This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/quYwTy2Sx7ur2wpLvrH2k8ViBR0.roa File: quYwTy2Sx7ur2wpLvrH2k8ViBR0.roa (raw, json) Hash identifier: CanNYtzvyyEfG5PGl0aRHd7fPV6d8E0XKcJaLB/U+p8= Subject key identifier: AA:E6:30:4F:2D:92:C7:BB:AB:DB:0A:4B:BE:B1:F6:93:C5:62:05:1D Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019B7E3888B952AE91415DF9A8C351DDB9BE Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/quYwTy2Sx7ur2wpLvrH2k8ViBR0.roa Signing time: Fri 02 Jan 2026 10:19:52 +0000 ROA not before: Fri 02 Jan 2026 10:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56534 IP address blocks: 82.115.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:88:b9:52:ae:91:41:5d:f9:a8:c3:51:dd:b9:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Jan 2 10:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aae6304f2d92c7bbabdb0a4bbeb1f693c562051d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bf:7b:70:b5:da:49:0a:af:38:76:95:46:2e: 5c:56:d9:04:3b:75:ba:0d:17:25:49:a0:6e:af:66: 88:f5:d3:3f:5c:dc:7d:f9:c1:5d:97:8b:e6:9b:cd: 07:bc:22:c9:92:ec:5b:bf:c7:8f:57:33:01:0f:f6: 04:c6:88:0e:e3:99:a4:06:f6:df:ad:4a:90:1b:60: 0f:2a:3c:f0:cf:33:59:f0:ff:83:91:0e:69:8b:46: 4c:2a:dc:ac:b8:56:8d:55:7a:7a:c0:bf:50:2a:81: 80:44:b5:ff:73:7d:17:69:2d:f1:f7:52:48:c6:a1: b1:d4:5a:7a:44:cb:c5:23:b5:63:72:46:c7:af:1d: b6:75:55:7c:c5:64:87:0f:54:c9:4d:dd:01:1a:85: 6b:6f:ca:fc:ee:ea:a0:2f:1e:95:03:7d:e4:7d:9e: 36:87:75:c2:aa:66:72:48:9a:c4:39:87:c8:ce:9e: 30:13:5b:ad:43:51:d9:e5:a5:cd:c9:77:97:ad:74: 70:b2:a8:6e:96:c0:35:37:c0:c1:f8:b7:a3:7e:cc: 4e:f1:29:74:fb:82:08:f2:f4:5f:d3:07:8f:95:a1: 0c:a7:7a:cd:e5:06:28:6a:a4:24:1c:9f:ff:65:ec: 3d:92:2d:6c:39:47:28:a4:c6:2a:92:24:32:94:a7: d8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E6:30:4F:2D:92:C7:BB:AB:DB:0A:4B:BE:B1:F6:93:C5:62:05:1D X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/quYwTy2Sx7ur2wpLvrH2k8ViBR0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.115.55.0/24 Signature Algorithm: sha256WithRSAEncryption 07:5c:db:61:00:fd:c4:ec:5d:b5:ca:1d:f8:e9:5a:89:b7:36: b6:e3:11:da:73:57:a5:e8:e2:e6:f3:5b:67:da:db:53:e0:27: d0:03:23:ec:79:34:41:15:ff:5a:d1:2d:86:3b:03:a2:73:9d: b0:d9:e9:6b:27:9b:40:5c:31:92:26:50:0c:c9:5a:55:b3:e1: 1b:9d:a9:cd:37:10:93:5d:bc:6b:e4:61:87:c3:74:21:86:92: dd:12:5a:d6:48:d1:23:ed:de:6b:db:b3:f3:8e:39:f0:ac:40: 53:b5:eb:be:78:b3:f7:4f:96:ed:ea:eb:ed:3f:bf:eb:d7:5b: 74:96:0c:b3:79:d5:9e:d9:4c:52:8c:9a:f0:cd:29:9d:46:89: 86:3a:2d:d5:83:c9:d0:db:74:66:b8:8e:fc:ac:cf:55:58:7b: ba:bf:ed:e1:74:4b:ec:09:cf:5f:fe:23:45:c1:e4:14:c2:ac: 15:f6:c0:64:87:66:80:07:5c:4a:4b:b8:83:89:94:a5:6c:6a: 5c:a4:a9:67:c6:e2:21:fc:b6:be:32:7e:9a:6a:fd:44:ba:ad: 26:96:f2:6d:7e:63:bb:c6:f8:1c:1c:88:60:89:b5:a3:60:2c: 53:f8:92:9f:b2:08:fe:a3:be:e0:ed:5c:3f:8f:96:0e:b5:5c: a1:35:62:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OIi5Uq6RQV35qMNR3bm+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjYwMTAyMTAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWU2MzA0ZjJkOTJjN2JiYWJkYjBhNGJiZWIxZjY5M2M1NjIwNTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx797cLXaSQqvOHaVRi5cVtkEO3W6 DRclSaBur2aI9dM/XNx9+cFdl4vmm80HvCLJkuxbv8ePVzMBD/YExogO45mkBvbf rUqQG2APKjzwzzNZ8P+DkQ5pi0ZMKtysuFaNVXp6wL9QKoGARLX/c30XaS3x91JI xqGx1Fp6RMvFI7VjckbHrx22dVV8xWSHD1TJTd0BGoVrb8r87uqgLx6VA33kfZ42 h3XCqmZySJrEOYfIzp4wE1utQ1HZ5aXNyXeXrXRwsqhulsA1N8DB+LejfsxO8Sl0 +4II8vRf0wePlaEMp3rN5QYoaqQkHJ//Zew9ki1sOUcopMYqkiQylKfYXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKrmME8tkse7q9sKS76x9pPFYgUdMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvcXVZd1R5MlN4N3VyMndwTHZySDJrOFZpQlIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUnM3MA0G CSqGSIb3DQEBCwUAA4IBAQAHXNthAP3E7F21yh346VqJtza24xHac1el6OLm81tn 2ttT4CfQAyPseTRBFf9a0S2GOwOic52w2elrJ5tAXDGSJlAMyVpVs+EbnanNNxCT Xbxr5GGHw3QhhpLdElrWSNEj7d5r27PzjjnwrEBTteu+eLP3T5bt6uvtP7/r11t0 lgyzedWe2UxSjJrwzSmdRomGOi3Vg8nQ23RmuI78rM9VWHu6v+3hdEvsCc9f/iNF weQUwqwV9sBkh2aAB1xKS7iDiZSlbGpcpKlnxuIh/La+Mn6aav1Euq0mlvJtfmO7 xvgcHIhgibWjYCxT+JKfsgj+o77g7Vw/j5YOtVyhNWJn -----END CERTIFICATE-----Generated at Mon Jan 26 05:43:50 2026 by rpki-client