This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/qL69xkCGLgiDyQWJUYRhpMjkfTA.roa File: qL69xkCGLgiDyQWJUYRhpMjkfTA.roa (raw, json) Hash identifier: YdGGVpr+Y+IxTlzNIaHuGEOlkl1gsiK04G6j0VWgxxA= Subject key identifier: A8:BE:BD:C6:40:86:2E:08:83:C9:05:89:51:84:61:A4:C8:E4:7D:30 Certificate issuer: /CN=8bdac18a7ad501ba7ea13567909f17e4f7327413 Certificate serial: 019B78A22AD16E1DC760CFAC35B789EBC454 Authority key identifier: 8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/qL69xkCGLgiDyQWJUYRhpMjkfTA.roa Signing time: Thu 01 Jan 2026 08:17:32 +0000 ROA not before: Thu 01 Jan 2026 08:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28859 IP address blocks: 212.94.32.0/20 maxlen: 20 212.94.56.0/21 maxlen: 21 2a02:368::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2a:d1:6e:1d:c7:60:cf:ac:35:b7:89:eb:c4:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bdac18a7ad501ba7ea13567909f17e4f7327413 Validity Not Before: Jan 1 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8bebdc640862e0883c90589518461a4c8e47d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:e2:08:93:7d:7e:26:fd:ff:ea:80:cd:ca: 9c:a6:2a:e9:1d:e6:d0:94:85:96:7d:0e:e5:3b:0c: 87:cb:b8:e2:a5:ea:85:b3:e1:28:32:1b:53:48:ec: e9:28:fd:0a:53:3e:21:5c:9a:f6:ba:71:ab:4d:54: 6c:8e:61:8f:0d:70:67:b5:f1:9c:25:a3:66:f4:98: 9c:d0:1d:c8:af:d5:65:9f:e6:c6:91:77:0d:e1:bf: ec:63:1c:11:45:64:b0:48:81:29:68:78:1e:9c:b3: 8d:08:57:0b:55:58:ae:eb:98:ae:89:d2:bb:de:b4: 50:b4:03:79:03:5a:36:d4:02:29:34:d3:7e:95:d2: 8c:ad:ba:b7:21:3a:2b:da:46:94:7e:22:9c:69:4a: 84:1c:d4:92:83:cd:8c:2b:a5:9a:e8:fe:86:10:94: ff:16:c7:0b:9e:a6:d9:8e:47:46:03:a8:2b:5e:e6: 29:3e:b8:70:32:0e:fd:3e:0f:a9:97:2a:7e:be:89: ad:fb:c7:95:3d:c0:a9:ef:88:9e:eb:e5:61:b4:2f: 77:d6:ee:4f:6d:36:72:0c:f6:93:a2:9d:79:e3:d7: 0b:df:0c:6d:a4:3f:9f:d8:84:52:0a:43:8e:dc:5b: 51:66:f0:75:18:4f:a8:18:91:98:41:ed:91:16:a1: 39:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BE:BD:C6:40:86:2E:08:83:C9:05:89:51:84:61:A4:C8:E4:7D:30 X509v3 Authority Key Identifier: keyid:8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/qL69xkCGLgiDyQWJUYRhpMjkfTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.94.32.0/20 212.94.56.0/21 IPv6: 2a02:368::/32 Signature Algorithm: sha256WithRSAEncryption 35:bf:19:db:9b:4f:86:85:bb:c8:04:8b:e9:c1:ba:46:ac:98: a8:cb:83:09:86:8e:90:9a:25:98:5b:81:d8:50:8b:96:a7:a8: 95:10:c1:17:b3:60:c1:2c:dd:59:11:9d:d3:68:06:95:58:98: 6f:62:c4:54:2d:26:41:9a:e0:37:14:ea:84:6b:8f:bb:b8:23: f9:56:1a:30:78:d9:fc:fb:b0:ff:2c:cf:e0:ba:88:5a:29:8f: d9:99:0d:29:ef:86:f8:c4:1d:5b:c7:e9:5f:29:e5:68:8b:67: bd:6b:b8:f4:26:63:92:e0:76:23:fe:a2:a8:81:0f:45:6a:49: b9:a9:0d:df:29:b4:d0:83:90:0a:dc:b4:4a:da:87:47:68:31: 3b:99:c6:da:52:96:e3:f2:10:c9:cf:c0:bd:54:98:12:da:ed: e3:d2:b2:17:82:be:46:c3:a1:d7:19:e1:e2:ca:2c:2f:dc:62: 81:55:f3:b0:68:4b:59:29:7a:c1:65:d1:ec:57:91:11:de:c8: d7:5a:d6:af:3f:0b:a1:8a:bf:6e:b5:8b:00:f5:d5:5d:63:88: 19:91:85:d6:d8:f1:f7:3b:55:a1:64:ff:e5:0b:54:3f:b8:4f: 3a:82:9b:9f:05:2a:c4:83:bf:ec:ec:57:53:b6:12:b5:7a:93: 37:79:4e:4b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4oirRbh3HYM+sNbeJ68RUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZGFjMThhN2FkNTAxYmE3ZWExMzU2NzkwOWYxN2U0Zjcz Mjc0MTMwHhcNMjYwMTAxMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGJlYmRjNjQwODYyZTA4ODNjOTA1ODk1MTg0NjFhNGM4ZTQ3ZDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvajiCJN9fib9/+qAzcqcpirpHebQ lIWWfQ7lOwyHy7jipeqFs+EoMhtTSOzpKP0KUz4hXJr2unGrTVRsjmGPDXBntfGc JaNm9Jic0B3Ir9Vln+bGkXcN4b/sYxwRRWSwSIEpaHgenLONCFcLVViu65iuidK7 3rRQtAN5A1o21AIpNNN+ldKMrbq3ITor2kaUfiKcaUqEHNSSg82MK6Wa6P6GEJT/ FscLnqbZjkdGA6grXuYpPrhwMg79Pg+plyp+vomt+8eVPcCp74ie6+VhtC931u5P bTZyDPaTop1549cL3wxtpD+f2IRSCkOO3FtRZvB1GE+oGJGYQe2RFqE5VwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKi+vcZAhi4Ig8kFiVGEYaTI5H0wMB8GA1UdIwQY MBaAFIvawYp61QG6fqE1Z5CfF+T3MnQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTlyQmluclZBYnAtb1RWbmtKOFg1UGN5ZEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zNzRmZDEtMDJjMi00NjcxLWJkYzkt YzNjYzVkZTFlY2U5LzEvcUw2OXhrQ0dMZ2lEeVFXSlVZUmhwTWprZlRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8zNzRmZDEtMDJjMi00NjcxLWJkYzktYzNjYzVkZTFlY2U5 LzEvaTlyQmluclZBYnAtb1RWbmtKOFg1UGN5ZEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQE1F4gAwQD 1F44MA0EAgACMAcDBQAqAgNoMA0GCSqGSIb3DQEBCwUAA4IBAQA1vxnbm0+GhbvI BIvpwbpGrJioy4MJho6QmiWYW4HYUIuWp6iVEMEXs2DBLN1ZEZ3TaAaVWJhvYsRU LSZBmuA3FOqEa4+7uCP5VhoweNn8+7D/LM/guohaKY/ZmQ0p74b4xB1bx+lfKeVo i2e9a7j0JmOS4HYj/qKogQ9Fakm5qQ3fKbTQg5AK3LRK2odHaDE7mcbaUpbj8hDJ z8C9VJgS2u3j0rIXgr5Gw6HXGeHiyiwv3GKBVfOwaEtZKXrBZdHsV5ER3sjXWtav Pwuhir9utYsA9dVdY4gZkYXW2PH3O1WhZP/lC1Q/uE86gpufBSrEg7/s7FdTthK1 epM3eU5L -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:29 2026 by rpki-client