This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/q-8ltpoThmmPBuTuT5C4cGm14Tk.roa File: q-8ltpoThmmPBuTuT5C4cGm14Tk.roa (raw, json) Hash identifier: 5hF8BW/BSTiPn3vyhPttnkUg4VDyaJiwZYhFxh/LtpA= Subject key identifier: AB:EF:25:B6:9A:13:86:69:8F:06:E4:EE:4F:90:B8:70:69:B5:E1:39 Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16 Certificate serial: 019B7C1271817F951DCE27C6AFD39BCB4281 Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/q-8ltpoThmmPBuTuT5C4cGm14Tk.roa Signing time: Fri 02 Jan 2026 00:19:02 +0000 ROA not before: Fri 02 Jan 2026 00:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 45.86.230.0/24 maxlen: 24 91.231.186.0/24 maxlen: 24 194.213.18.0/24 maxlen: 24 195.54.161.0/24 maxlen: 24 2a10:1fc0:7::/48 maxlen: 48 2a10:1fc0:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:71:81:7f:95:1d:ce:27:c6:af:d3:9b:cb:42:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16 Validity Not Before: Jan 2 00:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abef25b69a1386698f06e4ee4f90b87069b5e139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ac:45:1c:77:19:d5:b9:b9:94:0f:75:e6:49: ec:7d:d0:4c:0f:ac:16:cf:f2:52:1d:4b:90:e6:a0: 31:8e:58:ea:73:92:03:e7:be:e1:9a:1e:45:4c:c5: 9a:a4:ef:0b:ae:de:55:87:e1:50:23:24:91:04:ef: 88:f0:5f:e7:30:8a:32:24:d1:9c:49:58:6f:c9:47: 65:c9:52:d2:be:21:12:e8:bc:c5:47:b4:c8:bd:26: fe:20:c2:b1:33:58:8c:3d:8e:fb:9e:fa:71:f8:48: a3:cc:1f:dd:2a:96:f3:2f:2c:1f:7c:6d:52:a9:54: 36:f0:dc:ee:b7:c6:c4:86:22:46:8c:84:81:b3:fb: 25:ae:1f:84:1f:0c:fd:7e:e8:cf:8f:14:5f:f3:1a: a7:05:91:b8:ef:79:ef:f0:13:15:8a:6a:90:c5:3e: d9:cd:fb:d1:48:8c:7d:62:e0:dc:63:7e:71:05:e8: 02:d5:2b:53:bc:ce:16:ac:d6:f8:45:bc:e1:0c:10: bd:cc:6e:b3:19:c3:55:7a:96:ba:58:fc:62:a1:78: 58:a5:7d:8a:14:39:b4:b6:89:5c:37:6a:cc:92:42: aa:be:76:da:3f:43:dc:50:29:f9:05:14:22:54:4f: fc:ec:58:26:8a:02:45:9f:15:d8:ec:02:2a:ff:a0: c4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EF:25:B6:9A:13:86:69:8F:06:E4:EE:4F:90:B8:70:69:B5:E1:39 X509v3 Authority Key Identifier: keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/q-8ltpoThmmPBuTuT5C4cGm14Tk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.230.0/24 91.231.186.0/24 194.213.18.0/24 195.54.161.0/24 IPv6: 2a10:1fc0:7::/48 2a10:1fc0:a::/48 Signature Algorithm: sha256WithRSAEncryption 6f:4e:da:5f:37:84:16:ee:a7:2e:67:4b:2f:5d:96:f0:a0:53: 2f:42:67:eb:26:8e:58:05:83:54:17:31:37:d3:82:7e:76:ca: c6:7f:08:21:ef:1e:ee:6d:92:bf:11:0a:89:2f:59:c4:ec:58: 2c:76:67:30:9a:05:de:23:36:b6:cd:90:97:fe:d1:0f:14:b8: 24:5b:67:93:4d:84:97:75:c4:76:2d:a0:f3:fd:34:90:68:9f: 79:da:b3:09:eb:f5:8e:5e:25:1c:d8:02:ca:24:53:cc:66:76: 40:d9:d5:57:6a:e0:80:4f:42:c2:a1:f9:6e:35:35:cf:9c:e9: a6:0d:f9:75:6f:23:e4:77:27:49:b6:46:ba:2f:58:e6:2e:a7: 65:2a:35:54:c3:f2:b0:9c:c0:65:81:b6:67:4e:19:4d:6b:b4: 9a:f2:de:f9:a4:c9:ca:6a:68:4d:9d:1d:b3:25:8c:74:2f:e4: da:32:de:6c:2a:c2:e2:17:cd:af:73:2e:89:30:a9:bb:12:2c: 28:94:30:a6:84:d9:79:ba:36:19:e5:c1:84:74:ff:4e:01:78: 39:d4:35:6e:62:0b:cb:bd:b8:ea:1d:c6:89:de:0d:3c:ca:47: 4a:f2:64:f2:c6:b3:dc:be:e4:58:0b:33:54:1a:67:0e:79:52: ec:ee:07:a6 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt8EnGBf5UdzifGr9Oby0KBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NzMyMGQwMzA5MzAxNzhlNmY3Y2VlZjkxZDJhYjg3ODRk M2RjMTYwHhcNMjYwMTAyMDAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmVmMjViNjlhMTM4NjY5OGYwNmU0ZWU0ZjkwYjg3MDY5YjVlMTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaxFHHcZ1bm5lA915knsfdBMD6wW z/JSHUuQ5qAxjljqc5ID577hmh5FTMWapO8Lrt5Vh+FQIySRBO+I8F/nMIoyJNGc SVhvyUdlyVLSviES6LzFR7TIvSb+IMKxM1iMPY77nvpx+EijzB/dKpbzLywffG1S qVQ28Nzut8bEhiJGjISBs/slrh+EHwz9fujPjxRf8xqnBZG473nv8BMVimqQxT7Z zfvRSIx9YuDcY35xBegC1StTvM4WrNb4RbzhDBC9zG6zGcNVepa6WPxioXhYpX2K FDm0tolcN2rMkkKqvnbaP0PcUCn5BRQiVE/87FgmigJFnxXY7AIq/6DEiwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFKvvJbaaE4Zpjwbk7k+QuHBpteE5MB8GA1UdIwQY MBaAFJRzINAwkwF45vfO75HSq4eE09wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEt OGFjNGEyMTkzOGI0LzEvcS04bHRwb1RobW1QQnVUdVQ1QzRjR20xNFRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEtOGFjNGEyMTkzOGI0 LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAeBAIAATAYAwQALVbmAwQA W+e6AwQAwtUSAwQAwzahMBgEAgACMBIDBwAqEB/AAAcDBwAqEB/AAAowDQYJKoZI hvcNAQELBQADggEBAG9O2l83hBbupy5nSy9dlvCgUy9CZ+smjlgFg1QXMTfTgn52 ysZ/CCHvHu5tkr8RCokvWcTsWCx2ZzCaBd4jNrbNkJf+0Q8UuCRbZ5NNhJd1xHYt oPP9NJBon3naswnr9Y5eJRzYAsokU8xmdkDZ1Vdq4IBPQsKh+W41Nc+c6aYN+XVv I+R3J0m2RrovWOYup2UqNVTD8rCcwGWBtmdOGU1rtJry3vmkycpqaE2dHbMljHQv 5Noy3mwqwuIXza9zLokwqbsSLCiUMKaE2Xm6NhnlwYR0/04BeDnUNW5iC8u9uOod xoneDTzKR0ryZPLGs9y+5FgLM1QaZw55UuzuB6Y= -----END CERTIFICATE-----Generated at Sun Jan 25 13:04:05 2026 by rpki-client