This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/qkKMvBvdUjtoHS7LZo_ml5EWjhU.roa File: qkKMvBvdUjtoHS7LZo_ml5EWjhU.roa (raw, json) Hash identifier: OdU1OVMFb9qYyAUFIV2T8Avxl/qa1QKVRGQ2UMicsP8= Subject key identifier: AA:42:8C:BC:1B:DD:52:3B:68:1D:2E:CB:66:8F:E6:97:91:16:8E:15 Certificate issuer: /CN=a34e6017e1fe0393278c2859f43043b31ee6c89a Certificate serial: 019B78A30AB0992D0162D3F9EF61433A1B5A Authority key identifier: A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/qkKMvBvdUjtoHS7LZo_ml5EWjhU.roa Signing time: Thu 01 Jan 2026 08:18:29 +0000 ROA not before: Thu 01 Jan 2026 08:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202757 IP address blocks: 46.247.132.0/24 maxlen: 24 46.247.133.0/24 maxlen: 24 46.247.134.0/24 maxlen: 24 46.247.135.0/24 maxlen: 24 89.127.236.0/24 maxlen: 24 89.127.238.0/24 maxlen: 24 185.88.196.0/24 maxlen: 24 185.88.197.0/24 maxlen: 24 185.88.198.0/24 maxlen: 24 185.88.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0a:b0:99:2d:01:62:d3:f9:ef:61:43:3a:1b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a34e6017e1fe0393278c2859f43043b31ee6c89a Validity Not Before: Jan 1 08:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa428cbc1bdd523b681d2ecb668fe69791168e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0f:01:39:f3:6e:c5:b9:a9:f6:a3:19:74:c2: e8:d7:76:49:00:79:df:6d:78:a6:90:0f:cf:e6:9f: a0:11:90:a0:8d:d2:5a:73:92:ed:9d:f1:10:82:b9: 39:8d:ad:b8:84:33:c6:2d:a3:c0:92:a1:5a:0f:9d: 1f:74:6b:7f:0c:1b:ef:e5:d7:c6:28:ca:c9:20:ec: d9:5b:3f:9c:68:72:6d:89:cf:03:6d:08:ab:9d:6f: fd:07:59:af:58:b2:24:6c:52:ed:53:5b:9b:bd:a1: 30:c2:35:b2:e9:c4:81:8d:df:e9:19:5d:de:83:8d: be:b4:9a:10:8d:4b:4b:af:eb:71:6c:60:2b:9b:73: 02:4a:ed:c8:4e:63:f6:1c:18:3f:1d:ca:29:70:49: 2d:83:39:f1:89:4b:51:a1:9b:78:e3:d3:66:a2:17: fc:e9:e5:27:fe:94:5e:42:b5:d2:a0:28:71:5e:cf: 7a:80:77:3c:e8:56:a9:dc:f3:ec:09:61:2c:9f:7d: 7b:05:ce:b9:cf:ec:8e:b9:d0:d6:e5:7a:65:eb:6c: 07:0a:d7:a8:3a:91:a4:64:2a:87:ca:fa:6f:57:91: 27:1c:f7:7c:7c:c6:12:f6:6e:ce:10:03:38:50:a3: d3:c1:a0:76:cc:dd:bd:a6:86:85:3b:3d:de:7f:d3: 9f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:42:8C:BC:1B:DD:52:3B:68:1D:2E:CB:66:8F:E6:97:91:16:8E:15 X509v3 Authority Key Identifier: keyid:A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/qkKMvBvdUjtoHS7LZo_ml5EWjhU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.247.132.0/22 89.127.236.0/24 89.127.238.0/24 185.88.196.0/22 Signature Algorithm: sha256WithRSAEncryption 60:32:67:05:59:15:a8:e9:8c:c1:16:66:9d:04:e2:03:15:20: 26:5b:1b:50:95:ee:cd:a9:38:81:a6:7c:5d:55:b2:b6:27:80: de:3c:ab:da:d2:a2:27:fc:9e:cf:80:b9:8d:e6:fc:86:3e:15: 82:fe:59:00:b4:f7:5c:b8:30:f5:fd:36:66:58:db:a5:c8:a3: a9:31:47:b7:1f:61:ca:35:3b:ca:70:39:11:60:0a:28:41:35: e4:92:ed:6c:e3:83:ca:47:ec:ca:25:84:dd:80:22:89:b6:09: c9:17:e3:b6:3a:6b:a5:f8:1a:35:6e:08:02:35:e3:69:cf:29: c6:7f:53:22:e8:77:64:58:5b:7a:e5:9a:1b:d7:0a:18:6f:bc: 62:e7:f1:25:87:6c:2a:ec:d8:83:e8:41:b0:3d:6e:50:27:83: a6:df:5e:95:1f:aa:8f:f4:3f:82:68:36:1a:17:91:cf:ac:ce: 43:46:dd:44:a2:d2:ae:85:e6:be:5f:76:12:65:77:cf:8d:41: 4c:57:f5:14:e1:6e:b7:60:a6:ff:93:f2:7f:55:46:28:e5:82: 3f:6b:33:c9:ce:b5:0f:ca:a5:03:3d:0c:1c:e8:8c:c7:c3:89: 47:16:37:b0:e6:b8:1e:d2:82:ce:e0:3e:df:98:00:71:69:12: 17:16:d2:75 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4owqwmS0BYtP572FDOhtaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNGU2MDE3ZTFmZTAzOTMyNzhjMjg1OWY0MzA0M2IzMWVl NmM4OWEwHhcNMjYwMTAxMDgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTQyOGNiYzFiZGQ1MjNiNjgxZDJlY2I2NjhmZTY5NzkxMTY4ZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q8BOfNuxbmp9qMZdMLo13ZJAHnf bXimkA/P5p+gEZCgjdJac5LtnfEQgrk5ja24hDPGLaPAkqFaD50fdGt/DBvv5dfG KMrJIOzZWz+caHJtic8DbQirnW/9B1mvWLIkbFLtU1ubvaEwwjWy6cSBjd/pGV3e g42+tJoQjUtLr+txbGArm3MCSu3ITmP2HBg/HcopcEktgznxiUtRoZt449Nmohf8 6eUn/pReQrXSoChxXs96gHc86Fap3PPsCWEsn317Bc65z+yOudDW5Xpl62wHCteo OpGkZCqHyvpvV5EnHPd8fMYS9m7OEAM4UKPTwaB2zN29poaFOz3ef9OfDQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKpCjLwb3VI7aB0uy2aP5peRFo4VMB8GA1UdIwQY MBaAFKNOYBfh/gOTJ4woWfQwQ7Me5siaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzA1Z0YtSC1BNU1uakNoWjlEQkRzeDdteUpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC82ZDYyNWMtN2U2MC00NTIzLTk0OTEt ZDExMjI5OWZmNjk1LzEvcWtLTXZCdmRVanRvSFM3TFpvX21sNUVXamhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC82ZDYyNWMtN2U2MC00NTIzLTk0OTEtZDExMjI5OWZmNjk1 LzEvbzA1Z0YtSC1BNU1uakNoWjlEQkRzeDdteUpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLveEAwQA WX/sAwQAWX/uAwQCuVjEMA0GCSqGSIb3DQEBCwUAA4IBAQBgMmcFWRWo6YzBFmad BOIDFSAmWxtQle7NqTiBpnxdVbK2J4DePKva0qIn/J7PgLmN5vyGPhWC/lkAtPdc uDD1/TZmWNulyKOpMUe3H2HKNTvKcDkRYAooQTXkku1s44PKR+zKJYTdgCKJtgnJ F+O2Omul+Bo1bggCNeNpzynGf1Mi6HdkWFt65Zob1woYb7xi5/Elh2wq7NiD6EGw PW5QJ4Om316VH6qP9D+CaDYaF5HPrM5DRt1EotKuhea+X3YSZXfPjUFMV/UU4W63 YKb/k/J/VUYo5YI/azPJzrUPyqUDPQwc6IzHw4lHFjew5rge0oLO4D7fmABxaRIX FtJ1 -----END CERTIFICATE-----Generated at Mon Jan 26 07:10:00 2026 by rpki-client