This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/zqqNdPd2jN90nFzH_xKr7SBp6k0.roa File: zqqNdPd2jN90nFzH_xKr7SBp6k0.roa (raw, json) Hash identifier: 4bJ5x444099qNpfBFVyMLNFC0y78xdbHZoBQBCBD0uM= Subject key identifier: CE:AA:8D:74:F7:76:8C:DF:74:9C:5C:C7:FF:12:AB:ED:20:69:EA:4D Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410 Certificate serial: 019B78350E5773834C721BBB37EC563A45B8 Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/zqqNdPd2jN90nFzH_xKr7SBp6k0.roa Signing time: Thu 01 Jan 2026 06:18:21 +0000 ROA not before: Thu 01 Jan 2026 06:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204144 IP address blocks: 45.80.240.0/22 maxlen: 22 45.85.212.0/22 maxlen: 22 45.88.252.0/22 maxlen: 22 193.108.183.0/24 maxlen: 24 193.108.198.0/24 maxlen: 24 193.108.208.0/24 maxlen: 24 193.108.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:0e:57:73:83:4c:72:1b:bb:37:ec:56:3a:45:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410 Validity Not Before: Jan 1 06:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ceaa8d74f7768cdf749c5cc7ff12abed2069ea4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:92:42:2d:58:b9:5f:8b:75:2d:70:90:f6:bb: 5f:e7:5e:89:e2:88:8c:da:39:5f:58:f3:17:a1:f2: 8e:09:fa:09:a5:37:8a:0e:6b:85:8b:63:69:b4:73: 09:33:7b:10:3d:3f:8c:18:db:5b:95:b7:c7:1b:23: 46:cc:cb:e2:a5:ac:f9:c0:6a:da:d4:5a:00:04:f5: 1d:6d:8b:7e:c0:56:8f:fc:49:35:df:a5:23:55:11: d8:49:85:ae:a0:f9:a2:4d:53:36:65:7f:be:d3:ba: 9a:66:c6:5a:de:db:b2:a9:79:81:e2:f3:ec:43:d6: 1c:e6:d0:46:3d:66:b6:39:31:f8:c7:25:2d:f2:36: 75:9e:58:22:da:b6:57:2b:b2:b5:3d:00:e0:ec:d7: dd:b5:8c:51:95:18:ab:13:ac:1f:6f:43:b5:92:45: 44:78:04:f5:87:a5:f7:e8:08:75:15:41:ca:df:ee: e2:5c:d5:d8:6f:67:dc:d6:ee:1b:cf:4e:c5:8e:c7: 9a:60:2a:b7:0f:d2:d2:c4:2a:db:82:fb:25:b6:05: 80:4d:79:e8:08:04:54:02:19:a6:df:bd:5e:dd:51: c1:4b:cd:b1:6e:e0:29:5a:ea:aa:95:94:1d:61:d5: ca:a1:b0:55:84:7a:ef:b7:a9:58:b0:2c:51:07:6d: 42:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AA:8D:74:F7:76:8C:DF:74:9C:5C:C7:FF:12:AB:ED:20:69:EA:4D X509v3 Authority Key Identifier: keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/zqqNdPd2jN90nFzH_xKr7SBp6k0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.240.0/22 45.85.212.0/22 45.88.252.0/22 193.108.183.0/24 193.108.198.0/24 193.108.208.0/24 193.108.211.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:23:2b:88:a3:26:97:f9:2d:54:ba:c2:49:42:88:20:b1:2a: 44:ae:d1:96:92:26:2b:72:cd:a2:3e:06:92:ff:82:ed:c2:f7: d2:cd:9b:c3:2e:37:99:22:5c:cb:1b:6c:57:5c:b3:1a:0b:84: 0d:15:b1:02:05:2d:e5:5b:e8:70:39:76:c8:6a:93:95:6a:8d: a9:fe:4e:5f:96:0b:e3:2c:6d:24:22:4b:22:2e:a9:58:2a:db: 0f:b1:54:25:10:be:d5:dd:86:c2:87:69:3e:ae:5c:b4:54:af: c0:b2:14:a8:c4:f1:79:84:38:04:99:e5:5c:9b:de:b0:da:1b: 5d:09:21:14:3b:fe:c8:e7:1e:56:aa:db:a5:c0:78:88:6a:e7: d1:ac:cc:98:1b:fb:12:de:58:21:94:63:2f:b6:30:4b:d0:a8: 28:23:98:03:89:ce:21:2e:da:d2:1b:1e:e5:f3:8f:15:84:1f: e8:3c:ab:f8:de:d7:e7:54:5f:d4:eb:4e:2b:ae:32:62:81:c1: 2f:63:c8:06:1e:25:23:ca:f9:ea:fc:59:38:5c:e2:03:41:5c: ef:ea:0f:9c:f4:39:36:85:a6:4c:15:c4:e6:1b:b4:28:33:66: 75:03:7e:3e:a6:ca:bb:9c:f7:dd:0d:8e:86:52:85:f8:ac:62: a7:af:c7:11 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt4NQ5Xc4NMchu7N+xWOkW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNmM0OGNjY2NlMzIxZWMxODcwMjk1N2IzOTYzODFhMWYx YTA0MTAwHhcNMjYwMTAxMDYxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWFhOGQ3NGY3NzY4Y2RmNzQ5YzVjYzdmZjEyYWJlZDIwNjllYTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZJCLVi5X4t1LXCQ9rtf516J4oiM 2jlfWPMXofKOCfoJpTeKDmuFi2NptHMJM3sQPT+MGNtblbfHGyNGzMvipaz5wGra 1FoABPUdbYt+wFaP/Ek136UjVRHYSYWuoPmiTVM2ZX++07qaZsZa3tuyqXmB4vPs Q9Yc5tBGPWa2OTH4xyUt8jZ1nlgi2rZXK7K1PQDg7NfdtYxRlRirE6wfb0O1kkVE eAT1h6X36Ah1FUHK3+7iXNXYb2fc1u4bz07FjseaYCq3D9LSxCrbgvsltgWATXno CARUAhmm371e3VHBS82xbuApWuqqlZQdYdXKobBVhHrvt6lYsCxRB21CvwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFM6qjXT3dozfdJxcx/8Sq+0gaepNMB8GA1UdIwQY MBaAFBxsSMzM4yHsGHApV7OWOBofGgQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84ZTRlNjgtYmQyYS00ZGMyLWFhZTYt YTA1NjBhYzgyYmE3LzEvenFxTmRQZDJqTjkwbkZ6SF94S3I3U0JwNmswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS84ZTRlNjgtYmQyYS00ZGMyLWFhZTYtYTA1NjBhYzgyYmE3 LzEvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCLVDwAwQC LVXUAwQCLVj8AwQAwWy3AwQAwWzGAwQAwWzQAwQAwWzTMA0GCSqGSIb3DQEBCwUA A4IBAQAuIyuIoyaX+S1UusJJQoggsSpErtGWkiYrcs2iPgaS/4LtwvfSzZvDLjeZ IlzLG2xXXLMaC4QNFbECBS3lW+hwOXbIapOVao2p/k5flgvjLG0kIksiLqlYKtsP sVQlEL7V3YbCh2k+rly0VK/AshSoxPF5hDgEmeVcm96w2htdCSEUO/7I5x5Wqtul wHiIaufRrMyYG/sS3lghlGMvtjBL0KgoI5gDic4hLtrSGx7l848VhB/oPKv43tfn VF/U604rrjJigcEvY8gGHiUjyvnq/Fk4XOIDQVzv6g+c9Dk2haZMFcTmG7QoM2Z1 A34+psq7nPfdDY6GUoX4rGKnr8cR -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:53 2026 by rpki-client