This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/cqgfNLDExy7FaffRoXOKMQXtqL4.roa File: cqgfNLDExy7FaffRoXOKMQXtqL4.roa (raw, json) Hash identifier: TWz48Wr5Z6qhNEoUkqeyNmR7SZVnU/2APhq7EOM+kUQ= Subject key identifier: 72:A8:1F:34:B0:C4:C7:2E:C5:69:F7:D1:A1:73:8A:31:05:ED:A8:BE Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773 Certificate serial: 019B79ED41324796051DA8EA3A480BF4B676 Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/cqgfNLDExy7FaffRoXOKMQXtqL4.roa Signing time: Thu 01 Jan 2026 14:19:10 +0000 ROA not before: Thu 01 Jan 2026 14:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39392 IP address blocks: 185.247.28.0/22 maxlen: 32 185.247.30.0/23 maxlen: 32 2a0d:b880::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:41:32:47:96:05:1d:a8:ea:3a:48:0b:f4:b6:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88a780738b853acffbabdb23914c50e36421f773 Validity Not Before: Jan 1 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72a81f34b0c4c72ec569f7d1a1738a3105eda8be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f6:71:0c:69:58:6f:56:07:f3:72:c2:46:49: 7d:37:bb:75:6d:04:be:ae:08:f1:c2:4c:6c:f5:bf: be:70:5b:0f:7a:0a:97:21:a0:fd:12:58:97:80:e5: dd:23:95:74:3a:14:ca:1d:4a:9a:66:d2:31:e5:04: 65:65:57:1c:74:ea:4a:80:ed:43:34:30:75:e0:fa: 8a:25:c0:f5:55:12:6f:55:37:2b:81:a2:21:4d:eb: ba:3b:9f:e8:16:c5:53:c7:80:cf:e5:12:e2:a3:d8: 79:74:06:e4:4c:e6:1c:8f:c6:fb:f2:82:e8:e5:82: 30:f7:d7:eb:29:71:88:5c:73:0b:a4:60:86:c6:47: af:85:f4:b5:d2:8f:19:60:9e:30:c9:eb:71:43:b6: 91:71:01:ee:4a:8a:62:d4:f5:a7:60:5d:e8:c3:94: 3f:38:15:56:e9:c6:1b:79:03:98:2b:51:a4:69:95: 77:18:88:dd:37:d6:9f:74:9d:6b:35:7e:58:98:e7: 82:f4:65:25:9c:ee:08:3c:4d:be:fe:34:3f:ca:a4: f6:a6:c1:82:5c:c2:bd:9c:f2:c0:ce:b9:67:5a:83: d5:de:78:b2:64:be:f8:37:99:47:25:54:da:c7:15: 85:f7:00:c6:f4:0e:1e:1a:3d:da:63:cc:99:1a:e7: a7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A8:1F:34:B0:C4:C7:2E:C5:69:F7:D1:A1:73:8A:31:05:ED:A8:BE X509v3 Authority Key Identifier: keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/cqgfNLDExy7FaffRoXOKMQXtqL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.247.28.0/22 IPv6: 2a0d:b880::/29 Signature Algorithm: sha256WithRSAEncryption 33:65:2e:e7:7d:0a:aa:f3:32:b0:bb:62:75:00:80:b1:aa:24: 3f:92:c5:d5:1d:3c:c1:6e:17:ff:d6:a8:96:c7:69:d4:45:79: c1:4e:a4:6b:7e:5d:66:2b:6f:99:c4:16:14:e3:02:ef:7d:0a: 08:63:56:bc:9f:8c:a9:e3:5f:30:80:22:89:ac:28:81:7f:78: 77:0d:13:b9:87:d1:d3:65:f7:d9:8a:19:d8:f0:34:a7:f6:86: 1d:c8:a9:6e:4d:5e:4e:53:0c:0d:c9:5a:5b:01:ee:74:69:0d: 38:04:cf:bb:a3:d8:e2:fc:57:6b:7e:64:8b:3b:06:be:12:b3: 2b:c4:d7:2a:c6:86:57:ac:95:94:74:9d:ba:49:4c:a6:00:7b: 8f:5a:72:76:cc:d4:07:bb:cd:74:70:58:36:c4:0b:bc:0e:54: 6d:6c:30:7e:c5:a7:db:16:cd:94:b4:c4:ea:35:a8:f1:5a:f3: dd:2b:73:7c:60:ff:d0:fc:c8:5b:1b:7c:f3:fd:fe:09:d1:26: d1:16:f4:a6:73:b0:ff:03:ff:9f:72:aa:a8:a4:e4:bb:d2:fb: a7:ef:b4:f7:94:88:50:0f:52:83:e6:e8:be:f0:ca:48:85:69: 4f:43:b0:4b:14:63:b4:ba:7a:e3:e9:4b:02:fd:ec:88:61:17: cc:60:17:ab -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57UEyR5YFHajqOkgL9LZ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YTc4MDczOGI4NTNhY2ZmYmFiZGIyMzkxNGM1MGUzNjQy MWY3NzMwHhcNMjYwMTAxMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmE4MWYzNGIwYzRjNzJlYzU2OWY3ZDFhMTczOGEzMTA1ZWRhOGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvZxDGlYb1YH83LCRkl9N7t1bQS+ rgjxwkxs9b++cFsPegqXIaD9EliXgOXdI5V0OhTKHUqaZtIx5QRlZVccdOpKgO1D NDB14PqKJcD1VRJvVTcrgaIhTeu6O5/oFsVTx4DP5RLio9h5dAbkTOYcj8b78oLo 5YIw99frKXGIXHMLpGCGxkevhfS10o8ZYJ4wyetxQ7aRcQHuSopi1PWnYF3ow5Q/ OBVW6cYbeQOYK1GkaZV3GIjdN9afdJ1rNX5YmOeC9GUlnO4IPE2+/jQ/yqT2psGC XMK9nPLAzrlnWoPV3niyZL74N5lHJVTaxxWF9wDG9A4eGj3aY8yZGuen/QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHKoHzSwxMcuxWn30aFzijEF7ai+MB8GA1UdIwQY MBaAFIingHOLhTrP+6vbI5FMUONkIfdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iODk3MDQtNGZkMi00ZTA3LWEwMzkt NjZmNTZlZjljZTI2LzEvY3FnZk5MREV4eTdGYWZmUm9YT0tNUVh0cUw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iODk3MDQtNGZkMi00ZTA3LWEwMzktNjZmNTZlZjljZTI2 LzEvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufccMA0E AgACMAcDBQMqDbiAMA0GCSqGSIb3DQEBCwUAA4IBAQAzZS7nfQqq8zKwu2J1AICx qiQ/ksXVHTzBbhf/1qiWx2nURXnBTqRrfl1mK2+ZxBYU4wLvfQoIY1a8n4yp418w gCKJrCiBf3h3DRO5h9HTZffZihnY8DSn9oYdyKluTV5OUwwNyVpbAe50aQ04BM+7 o9ji/FdrfmSLOwa+ErMrxNcqxoZXrJWUdJ26SUymAHuPWnJ2zNQHu810cFg2xAu8 DlRtbDB+xafbFs2UtMTqNajxWvPdK3N8YP/Q/MhbG3zz/f4J0SbRFvSmc7D/A/+f cqqopOS70vun77T3lIhQD1KD5ui+8MpIhWlPQ7BLFGO0unrj6UsC/eyIYRfMYBer -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:26 2026 by rpki-client