This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/qydP8Ocj7OIzj_U81Z5d_MW1T18.roa File: qydP8Ocj7OIzj_U81Z5d_MW1T18.roa (raw, json) Hash identifier: TfA/tv13aYJLnXxl1BypCd3xtsBlvQQuGSTtjj37SIo= Subject key identifier: AB:27:4F:F0:E7:23:EC:E2:33:8F:F5:3C:D5:9E:5D:FC:C5:B5:4F:5F Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e Certificate serial: 019B7EA6D8EF58BE51C87EA470277E89FE47 Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/qydP8Ocj7OIzj_U81Z5d_MW1T18.roa Signing time: Fri 02 Jan 2026 12:20:22 +0000 ROA not before: Fri 02 Jan 2026 12:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201387 IP address blocks: 84.47.146.0/24 maxlen: 24 84.47.166.0/23 maxlen: 24 84.47.167.0/24 maxlen: 24 85.91.124.0/22 maxlen: 23 185.89.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d8:ef:58:be:51:c8:7e:a4:70:27:7e:89:fe:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e Validity Not Before: Jan 2 12:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab274ff0e723ece2338ff53cd59e5dfcc5b54f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a4:97:ac:f4:97:1c:5d:89:4e:49:1d:d9:1d: 40:74:dc:37:91:c0:1a:75:66:83:ec:91:70:8f:2e: 8e:16:65:3d:a7:ce:20:0a:84:40:8e:26:ab:95:64: 00:50:37:fe:30:44:0e:d6:f8:a4:c7:59:da:db:c8: cd:00:b6:43:1d:4f:41:7f:12:c4:07:aa:c5:9c:a5: bf:23:77:41:c2:a4:b6:ed:a9:17:fe:07:e8:7b:d2: 94:16:50:a1:60:8e:37:91:65:25:3f:a7:09:f1:84: 93:8b:30:d2:bb:4b:43:87:4a:be:ed:59:af:7b:70: bf:17:78:27:fc:c4:43:6b:c1:72:17:bc:8e:f6:6f: b0:af:8c:a2:7c:05:5c:08:20:91:6b:eb:76:21:d2: 32:9e:5a:8e:54:10:90:e2:cf:33:3a:1b:ff:3e:14: 5b:82:df:f0:1f:2b:3d:e0:42:0a:51:6c:dc:ac:d0: 90:da:99:e3:ec:90:35:bc:49:ba:ec:bc:f9:cf:56: 14:c0:1e:a3:e9:8c:0e:65:c9:46:d5:38:50:68:88: 0a:cf:12:8d:0c:e6:f8:7e:3d:3f:f2:83:dd:18:d7: ca:2f:64:e6:d8:dc:cb:47:57:55:94:38:a2:68:03: 07:b0:b1:fd:19:63:41:01:ac:22:04:c6:02:e0:af: 84:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:27:4F:F0:E7:23:EC:E2:33:8F:F5:3C:D5:9E:5D:FC:C5:B5:4F:5F X509v3 Authority Key Identifier: keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/qydP8Ocj7OIzj_U81Z5d_MW1T18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.47.146.0/24 84.47.166.0/23 85.91.124.0/22 185.89.240.0/22 Signature Algorithm: sha256WithRSAEncryption 63:57:6a:41:1a:f1:a4:d5:0b:0c:a5:a0:8d:8a:be:a0:6a:25: 8e:d3:b5:ce:e4:4d:29:90:5a:43:4a:8c:75:06:81:f8:b1:e9: 3e:60:27:5f:d9:96:d9:24:79:57:19:89:61:e3:ac:1f:c9:41: 8d:05:4f:e7:e8:9b:09:a2:bd:4f:4c:59:c7:15:84:22:2b:de: 7a:ae:71:f1:07:99:25:28:2b:c6:47:2d:46:30:c7:07:df:ae: 94:08:b5:5c:09:72:d4:94:df:8d:dc:4e:e5:bf:b0:26:39:9b: 76:95:2a:3c:dd:a7:71:1a:93:02:6c:9e:f5:f9:65:e8:5e:e3: 71:a9:f4:ea:94:17:9f:53:74:4c:1f:e9:4f:2a:b9:61:53:b4: a9:48:f2:0e:05:92:7d:72:96:e3:fb:97:2a:e7:f3:db:ef:b2: 54:25:75:06:4e:07:2a:b8:e9:5f:7d:6b:6e:2d:d5:ba:3e:e8: 7f:72:54:9e:b1:85:13:a7:20:0c:a7:8a:a2:10:7a:81:de:24: 94:a0:5c:5c:65:2e:44:96:32:7c:22:c5:9d:4d:43:a5:74:4b: 4e:91:4f:39:f6:73:17:a3:97:e3:eb:16:2b:1c:c5:e8:d1:54: 5c:cd:05:3d:fb:33:d0:59:0c:ee:af:13:22:28:95:5b:ff:34: 52:d5:0c:6d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+ptjvWL5RyH6kcCd+if5HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGQ1NDI3ODE4NTFjMGJjZTVhM2VhNWNjMzg3NjUwZmZj ODI3N2UwHhcNMjYwMTAyMTIyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjI3NGZmMGU3MjNlY2UyMzM4ZmY1M2NkNTllNWRmY2M1YjU0ZjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaSXrPSXHF2JTkkd2R1AdNw3kcAa dWaD7JFwjy6OFmU9p84gCoRAjiarlWQAUDf+MEQO1vikx1na28jNALZDHU9BfxLE B6rFnKW/I3dBwqS27akX/gfoe9KUFlChYI43kWUlP6cJ8YSTizDSu0tDh0q+7Vmv e3C/F3gn/MRDa8FyF7yO9m+wr4yifAVcCCCRa+t2IdIynlqOVBCQ4s8zOhv/PhRb gt/wHys94EIKUWzcrNCQ2pnj7JA1vEm67Lz5z1YUwB6j6YwOZclG1ThQaIgKzxKN DOb4fj0/8oPdGNfKL2Tm2NzLR1dVlDiiaAMHsLH9GWNBAawiBMYC4K+EawIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKsnT/DnI+ziM4/1PNWeXfzFtU9fMB8GA1UdIwQY MBaAFFndVCeBhRwLzlo+pcw4dlD/yCd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYt NDdlMDkzNzk4OWE4LzEvcXlkUDhPY2o3T0l6al9VODFaNWRfTVcxVDE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYtNDdlMDkzNzk4OWE4 LzEvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVC+SAwQB VC+mAwQCVVt8AwQCuVnwMA0GCSqGSIb3DQEBCwUAA4IBAQBjV2pBGvGk1QsMpaCN ir6gaiWO07XO5E0pkFpDSox1BoH4sek+YCdf2ZbZJHlXGYlh46wfyUGNBU/n6JsJ or1PTFnHFYQiK956rnHxB5klKCvGRy1GMMcH366UCLVcCXLUlN+N3E7lv7AmOZt2 lSo83adxGpMCbJ71+WXoXuNxqfTqlBefU3RMH+lPKrlhU7SpSPIOBZJ9cpbj+5cq 5/Pb77JUJXUGTgcquOlffWtuLdW6Puh/clSesYUTpyAMp4qiEHqB3iSUoFxcZS5E ljJ8IsWdTUOldEtOkU859nMXo5fj6xYrHMXo0VRczQU9+zPQWQzurxMiKJVb/zRS 1Qxt -----END CERTIFICATE-----Generated at Mon Jan 26 00:38:50 2026 by rpki-client