This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/q2Sr6iNLEgQhXIhOj17x_U41yCw.roa File: q2Sr6iNLEgQhXIhOj17x_U41yCw.roa (raw, json) Hash identifier: v7+FGob3+laO9WE5TRGdJZbvI5tauk2y9nqQMlT/eeI= Subject key identifier: AB:64:AB:EA:23:4B:12:04:21:5C:88:4E:8F:5E:F1:FD:4E:35:C8:2C Certificate issuer: /CN=d748ada8a7474f5ad990c981ff6b27ce3de14713 Certificate serial: 019B7D5B65072FC9F01B0E78875D39371CC9 Authority key identifier: D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/q2Sr6iNLEgQhXIhOj17x_U41yCw.roa Signing time: Fri 02 Jan 2026 06:18:20 +0000 ROA not before: Fri 02 Jan 2026 06:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57795 IP address blocks: 95.129.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:65:07:2f:c9:f0:1b:0e:78:87:5d:39:37:1c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d748ada8a7474f5ad990c981ff6b27ce3de14713 Validity Not Before: Jan 2 06:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab64abea234b1204215c884e8f5ef1fd4e35c82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:eb:60:ee:49:2b:a6:af:cd:86:8c:e3:1a:18: 89:50:ef:6c:4f:41:93:79:9f:f9:eb:4d:c8:3f:92: 11:91:85:95:4a:05:1e:a6:e2:d5:cf:57:37:0a:63: 57:e1:af:a0:3a:54:0b:0a:69:3d:62:c8:5b:e5:63: 0a:f2:60:7d:8c:32:ee:ba:4b:42:12:ee:19:9c:c2: 48:93:eb:77:ec:61:5d:1e:6f:f5:a6:ad:b4:c1:fe: 7d:9b:40:f6:5e:a5:ca:3e:eb:7d:3c:07:99:8e:c9: fa:d6:b3:ed:60:7f:98:c9:ac:ea:cd:5a:ae:12:95: e1:cb:49:3f:cb:54:d4:c2:44:e6:d7:fb:31:0a:1b: 9a:75:81:c2:ba:d7:8f:88:ac:4f:03:a7:8f:ac:c9: f8:a4:b5:76:71:7e:fe:3d:82:bb:31:88:12:8f:7d: 76:c4:a8:45:37:8e:f9:ef:8a:93:e3:9a:47:9e:2e: 01:d3:38:82:eb:8d:31:4a:4a:58:a9:97:ee:b6:6f: 37:c5:5e:98:3b:67:96:f6:94:c5:cd:92:5d:7c:76: d3:96:2d:dd:4f:b4:56:51:07:b4:c3:06:dd:a4:88: a0:c3:74:d5:9e:d8:69:37:43:9d:0a:ae:12:a9:4b: ee:2b:40:24:3b:9a:14:02:5a:99:de:b9:e8:06:14: a6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:64:AB:EA:23:4B:12:04:21:5C:88:4E:8F:5E:F1:FD:4E:35:C8:2C X509v3 Authority Key Identifier: keyid:D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/q2Sr6iNLEgQhXIhOj17x_U41yCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.129.26.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:1a:0c:f1:15:e9:c2:14:77:f3:2f:3a:cd:64:e3:29:09:62: d4:5e:db:4a:3b:f2:38:2e:f2:fe:93:1a:fb:30:d2:a5:fa:23: d6:b6:c1:5c:24:51:dd:97:88:73:81:ab:f1:1b:31:0b:11:cf: 36:96:2c:84:96:1f:66:ac:3e:3c:ba:07:67:a3:eb:77:c6:f8: bf:ca:33:25:41:2c:49:d2:54:5c:6a:e3:53:11:3a:1e:c3:f1: 69:df:3c:73:81:50:a1:46:21:29:28:bd:54:aa:bc:95:fd:e1: 4f:24:b3:96:65:0c:61:a6:6f:45:e7:fb:7a:04:f3:2b:52:93: 9a:d3:8c:b2:8e:5f:e2:29:8d:d9:fb:14:30:0d:4b:0a:98:18: 96:06:c8:d5:69:2c:a3:8b:2d:c1:ab:26:4e:d5:1e:f6:29:88: 3d:e3:77:e1:d4:24:4c:b0:7e:b9:c2:23:c5:a0:be:2b:da:ec: 46:8d:cd:c7:c4:bf:7f:a4:fa:63:94:7a:c3:b0:8b:5d:32:09: bc:6a:6c:04:5b:3f:2b:72:2f:61:43:bf:b0:fa:d0:1d:8b:1a: 44:b1:78:94:cd:d8:42:7a:05:fe:4b:35:14:a8:83:ec:5f:50: fa:35:7d:0b:ca:b6:cb:f5:97:8d:27:39:41:35:b4:27:54:5c: 49:dd:a6:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W2UHL8nwGw54h105NxzJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDhhZGE4YTc0NzRmNWFkOTkwYzk4MWZmNmIyN2NlM2Rl MTQ3MTMwHhcNMjYwMTAyMDYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjY0YWJlYTIzNGIxMjA0MjE1Yzg4NGU4ZjVlZjFmZDRlMzVjODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+tg7kkrpq/NhozjGhiJUO9sT0GT eZ/5603IP5IRkYWVSgUepuLVz1c3CmNX4a+gOlQLCmk9Yshb5WMK8mB9jDLuuktC Eu4ZnMJIk+t37GFdHm/1pq20wf59m0D2XqXKPut9PAeZjsn61rPtYH+YyazqzVqu EpXhy0k/y1TUwkTm1/sxChuadYHCutePiKxPA6ePrMn4pLV2cX7+PYK7MYgSj312 xKhFN47574qT45pHni4B0ziC640xSkpYqZfutm83xV6YO2eW9pTFzZJdfHbTli3d T7RWUQe0wwbdpIigw3TVnthpN0OdCq4SqUvuK0AkO5oUAlqZ3rnoBhSm5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKtkq+ojSxIEIVyITo9e8f1ONcgsMB8GA1UdIwQY MBaAFNdIrainR09a2ZDJgf9rJ8494UcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBpdHFLZEhUMXJaa01tQl8yc256ajNoUnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84ZmMyNjEtYmZmOC00NDkwLThiNjkt MDA5NzM5ZjdlNTVjLzEvcTJTcjZpTkxFZ1FoWEloT2oxN3hfVTQxeUN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi84ZmMyNjEtYmZmOC00NDkwLThiNjktMDA5NzM5ZjdlNTVj LzEvMTBpdHFLZEhUMXJaa01tQl8yc256ajNoUnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX4EaMA0G CSqGSIb3DQEBCwUAA4IBAQCNGgzxFenCFHfzLzrNZOMpCWLUXttKO/I4LvL+kxr7 MNKl+iPWtsFcJFHdl4hzgavxGzELEc82liyElh9mrD48ugdno+t3xvi/yjMlQSxJ 0lRcauNTEToew/Fp3zxzgVChRiEpKL1UqryV/eFPJLOWZQxhpm9F5/t6BPMrUpOa 04yyjl/iKY3Z+xQwDUsKmBiWBsjVaSyjiy3BqyZO1R72KYg943fh1CRMsH65wiPF oL4r2uxGjc3HxL9/pPpjlHrDsItdMgm8amwEWz8rci9hQ7+w+tAdixpEsXiUzdhC egX+SzUUqIPsX1D6NX0LyrbL9ZeNJzlBNbQnVFxJ3aaz -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:16 2026 by rpki-client