This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/qTWraqPBRkXUgfYW4gfB3AS-jm0.roa File: qTWraqPBRkXUgfYW4gfB3AS-jm0.roa (raw, json) Hash identifier: Rbt0ZTsq9hRwXO+cnDLn20WShDhAg5xFObZyVKiajFo= Subject key identifier: A9:35:AB:6A:A3:C1:46:45:D4:81:F6:16:E2:07:C1:DC:04:BE:8E:6D Certificate issuer: /CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0 Certificate serial: 019B7C7F9A3DC923CFBC164627B463C41771 Authority key identifier: D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/qTWraqPBRkXUgfYW4gfB3AS-jm0.roa Signing time: Fri 02 Jan 2026 02:18:15 +0000 ROA not before: Fri 02 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44812 IP address blocks: 5.252.192.0/24 maxlen: 24 5.252.193.0/24 maxlen: 24 5.252.194.0/24 maxlen: 24 5.252.195.0/24 maxlen: 24 185.158.112.0/23 maxlen: 23 185.158.114.0/24 maxlen: 24 185.158.115.0/24 maxlen: 24 185.248.100.0/24 maxlen: 24 185.248.101.0/24 maxlen: 24 185.248.102.0/24 maxlen: 24 185.248.103.0/24 maxlen: 24 193.19.118.0/23 maxlen: 23 195.62.52.0/23 maxlen: 23 2a07:ac80::/29 maxlen: 29 2a09:4d40::/32 maxlen: 32 2a09:4d42::/32 maxlen: 32 2a09:4d43::/32 maxlen: 32 2a09:4d47::/32 maxlen: 32 2a0d:e280::/32 maxlen: 32 2a0d:e283::/32 maxlen: 32 2a0d:e286::/32 maxlen: 32 2a0d:e287::/32 maxlen: 32 2a12:2206::/32 maxlen: 32 2a12:2207::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:9a:3d:c9:23:cf:bc:16:46:27:b4:63:c4:17:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0 Validity Not Before: Jan 2 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a935ab6aa3c14645d481f616e207c1dc04be8e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:af:78:7d:aa:bc:3e:b1:03:07:90:84:e3:66: 51:13:5f:5b:a6:a5:97:76:8a:89:e9:25:47:a5:37: e5:ef:f2:03:05:e6:bd:8a:f8:3f:2f:1f:73:3d:1b: 5b:f8:4c:79:f9:f3:d6:42:87:73:0a:c7:21:81:f9: 9f:cc:e4:7c:ea:2d:60:1a:ff:6a:38:c0:da:31:9a: fd:81:82:0a:17:d6:0f:9e:0f:65:85:19:46:7e:cb: f2:0b:fa:da:63:16:ac:10:5d:86:d9:75:f3:f9:5d: 47:af:16:d1:5f:ae:47:77:55:7a:b9:fc:c8:23:4b: 37:b6:94:f7:ac:7a:16:29:c4:b4:a3:1c:9d:82:58: bd:05:30:6d:e5:30:1e:3b:7d:f7:a8:59:4e:57:53: 01:58:cd:33:2d:4f:00:67:70:26:c0:05:98:7a:27: 5e:e4:6e:8f:74:01:e5:e4:b1:56:77:a7:0d:79:a2: dd:37:60:29:39:57:82:a8:14:d4:5f:03:68:d0:ca: 46:4b:ae:f1:e7:b3:97:95:63:69:fb:26:1b:0d:b8: cd:50:34:44:27:8e:33:79:d3:76:88:af:c4:9f:4b: 6d:40:b0:2b:c2:79:76:3c:0f:35:03:45:5a:36:de: 77:97:c4:40:8e:9b:dc:59:d9:e2:dc:f8:ef:55:9d: 08:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:35:AB:6A:A3:C1:46:45:D4:81:F6:16:E2:07:C1:DC:04:BE:8E:6D X509v3 Authority Key Identifier: keyid:D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/qTWraqPBRkXUgfYW4gfB3AS-jm0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.192.0/22 185.158.112.0/22 185.248.100.0/22 193.19.118.0/23 195.62.52.0/23 IPv6: 2a07:ac80::/29 2a09:4d40::/32 2a09:4d42::/31 2a09:4d47::/32 2a0d:e280::/32 2a0d:e283::/32 2a0d:e286::/31 2a12:2206::/31 Signature Algorithm: sha256WithRSAEncryption 4b:51:62:a3:6c:54:12:67:78:86:38:da:30:f4:6e:b9:41:35: 49:7a:ea:4b:33:70:00:b1:9f:af:67:95:4c:28:3d:29:79:99: bb:d5:9c:6b:52:9b:ce:fc:1c:3b:2d:08:55:05:4e:26:33:4d: 0d:b7:d5:f3:cd:1d:f1:98:26:05:b6:f8:e9:01:2f:6c:8a:c2: b5:96:89:72:28:86:ba:2a:e9:0a:64:3c:50:4e:d1:7a:43:f6: 64:c0:44:0b:e5:92:f9:32:88:ec:cb:4b:46:25:7c:30:80:d4: 88:1b:3a:8b:5c:47:d0:46:06:37:c4:f2:92:95:3f:aa:3f:db: 88:04:1d:c7:d7:7d:62:6c:28:11:a9:4e:de:b7:e6:98:ad:06: 94:81:38:9c:72:f6:35:72:4a:e8:a9:da:7f:fe:6b:eb:40:67: 84:a1:35:7f:2b:bd:4d:47:ca:b7:dd:af:73:e0:6b:69:15:81: c6:a5:15:84:b3:f4:13:82:9c:6f:32:00:6f:1a:be:0a:13:34: 8c:e8:b0:43:1a:fc:dc:e1:91:c8:2c:d6:6d:d5:60:9d:3f:ea: 2c:35:97:ba:9a:94:24:2d:27:d8:d4:a2:c1:c1:53:ae:2a:ee: a5:e4:ae:a0:c7:93:54:27:48:03:0f:04:66:ad:16:1a:57:be: 6b:c6:e4:86 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgISAZt8f5o9ySPPvBZGJ7RjxBdxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZWRhN2RmMDVmNmRiYTA5ZTM5ZTdkNGJkZWM3YmFlMGVm ZmJhYjAwHhcNMjYwMTAyMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTM1YWI2YWEzYzE0NjQ1ZDQ4MWY2MTZlMjA3YzFkYzA0YmU4ZTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq94faq8PrEDB5CE42ZRE19bpqWX doqJ6SVHpTfl7/IDBea9ivg/Lx9zPRtb+Ex5+fPWQodzCschgfmfzOR86i1gGv9q OMDaMZr9gYIKF9YPng9lhRlGfsvyC/raYxasEF2G2XXz+V1HrxbRX65Hd1V6ufzI I0s3tpT3rHoWKcS0oxydgli9BTBt5TAeO333qFlOV1MBWM0zLU8AZ3AmwAWYeide 5G6PdAHl5LFWd6cNeaLdN2ApOVeCqBTUXwNo0MpGS67x57OXlWNp+yYbDbjNUDRE J44zedN2iK/En0ttQLArwnl2PA81A0VaNt53l8RAjpvcWdni3PjvVZ0IHQIDAQAB o4ICYTCCAl0wHQYDVR0OBBYEFKk1q2qjwUZF1IH2FuIHwdwEvo5tMB8GA1UdIwQY MBaAFNPtp98F9tugnjnn1L3se64O/7qwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC0ybjN3WDIyNkNlT2VmVXZleDdyZzdfdXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kYzY0ZjQtY2ZiYS00ZWZkLWI0ZWQt Njc2YmVkYjE3NDczLzEvcVRXcmFxUEJSa1hVZ2ZZVzRnZkIzQVMtam0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kYzY0ZjQtY2ZiYS00ZWZkLWI0ZWQtNjc2YmVkYjE3NDcz LzEvMC0ybjN3WDIyNkNlT2VmVXZleDdyZzdfdXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjAkBAIAATAeAwQCBfzAAwQC uZ5wAwQCufhkAwQBwRN2AwQBwz40MD4EAgACMDgDBQMqB6yAAwUAKglNQAMFASoJ TUIDBQAqCU1HAwUAKg3igAMFACoN4oMDBQEqDeKGAwUBKhIiBjANBgkqhkiG9w0B AQsFAAOCAQEAS1Fio2xUEmd4hjjaMPRuuUE1SXrqSzNwALGfr2eVTCg9KXmZu9Wc a1KbzvwcOy0IVQVOJjNNDbfV880d8ZgmBbb46QEvbIrCtZaJciiGuirpCmQ8UE7R ekP2ZMBEC+WS+TKI7MtLRiV8MIDUiBs6i1xH0EYGN8TykpU/qj/biAQdx9d9Ymwo EalO3rfmmK0GlIE4nHL2NXJK6Knaf/5r60BnhKE1fyu9TUfKt92vc+BraRWBxqUV hLP0E4KcbzIAbxq+ChM0jOiwQxr83OGRyCzWbdVgnT/qLDWXupqUJC0n2NSiwcFT rirupeSuoMeTVCdIAw8EZq0WGle+a8bkhg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:07 2026 by rpki-client