This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/PqQ80zRW4L7-FL50a-sVEmgKj-Y.roa File: PqQ80zRW4L7-FL50a-sVEmgKj-Y.roa (raw, json) Hash identifier: hnJ9eAizqcNHYh7QW8vCzEh+yJL2aUxkxjuN+e8GRho= Subject key identifier: 3E:A4:3C:D3:34:56:E0:BE:FE:14:BE:74:6B:EB:15:12:68:0A:8F:E6 Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24 Certificate serial: 019B7F1388B077711434148777171A0CBA5B Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/PqQ80zRW4L7-FL50a-sVEmgKj-Y.roa Signing time: Fri 02 Jan 2026 14:19:05 +0000 ROA not before: Fri 02 Jan 2026 14:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51088 IP address blocks: 185.44.244.0/22 maxlen: 22 185.225.220.0/22 maxlen: 22 185.240.112.0/22 maxlen: 22 2a01:77e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:88:b0:77:71:14:34:14:87:77:17:1a:0c:ba:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24 Validity Not Before: Jan 2 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ea43cd33456e0befe14be746beb1512680a8fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:af:ac:2e:94:e4:a3:07:2a:2f:f7:77:53:80: 0d:d3:a5:07:72:3a:d6:2f:9a:e4:9d:15:8d:ae:34: 96:24:2b:b7:24:03:7a:93:15:6b:78:50:43:3e:69: 6b:d5:fa:72:84:73:54:b9:82:82:b8:17:db:d8:28: 7b:30:76:71:41:4c:50:73:4a:78:5e:94:1b:c5:66: b7:27:9e:27:a5:c3:44:92:60:56:71:b7:fb:f6:1c: 1f:3f:de:2a:0a:9e:e2:4c:b8:d5:05:a4:4f:4d:f7: 6a:6b:de:45:85:35:68:f5:68:60:b8:64:13:b4:b1: eb:b8:ec:67:3c:ba:ec:30:6c:f2:31:19:69:b0:b5: c7:85:d0:a0:9f:dc:c4:b2:fe:b4:5c:ef:11:1f:8b: 43:e2:a0:66:d6:41:35:9a:20:cc:e8:8d:a1:be:93: 2e:d1:c2:5d:ba:9b:de:67:e0:92:be:08:d1:a0:bc: d9:81:11:62:09:e5:7d:8f:e3:43:a4:80:55:be:88: f6:3e:e3:a9:0b:17:90:77:46:f7:cd:b6:ee:4b:d0: 15:7b:2d:02:26:2e:2a:4a:64:1a:75:fe:34:8f:40: e4:84:39:43:59:b0:5b:32:ac:96:4e:98:94:0b:82: e0:c8:70:9e:2e:72:f9:89:1e:1a:71:0b:80:bd:a7: 23:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A4:3C:D3:34:56:E0:BE:FE:14:BE:74:6B:EB:15:12:68:0A:8F:E6 X509v3 Authority Key Identifier: keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/PqQ80zRW4L7-FL50a-sVEmgKj-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.244.0/22 185.225.220.0/22 185.240.112.0/22 IPv6: 2a01:77e0::/32 Signature Algorithm: sha256WithRSAEncryption 59:80:a2:d9:62:3e:8b:b1:80:30:b3:a4:27:b4:4a:04:18:f5: eb:e7:86:82:84:21:78:7c:06:de:3e:e8:86:4d:2c:2b:d7:ea: 00:19:28:ad:fa:6a:98:6c:d4:46:aa:37:0b:3e:c6:5f:69:9b: a2:4c:02:b9:a5:66:f0:4e:b0:1a:6d:ce:26:75:08:2c:20:b0: 39:97:73:f6:3e:49:19:f4:28:9f:9f:d9:a7:1c:55:f9:da:c8: c9:68:34:d0:3a:a9:c3:76:ea:fe:5d:f4:76:42:00:7a:8c:b1: 6f:2d:48:e6:ac:eb:e6:6e:3d:26:7c:28:d5:7d:6f:0f:a2:65: 45:5b:9a:fc:8b:88:33:a6:ff:2b:e7:fb:ac:28:72:df:2f:af: bc:de:d4:46:ac:78:6f:e7:da:30:b0:96:36:e3:12:f7:88:40: 90:62:96:29:90:49:9b:f1:69:c5:d7:86:79:91:ee:64:6c:76: 96:34:c0:71:4d:64:d5:91:3c:bf:82:27:51:ed:5d:5f:6f:f1: 07:37:1a:5d:37:8c:2d:9c:16:31:d1:73:04:8f:1d:be:b2:8d: 06:bc:6e:89:e3:6f:3b:f0:c0:75:61:5a:eb:31:6b:82:48:b0: 38:6c:20:b5:cc:89:ac:e1:05:c9:97:d3:fc:ce:94:8b:38:6a: 54:7e:9b:71 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/E4iwd3EUNBSHdxcaDLpbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTFmNDcxMzAyNDgwNGM0NDU0MDNhZjYzZmE2NDRiMmE5 MzVkMjQwHhcNMjYwMTAyMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWE0M2NkMzM0NTZlMGJlZmUxNGJlNzQ2YmViMTUxMjY4MGE4ZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK+sLpTkowcqL/d3U4AN06UHcjrW L5rknRWNrjSWJCu3JAN6kxVreFBDPmlr1fpyhHNUuYKCuBfb2Ch7MHZxQUxQc0p4 XpQbxWa3J54npcNEkmBWcbf79hwfP94qCp7iTLjVBaRPTfdqa95FhTVo9WhguGQT tLHruOxnPLrsMGzyMRlpsLXHhdCgn9zEsv60XO8RH4tD4qBm1kE1miDM6I2hvpMu 0cJdupveZ+CSvgjRoLzZgRFiCeV9j+NDpIBVvoj2PuOpCxeQd0b3zbbuS9AVey0C Ji4qSmQadf40j0DkhDlDWbBbMqyWTpiUC4LgyHCeLnL5iR4acQuAvacj3QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFD6kPNM0VuC+/hS+dGvrFRJoCo/mMB8GA1UdIwQY MBaAFKyh9HEwJIBMRFQDr2P6ZEsqk10kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktIMGNUQWtnRXhFVkFPdllfcGtTeXFUWFNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9jNmQ2YmUtYmY0YS00M2U1LWE5MDgt NWNhMDE2YTEwMDU0LzEvUHFRODB6Ulc0TDctRkw1MGEtc1ZFbWdLai1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9jNmQ2YmUtYmY0YS00M2U1LWE5MDgtNWNhMDE2YTEwMDU0 LzEvcktIMGNUQWtnRXhFVkFPdllfcGtTeXFUWFNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuSz0AwQC ueHcAwQCufBwMA0EAgACMAcDBQAqAXfgMA0GCSqGSIb3DQEBCwUAA4IBAQBZgKLZ Yj6LsYAws6QntEoEGPXr54aChCF4fAbePuiGTSwr1+oAGSit+mqYbNRGqjcLPsZf aZuiTAK5pWbwTrAabc4mdQgsILA5l3P2PkkZ9Cifn9mnHFX52sjJaDTQOqnDdur+ XfR2QgB6jLFvLUjmrOvmbj0mfCjVfW8PomVFW5r8i4gzpv8r5/usKHLfL6+83tRG rHhv59owsJY24xL3iECQYpYpkEmb8WnF14Z5ke5kbHaWNMBxTWTVkTy/gidR7V1f b/EHNxpdN4wtnBYx0XMEjx2+so0GvG6J42878MB1YVrrMWuCSLA4bCC1zIms4QXJ l9P8zpSLOGpUfptx -----END CERTIFICATE-----Generated at Sun Jan 25 16:37:42 2026 by rpki-client