This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/kSbqeBaoQD13o8jWxXoJQPiv5_E.roa File: kSbqeBaoQD13o8jWxXoJQPiv5_E.roa (raw, json) Hash identifier: sTOxhOLpsBrW4Ofsjo1P891qLJ55OV1w4sI87BOcc0Y= Subject key identifier: 91:26:EA:78:16:A8:40:3D:77:A3:C8:D6:C5:7A:09:40:F8:AF:E7:F1 Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0 Certificate serial: 019B9E30743E42E1B31E17F39870C62C5026 Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/kSbqeBaoQD13o8jWxXoJQPiv5_E.roa Signing time: Thu 08 Jan 2026 15:18:54 +0000 ROA not before: Thu 08 Jan 2026 15:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205614 IP address blocks: 45.89.160.0/22 maxlen: 22 45.135.124.0/22 maxlen: 22 185.171.44.0/22 maxlen: 22 193.22.251.0/24 maxlen: 24 2a0d:1f80::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:30:74:3e:42:e1:b3:1e:17:f3:98:70:c6:2c:50:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0 Validity Not Before: Jan 8 15:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9126ea7816a8403d77a3c8d6c57a0940f8afe7f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:72:91:10:4f:a7:79:c6:f8:c3:14:c8:e0: 07:6d:41:87:1a:a6:43:8c:6b:91:76:d6:19:dc:0b: 79:76:ad:1d:f7:33:b7:13:7f:3d:cc:71:2f:b2:86: d7:a5:12:7e:d2:f9:26:e5:7e:fe:e8:23:8b:b3:ad: c9:ce:d8:5b:5b:07:41:7d:24:d8:d5:21:a0:c1:5c: e9:ad:da:2b:1a:9b:f2:bd:84:04:77:4c:15:10:23: f9:10:65:84:a2:6f:3e:7b:cd:9b:17:8d:78:fa:ba: 03:66:e4:ba:8a:cd:9d:da:6d:3e:44:17:99:14:01: c3:72:03:4e:51:1c:d9:18:a9:91:51:d3:33:5a:31: 41:a2:30:f6:9b:58:5d:dc:39:c1:1f:53:d8:b7:ae: 97:af:72:48:2f:0c:92:45:fb:7e:5a:56:14:01:4c: ca:02:ad:d4:15:03:2f:09:04:61:aa:ae:c1:54:34: 33:9c:8e:3e:ad:e6:7b:17:cd:bb:a6:55:a1:ae:0b: 1c:58:84:c8:bf:a6:78:3b:44:dd:8f:c3:ed:c9:08: e2:62:a9:2f:8b:0f:e8:6b:26:f0:99:d7:81:06:09: 8c:85:82:d9:74:10:dd:53:64:d6:34:da:ce:f5:26: ba:33:02:e7:49:a8:5a:b8:e1:2e:09:19:f6:6c:b7: 6e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:26:EA:78:16:A8:40:3D:77:A3:C8:D6:C5:7A:09:40:F8:AF:E7:F1 X509v3 Authority Key Identifier: keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/kSbqeBaoQD13o8jWxXoJQPiv5_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.160.0/22 45.135.124.0/22 185.171.44.0/22 193.22.251.0/24 IPv6: 2a0d:1f80::/32 Signature Algorithm: sha256WithRSAEncryption 79:21:32:49:96:6c:47:34:6f:41:37:76:b3:59:24:a1:99:b0: 3b:b3:19:03:28:8f:35:4e:33:7f:20:e7:af:80:7a:ab:76:5e: 2e:15:11:f1:f0:40:86:92:36:d5:f2:ad:cc:4d:0a:62:d2:03: 4f:2a:ac:05:79:cf:11:98:e9:1c:8b:9a:7a:6b:c1:d3:e0:0e: 0a:ae:95:9d:5c:4a:31:62:f1:dc:27:5b:ca:df:9e:d3:77:93: 46:01:67:a9:f0:c6:f2:84:99:fb:c2:4a:d4:a0:c2:28:c2:8e: 27:a6:02:68:56:cf:cb:7f:45:50:a2:6d:88:1c:fa:23:bf:19: d7:c2:05:73:4d:62:9c:fd:8c:3e:70:1b:29:6d:ef:48:f3:d8: 8c:9f:1d:29:9b:6b:36:e2:2b:2c:af:0a:11:26:fe:ba:33:eb: ec:81:c3:bb:cc:fb:b6:b2:9c:9c:c2:e3:82:6e:eb:ae:0f:85: 83:3c:a2:59:bb:fd:58:9a:9c:76:90:89:00:e2:8a:77:87:c0: 91:d1:b9:cd:e4:12:44:8e:78:ff:d6:45:a7:63:7b:1f:c2:a9: 98:b8:95:3c:7f:c0:41:ce:e6:73:f5:a8:91:05:af:be:14:57: d0:33:0e:a7:24:57:51:eb:c8:a8:dc:62:47:45:62:97:83:ab: 31:1f:a1:db -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZueMHQ+QuGzHhfzmHDGLFAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MDYwOTY2OTVmN2U2NjEwYjE5YjA4ZTFkN2ZkOWM0ZDkx NGE0ZjAwHhcNMjYwMTA4MTUxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTI2ZWE3ODE2YTg0MDNkNzdhM2M4ZDZjNTdhMDk0MGY4YWZlN2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYdykRBPp3nG+MMUyOAHbUGHGqZD jGuRdtYZ3At5dq0d9zO3E389zHEvsobXpRJ+0vkm5X7+6COLs63JzthbWwdBfSTY 1SGgwVzprdorGpvyvYQEd0wVECP5EGWEom8+e82bF414+roDZuS6is2d2m0+RBeZ FAHDcgNOURzZGKmRUdMzWjFBojD2m1hd3DnBH1PYt66Xr3JILwySRft+WlYUAUzK Aq3UFQMvCQRhqq7BVDQznI4+reZ7F827plWhrgscWITIv6Z4O0Tdj8PtyQjiYqkv iw/oaybwmdeBBgmMhYLZdBDdU2TWNNrO9Sa6MwLnSahauOEuCRn2bLduAwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFJEm6ngWqEA9d6PI1sV6CUD4r+fxMB8GA1UdIwQY MBaAFGUGCWaV9+ZhCxmwjh1/2cTZFKTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgt YTQxNTI1NThkMThjLzEva1NicWVCYW9RRDEzbzhqV3hYb0pRUGl2NV9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgtYTQxNTI1NThkMThj LzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLVmgAwQC LYd8AwQCuassAwQAwRb7MA0EAgACMAcDBQAqDR+AMA0GCSqGSIb3DQEBCwUAA4IB AQB5ITJJlmxHNG9BN3azWSShmbA7sxkDKI81TjN/IOevgHqrdl4uFRHx8ECGkjbV 8q3MTQpi0gNPKqwFec8RmOkci5p6a8HT4A4KrpWdXEoxYvHcJ1vK357Td5NGAWep 8MbyhJn7wkrUoMIowo4npgJoVs/Lf0VQom2IHPojvxnXwgVzTWKc/Yw+cBspbe9I 89iMnx0pm2s24issrwoRJv66M+vsgcO7zPu2spycwuOCbuuuD4WDPKJZu/1Ympx2 kIkA4op3h8CR0bnN5BJEjnj/1kWnY3sfwqmYuJU8f8BBzuZz9aiRBa++FFfQMw6n JFdR68io3GJHRWKXg6sxH6Hb -----END CERTIFICATE-----Generated at Mon Jan 26 07:10:49 2026 by rpki-client