This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/q_u69U7c2vxaq4Nl1v5Yc1MyuWg.roa File: q_u69U7c2vxaq4Nl1v5Yc1MyuWg.roa (raw, json) Hash identifier: 5dnA+LcITpNkdUu4xKxisyKSU227fPcdS2OGxJGeL28= Subject key identifier: AB:FB:BA:F5:4E:DC:DA:FC:5A:AB:83:65:D6:FE:58:73:53:32:B9:68 Certificate issuer: /CN=e91f272b13c750143c7ec87e0c802aead8ac6e07 Certificate serial: 019B7A5AE6FCC32793698D01945DB6826C79 Authority key identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/q_u69U7c2vxaq4Nl1v5Yc1MyuWg.roa Signing time: Thu 01 Jan 2026 16:18:56 +0000 ROA not before: Thu 01 Jan 2026 16:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206945 IP address blocks: 185.171.8.0/22 maxlen: 24 185.203.164.0/22 maxlen: 24 185.215.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e6:fc:c3:27:93:69:8d:01:94:5d:b6:82:6c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e91f272b13c750143c7ec87e0c802aead8ac6e07 Validity Not Before: Jan 1 16:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abfbbaf54edcdafc5aab8365d6fe58735332b968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ce:d3:22:d6:8b:ed:56:6c:6c:e3:1b:86:60: 6e:66:34:b9:5b:8e:46:bb:e8:5d:f5:d0:0a:3a:52: 78:82:82:c1:30:2a:4d:f4:49:9a:d6:57:e1:9a:a6: 8d:82:c8:2f:db:6b:9e:20:7b:df:01:bc:9a:39:74: bf:16:40:b9:0e:73:79:f3:c7:9f:c9:74:a1:a2:ce: aa:d5:2c:4e:25:95:44:dc:ec:f4:e9:07:3f:32:07: f5:c4:aa:89:6b:57:ed:ad:03:dc:c5:a0:6f:4c:c6: 7c:9f:31:98:11:8a:91:c0:e5:0e:e0:cc:3b:7f:2e: 72:9d:a9:26:03:73:2c:8b:df:e2:62:15:e4:43:9b: e2:d2:3d:af:a7:43:d0:61:a7:ad:3f:99:ef:41:1f: 9e:b8:04:12:4e:73:40:0c:ed:bf:dc:8f:f3:0e:28: 3d:a2:5b:6f:4b:4e:e3:1a:65:b1:c3:62:50:f1:3d: 2e:b2:f9:3e:5b:e9:4f:bd:32:9a:7b:8c:b2:c3:8e: 05:24:64:1c:c6:70:82:e2:4a:b4:78:a1:3e:5a:27: 7f:55:3b:57:cb:07:21:4f:b9:e9:81:b8:02:b8:40: dd:2c:38:88:8e:1f:c6:1d:d5:75:4a:16:c1:d5:84: ec:86:f5:2b:73:86:ae:e2:af:17:e6:71:b2:46:cb: 04:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FB:BA:F5:4E:DC:DA:FC:5A:AB:83:65:D6:FE:58:73:53:32:B9:68 X509v3 Authority Key Identifier: keyid:E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/q_u69U7c2vxaq4Nl1v5Yc1MyuWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.171.8.0/22 185.203.164.0/22 185.215.104.0/22 Signature Algorithm: sha256WithRSAEncryption ce:6e:34:f1:4c:23:4e:6c:fa:89:c3:aa:56:41:64:f3:ce:ac: 04:03:c5:92:3c:ad:64:6a:ce:f5:21:50:1c:3f:5e:de:88:fc: b4:82:25:5e:85:78:47:a0:16:7e:a4:91:bf:16:f8:5a:cb:a6: 47:cb:af:e7:c7:87:84:72:8e:c9:90:22:dd:4b:68:c5:ff:bb: 99:47:d5:d5:7c:1d:fe:cf:9e:fd:ae:f9:5e:b6:ae:d3:bd:7d: de:f0:e8:68:fd:5f:7a:96:18:ef:33:ce:5b:a9:43:b6:0d:72: 14:48:98:46:36:2c:cd:29:3d:76:5c:33:5e:84:2b:5f:07:6c: f5:d1:cf:7e:08:51:b1:32:f4:74:54:40:9a:26:60:a3:2f:43: b4:fe:e0:35:9f:0e:f0:df:a2:47:c4:d5:e1:a0:dd:2b:b4:76: 33:0a:ad:12:e7:65:f3:5f:1c:86:2d:df:ba:8a:d0:34:de:09: 70:29:be:13:ac:9e:b9:cd:ed:40:88:84:0e:d4:38:bf:31:45: 78:cd:ee:e2:d8:26:27:fc:9d:c5:88:00:c3:25:c7:b7:2e:db: 75:64:61:ad:44:f5:98:90:c3:33:0e:af:f4:1f:71:a4:6d:cd: db:79:0b:d6:60:08:f2:98:24:d5:1c:ea:a8:21:74:78:77:eb: 04:6f:82:84 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6Wub8wyeTaY0BlF22gmx5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MWYyNzJiMTNjNzUwMTQzYzdlYzg3ZTBjODAyYWVhZDhh YzZlMDcwHhcNMjYwMTAxMTYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmZiYmFmNTRlZGNkYWZjNWFhYjgzNjVkNmZlNTg3MzUzMzJiOTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy87TItaL7VZsbOMbhmBuZjS5W45G u+hd9dAKOlJ4goLBMCpN9Ema1lfhmqaNgsgv22ueIHvfAbyaOXS/FkC5DnN588ef yXShos6q1SxOJZVE3Oz06Qc/Mgf1xKqJa1ftrQPcxaBvTMZ8nzGYEYqRwOUO4Mw7 fy5ynakmA3Msi9/iYhXkQ5vi0j2vp0PQYaetP5nvQR+euAQSTnNADO2/3I/zDig9 oltvS07jGmWxw2JQ8T0usvk+W+lPvTKae4yyw44FJGQcxnCC4kq0eKE+Wid/VTtX ywchT7npgbgCuEDdLDiIjh/GHdV1ShbB1YTshvUrc4au4q8X5nGyRssEtQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKv7uvVO3Nr8WquDZdb+WHNTMrloMB8GA1UdIwQY MBaAFOkfJysTx1AUPH7IfgyAKurYrG4HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNjJkMjItODJmMi00YjIwLWJhYzQt NjAxYTcyNWEwMGY1LzEvcV91NjlVN2MydnhhcTRObDF2NVljMU15dVdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9kNjJkMjItODJmMi00YjIwLWJhYzQtNjAxYTcyNWEwMGY1 LzEvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuasIAwQC ucukAwQCuddoMA0GCSqGSIb3DQEBCwUAA4IBAQDObjTxTCNObPqJw6pWQWTzzqwE A8WSPK1kas71IVAcP17eiPy0giVehXhHoBZ+pJG/Fvhay6ZHy6/nx4eEco7JkCLd S2jF/7uZR9XVfB3+z579rvletq7TvX3e8Oho/V96lhjvM85bqUO2DXIUSJhGNizN KT12XDNehCtfB2z10c9+CFGxMvR0VECaJmCjL0O0/uA1nw7w36JHxNXhoN0rtHYz Cq0S52XzXxyGLd+6itA03glwKb4TrJ65ze1AiIQO1Di/MUV4ze7i2CYn/J3FiADD Jce3Ltt1ZGGtRPWYkMMzDq/0H3Gkbc3beQvWYAjymCTVHOqoIXR4d+sEb4KE -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:21 2026 by rpki-client