This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/cqrDqsllU4angXR7ZhiixighcHI.roa File: cqrDqsllU4angXR7ZhiixighcHI.roa (raw, json) Hash identifier: fhOWug7UyzusWzCmpcbK8cX3/PPspaEdcPiG9KdZ6F4= Subject key identifier: 72:AA:C3:AA:C9:65:53:86:A7:81:74:7B:66:18:A2:C6:28:21:70:72 Certificate issuer: /CN=a375369b2d4bb2e2dede668645313e344e6f1cc0 Certificate serial: 019B7BA51E4EF3F39D007362050C59AFDB43 Authority key identifier: A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/cqrDqsllU4angXR7ZhiixighcHI.roa Signing time: Thu 01 Jan 2026 22:19:37 +0000 ROA not before: Thu 01 Jan 2026 22:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60456 IP address blocks: 45.81.204.0/22 maxlen: 22 185.231.168.0/22 maxlen: 22 2a0e:5f80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1e:4e:f3:f3:9d:00:73:62:05:0c:59:af:db:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a375369b2d4bb2e2dede668645313e344e6f1cc0 Validity Not Before: Jan 1 22:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72aac3aac9655386a781747b6618a2c628217072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:b9:4f:1b:d4:a5:8c:37:c1:21:09:e8:cc: e9:03:e0:41:75:05:99:ec:56:7d:09:9b:51:09:cd: 3e:ce:69:b9:1a:0e:f0:15:c0:60:ba:5b:a7:f8:18: 0e:81:5a:8a:2e:53:3c:ad:a3:b4:7d:7c:5b:e0:90: 8f:fe:ad:25:79:7c:ec:8f:3e:0b:16:fc:ce:c0:dc: e0:53:32:d3:e3:c2:b9:65:6d:d6:65:72:7e:20:80: 70:27:81:af:6f:ba:8f:02:1c:b8:26:04:3c:dd:1d: 67:0c:c9:b8:a0:f4:10:2c:d4:e9:ae:b3:52:77:4f: 93:3e:83:21:00:64:0e:ca:fe:2a:cc:5c:48:e3:67: 2f:ec:d6:b7:92:a6:07:b2:e8:29:d3:2f:e1:0d:97: 1e:48:be:25:24:89:39:4b:f9:3e:03:2a:4c:77:d8: a2:b7:4d:c1:fe:09:7a:bf:ee:59:82:39:29:0f:80: 3c:a9:55:76:0e:55:6e:cb:1e:91:c2:de:e8:ef:dc: 1a:b2:56:2f:39:a8:5e:6c:32:0b:22:a3:e8:db:3e: 2e:f2:92:0c:ae:de:5e:ef:93:73:e3:b4:1d:e9:58: 8d:45:a5:e5:34:e4:30:ab:5c:46:65:ef:4a:ce:5a: 1f:24:19:80:9b:61:a8:a8:7c:bf:18:79:e3:83:76: 7c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AA:C3:AA:C9:65:53:86:A7:81:74:7B:66:18:A2:C6:28:21:70:72 X509v3 Authority Key Identifier: keyid:A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/cqrDqsllU4angXR7ZhiixighcHI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.204.0/22 185.231.168.0/22 IPv6: 2a0e:5f80::/29 Signature Algorithm: sha256WithRSAEncryption 26:70:f7:5a:f8:eb:6f:89:94:85:5f:38:5b:35:80:70:8f:b6: 9c:06:f9:55:b8:9e:d2:39:2a:aa:93:8a:bd:a7:8d:40:b6:90: 5a:07:0d:f4:41:0b:73:33:93:24:f9:12:5a:c3:2d:a0:69:60: 75:a6:75:32:98:d4:59:47:87:51:c2:ef:ef:72:b7:36:dc:83: d7:fd:08:db:1f:0c:9e:e4:3f:d8:fc:e1:cc:2a:7f:b1:c5:68: 2d:91:8a:43:27:7c:ae:50:a9:b8:94:47:51:67:7c:f5:05:a3: 83:cf:22:5b:a4:90:ff:dd:eb:cb:d5:e0:3b:93:88:21:2b:f9: c2:f7:9e:ac:f7:ac:53:46:81:a8:26:46:14:dd:35:dd:47:d9: 2a:c4:f2:f9:4b:7c:c3:bf:6e:e6:72:7d:4e:50:3d:82:d1:ee: 20:49:c3:3a:d3:c3:45:74:d1:5c:c3:ca:4d:de:f9:20:93:1f: 3d:2f:cf:cb:b0:38:d2:ff:39:ca:79:b9:7b:de:9c:ca:f5:35: 1f:12:44:e1:85:81:e6:42:33:c9:ac:4e:61:45:a4:ea:5a:2e: b3:fa:43:87:0e:99:13:c9:1f:4a:d1:4b:99:a5:74:bc:40:0d: 92:7a:22:24:af:d4:92:68:92:61:b7:e0:b4:dc:97:08:4e:c4: 2f:76:d1:e1 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7pR5O8/OdAHNiBQxZr9tDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNzUzNjliMmQ0YmIyZTJkZWRlNjY4NjQ1MzEzZTM0NGU2 ZjFjYzAwHhcNMjYwMTAxMjIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmFhYzNhYWM5NjU1Mzg2YTc4MTc0N2I2NjE4YTJjNjI4MjE3MDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0y5TxvUpYw3wSEJ6MzpA+BBdQWZ 7FZ9CZtRCc0+zmm5Gg7wFcBgulun+BgOgVqKLlM8raO0fXxb4JCP/q0leXzsjz4L FvzOwNzgUzLT48K5ZW3WZXJ+IIBwJ4Gvb7qPAhy4JgQ83R1nDMm4oPQQLNTprrNS d0+TPoMhAGQOyv4qzFxI42cv7Na3kqYHsugp0y/hDZceSL4lJIk5S/k+AypMd9ii t03B/gl6v+5ZgjkpD4A8qVV2DlVuyx6Rwt7o79waslYvOahebDILIqPo2z4u8pIM rt5e75Nz47Qd6ViNRaXlNOQwq1xGZe9KzlofJBmAm2GoqHy/GHnjg3Z8gwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHKqw6rJZVOGp4F0e2YYosYoIXByMB8GA1UdIwQY MBaAFKN1NpstS7Li3t5mhkUxPjRObxzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzNVMm15MUxzdUxlM21hR1JURS1ORTV2SE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lYzY5MDUtYjBmNy00MjRmLThhODQt MjhiZWM3Yjk5OTI5LzEvY3FyRHFzbGxVNGFuZ1hSN1poaWl4aWdoY0hJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lYzY5MDUtYjBmNy00MjRmLThhODQtMjhiZWM3Yjk5OTI5 LzEvbzNVMm15MUxzdUxlM21hR1JURS1ORTV2SE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLVHMAwQC ueeoMA0EAgACMAcDBQMqDl+AMA0GCSqGSIb3DQEBCwUAA4IBAQAmcPda+OtviZSF XzhbNYBwj7acBvlVuJ7SOSqqk4q9p41AtpBaBw30QQtzM5Mk+RJawy2gaWB1pnUy mNRZR4dRwu/vcrc23IPX/QjbHwye5D/Y/OHMKn+xxWgtkYpDJ3yuUKm4lEdRZ3z1 BaODzyJbpJD/3evL1eA7k4ghK/nC956s96xTRoGoJkYU3TXdR9kqxPL5S3zDv27m cn1OUD2C0e4gScM608NFdNFcw8pN3vkgkx89L8/LsDjS/znKebl73pzK9TUfEkTh hYHmQjPJrE5hRaTqWi6z+kOHDpkTyR9K0UuZpXS8QA2SeiIkr9SSaJJht+C03JcI TsQvdtHh -----END CERTIFICATE-----Generated at Sun Jan 25 17:00:20 2026 by rpki-client