This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/q-eaNpAC9-NYXDr75-5OxlW81pM.roa File: q-eaNpAC9-NYXDr75-5OxlW81pM.roa (raw, json) Hash identifier: CQhgKaD5oRyS83HVo64oNNz+j4/NbRXCDPlLnL181NA= Subject key identifier: AB:E7:9A:36:90:02:F7:E3:58:5C:3A:FB:E7:EE:4E:C6:55:BC:D6:93 Certificate issuer: /CN=254d178be1b20b8d738446be052e089c89a00ab3 Certificate serial: 019B7E383E2DF95F0E0B63B78564CDC6C6C9 Authority key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/q-eaNpAC9-NYXDr75-5OxlW81pM.roa Signing time: Fri 02 Jan 2026 10:19:33 +0000 ROA not before: Fri 02 Jan 2026 10:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16097 IP address blocks: 185.80.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:3e:2d:f9:5f:0e:0b:63:b7:85:64:cd:c6:c6:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=254d178be1b20b8d738446be052e089c89a00ab3 Validity Not Before: Jan 2 10:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abe79a369002f7e3585c3afbe7ee4ec655bcd693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9d:be:fe:0a:35:99:54:8d:c8:8a:ba:64:af: 37:66:5d:ff:03:9c:52:06:cd:b6:50:9c:6d:b9:36: 30:e8:66:8d:ba:c7:cf:76:80:af:22:a5:b8:86:de: 40:a3:f2:ce:11:4f:61:8d:09:0e:2f:a8:aa:20:60: 02:f3:9e:c1:85:2b:32:19:9a:65:db:f6:49:23:d8: 78:52:b2:78:e7:18:3d:c2:49:5f:fb:94:d5:a6:c8: bc:39:c7:48:42:b2:a7:76:8c:f5:c1:5b:91:66:65: 76:53:17:f2:35:60:53:ff:6b:b4:6f:84:75:9f:da: b8:aa:4e:41:7c:52:49:7d:f0:4d:b4:e1:18:fd:ff: 11:28:bb:11:7f:7d:c2:0a:50:43:ef:36:07:66:07: 74:d2:2a:13:0e:71:0a:9e:ce:9b:2c:97:a4:90:a8: 9b:73:7e:08:02:b0:81:6a:e1:18:e2:65:de:5c:81: 15:d0:1d:fd:9f:f5:9a:2b:4a:4a:78:52:93:15:42: 0a:9c:7d:4c:fe:49:91:ba:01:35:eb:2f:e0:a0:f7: 3c:67:75:f3:7d:89:fa:09:b1:0c:c2:fe:ed:c1:f1: 39:ec:b6:ff:bb:a2:34:6d:8a:2a:20:7b:06:f7:42: 17:60:c3:b9:70:06:f2:0f:dd:19:c5:bc:76:ca:05: 46:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E7:9A:36:90:02:F7:E3:58:5C:3A:FB:E7:EE:4E:C6:55:BC:D6:93 X509v3 Authority Key Identifier: keyid:25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/q-eaNpAC9-NYXDr75-5OxlW81pM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.120.0/22 Signature Algorithm: sha256WithRSAEncryption 92:43:bc:ce:da:6e:f0:cb:b1:b9:a0:5c:8f:91:85:bf:25:c1: c6:a5:bf:8e:5d:37:79:16:e5:7b:e4:fd:1a:f3:83:34:95:b7: d0:c0:a4:4e:78:21:90:c5:c4:95:8d:e8:92:33:8e:02:cf:d8: aa:07:05:ad:fc:42:56:20:ca:6a:b4:b9:6c:93:e5:a8:07:97: cc:c1:0a:10:d7:a5:1a:bc:89:56:d8:58:12:ab:2a:60:d2:d1: 3d:13:71:42:0e:b3:23:c1:7a:c8:68:6a:fc:c7:7d:94:d7:e5: ed:8f:09:47:b7:54:c3:bc:2e:5f:46:38:5a:5b:db:a7:e6:6a: 01:a7:e9:5a:48:da:28:35:d1:f6:3c:1e:cb:77:3c:b0:5f:91: 0c:14:d1:a0:d2:18:ff:55:7e:5a:65:30:16:fb:aa:50:0b:00: 45:d3:13:66:ae:59:5d:20:1f:61:31:71:2d:dc:0a:67:3d:44: 4d:36:c5:45:b5:36:0f:9d:67:d1:4e:7c:6a:13:b3:e7:20:b0: e2:c5:7b:fa:37:c7:8d:f0:7f:50:08:da:00:0e:4d:46:ce:ed: 1b:32:91:66:ad:ef:ce:0e:f2:0a:4a:4f:e9:1e:d5:be:2d:54: 23:72:4d:2a:05:fa:04:e8:e9:1d:5a:b4:05:9f:e2:41:78:4e: ad:d3:60:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OD4t+V8OC2O3hWTNxsbJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NGQxNzhiZTFiMjBiOGQ3Mzg0NDZiZTA1MmUwODljODlh MDBhYjMwHhcNMjYwMTAyMTAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmU3OWEzNjkwMDJmN2UzNTg1YzNhZmJlN2VlNGVjNjU1YmNkNjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq52+/go1mVSNyIq6ZK83Zl3/A5xS Bs22UJxtuTYw6GaNusfPdoCvIqW4ht5Ao/LOEU9hjQkOL6iqIGAC857BhSsyGZpl 2/ZJI9h4UrJ45xg9wklf+5TVpsi8OcdIQrKndoz1wVuRZmV2UxfyNWBT/2u0b4R1 n9q4qk5BfFJJffBNtOEY/f8RKLsRf33CClBD7zYHZgd00ioTDnEKns6bLJekkKib c34IArCBauEY4mXeXIEV0B39n/WaK0pKeFKTFUIKnH1M/kmRugE16y/goPc8Z3Xz fYn6CbEMwv7twfE57Lb/u6I0bYoqIHsG90IXYMO5cAbyD90Zxbx2ygVGewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKvnmjaQAvfjWFw6++fuTsZVvNaTMB8GA1UdIwQY MBaAFCVNF4vhsguNc4RGvgUuCJyJoAqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlUwWGktR3lDNDF6aEVhLUJTNEluSW1nQ3JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC82OGFjZTctM2UzMS00Y2ZlLWExZTQt YTEwNGQyNDc3MTVmLzEvcS1lYU5wQUM5LU5ZWERyNzUtNU94bFc4MXBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC82OGFjZTctM2UzMS00Y2ZlLWExZTQtYTEwNGQyNDc3MTVm LzEvSlUwWGktR3lDNDF6aEVhLUJTNEluSW1nQ3JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVB4MA0G CSqGSIb3DQEBCwUAA4IBAQCSQ7zO2m7wy7G5oFyPkYW/JcHGpb+OXTd5FuV75P0a 84M0lbfQwKROeCGQxcSVjeiSM44Cz9iqBwWt/EJWIMpqtLlsk+WoB5fMwQoQ16Ua vIlW2FgSqypg0tE9E3FCDrMjwXrIaGr8x32U1+XtjwlHt1TDvC5fRjhaW9un5moB p+laSNooNdH2PB7LdzywX5EMFNGg0hj/VX5aZTAW+6pQCwBF0xNmrlldIB9hMXEt 3ApnPURNNsVFtTYPnWfRTnxqE7PnILDixXv6N8eN8H9QCNoADk1Gzu0bMpFmre/O DvIKSk/pHtW+LVQjck0qBfoE6OkdWrQFn+JBeE6t02Da -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:34 2026 by rpki-client