This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/qHqVroTNd8mAZUTP-4LLTihEjRA.roa File: qHqVroTNd8mAZUTP-4LLTihEjRA.roa (raw, json) Hash identifier: LFqfsvqUg1kryv3SdZmfz1fPpVN8XkzwNYvHfBdV5dM= Subject key identifier: A8:7A:95:AE:84:CD:77:C9:80:65:44:CF:FB:82:CB:4E:28:44:8D:10 Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Certificate serial: 019B7CEDBC023CC3BA26E0D74838B0FD907C Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/qHqVroTNd8mAZUTP-4LLTihEjRA.roa Signing time: Fri 02 Jan 2026 04:18:33 +0000 ROA not before: Fri 02 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29286 IP address blocks: 46.164.152.0/23 maxlen: 23 46.164.160.0/22 maxlen: 22 77.222.136.0/24 maxlen: 24 80.91.171.0/24 maxlen: 24 80.91.182.0/24 maxlen: 24 88.81.248.0/24 maxlen: 24 91.204.95.0/24 maxlen: 24 93.183.197.0/24 maxlen: 24 93.183.215.0/24 maxlen: 24 93.183.228.0/24 maxlen: 24 93.183.229.0/24 maxlen: 24 185.8.40.0/24 maxlen: 24 185.8.41.0/24 maxlen: 24 185.8.42.0/23 maxlen: 23 188.0.64.0/23 maxlen: 23 188.0.66.0/24 maxlen: 24 193.108.50.0/24 maxlen: 24 193.108.51.0/24 maxlen: 24 194.146.197.0/24 maxlen: 24 195.69.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:bc:02:3c:c3:ba:26:e0:d7:48:38:b0:fd:90:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Validity Not Before: Jan 2 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a87a95ae84cd77c9806544cffb82cb4e28448d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4f:b2:42:20:e7:13:5b:a8:b7:b6:92:79:49: f7:1f:0b:ea:6e:fd:f8:11:02:9e:7b:1f:fd:e1:cc: c9:11:1e:12:d6:2d:2e:2d:32:46:12:3d:d3:d0:fb: 69:5c:2a:93:bc:8a:2a:dc:08:09:38:f9:9d:c4:53: 9c:26:87:52:bc:c1:f0:fb:5a:62:60:2e:dd:04:9a: be:53:2e:fe:53:77:af:30:dd:39:74:bc:f4:72:9e: 9c:12:d1:10:50:a3:5c:d3:7e:45:6b:f6:89:ca:dd: 07:6b:f6:cd:eb:86:3b:6b:f2:af:54:19:af:51:f2: cb:60:65:15:06:68:cc:40:68:a4:94:81:eb:c7:3a: 96:c7:9b:e3:b2:dc:c3:b1:8a:ff:0d:c5:e7:0f:6f: ae:59:3c:e1:4c:64:51:1f:7d:a2:75:97:d3:3d:3a: 22:52:76:8a:4a:b6:be:32:e5:69:ea:3b:cb:89:0f: cf:06:76:a8:c6:76:6b:a2:73:03:1e:23:9e:67:ff: df:75:31:49:c2:00:dc:66:27:25:3c:60:63:19:9b: c3:ff:94:7d:5e:21:50:da:ba:42:e2:d2:4f:6e:04: 4a:d5:8c:eb:c2:89:24:7f:23:49:71:5d:c2:e7:0c: 93:49:90:f8:53:89:e9:cd:3d:0a:4d:b2:48:13:f2: 68:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7A:95:AE:84:CD:77:C9:80:65:44:CF:FB:82:CB:4E:28:44:8D:10 X509v3 Authority Key Identifier: keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/qHqVroTNd8mAZUTP-4LLTihEjRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.164.152.0/23 46.164.160.0/22 77.222.136.0/24 80.91.171.0/24 80.91.182.0/24 88.81.248.0/24 91.204.95.0/24 93.183.197.0/24 93.183.215.0/24 93.183.228.0/23 185.8.40.0/22 188.0.64.0-188.0.66.255 193.108.50.0/23 194.146.197.0/24 195.69.176.0/24 Signature Algorithm: sha256WithRSAEncryption 93:d2:b5:2f:7a:bc:bb:ab:b5:d9:b2:44:6d:03:83:1c:00:8a: 64:4d:f6:1d:62:80:54:85:a0:9f:4e:82:a7:8d:5b:e4:5d:76: 04:67:b0:05:4c:e9:6d:23:6e:1e:d7:d2:31:01:0e:66:38:fc: c9:e0:4f:46:41:50:24:3b:dd:8e:f3:14:5b:35:c2:5d:be:71: a0:c3:5b:46:a4:77:ce:a4:a0:e3:a2:62:48:a9:38:ec:dd:eb: c4:0a:5e:a3:e1:40:92:cd:ca:4b:be:da:0a:b2:c5:e3:d8:08: 2a:4d:ac:45:ab:16:5f:35:73:7c:38:d1:83:69:3e:e9:42:f9: d2:58:b1:2a:ce:56:c3:ee:f1:d2:26:60:43:98:90:5b:7c:16: a7:7e:85:f6:40:96:7a:8c:00:cd:da:84:db:98:24:22:a0:fb: 02:2d:5f:7d:c4:1e:00:6a:98:a4:da:8f:33:f5:2f:43:f6:4f: 99:53:af:87:8a:86:20:cf:5f:5f:3f:69:84:03:18:06:a1:b4: 4b:30:e9:5b:37:5d:f8:07:31:4b:74:89:4b:64:27:bb:bd:aa: c7:77:8e:7d:b8:de:fa:e1:42:09:65:b4:54:54:ff:41:c6:93: c4:e5:6e:a5:d9:20:74:fd:cd:9f:df:f2:04:0b:86:4a:e0:77: a8:45:e3:db -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISAZt87bwCPMO6JuDXSDiw/ZB8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky OTMxNDAwHhcNMjYwMTAyMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODdhOTVhZTg0Y2Q3N2M5ODA2NTQ0Y2ZmYjgyY2I0ZTI4NDQ4ZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0+yQiDnE1uot7aSeUn3Hwvqbv34 EQKeex/94czJER4S1i0uLTJGEj3T0PtpXCqTvIoq3AgJOPmdxFOcJodSvMHw+1pi YC7dBJq+Uy7+U3evMN05dLz0cp6cEtEQUKNc035Fa/aJyt0Ha/bN64Y7a/KvVBmv UfLLYGUVBmjMQGiklIHrxzqWx5vjstzDsYr/DcXnD2+uWTzhTGRRH32idZfTPToi UnaKSra+MuVp6jvLiQ/PBnaoxnZronMDHiOeZ//fdTFJwgDcZiclPGBjGZvD/5R9 XiFQ2rpC4tJPbgRK1YzrwokkfyNJcV3C5wyTSZD4U4npzT0KTbJIE/JosQIDAQAB o4ICZTCCAmEwHQYDVR0OBBYEFKh6la6EzXfJgGVEz/uCy04oRI0QMB8GA1UdIwQY MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt MzA1NmFmOWEzMzVlLzEvcUhxVnJvVE5kOG1BWlVUUC00TExUaWhFalJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiAwQBLqSYAwQC LqSgAwQATd6IAwQAUFurAwQAUFu2AwQAWFH4AwQAW8xfAwQAXbfFAwQAXbfXAwQB XbfkAwQCuQgoMAwDBAa8AEADBAC8AEIDBAHBbDIDBADCksUDBADDRbAwDQYJKoZI hvcNAQELBQADggEBAJPStS96vLurtdmyRG0DgxwAimRN9h1igFSFoJ9OgqeNW+Rd dgRnsAVM6W0jbh7X0jEBDmY4/MngT0ZBUCQ73Y7zFFs1wl2+caDDW0akd86koOOi YkipOOzd68QKXqPhQJLNyku+2gqyxePYCCpNrEWrFl81c3w40YNpPulC+dJYsSrO VsPu8dImYEOYkFt8Fqd+hfZAlnqMAM3ahNuYJCKg+wItX33EHgBqmKTajzP1L0P2 T5lTr4eKhiDPX18/aYQDGAahtEsw6Vs3XfgHMUt0iUtkJ7u9qsd3jn243vrhQgll tFRU/0HGk8TlbqXZIHT9zZ/f8gQLhkrgd6hF49s= -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:17 2026 by rpki-client