a:a0:b3: ef:78:c0:df:d3:75:a9:d8:f2:35:2d:0f:92:24:d2:17:79:3b: 76:c5:98:e1:f0:7d:e2:20:73:bf:de:c2:19:bf:1c:0a:90:cb: 4b:2e:37:d1:d7:68:3b:24:9a:b7:b7:68:e4:5e:75:e8:41:63: 4a:16:f3:a1:ee:e6:f7:66:a7:eb:df:3f:a8:6a:0a:c6:93:94: c6:6d:6b:37:03:4f:f1:6b:e0:b9:52:0c:16:a4:ee:90:4d:d4: 7c:97:37:74:91:2a:f9:2c:47:60:eb:d5:72:5a:b0:0e:90:20: aa:1c:45:89:22:1c:5f:d1:6c:59:3e:b0:c6:11:5a:47:71:a0: 01:9e:36:1e:e6:99:1c:ce:d4:7e:99:ca:1e:85:17:b2:85:2d: b0:ac:84:64:25:25:bf:28:88:b3:48:db:90:e5:28:2d:58:23: e8:43:20:20:0e:2d:a7:11:e4:43:a9:a2:fd:8b:43:a8:d5:e5: cb:cd:67:f6:99:80:11:ce:aa:7a:a2:cc:0e:a7:e4:f9:68:ca: ea:93:06:16:1d:91:39:99:11:c8:f4:94:80:c8:3c:65:f7:b5: 11:18:72:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NgtABi0QymAePf3YGXi5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMmJjZDczNzA1YjkzNzQ3NWE5NThjNjM0ZWRkNjRjOWM2 NGFmYjYwHhcNMjYwMTAxMjAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODI3ZjY5MGJlNDc0N2ZkMTMxNWM2MDgwMmVmNzQ5Yzk2OGRhMGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5QiFrXa5lgQBgJ2aZIlH7cH58mZ DnDvAelpBk1ODTxWsrsRlPZwd8QCYjduF/zbJp07OfuPVxt7UifGjzii9/BS/Nca rUXPstcz/RPUjYVMmHz+oNNv7CTGkoVp19bToPbWCR7zZkYEr5xoTTmA1ixyrDu8 bfelnCflAU751c1rHK8R1hLqCBpsmhp07gsGhE0+WqtdRNHNQlhKT/3gzAEoBx8m 7X/uSWxTyP0rB/6j5lDlYepRcTJfO0gWY/HBDhdN5DKzFk4gMLk+fgUJr38YxvMM Q88ZCwDp51x6y/rcsXMtqjoZTKem0u6rUDww6auIAs3xIS3O9SPC8PvQQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKgn9pC+R0f9ExXGCALvdJyWjaDPMB8GA1UdIwQY MBaAFJ8rzXNwW5N0dalYxjTt1kycZK+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDct OTA4NGZiMGJlOWMxLzEvcUNmMmtMNUhSXzBURmNZSUF1OTBuSmFOb004LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDctOTA4NGZiMGJlOWMx LzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ8JMA0G CSqGSIb3DQEBCwUAA4IBAQBvd4KQz/qfRvSXo9pPiHOkCJvTygD9szEBn6j5niT2 O+CaoLPveMDf03Wp2PI1LQ+SJNIXeTt2xZjh8H3iIHO/3sIZvxwKkMtLLjfR12g7 JJq3t2jkXnXoQWNKFvOh7ub3Zqfr3z+oagrGk5TGbWs3A0/xa+C5UgwWpO6QTdR8 lzd0kSr5LEdg69VyWrAOkCCqHEWJIhxf0WxZPrDGEVpHcaABnjYe5pkcztR+mcoe hReyhS2wrIRkJSW/KIizSNuQ5SgtWCPoQyAgDi2nEeRDqaL9i0Oo1eXLzWf2mYAR zqp6oswOp+T5aMrqkwYWHZE5mRHI9JSAyDxl97URGHIl -----END CERTIFICATE-----Generated at Sun Jan 25 23:50:09 2026 by rpki-client