This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/1-Qt-mvUucZQjwB8U285sYZrYHhY.roa File: 1-Qt-mvUucZQjwB8U285sYZrYHhY.roa (raw, json) Hash identifier: oTz2PzT1afjZiR5FRSLxm1w+VehAPUH7fAGIbljalfQ= Subject key identifier: F9:0B:7E:9A:F5:2E:71:94:23:C0:1F:14:DB:CE:6C:61:9A:D8:1E:16 Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba Certificate serial: 019B7EA66A96DEF0EAB49E7B35C2C866A58F Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/1-Qt-mvUucZQjwB8U285sYZrYHhY.roa Signing time: Fri 02 Jan 2026 12:19:53 +0000 ROA not before: Fri 02 Jan 2026 12:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206198 IP address blocks: 84.245.88.0/23 maxlen: 23 85.248.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:6a:96:de:f0:ea:b4:9e:7b:35:c2:c8:66:a5:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba Validity Not Before: Jan 2 12:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f90b7e9af52e719423c01f14dbce6c619ad81e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c2:8c:6d:ba:1b:df:98:2a:14:8a:67:a9:ed: 2e:df:cc:04:b2:1b:df:b7:5c:20:7b:a5:0d:5f:72: f9:5f:71:dc:3f:2c:aa:00:03:4f:19:2b:21:f3:aa: 21:6a:1c:ed:c0:28:5d:54:76:64:ee:6b:63:95:a3: 65:d3:a5:86:09:d4:3f:a3:98:00:59:01:6e:1d:65: 0d:ca:e3:0a:de:6e:65:f2:8c:74:6c:10:f2:35:5a: b1:45:fa:67:10:78:6c:c4:1a:a8:f7:28:8e:14:e0: 8d:eb:33:ac:4f:23:a1:05:8c:51:5e:ff:af:ff:15: 09:e8:98:6f:a8:29:b0:ee:9b:af:2c:73:dd:09:b9: 95:68:65:a4:1e:10:d4:d1:6e:8e:73:81:e9:d9:5a: 2d:a4:d1:c0:7c:93:97:04:6e:d1:ea:05:f1:91:8e: ea:ac:4e:7b:53:08:ed:7d:11:82:38:26:d2:d0:b2: 16:53:a3:b6:1f:5e:66:1d:67:a6:ec:ff:40:b2:a3: 63:7a:31:cf:f4:38:bb:69:b9:dd:83:0b:8c:f0:c9: 63:1d:3e:ca:45:5e:5b:b6:57:d9:90:0f:32:56:15: 48:f5:dc:1e:66:11:e8:e7:6e:a6:f0:51:63:1e:89: 83:54:d2:25:ce:25:c6:02:c7:80:20:4b:ce:26:07: 3c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0B:7E:9A:F5:2E:71:94:23:C0:1F:14:DB:CE:6C:61:9A:D8:1E:16 X509v3 Authority Key Identifier: keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/1-Qt-mvUucZQjwB8U285sYZrYHhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.245.88.0/23 85.248.24.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:20:ed:ca:8e:2e:80:c5:00:88:b1:8d:4f:e8:ea:6a:a4:e3: 71:77:36:94:3f:58:21:ae:27:ab:d3:a6:b6:a8:f1:35:3d:f6: 9b:68:17:cb:85:99:1b:7b:18:3a:9d:3e:1c:43:48:fe:0a:46: 0d:3d:2e:19:50:f9:73:6d:e7:b2:65:5a:ed:1e:18:68:bf:fa: 2c:cf:d2:d3:76:dd:d0:9b:c7:11:af:c7:3f:96:84:7f:6e:17: a7:6c:45:fc:fe:ae:04:6b:ba:e5:0b:38:e5:f6:7e:c4:a0:8f: 4e:da:ad:e5:91:e9:c2:50:8b:56:69:d9:52:55:a4:b5:09:bb: 87:9b:f8:a3:2b:12:ae:ae:72:e7:ed:da:c2:70:e1:5f:79:d9: a4:ac:a4:f5:e9:33:48:3e:cd:35:4b:36:be:ae:b4:00:33:cb: ac:b2:2c:64:b9:88:3c:e0:4a:fc:75:7e:91:d1:ec:99:24:5b: b2:04:af:40:d3:2f:97:b7:ea:77:d3:ad:b2:d7:4e:be:0d:b2: 1d:f5:ca:78:5c:3f:74:9a:aa:c8:da:ac:de:04:9e:a8:70:05: f6:cf:a8:f4:99:b0:6c:27:8d:6a:f4:d4:8d:cb:c5:1b:c9:2c: f0:05:04:a3:12:ec:05:54:6a:13:24:94:db:ed:38:fa:f9:fe: 8c:4b:4b:00 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt+pmqW3vDqtJ57NcLIZqWPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm MDVkYmEwHhcNMjYwMTAyMTIxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTBiN2U5YWY1MmU3MTk0MjNjMDFmMTRkYmNlNmM2MTlhZDgxZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMKMbbob35gqFIpnqe0u38wEshvf t1wge6UNX3L5X3HcPyyqAANPGSsh86ohahztwChdVHZk7mtjlaNl06WGCdQ/o5gA WQFuHWUNyuMK3m5l8ox0bBDyNVqxRfpnEHhsxBqo9yiOFOCN6zOsTyOhBYxRXv+v /xUJ6JhvqCmw7puvLHPdCbmVaGWkHhDU0W6Oc4Hp2VotpNHAfJOXBG7R6gXxkY7q rE57UwjtfRGCOCbS0LIWU6O2H15mHWem7P9AsqNjejHP9Di7abndgwuM8MljHT7K RV5btlfZkA8yVhVI9dweZhHo526m8FFjHomDVNIlziXGAseAIEvOJgc8MQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPkLfpr1LnGUI8AfFNvObGGa2B4WMB8GA1UdIwQY MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt ZTJmYmMzYTY4ODAwLzEvMS1RdC1tdlV1Y1pRandCOFUyODVzWVpyWUhoWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjkvZjU1MzRhLWE2MTMtNDdiZS1iNDJiLWUyZmJjM2E2ODgw MC8xLzVfaUJRQnE2eklqSlFmMzNRUEdyRlRid1hiby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAVT1WAME AlX4GDANBgkqhkiG9w0BAQsFAAOCAQEAKiDtyo4ugMUAiLGNT+jqaqTjcXc2lD9Y Ia4nq9OmtqjxNT32m2gXy4WZG3sYOp0+HENI/gpGDT0uGVD5c23nsmVa7R4YaL/6 LM/S03bd0JvHEa/HP5aEf24Xp2xF/P6uBGu65Qs45fZ+xKCPTtqt5ZHpwlCLVmnZ UlWktQm7h5v4oysSrq5y5+3awnDhX3nZpKyk9ekzSD7NNUs2vq60ADPLrLIsZLmI POBK/HV+kdHsmSRbsgSvQNMvl7fqd9OtstdOvg2yHfXKeFw/dJqqyNqs3gSeqHAF 9s+o9JmwbCeNavTUjcvFG8ks8AUEoxLsBVRqEySU2+04+vn+jEtLAA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:19:59 2026 by rpki-client