This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/qT0dlLpzpHG-UMlryrlwiaMMxcY.roa File: qT0dlLpzpHG-UMlryrlwiaMMxcY.roa (raw, json) Hash identifier: 9waKgS4/9SGo8HvqSDRZz0wIFy4U+cc/1Ys4XOOzmjw= Subject key identifier: A9:3D:1D:94:BA:73:A4:71:BE:50:C9:6B:CA:B9:70:89:A3:0C:C5:C6 Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0 Certificate serial: 019BA33147324C5AA1CE196F23C52B6D8B10 Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/qT0dlLpzpHG-UMlryrlwiaMMxcY.roa Signing time: Fri 09 Jan 2026 14:37:54 +0000 ROA not before: Fri 09 Jan 2026 14:37:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50012 IP address blocks: 31.129.232.0/24 maxlen: 24 31.129.233.0/24 maxlen: 24 31.129.234.0/24 maxlen: 24 31.129.235.0/24 maxlen: 24 31.129.251.0/24 maxlen: 24 213.5.192.0/24 maxlen: 24 213.5.193.0/24 maxlen: 24 213.5.194.0/24 maxlen: 24 213.5.195.0/24 maxlen: 24 213.5.196.0/24 maxlen: 24 213.5.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:31:47:32:4c:5a:a1:ce:19:6f:23:c5:2b:6d:8b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0 Validity Not Before: Jan 9 14:37:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a93d1d94ba73a471be50c96bcab97089a30cc5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:07:8e:d6:b5:4f:40:23:7f:59:4a:a0:23:f0: 7d:1d:c6:6d:23:5a:dd:15:ff:25:a1:04:83:a0:c4: 24:79:30:7f:bf:58:e7:52:d1:e4:3b:1a:df:a2:0f: f3:b2:a9:3a:b4:cf:2a:f2:c7:28:39:9b:d2:72:e8: 82:71:8e:b8:eb:db:d9:ea:70:11:87:80:69:f4:f8: 2f:65:72:87:e7:6c:c9:3a:95:7b:9d:c2:bd:32:fe: 7b:6b:e5:d6:1f:74:ed:48:a3:a5:d5:95:bf:96:28: 33:b2:d9:0c:f9:a9:ac:41:0b:1b:40:ba:a3:9e:be: f0:22:41:8f:48:6a:09:11:70:39:3c:83:da:9c:5c: 36:5a:4f:3f:d5:a2:f5:c3:5f:bb:e8:ee:2f:82:09: 1f:d2:2f:e4:f5:6c:77:0d:56:56:94:25:b3:e8:e9: 67:56:50:ad:03:3c:28:2c:dc:0f:5f:4c:96:51:0f: 18:c1:01:52:bd:f4:85:50:15:f8:a9:ce:56:de:4f: ec:5a:37:3f:cd:a8:90:ec:00:51:d9:17:37:41:ec: 2d:74:70:c7:37:a5:f6:81:db:ee:f9:40:1b:95:10: cb:c6:73:80:d1:cd:b7:5f:0e:d9:2b:f4:f5:87:9a: 12:6d:2a:1f:c0:a2:28:81:bc:3d:2d:30:a0:b4:55: 08:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3D:1D:94:BA:73:A4:71:BE:50:C9:6B:CA:B9:70:89:A3:0C:C5:C6 X509v3 Authority Key Identifier: keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/qT0dlLpzpHG-UMlryrlwiaMMxcY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.129.232.0/22 31.129.251.0/24 213.5.192.0-213.5.197.255 Signature Algorithm: sha256WithRSAEncryption 41:cc:6f:1b:96:2f:18:b3:34:58:69:1c:2f:e4:ea:82:19:4a: b4:72:b3:36:79:f2:63:a0:6d:94:a2:1c:6e:13:9c:78:fc:bc: 4a:11:82:b8:e7:86:4b:3b:01:9c:47:8d:20:34:ae:dc:99:21: e2:64:e6:39:2e:f3:b6:19:93:34:71:a0:ad:04:b5:bc:dc:95: 9e:a7:cb:00:19:8c:1c:06:cb:9c:66:cc:2c:33:74:c8:b3:8d: cd:42:18:99:64:b2:30:8a:f7:b3:90:61:f5:4c:5d:74:4d:80: 25:2a:95:ea:eb:d0:fd:81:ba:44:a3:c7:e6:60:15:81:d7:0e: 62:d3:67:86:36:df:20:d2:65:58:35:81:78:b0:fe:3a:c7:fd: e5:69:45:2e:14:be:1b:82:24:f3:86:2e:54:7e:a4:52:2d:9d: e5:1b:e6:a1:5c:9b:35:8a:e6:de:ec:b4:39:66:8f:56:5c:e1: 45:bd:78:1e:16:87:db:97:c6:5b:c4:2d:c6:93:1e:18:0b:be: 5c:ea:24:1f:f7:2e:f8:e0:35:5a:76:e9:1e:f7:ce:bb:74:86: cc:fa:c9:e2:e1:5c:4b:d4:b9:de:d7:f2:91:e7:8e:fb:a7:ff: 93:fe:36:f3:3c:b8:18:85:96:82:4d:e5:06:ee:a0:8a:0d:2b: 27:9e:08:8c -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZujMUcyTFqhzhlvI8UrbYsQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NDRjN2MzYWQzNGI2OTc3ZmExOGEyMjM3Y2EzMDZiOWJl ZTA4ZTAwHhcNMjYwMTA5MTQzNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTNkMWQ5NGJhNzNhNDcxYmU1MGM5NmJjYWI5NzA4OWEzMGNjNWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzweO1rVPQCN/WUqgI/B9HcZtI1rd Ff8loQSDoMQkeTB/v1jnUtHkOxrfog/zsqk6tM8q8scoOZvScuiCcY6469vZ6nAR h4Bp9PgvZXKH52zJOpV7ncK9Mv57a+XWH3TtSKOl1ZW/ligzstkM+amsQQsbQLqj nr7wIkGPSGoJEXA5PIPanFw2Wk8/1aL1w1+76O4vggkf0i/k9Wx3DVZWlCWz6Oln VlCtAzwoLNwPX0yWUQ8YwQFSvfSFUBX4qc5W3k/sWjc/zaiQ7ABR2Rc3QewtdHDH N6X2gdvu+UAblRDLxnOA0c23Xw7ZK/T1h5oSbSofwKIogbw9LTCgtFUI0QIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFKk9HZS6c6RxvlDJa8q5cImjDMXGMB8GA1UdIwQY MBaAFEREx8OtNLaXf6GKIjfKMGub7gjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEt ODYzYzliM2QzMmIwLzEvcVQwZGxMcHpwSEctVU1scnlybHdpYU1NeGNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEtODYzYzliM2QzMmIw LzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCH4HoAwQA H4H7MAwDBAbVBcADBAHVBcQwDQYJKoZIhvcNAQELBQADggEBAEHMbxuWLxizNFhp HC/k6oIZSrRyszZ58mOgbZSiHG4TnHj8vEoRgrjnhks7AZxHjSA0rtyZIeJk5jku 87YZkzRxoK0EtbzclZ6nywAZjBwGy5xmzCwzdMizjc1CGJlksjCK97OQYfVMXXRN gCUqlerr0P2BukSjx+ZgFYHXDmLTZ4Y23yDSZVg1gXiw/jrH/eVpRS4UvhuCJPOG LlR+pFItneUb5qFcmzWK5t7stDlmj1Zc4UW9eB4Wh9uXxlvELcaTHhgLvlzqJB/3 LvjgNVp26R73zrt0hsz6yeLhXEvUud7X8pHnjvun/5P+NvM8uBiFloJN5QbuoIoN KyeeCIw= -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:07 2026 by rpki-client