This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/2qfQafPQLZjZB0rd3wCY0DU7kzA.roa File: 2qfQafPQLZjZB0rd3wCY0DU7kzA.roa (raw, json) Hash identifier: 5R2kRDvh/Lr3e13HbgLWL3zVMiihX4iNEH57m0dx+KE= Subject key identifier: DA:A7:D0:69:F3:D0:2D:98:D9:07:4A:DD:DF:00:98:D0:35:3B:93:30 Certificate issuer: /CN=e9e415ed5c0c7759981001b8db262da779a04b3d Certificate serial: 019B77C6D34068F3B295E6CB25A655A42DAD Authority key identifier: E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/2qfQafPQLZjZB0rd3wCY0DU7kzA.roa Signing time: Thu 01 Jan 2026 04:17:57 +0000 ROA not before: Thu 01 Jan 2026 04:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25122 IP address blocks: 194.126.33.0/24 maxlen: 24 194.126.34.0/24 maxlen: 24 194.126.38.0/24 maxlen: 24 194.126.44.0/24 maxlen: 24 194.126.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.mft rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d3:40:68:f3:b2:95:e6:cb:25:a6:55:a4:2d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9e415ed5c0c7759981001b8db262da779a04b3d Validity Not Before: Jan 1 04:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=daa7d069f3d02d98d9074adddf0098d0353b9330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1c:2d:19:4e:6c:9c:7d:86:9c:62:b7:81:b2: 63:cd:3c:87:69:18:23:f3:6f:dd:e7:a3:f7:13:8f: 0a:de:09:54:de:5c:e7:80:5f:59:17:39:7b:e7:e0: d2:86:87:af:28:c2:43:55:c3:83:0c:26:d7:43:5f: e5:e3:b0:fc:04:e6:34:21:6b:a1:ea:45:59:22:c0: 4c:27:55:2d:22:f3:87:c0:72:dc:f2:eb:d3:48:53: f4:62:5c:f1:76:88:84:9c:b3:41:7f:ad:3e:a3:47: ef:ac:87:42:16:23:d3:9e:88:05:db:78:8b:cf:a9: 25:d9:17:16:72:2a:69:58:4c:d4:ea:50:02:65:fa: 45:d9:5c:db:a6:4e:48:eb:ae:3b:f9:7b:71:c2:55: 91:06:c1:8d:b9:cd:af:96:59:58:3c:0c:15:1b:5d: fc:df:86:e2:2f:0b:2a:5c:44:0d:ec:b8:9e:fc:03: 7b:b8:dc:63:df:3c:fd:ae:97:ff:c5:7a:cf:c5:07: 98:3a:ca:13:09:98:a9:b7:d2:c2:8f:39:4e:1c:64: d0:a6:23:54:89:4e:12:d2:c3:86:e3:e5:39:21:fc: 15:d5:79:9f:b5:34:52:99:06:83:de:6f:cc:04:13: 23:98:ac:43:f0:0c:da:b5:6a:14:3b:3b:85:17:15: 82:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A7:D0:69:F3:D0:2D:98:D9:07:4A:DD:DF:00:98:D0:35:3B:93:30 X509v3 Authority Key Identifier: keyid:E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/2qfQafPQLZjZB0rd3wCY0DU7kzA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.126.33.0-194.126.34.255 194.126.38.0/24 194.126.44.0/24 194.126.54.0/24 Signature Algorithm: sha256WithRSAEncryption 05:12:5c:c9:8d:88:57:ae:29:ee:9c:32:b2:35:b3:2e:a4:fb: 67:63:30:35:b1:ba:9a:9c:cf:6b:d0:7e:a9:c5:9e:c9:af:03: 3a:ba:21:63:a6:97:33:9d:3d:3e:a5:86:a8:d9:73:90:da:56: df:da:69:20:93:2c:73:bd:7d:15:21:44:79:77:2d:53:65:40: a0:93:83:5b:3c:9f:c6:c3:de:77:19:55:33:31:8c:72:ce:6c: 60:38:8d:ac:2f:63:58:94:2d:bf:14:2b:0c:4c:45:fc:66:ea: 34:ad:56:93:a3:d6:4a:cf:da:fb:8c:02:91:16:0b:67:86:30: d5:82:41:2a:c6:07:24:4b:99:7a:c6:6d:9c:1f:a8:86:1b:3e: 5e:a9:80:48:42:e0:ca:b3:0b:01:a7:6d:f4:f6:c3:e3:66:2c: 3c:3e:06:fa:21:2b:b6:6d:9f:da:e7:ed:a9:60:37:ac:a7:13: 2d:c5:41:ef:a3:76:02:62:2f:17:92:3d:94:78:c0:1b:fc:61: e9:30:da:9c:9a:ab:30:7d:bd:56:ef:b9:db:90:a7:3b:bd:07: 0c:88:9c:21:f5:e3:20:9c:6d:f1:1c:99:8a:79:17:90:34:36: 09:80:24:76:c2:0d:27:49:7f:5f:71:03:6d:87:05:af:04:67: 61:73:73:13 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt3xtNAaPOylebLJaZVpC2tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZTQxNWVkNWMwYzc3NTk5ODEwMDFiOGRiMjYyZGE3Nzlh MDRiM2QwHhcNMjYwMTAxMDQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWE3ZDA2OWYzZDAyZDk4ZDkwNzRhZGRkZjAwOThkMDM1M2I5MzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RwtGU5snH2GnGK3gbJjzTyHaRgj 82/d56P3E48K3glU3lzngF9ZFzl75+DShoevKMJDVcODDCbXQ1/l47D8BOY0IWuh 6kVZIsBMJ1UtIvOHwHLc8uvTSFP0YlzxdoiEnLNBf60+o0fvrIdCFiPTnogF23iL z6kl2RcWcippWEzU6lACZfpF2Vzbpk5I6647+XtxwlWRBsGNuc2vlllYPAwVG138 34biLwsqXEQN7Lie/AN7uNxj3zz9rpf/xXrPxQeYOsoTCZipt9LCjzlOHGTQpiNU iU4S0sOG4+U5IfwV1XmftTRSmQaD3m/MBBMjmKxD8AzatWoUOzuFFxWCqQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFNqn0Gnz0C2Y2QdK3d8AmNA1O5MwMB8GA1UdIwQY MBaAFOnkFe1cDHdZmBABuNsmLad5oEs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmVRVjdWd01kMW1ZRUFHNDJ5WXRwM21nU3owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS83ZWI2ODMtZTIxOC00MzgyLWJmZDkt MjhkYTZhMWJhMTI4LzEvMnFmUWFmUFFMWmpaQjByZDN3Q1kwRFU3a3pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS83ZWI2ODMtZTIxOC00MzgyLWJmZDktMjhkYTZhMWJhMTI4 LzEvNmVRVjdWd01kMW1ZRUFHNDJ5WXRwM21nU3owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBADCfiED BADCfiIDBADCfiYDBADCfiwDBADCfjYwDQYJKoZIhvcNAQELBQADggEBAAUSXMmN iFeuKe6cMrI1sy6k+2djMDWxupqcz2vQfqnFnsmvAzq6IWOmlzOdPT6lhqjZc5Da Vt/aaSCTLHO9fRUhRHl3LVNlQKCTg1s8n8bD3ncZVTMxjHLObGA4jawvY1iULb8U KwxMRfxm6jStVpOj1krP2vuMApEWC2eGMNWCQSrGByRLmXrGbZwfqIYbPl6pgEhC 4MqzCwGnbfT2w+NmLDw+BvohK7Ztn9rn7algN6ynEy3FQe+jdgJiLxeSPZR4wBv8 Yekw2pyaqzB9vVbvuduQpzu9BwyInCH14yCcbfEcmYp5F5A0NgmAJHbCDSdJf19x A22HBa8EZ2FzcxM= -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:34 2026 by rpki-client