This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/qSWfUPbdifhrh3aKuAhxxmylP6A.roa File: qSWfUPbdifhrh3aKuAhxxmylP6A.roa (raw, json) Hash identifier: fB+qGwcW2GhnHX2osyvSPDhd9KmuxX/DLSWIY8hF8h8= Subject key identifier: A9:25:9F:50:F6:DD:89:F8:6B:87:76:8A:B8:08:71:C6:6C:A5:3F:A0 Certificate issuer: /CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d Certificate serial: 019B7C7FBF38A20362AC650109AE359F0E43 Authority key identifier: 20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/qSWfUPbdifhrh3aKuAhxxmylP6A.roa Signing time: Fri 02 Jan 2026 02:18:25 +0000 ROA not before: Fri 02 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48813 IP address blocks: 45.140.108.0/22 maxlen: 24 185.145.248.0/22 maxlen: 24 193.19.208.0/22 maxlen: 24 2a07:4b00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:bf:38:a2:03:62:ac:65:01:09:ae:35:9f:0e:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d Validity Not Before: Jan 2 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9259f50f6dd89f86b87768ab80871c66ca53fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:dc:5d:79:b1:bb:09:2e:66:9d:32:5e:4f:01: 7f:59:31:6d:6f:a8:b2:0b:1e:20:fc:df:ae:a9:35: 70:f3:30:6c:60:c6:33:a8:1f:22:14:70:fe:0f:5a: 66:e7:46:be:f8:f9:85:03:11:d1:22:fb:d1:34:9e: 26:2d:66:91:98:f6:b6:68:25:d8:11:44:ae:aa:11: 05:51:96:cf:00:51:86:4a:c1:7a:63:55:02:ac:12: 09:52:77:7a:d6:c0:80:45:ab:bb:2f:5c:33:4c:4b: 30:46:35:0b:3e:45:ad:fd:29:f5:8d:70:8e:b4:3a: 8f:93:ab:36:e3:78:c2:9e:07:2f:9d:f5:7e:ab:af: 5b:fe:1a:df:b8:75:03:5d:af:ba:1f:b1:76:5b:33: e2:0a:69:cb:86:14:bf:ba:f3:7a:12:97:7f:06:af: 1d:9d:9a:76:cf:da:9b:c9:e3:a5:a1:69:88:19:dd: 5d:cb:21:a4:37:d9:1b:91:e2:8d:e0:e8:c2:20:89: 5d:67:4d:6c:79:c1:86:96:42:a5:fa:dd:c6:a7:08: e8:af:eb:9c:a5:e0:ae:bc:bd:26:dc:8b:9b:73:78: 51:0c:06:76:61:f7:80:cb:2e:c2:fd:e8:bd:e3:e9: c6:d8:a9:e8:65:22:11:02:3a:5b:93:66:da:c9:b0: b9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:25:9F:50:F6:DD:89:F8:6B:87:76:8A:B8:08:71:C6:6C:A5:3F:A0 X509v3 Authority Key Identifier: keyid:20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/qSWfUPbdifhrh3aKuAhxxmylP6A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.108.0/22 185.145.248.0/22 193.19.208.0/22 IPv6: 2a07:4b00::/29 Signature Algorithm: sha256WithRSAEncryption 18:80:f5:56:5d:5c:9e:e4:b7:d0:18:b5:24:f1:19:bc:d9:04: 75:2d:35:93:cb:d1:2d:47:54:2a:54:db:e4:ed:c9:2b:70:73: d6:47:b4:05:f2:e1:2b:5d:23:dc:90:20:68:c2:d9:b2:48:c6: 88:5a:36:6b:04:31:2b:8a:9a:81:c8:83:15:e0:95:29:94:31: ed:c5:3d:85:3a:fe:a8:8f:0f:8d:53:bd:0c:71:6c:cb:2f:ff: de:81:61:f5:b5:aa:1a:5a:f2:64:d3:22:20:19:23:8b:ce:b7: 9b:c7:c0:5e:e5:ef:f8:b7:f7:30:30:a2:d3:c0:a9:39:11:5c: 3c:ba:9f:55:cc:e3:e6:36:71:7e:f8:54:47:7f:13:55:cd:fb: ad:2a:42:b7:c7:d1:0e:8b:21:54:51:2f:a0:3c:c7:b5:af:1f: 9a:8e:ef:0d:b6:8e:5e:16:75:ef:74:75:e5:26:29:f4:70:b5: 37:9f:f7:3b:8c:22:88:2c:24:4a:68:36:c4:3b:df:ee:77:f5: d1:2b:00:02:7b:08:90:01:95:0a:47:f5:e8:c5:e8:1c:f6:a6: 88:a8:ba:0e:59:41:98:88:76:23:9c:86:28:a3:e1:c9:a1:e6: 3a:4e:72:a7:a9:4b:13:31:a5:a5:b2:ac:35:f2:c5:0a:16:99: b2:de:aa:96 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8f784ogNirGUBCa41nw5DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmQxODJhM2I0NGE3YmUwNWQzZWU3MGRjOTBhODVkNTdh YmZiOGQwHhcNMjYwMTAyMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTI1OWY1MGY2ZGQ4OWY4NmI4Nzc2OGFiODA4NzFjNjZjYTUzZmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39xdebG7CS5mnTJeTwF/WTFtb6iy Cx4g/N+uqTVw8zBsYMYzqB8iFHD+D1pm50a++PmFAxHRIvvRNJ4mLWaRmPa2aCXY EUSuqhEFUZbPAFGGSsF6Y1UCrBIJUnd61sCARau7L1wzTEswRjULPkWt/Sn1jXCO tDqPk6s243jCngcvnfV+q69b/hrfuHUDXa+6H7F2WzPiCmnLhhS/uvN6Epd/Bq8d nZp2z9qbyeOloWmIGd1dyyGkN9kbkeKN4OjCIIldZ01secGGlkKl+t3Gpwjor+uc peCuvL0m3Iubc3hRDAZ2YfeAyy7C/ei94+nG2KnoZSIRAjpbk2baybC5ywIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKkln1D23Yn4a4d2irgIccZspT+gMB8GA1UdIwQY MBaAFCBtGCo7RKe+BdPucNyQqF1Xq/uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNmYyZWUtMDQ3Ni00MGI0LWJiNmEt NjYwNzc4MDk5YjNkLzEvcVNXZlVQYmRpZmhyaDNhS3VBaHh4bXlsUDZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9lNmYyZWUtMDQ3Ni00MGI0LWJiNmEtNjYwNzc4MDk5YjNk LzEvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLYxsAwQC uZH4AwQCwRPQMA0EAgACMAcDBQMqB0sAMA0GCSqGSIb3DQEBCwUAA4IBAQAYgPVW XVye5LfQGLUk8Rm82QR1LTWTy9EtR1QqVNvk7ckrcHPWR7QF8uErXSPckCBowtmy SMaIWjZrBDEripqByIMV4JUplDHtxT2FOv6ojw+NU70McWzLL//egWH1taoaWvJk 0yIgGSOLzrebx8Be5e/4t/cwMKLTwKk5EVw8up9VzOPmNnF++FRHfxNVzfutKkK3 x9EOiyFUUS+gPMe1rx+aju8Nto5eFnXvdHXlJin0cLU3n/c7jCKILCRKaDbEO9/u d/XRKwACewiQAZUKR/Xoxegc9qaIqLoOWUGYiHYjnIYoo+HJoeY6TnKnqUsTMaWl sqw18sUKFpmy3qqW -----END CERTIFICATE-----Generated at Mon Jan 26 05:04:44 2026 by rpki-client