This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qO7fP4JYDSwOkwNU79mWRjM64pA.roa File: qO7fP4JYDSwOkwNU79mWRjM64pA.roa (raw, json) Hash identifier: BxE3oHxaS3QLL7K/vl+6ZKbsDqNKFO/W+KaSLMWTYFI= Subject key identifier: A8:EE:DF:3F:82:58:0D:2C:0E:93:03:54:EF:D9:96:46:33:3A:E2:90 Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Certificate serial: 019B7F83496108A9EBDF8D6FA742C98568EE Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qO7fP4JYDSwOkwNU79mWRjM64pA.roa Signing time: Fri 02 Jan 2026 16:21:09 +0000 ROA not before: Fri 02 Jan 2026 16:21:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207821 IP address blocks: 2.59.28.0/24 maxlen: 24 185.89.36.0/24 maxlen: 24 185.89.37.0/24 maxlen: 24 185.89.38.0/24 maxlen: 24 185.89.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:49:61:08:a9:eb:df:8d:6f:a7:42:c9:85:68:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Validity Not Before: Jan 2 16:21:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8eedf3f82580d2c0e930354efd99646333ae290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5b:94:7a:fb:a3:87:9a:a5:a1:3e:dc:38:ea: 73:35:7f:00:61:57:c6:1c:23:e9:26:0a:9a:17:24: bc:89:f7:4b:fc:79:63:83:49:d6:fb:43:3f:2a:79: 81:36:d4:5b:98:2b:96:c2:0f:fb:72:fd:4f:9b:ce: 5d:4c:97:aa:61:23:e1:ae:79:fb:67:ed:9e:24:cf: 36:16:1d:43:21:b8:f9:fd:b9:43:fe:a2:13:c8:b3: d9:e4:22:18:13:21:93:de:69:79:d8:2b:05:f5:fb: d5:e4:de:4b:2e:24:90:1d:d9:35:3b:a3:03:f2:c9: 63:b3:48:71:3b:00:df:ba:c7:b4:b5:56:e4:63:dc: fb:87:02:ab:cf:dc:fa:35:30:bc:8e:ee:ff:0e:a7: 4f:12:ba:76:a5:81:d0:9c:45:f7:d1:f9:94:c9:6d: a4:28:b1:6e:fe:9d:97:4d:8f:31:55:e8:c8:33:85: 4d:ed:c4:6a:e9:f3:16:86:d1:ef:1e:e1:fa:c8:04: 7c:99:1f:55:47:29:67:5a:71:6f:ec:c4:5a:f6:20: e2:af:ee:be:99:0b:7d:c0:1e:22:af:31:03:5c:85: 8a:07:70:2c:7f:34:3e:2c:33:83:51:d0:3a:ea:b5: c7:77:be:06:73:c9:8c:76:bd:4e:a4:14:3a:e0:f6: 41:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EE:DF:3F:82:58:0D:2C:0E:93:03:54:EF:D9:96:46:33:3A:E2:90 X509v3 Authority Key Identifier: keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qO7fP4JYDSwOkwNU79mWRjM64pA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.28.0/24 185.89.36.0/22 Signature Algorithm: sha256WithRSAEncryption a5:42:38:8f:59:48:4f:99:9b:0e:1d:3b:cd:30:2e:c6:83:2c: 2c:da:ed:39:f5:f8:65:15:f0:49:9e:8d:40:29:db:93:90:c0: c0:5e:e8:fc:c2:cf:3e:a9:86:a6:57:9a:6a:7c:01:01:ba:e5: 41:c5:21:ca:09:f9:bc:10:df:fd:63:9c:5d:f4:dc:36:62:c0: 11:fb:b5:97:95:e1:91:f9:7e:bb:d6:f9:15:fc:54:3d:14:10: 65:72:b5:7c:37:4e:0f:a4:43:d0:87:70:8c:61:02:04:16:08: 7e:6a:c6:9e:f2:50:ec:81:82:09:6a:c5:98:d8:83:d2:b8:b6: f8:7d:37:16:b7:f9:ba:5a:0d:cc:7d:6a:9b:5a:8c:5e:f1:5f: 90:f5:41:07:cf:53:02:72:e8:6a:f1:e9:7d:89:de:94:29:6c: 87:60:4c:1b:65:a5:39:81:14:bd:57:cd:46:9f:d5:a2:33:24: 44:93:d0:5e:c7:a5:86:bd:26:fe:05:11:6d:db:a6:51:78:3f: ae:87:8b:c6:71:4b:7a:e6:fb:bd:94:16:08:ad:85:26:4c:00: 0f:10:be:cd:2b:15:81:a2:d5:ab:e5:4f:23:fb:18:aa:84:c4: 1b:8d:f0:25:00:9a:bb:70:f1:41:e9:b0:9c:7e:24:63:e2:68: e8:48:e5:d3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g0lhCKnr341vp0LJhWjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh Zjk2M2EwHhcNMjYwMTAyMTYyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGVlZGYzZjgyNTgwZDJjMGU5MzAzNTRlZmQ5OTY0NjMzM2FlMjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxluUevujh5qloT7cOOpzNX8AYVfG HCPpJgqaFyS8ifdL/Hljg0nW+0M/KnmBNtRbmCuWwg/7cv1Pm85dTJeqYSPhrnn7 Z+2eJM82Fh1DIbj5/blD/qITyLPZ5CIYEyGT3ml52CsF9fvV5N5LLiSQHdk1O6MD 8sljs0hxOwDfuse0tVbkY9z7hwKrz9z6NTC8ju7/DqdPErp2pYHQnEX30fmUyW2k KLFu/p2XTY8xVejIM4VN7cRq6fMWhtHvHuH6yAR8mR9VRylnWnFv7MRa9iDir+6+ mQt9wB4irzEDXIWKB3AsfzQ+LDODUdA66rXHd74Gc8mMdr1OpBQ64PZBdQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKju3z+CWA0sDpMDVO/ZlkYzOuKQMB8GA1UdIwQY MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt OWIxMTgwNGVjZDM5LzEvcU83ZlA0SllEU3dPa3dOVTc5bVdSak02NHBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5 LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjscAwQC uVkkMA0GCSqGSIb3DQEBCwUAA4IBAQClQjiPWUhPmZsOHTvNMC7Ggyws2u059fhl FfBJno1AKduTkMDAXuj8ws8+qYamV5pqfAEBuuVBxSHKCfm8EN/9Y5xd9Nw2YsAR +7WXleGR+X671vkV/FQ9FBBlcrV8N04PpEPQh3CMYQIEFgh+asae8lDsgYIJasWY 2IPSuLb4fTcWt/m6Wg3MfWqbWoxe8V+Q9UEHz1MCcuhq8el9id6UKWyHYEwbZaU5 gRS9V81Gn9WiMyREk9Bex6WGvSb+BRFt26ZReD+uh4vGcUt65vu9lBYIrYUmTAAP EL7NKxWBotWr5U8j+xiqhMQbjfAlAJq7cPFB6bCcfiRj4mjoSOXT -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:17 2026 by rpki-client