This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/QowN0LD_MpyH9XeoraRCQC23xeg.roa File: QowN0LD_MpyH9XeoraRCQC23xeg.roa (raw, json) Hash identifier: hLxc7NbhUpaHA5kGsA3jfQYRDHphB6U/6NiFfrvj7Nw= Subject key identifier: 42:8C:0D:D0:B0:FF:32:9C:87:F5:77:A8:AD:A4:42:40:2D:B7:C5:E8 Certificate issuer: /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac Certificate serial: 019B7DCA4E8C5AC531D68E2F115A6CB5B61D Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/QowN0LD_MpyH9XeoraRCQC23xeg.roa Signing time: Fri 02 Jan 2026 08:19:28 +0000 ROA not before: Fri 02 Jan 2026 08:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204281 IP address blocks: 94.26.4.0/22 maxlen: 24 94.26.8.0/21 maxlen: 24 94.26.10.0/24 maxlen: 24 94.26.16.0/21 maxlen: 24 94.26.26.0/24 maxlen: 24 94.26.30.0/24 maxlen: 24 94.26.45.0/24 maxlen: 24 94.26.66.0/24 maxlen: 24 94.26.72.0/24 maxlen: 24 94.26.74.0/23 maxlen: 24 94.26.75.0/24 maxlen: 24 94.26.86.0/23 maxlen: 24 94.26.94.0/24 maxlen: 24 94.26.96.0/24 maxlen: 24 94.26.100.0/24 maxlen: 24 94.26.102.0/24 maxlen: 24 94.26.108.0/24 maxlen: 24 185.108.140.0/22 maxlen: 24 2a01:b760::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:4e:8c:5a:c5:31:d6:8e:2f:11:5a:6c:b5:b6:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac Validity Not Before: Jan 2 08:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=428c0dd0b0ff329c87f577a8ada442402db7c5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:17:93:10:5a:1e:58:24:c5:0f:7f:b6:f4:39: 81:bb:db:38:be:03:2b:b6:cb:eb:47:85:6c:38:33: 2a:0e:0b:67:57:74:5d:96:b4:5a:21:88:af:b2:0b: a7:5b:ca:88:8c:66:d8:f7:80:78:d6:44:68:da:4b: 40:09:47:70:01:31:c9:d7:3f:8d:ef:d6:2e:63:2d: 42:7f:1c:46:5e:5c:ac:12:80:a7:d0:d3:c9:fe:9e: 5a:64:53:a6:6b:32:b7:ab:f5:91:f7:ab:81:57:1d: 43:e2:f1:7c:b0:7f:c3:80:6a:fd:55:7b:80:f0:25: 02:0b:2e:63:e5:40:09:e7:a5:4d:21:26:41:ba:f4: 26:52:ce:0a:0d:7c:b0:08:c0:43:db:22:0b:4f:17: 8b:f2:60:15:24:cf:5a:a8:c4:ce:e6:44:ca:23:ea: b2:9e:8f:20:0a:56:e2:f6:b9:05:0c:0a:0f:99:2b: c6:f1:2c:0a:9a:15:b0:0f:ac:7d:92:a0:c8:79:17: 21:45:f0:9d:bc:22:44:3b:cb:a8:84:ef:51:ec:63: 34:45:46:df:dc:01:e5:dc:be:02:7e:ed:7f:dd:66: 15:d7:77:82:64:0e:67:ba:2a:1f:df:91:8c:7e:aa: 28:47:55:0a:1a:69:06:a5:03:16:f9:8a:d8:c2:ef: b0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8C:0D:D0:B0:FF:32:9C:87:F5:77:A8:AD:A4:42:40:2D:B7:C5:E8 X509v3 Authority Key Identifier: keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/QowN0LD_MpyH9XeoraRCQC23xeg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.26.4.0-94.26.23.255 94.26.26.0/24 94.26.30.0/24 94.26.45.0/24 94.26.66.0/24 94.26.72.0/24 94.26.74.0/23 94.26.86.0/23 94.26.94.0/24 94.26.96.0/24 94.26.100.0/24 94.26.102.0/24 94.26.108.0/24 185.108.140.0/22 IPv6: 2a01:b760::/32 Signature Algorithm: sha256WithRSAEncryption 4e:07:71:bb:c8:34:2e:5d:1a:f8:ff:e9:dc:b1:6e:9d:f6:87: 1f:d2:3d:51:4c:8c:8b:b8:5c:8b:dc:9b:5d:22:06:b3:94:f3: b3:b5:91:50:39:0f:cc:3b:92:80:d3:93:dd:f4:c7:4e:bc:33: eb:ad:4a:c5:94:58:65:e2:ab:67:20:2b:3a:78:1b:83:15:50: da:fa:2b:3e:56:0f:dc:d1:ae:5e:fd:d8:eb:d6:03:91:c3:e6: ad:c6:ff:c1:bc:49:f5:13:15:99:98:5c:d4:4d:4a:c2:ec:24: 2d:2b:b7:79:85:93:d2:95:9d:0d:b2:fd:16:78:a6:ea:4c:93: dc:04:a1:67:b5:3f:84:69:5c:5b:12:0d:cb:87:57:ad:8f:a3: 4d:92:fd:5c:6a:ac:a1:d2:a0:14:83:9d:a6:30:9d:75:cb:49: 63:cb:e7:01:0f:13:f4:e2:39:ed:1a:9d:4e:e6:c1:af:07:07: de:58:89:5b:3e:f3:61:52:6b:33:24:34:45:60:08:d0:f2:bc: 6d:99:f3:f9:9f:59:a6:f2:4a:ec:c6:8d:65:1e:01:18:11:5f: 86:2e:06:0b:5d:25:10:68:0c:0a:2e:f4:dd:f7:10:b1:ac:7d: f1:43:a1:97:fa:11:96:1b:0e:bc:0b:65:bb:13:69:17:78:c8: 1a:23:cb:de -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISAZt9yk6MWsUx1o4vEVpstbYdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYmJiNWVjMTI3YTA2MzJkMjI2YWYwN2ZhYzljNGQyODRi ZDFiYWMwHhcNMjYwMTAyMDgxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjhjMGRkMGIwZmYzMjljODdmNTc3YThhZGE0NDI0MDJkYjdjNWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1heTEFoeWCTFD3+29DmBu9s4vgMr tsvrR4VsODMqDgtnV3RdlrRaIYivsgunW8qIjGbY94B41kRo2ktACUdwATHJ1z+N 79YuYy1CfxxGXlysEoCn0NPJ/p5aZFOmazK3q/WR96uBVx1D4vF8sH/DgGr9VXuA 8CUCCy5j5UAJ56VNISZBuvQmUs4KDXywCMBD2yILTxeL8mAVJM9aqMTO5kTKI+qy no8gClbi9rkFDAoPmSvG8SwKmhWwD6x9kqDIeRchRfCdvCJEO8uohO9R7GM0RUbf 3AHl3L4Cfu1/3WYV13eCZA5nuiof35GMfqooR1UKGmkGpQMW+YrYwu+wVwIDAQAB o4ICbzCCAmswHQYDVR0OBBYEFEKMDdCw/zKch/V3qK2kQkAtt8XoMB8GA1UdIwQY MBaAFG+7tewSegYy0iavB/rJxNKEvRusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zNjRlMjctNTdmMC00NmE3LTkzOWEt NjU0OTA4Mzg0ZGQ4LzEvUW93TjBMRF9NcHlIOVhlb3JhUkNRQzIzeGVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zNjRlMjctNTdmMC00NmE3LTkzOWEtNjU0OTA4Mzg0ZGQ4 LzEvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwYgQCAAEwXDAMAwQCXhoE AwQDXhoQAwQAXhoaAwQAXhoeAwQAXhotAwQAXhpCAwQAXhpIAwQBXhpKAwQBXhpW AwQAXhpeAwQAXhpgAwQAXhpkAwQAXhpmAwQAXhpsAwQCuWyMMA0EAgACMAcDBQAq AbdgMA0GCSqGSIb3DQEBCwUAA4IBAQBOB3G7yDQuXRr4/+ncsW6d9ocf0j1RTIyL uFyL3JtdIgazlPOztZFQOQ/MO5KA05Pd9MdOvDPrrUrFlFhl4qtnICs6eBuDFVDa +is+Vg/c0a5e/djr1gORw+atxv/BvEn1ExWZmFzUTUrC7CQtK7d5hZPSlZ0Nsv0W eKbqTJPcBKFntT+EaVxbEg3Lh1etj6NNkv1caqyh0qAUg52mMJ11y0ljy+cBDxP0 4jntGp1O5sGvBwfeWIlbPvNhUmszJDRFYAjQ8rxtmfP5n1mm8krsxo1lHgEYEV+G LgYLXSUQaAwKLvTd9xCxrH3xQ6GX+hGWGw68C2W7E2kXeMgaI8ve -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:40 2026 by rpki-client