This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/QgOgFw4UH1rEK_nYcUfssK2TyQQ.roa File: QgOgFw4UH1rEK_nYcUfssK2TyQQ.roa (raw, json) Hash identifier: K9uUssgaA9Cw/QN8kWZlExQkvdqZ4stsO6RuK8HpBDo= Subject key identifier: 42:03:A0:17:0E:14:1F:5A:C4:2B:F9:D8:71:47:EC:B0:AD:93:C9:04 Certificate issuer: /CN=f497673c78efae5f6bd80a25ace3d3c37193e789 Certificate serial: 019B775952AD53C23D94F57407DDF0A1380F Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/QgOgFw4UH1rEK_nYcUfssK2TyQQ.roa Signing time: Thu 01 Jan 2026 02:18:21 +0000 ROA not before: Thu 01 Jan 2026 02:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30844 IP address blocks: 5.11.8.0/21 maxlen: 24 46.17.232.0/21 maxlen: 24 77.246.48.0/20 maxlen: 24 185.25.208.0/22 maxlen: 24 217.15.112.0/20 maxlen: 24 217.74.224.0/20 maxlen: 24 2a01:410::/32 maxlen: 32 2a01:410:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:52:ad:53:c2:3d:94:f5:74:07:dd:f0:a1:38:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789 Validity Not Before: Jan 1 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4203a0170e141f5ac42bf9d87147ecb0ad93c904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:01:a2:bc:09:af:12:f6:2e:4c:c0:29:db:29: 38:fc:33:dd:a2:5c:49:64:ad:08:28:66:40:49:c6: 61:c4:b2:c4:df:b0:59:fd:ca:c3:14:6d:9b:b7:9f: 24:6a:07:1f:38:6b:a2:bf:3f:2d:b5:9d:ef:ee:8c: 55:65:fb:5f:3a:00:60:b8:d8:2a:49:cd:e0:ba:86: e9:a7:38:4b:36:8a:07:70:2b:e9:ca:dd:0e:6e:86: db:ae:d6:43:45:bf:fd:9a:2c:69:2c:e6:96:d8:3b: a0:1b:d5:77:fb:c1:92:97:45:f6:89:5f:fd:86:8d: a7:31:f6:1f:70:80:0f:d4:1e:80:29:9a:22:82:f8: b2:2d:97:94:13:06:27:67:dc:ea:cf:10:5f:75:53: e8:1b:68:fe:c2:fa:d1:86:bb:39:6b:b6:a0:9e:ac: 9f:bc:f0:a9:ec:1b:e4:64:87:07:6a:ff:14:cb:d4: a3:41:fd:a9:cf:eb:10:b6:c5:21:ba:85:94:ca:82: 6b:33:d5:77:24:77:8f:72:ee:ad:3c:bf:a6:f4:02: f5:f4:e9:33:04:4b:f0:0a:3b:cf:52:aa:3d:98:44: 1c:76:26:65:90:86:21:64:76:b6:40:2a:ef:13:ee: 2b:d2:d6:d2:9c:4b:8d:7b:dd:ae:5c:0a:67:d6:af: 41:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:03:A0:17:0E:14:1F:5A:C4:2B:F9:D8:71:47:EC:B0:AD:93:C9:04 X509v3 Authority Key Identifier: keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/QgOgFw4UH1rEK_nYcUfssK2TyQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.11.8.0/21 46.17.232.0/21 77.246.48.0/20 185.25.208.0/22 217.15.112.0/20 217.74.224.0/20 IPv6: 2a01:410::/32 Signature Algorithm: sha256WithRSAEncryption a6:95:85:70:f2:d2:ef:8b:4d:a4:29:4c:c5:ae:de:78:25:f4: 87:1b:bc:1f:b6:d2:76:2f:d5:4c:12:c5:09:e7:54:26:4d:dc: f1:9b:3b:5e:8e:8d:2d:75:4a:81:63:2a:b1:83:8c:d4:25:05: b2:87:4e:a0:f2:e8:82:09:e4:db:a3:ac:18:68:3c:05:ca:62: 95:e3:fd:62:8d:31:de:8b:eb:77:7c:10:18:ec:7f:eb:39:ad: b7:b1:b8:7e:62:71:c9:de:2c:c9:a4:d7:03:cd:1d:df:8e:fa: d8:e5:c3:02:6b:1b:48:71:69:4d:be:0e:76:30:96:fb:f8:aa: 86:48:83:63:bd:13:12:91:a8:f2:a9:b1:f2:a5:19:e7:c3:85: 4a:7e:74:7e:7b:04:46:d0:4c:a1:51:69:33:85:5f:b8:a2:65: b6:9c:c3:c5:b7:b5:d4:1d:d9:96:d1:52:53:3a:aa:78:00:1b: b2:e4:ef:69:7e:5f:2e:af:ad:59:a9:5c:91:33:0a:04:bf:13: de:2a:26:c0:b6:0c:b2:a9:68:54:ea:82:47:36:71:22:6c:45: a9:77:8e:56:cf:46:32:85:3c:71:16:be:02:91:96:87:22:44: e6:3d:8d:f4:33:3d:78:2e:c1:a5:06:91:88:5f:2c:5b:93:a2: a4:4e:85:68 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt3WVKtU8I9lPV0B93woTgPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0OTc2NzNjNzhlZmFlNWY2YmQ4MGEyNWFjZTNkM2MzNzE5 M2U3ODkwHhcNMjYwMTAxMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjAzYTAxNzBlMTQxZjVhYzQyYmY5ZDg3MTQ3ZWNiMGFkOTNjOTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAGivAmvEvYuTMAp2yk4/DPdolxJ ZK0IKGZAScZhxLLE37BZ/crDFG2bt58kagcfOGuivz8ttZ3v7oxVZftfOgBguNgq Sc3guobppzhLNooHcCvpyt0ObobbrtZDRb/9mixpLOaW2DugG9V3+8GSl0X2iV/9 ho2nMfYfcIAP1B6AKZoigviyLZeUEwYnZ9zqzxBfdVPoG2j+wvrRhrs5a7agnqyf vPCp7BvkZIcHav8Uy9SjQf2pz+sQtsUhuoWUyoJrM9V3JHePcu6tPL+m9AL19Okz BEvwCjvPUqo9mEQcdiZlkIYhZHa2QCrvE+4r0tbSnEuNe92uXApn1q9B1wIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFEIDoBcOFB9axCv52HFH7LCtk8kEMB8GA1UdIwQY MBaAFPSXZzx4765fa9gKJazj08Nxk+eJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYt NmUwNjk2ZmVlOGU2LzEvUWdPZ0Z3NFVIMXJFS19uWWNVZnNzSzJUeVFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYtNmUwNjk2ZmVlOGU2 LzEvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDBQsIAwQD LhHoAwQETfYwAwQCuRnQAwQE2Q9wAwQE2UrgMA0EAgACMAcDBQAqAQQQMA0GCSqG SIb3DQEBCwUAA4IBAQCmlYVw8tLvi02kKUzFrt54JfSHG7wfttJ2L9VMEsUJ51Qm Tdzxmztejo0tdUqBYyqxg4zUJQWyh06g8uiCCeTbo6wYaDwFymKV4/1ijTHei+t3 fBAY7H/rOa23sbh+YnHJ3izJpNcDzR3fjvrY5cMCaxtIcWlNvg52MJb7+KqGSINj vRMSkajyqbHypRnnw4VKfnR+ewRG0EyhUWkzhV+4omW2nMPFt7XUHdmW0VJTOqp4 ABuy5O9pfl8ur61ZqVyRMwoEvxPeKibAtgyyqWhU6oJHNnEibEWpd45Wz0YyhTxx Fr4CkZaHIkTmPY30Mz14LsGlBpGIXyxbk6KkToVo -----END CERTIFICATE-----Generated at Sun Jan 25 20:28:49 2026 by rpki-client