This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/qmENFYyAeg7xsb85_S16S6VQXm4.roa File: qmENFYyAeg7xsb85_S16S6VQXm4.roa (raw, json) Hash identifier: p81fR5IiVt8MAfNa2jag/aWs/EJxKXj180iPtNI3x2I= Subject key identifier: AA:61:0D:15:8C:80:7A:0E:F1:B1:BF:39:FD:2D:7A:4B:A5:50:5E:6E Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622 Certificate serial: 019B7D5CD293DF88059E7E9BB8E41E78A49C Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/qmENFYyAeg7xsb85_S16S6VQXm4.roa Signing time: Fri 02 Jan 2026 06:19:53 +0000 ROA not before: Fri 02 Jan 2026 06:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59456 IP address blocks: 45.152.40.0/22 maxlen: 22 91.239.15.0/24 maxlen: 24 185.55.24.0/22 maxlen: 22 195.244.18.0/24 maxlen: 24 2a01:8cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d2:93:df:88:05:9e:7e:9b:b8:e4:1e:78:a4:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622 Validity Not Before: Jan 2 06:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa610d158c807a0ef1b1bf39fd2d7a4ba5505e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:59:3e:99:07:9c:a8:20:fe:99:48:c4:c5:ce: 49:a2:24:f2:93:b6:11:62:e0:d6:9b:c6:fb:57:6c: 66:8a:4f:fc:b9:f1:63:74:f3:67:0a:07:60:fb:82: 71:25:03:ed:bc:fa:b0:0a:b7:78:f5:81:19:43:f5: 8d:72:06:6a:15:95:5c:17:e1:bb:ef:6a:47:78:60: 56:c6:e6:8a:3e:fb:b4:7b:7a:29:6a:c4:2c:91:66: 0d:2f:e5:3b:e1:2a:f4:78:5b:6a:08:35:ef:01:03: 88:9f:84:fd:44:a4:43:a5:84:6c:38:11:a0:ae:d7: 37:3e:ae:ec:73:ce:df:a2:11:ac:ad:02:97:9d:cd: 9b:a2:a9:eb:94:85:2d:30:db:9c:62:09:70:be:a2: a9:c4:c4:24:41:89:95:73:80:31:88:ea:06:71:ca: fb:a4:4f:80:15:ef:6d:ef:d5:44:45:e4:9d:65:d0: 71:8c:c6:d1:13:77:0d:db:0b:6f:7f:99:f1:bc:f3: 6b:0b:84:f6:7d:fb:21:44:89:2e:3f:e5:eb:c0:b7: 1c:61:13:75:a6:8c:5e:63:69:38:c0:3d:84:54:4a: 06:0e:e4:f5:b7:16:c5:6f:07:fc:f2:ea:98:80:fa: 3f:4c:4b:ce:c4:53:fd:c7:b5:b5:b3:44:ff:5f:02: f4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:61:0D:15:8C:80:7A:0E:F1:B1:BF:39:FD:2D:7A:4B:A5:50:5E:6E X509v3 Authority Key Identifier: keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/qmENFYyAeg7xsb85_S16S6VQXm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.40.0/22 91.239.15.0/24 185.55.24.0/22 195.244.18.0/24 IPv6: 2a01:8cc0::/32 Signature Algorithm: sha256WithRSAEncryption 8b:c5:b8:80:ae:79:3f:ef:ae:bd:ff:28:e8:3c:de:1c:fb:c5: c4:9c:25:3a:2a:fc:ae:af:6d:af:d4:56:b8:1b:94:3f:78:72: d1:05:a5:33:14:99:46:20:31:f5:d9:02:3e:93:de:0c:95:bc: 6d:e6:56:8d:44:ec:1b:6d:fe:c4:aa:55:d8:60:3f:3e:5c:33: 33:58:fb:c2:ee:d8:8f:1d:32:79:d1:2c:0d:56:f2:fc:8b:c6: 1d:b3:d5:5b:63:20:a1:c3:ed:3a:e7:da:5a:5a:f9:15:72:a2: 81:e2:52:71:cf:ed:2f:a5:9e:5b:8d:9e:66:48:64:f8:65:46: 2b:25:67:06:e3:61:44:48:d5:ef:ed:df:f4:dd:5a:2f:fe:71: 67:d9:fd:3f:e2:c3:ad:ad:4d:01:42:9d:df:cc:bd:a2:c4:8c: 63:dc:b0:7f:d9:6e:05:8e:40:85:89:fa:0a:fc:df:97:3f:70: c1:48:79:ee:08:5b:6b:fa:99:4e:3d:04:4a:2e:3e:df:f3:3e: cc:f0:e0:76:de:1b:68:15:84:9b:20:9a:10:41:bf:ad:ed:f3: 1f:be:67:d5:13:75:de:cf:66:3b:da:91:43:d1:4d:e4:4f:2b: f5:e4:56:1e:4e:81:e7:f1:13:81:38:79:31:16:ad:84:92:48: 2d:a3:37:91 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt9XNKT34gFnn6buOQeeKScMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDVlMzcxNzhkODUyNGM3MjY2MGExZDc5NjE2NTk5OWU1 ODY2MjIwHhcNMjYwMTAyMDYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTYxMGQxNThjODA3YTBlZjFiMWJmMzlmZDJkN2E0YmE1NTA1ZTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFk+mQecqCD+mUjExc5JoiTyk7YR YuDWm8b7V2xmik/8ufFjdPNnCgdg+4JxJQPtvPqwCrd49YEZQ/WNcgZqFZVcF+G7 72pHeGBWxuaKPvu0e3opasQskWYNL+U74Sr0eFtqCDXvAQOIn4T9RKRDpYRsOBGg rtc3Pq7sc87fohGsrQKXnc2boqnrlIUtMNucYglwvqKpxMQkQYmVc4AxiOoGccr7 pE+AFe9t79VEReSdZdBxjMbRE3cN2wtvf5nxvPNrC4T2ffshRIkuP+XrwLccYRN1 poxeY2k4wD2EVEoGDuT1txbFbwf88uqYgPo/TEvOxFP9x7W1s0T/XwL0BwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFKphDRWMgHoO8bG/Of0tekulUF5uMB8GA1UdIwQY MBaAFMjV43F42FJMcmYKHXlhZZmeWGYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODIt OWUwYWVkMmZiOGVjLzEvcW1FTkZZeUFlZzd4c2I4NV9TMTZTNlZRWG00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODItOWUwYWVkMmZiOGVj LzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLZgoAwQA W+8PAwQCuTcYAwQAw/QSMA0EAgACMAcDBQAqAYzAMA0GCSqGSIb3DQEBCwUAA4IB AQCLxbiArnk/7669/yjoPN4c+8XEnCU6Kvyur22v1Fa4G5Q/eHLRBaUzFJlGIDH1 2QI+k94Mlbxt5laNROwbbf7EqlXYYD8+XDMzWPvC7tiPHTJ50SwNVvL8i8Yds9Vb YyChw+0659paWvkVcqKB4lJxz+0vpZ5bjZ5mSGT4ZUYrJWcG42FESNXv7d/03Vov /nFn2f0/4sOtrU0BQp3fzL2ixIxj3LB/2W4FjkCFifoK/N+XP3DBSHnuCFtr+plO PQRKLj7f8z7M8OB23htoFYSbIJoQQb+t7fMfvmfVE3Xez2Y72pFD0U3kTyv15FYe ToHn8ROBOHkxFq2EkkgtozeR -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:47 2026 by rpki-client