This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/9Q-wIj12he9wXDbL67TYYvZ_2cI.roa File: 9Q-wIj12he9wXDbL67TYYvZ_2cI.roa (raw, json) Hash identifier: TjJ3yUQRLm+yE/F996Jy9BjBIBFcfqDfS+QMH9VjHSM= Subject key identifier: F5:0F:B0:22:3D:76:85:EF:70:5C:36:CB:EB:B4:D8:62:F6:7F:D9:C2 Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e Certificate serial: 019B7C122B9757B4547F3A7744E95A379588 Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/9Q-wIj12he9wXDbL67TYYvZ_2cI.roa Signing time: Fri 02 Jan 2026 00:18:44 +0000 ROA not before: Fri 02 Jan 2026 00:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56899 IP address blocks: 185.126.252.0/24 maxlen: 24 194.4.68.0/24 maxlen: 24 194.4.69.0/24 maxlen: 24 194.4.70.0/23 maxlen: 23 194.4.70.0/24 maxlen: 24 212.79.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:2b:97:57:b4:54:7f:3a:77:44:e9:5a:37:95:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e Validity Not Before: Jan 2 00:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f50fb0223d7685ef705c36cbebb4d862f67fd9c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:90:aa:28:11:2a:91:e4:f0:86:0f:56:69:91: db:e6:bb:ca:2a:7c:05:a7:ee:fa:86:3e:85:e4:bc: 5a:76:da:5a:18:b7:ab:07:e0:30:31:f8:f8:26:a4: 90:a1:65:2f:77:f6:bd:69:bc:17:43:08:eb:09:05: 0b:6d:9e:d3:17:8a:ee:64:aa:a5:90:89:35:31:c7: 6a:a8:3a:16:f9:51:33:d1:ea:cb:7d:cf:b3:9f:d8: 18:1b:57:47:98:9b:82:bc:2f:d2:f2:d3:a1:0c:98: 44:e6:97:40:77:34:f1:25:91:47:c9:3e:a6:74:81: 49:f1:37:d7:b3:09:48:c9:44:3d:ec:40:fe:88:72: 4e:ac:5c:d4:9a:1a:4a:42:f8:68:60:4f:25:bb:2c: 3c:0e:bd:96:87:bf:70:ab:cb:c7:a6:31:7d:cc:db: 5c:21:fc:41:ff:ad:9a:33:23:6a:e2:5d:05:62:0e: e6:0a:19:1d:cf:2c:19:66:9a:b0:1e:f5:e3:d4:f5: 4c:8a:0f:4b:5d:ca:ea:ff:ab:65:a4:b4:07:9a:7b: 7f:31:c7:37:5e:6a:8b:01:74:69:ec:3b:b7:06:4b: 5c:c1:ae:76:a0:48:fe:e3:ef:a4:61:98:06:fc:f6: fd:55:64:5b:19:50:8f:ee:69:6e:08:f9:de:d1:4c: 39:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0F:B0:22:3D:76:85:EF:70:5C:36:CB:EB:B4:D8:62:F6:7F:D9:C2 X509v3 Authority Key Identifier: keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/9Q-wIj12he9wXDbL67TYYvZ_2cI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.126.252.0/24 194.4.68.0/22 212.79.112.0/22 Signature Algorithm: sha256WithRSAEncryption bd:ee:d2:6b:9e:4d:45:eb:1d:43:ad:bc:15:c4:1b:1e:d1:18: e6:4c:0e:6f:19:03:d9:c5:f8:2a:7d:cf:f2:9c:69:9e:12:76: 29:6c:09:0c:ff:1b:3e:15:e1:1a:f8:ec:f1:29:47:c5:e1:44: 71:2c:e8:ca:ca:c3:12:a2:0c:6a:24:9e:71:5b:50:6a:65:f1: 58:0b:34:03:78:26:17:f1:97:c6:65:ba:85:77:ad:25:84:ad: 76:4a:ec:7d:d4:85:43:06:67:56:aa:d9:59:75:7b:e3:a2:e1: 64:3a:18:71:b5:93:b0:09:f6:c6:c9:5b:b1:4d:fa:62:66:0a: 00:42:cb:00:34:59:ed:b5:39:5a:8c:00:14:13:ab:f7:e1:f8: a5:24:fa:d1:53:ea:25:58:ad:7e:72:9a:d8:58:42:de:b7:18: 87:d7:dc:84:71:fc:b0:be:29:a6:24:97:f1:87:d2:83:01:20: 31:ea:e3:d8:23:19:fe:de:34:c2:d4:0f:e0:7f:79:e1:0d:f6: fa:9b:59:7a:4a:e4:6b:70:47:97:43:e0:6e:23:31:22:ea:35: 3e:4d:5c:e4:a1:90:e1:be:86:ec:53:cf:0c:00:42:8d:11:d5: e0:00:33:2e:ad:e5:fc:5c:ee:f8:27:7b:8a:83:9b:26:77:7c: 13:a9:36:be -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EiuXV7RUfzp3ROlaN5WIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjViYWUyNTc3OGJlZWQ4ODgwYzA4ZGYyZDNmMzdmYzM3 YWJjMWUwHhcNMjYwMTAyMDAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTBmYjAyMjNkNzY4NWVmNzA1YzM2Y2JlYmI0ZDg2MmY2N2ZkOWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15CqKBEqkeTwhg9WaZHb5rvKKnwF p+76hj6F5LxadtpaGLerB+AwMfj4JqSQoWUvd/a9abwXQwjrCQULbZ7TF4ruZKql kIk1McdqqDoW+VEz0erLfc+zn9gYG1dHmJuCvC/S8tOhDJhE5pdAdzTxJZFHyT6m dIFJ8TfXswlIyUQ97ED+iHJOrFzUmhpKQvhoYE8luyw8Dr2Wh79wq8vHpjF9zNtc IfxB/62aMyNq4l0FYg7mChkdzywZZpqwHvXj1PVMig9LXcrq/6tlpLQHmnt/Mcc3 XmqLAXRp7Du3Bktcwa52oEj+4++kYZgG/Pb9VWRbGVCP7mluCPne0Uw59QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPUPsCI9doXvcFw2y+u02GL2f9nCMB8GA1UdIwQY MBaAFKhluuJXeL7tiIDAjfLT83/DerweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTkt MWI2Zjc1MGNmOWEyLzEvOVEtd0lqMTJoZTl3WERiTDY3VFlZdlpfMmNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTktMWI2Zjc1MGNmOWEy LzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuX78AwQC wgREAwQC1E9wMA0GCSqGSIb3DQEBCwUAA4IBAQC97tJrnk1F6x1DrbwVxBse0Rjm TA5vGQPZxfgqfc/ynGmeEnYpbAkM/xs+FeEa+OzxKUfF4URxLOjKysMSogxqJJ5x W1BqZfFYCzQDeCYX8ZfGZbqFd60lhK12Sux91IVDBmdWqtlZdXvjouFkOhhxtZOw CfbGyVuxTfpiZgoAQssANFnttTlajAAUE6v34filJPrRU+olWK1+cprYWELetxiH 19yEcfywvimmJJfxh9KDASAx6uPYIxn+3jTC1A/gf3nhDfb6m1l6SuRrcEeXQ+Bu IzEi6jU+TVzkoZDhvobsU88MAEKNEdXgADMureX8XO74J3uKg5smd3wTqTa+ -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:10 2026 by rpki-client