This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/qwMC2NCtYrZV2QDu2Av1DyMlIXE.roa File: qwMC2NCtYrZV2QDu2Av1DyMlIXE.roa (raw, json) Hash identifier: pG2SeA0IgC+0M3Ig05IRMC7RLGL2RBI+OUUaT62RBBk= Subject key identifier: AB:03:02:D8:D0:AD:62:B6:55:D9:00:EE:D8:0B:F5:0F:23:25:21:71 Certificate issuer: /CN=5643415c22e141972c0d7e76c24e88b22427b024 Certificate serial: 019B7B3642EDC408E56C382099C868A863E5 Authority key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/qwMC2NCtYrZV2QDu2Av1DyMlIXE.roa Signing time: Thu 01 Jan 2026 20:18:32 +0000 ROA not before: Thu 01 Jan 2026 20:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8265 IP address blocks: 185.28.52.0/22 maxlen: 24 195.96.192.0/19 maxlen: 24 2a02:2888::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:42:ed:c4:08:e5:6c:38:20:99:c8:68:a8:63:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5643415c22e141972c0d7e76c24e88b22427b024 Validity Not Before: Jan 1 20:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab0302d8d0ad62b655d900eed80bf50f23252171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:09:e3:9d:42:70:ac:f8:74:ed:b7:7d:73:c9: 68:d0:1f:6f:31:13:bc:8d:5a:d8:15:53:a8:76:c1: 16:88:e1:1f:76:2a:fd:5e:2b:72:ed:34:4b:cf:98: 65:ce:7f:66:f0:4b:ad:76:02:48:a8:c7:fe:c1:2e: 1f:24:7a:90:6c:fe:c4:65:aa:15:31:b5:ff:33:a1: a0:18:f8:10:33:81:78:d0:80:a3:ca:23:5a:6d:59: 1f:36:b0:0e:8d:98:b5:27:ab:be:7a:3d:d9:9f:8a: e1:fe:b8:8b:e9:6c:7c:00:bf:ae:6c:8e:30:df:f4: 8d:7b:49:0a:ee:5f:dc:54:c0:45:69:5d:e7:ca:f8: 98:d5:4e:97:c6:c9:40:08:2e:f7:0d:5e:37:96:39: 8b:4d:93:c3:60:b6:91:8c:8e:79:09:5b:5d:6a:75: 47:1a:4d:6b:ed:ac:76:5f:59:3a:9f:55:92:6e:32: 01:4f:b6:a8:a6:16:29:50:a0:1a:10:92:0a:26:75: 26:fd:bf:2d:45:59:b2:77:86:64:42:de:3c:7f:2c: cf:70:3f:12:6c:f5:54:e7:19:1d:e8:b2:10:16:6d: 7d:bb:b0:d5:ac:44:c9:48:53:77:cb:c2:70:4a:3e: 28:5f:77:7d:dd:6c:fd:dd:3e:89:0c:f9:52:83:b3: e8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:03:02:D8:D0:AD:62:B6:55:D9:00:EE:D8:0B:F5:0F:23:25:21:71 X509v3 Authority Key Identifier: keyid:56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/qwMC2NCtYrZV2QDu2Av1DyMlIXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.28.52.0/22 195.96.192.0/19 IPv6: 2a02:2888::/32 Signature Algorithm: sha256WithRSAEncryption 1c:d3:d3:3b:7f:1e:19:b5:1d:e1:19:29:b0:24:82:b0:9b:08: 13:f5:db:22:3a:3d:9c:83:28:aa:7a:80:e6:3c:c2:09:08:13: 66:89:c3:92:99:00:e0:cf:14:1d:34:fb:ef:59:0a:35:fb:c4: d5:1d:ae:f4:83:69:4a:88:ce:d7:f8:14:0a:32:63:2b:4c:42: af:2b:c9:8b:c3:f7:ae:ec:1f:67:ad:a0:a4:42:ad:87:44:f0: ef:1a:6b:50:c8:fd:62:af:e0:27:2d:7e:1b:2c:58:d3:55:bb: 50:f9:1f:10:57:0a:41:05:b9:c5:1b:06:82:c2:a8:40:05:90: ae:af:af:0b:79:11:32:81:41:30:72:85:ac:e8:26:23:50:4d: 82:47:64:69:62:72:51:fc:51:21:4b:da:f3:4b:8d:3c:22:cc: c2:f1:56:d9:cb:28:83:77:57:db:67:40:e6:32:91:c7:92:d8: 60:e0:f3:e3:a3:31:42:b1:aa:b9:da:6a:07:a6:e0:20:02:de: db:32:b1:ab:36:9d:92:14:37:8b:aa:e7:65:57:fc:e8:d4:5a: 71:23:33:a9:94:ba:75:77:ab:b3:7e:9f:41:99:15:60:7b:ea: 3f:74:71:87:2c:47:fc:31:01:b1:56:02:43:a0:ae:54:fb:f4: 12:76:3b:7f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NkLtxAjlbDggmchoqGPlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NDM0MTVjMjJlMTQxOTcyYzBkN2U3NmMyNGU4OGIyMjQy N2IwMjQwHhcNMjYwMTAxMjAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjAzMDJkOGQwYWQ2MmI2NTVkOTAwZWVkODBiZjUwZjIzMjUyMTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQnjnUJwrPh07bd9c8lo0B9vMRO8 jVrYFVOodsEWiOEfdir9Xity7TRLz5hlzn9m8EutdgJIqMf+wS4fJHqQbP7EZaoV MbX/M6GgGPgQM4F40ICjyiNabVkfNrAOjZi1J6u+ej3Zn4rh/riL6Wx8AL+ubI4w 3/SNe0kK7l/cVMBFaV3nyviY1U6XxslACC73DV43ljmLTZPDYLaRjI55CVtdanVH Gk1r7ax2X1k6n1WSbjIBT7aophYpUKAaEJIKJnUm/b8tRVmyd4ZkQt48fyzPcD8S bPVU5xkd6LIQFm19u7DVrETJSFN3y8JwSj4oX3d93Wz93T6JDPlSg7Po4QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKsDAtjQrWK2VdkA7tgL9Q8jJSFxMB8GA1UdIwQY MBaAFFZDQVwi4UGXLA1+dsJOiLIkJ7AkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmtOQlhDTGhRWmNzRFg1MndrNklzaVFuc0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNGM3NGEtZTNiMi00ZTA5LTg2N2Mt Zjk5NjdjM2FkM2U0LzEvcXdNQzJOQ3RZclpWMlFEdTJBdjFEeU1sSVhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9iNGM3NGEtZTNiMi00ZTA5LTg2N2MtZjk5NjdjM2FkM2U0 LzEvVmtOQlhDTGhRWmNzRFg1MndrNklzaVFuc0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuRw0AwQF w2DAMA0EAgACMAcDBQAqAiiIMA0GCSqGSIb3DQEBCwUAA4IBAQAc09M7fx4ZtR3h GSmwJIKwmwgT9dsiOj2cgyiqeoDmPMIJCBNmicOSmQDgzxQdNPvvWQo1+8TVHa70 g2lKiM7X+BQKMmMrTEKvK8mLw/eu7B9nraCkQq2HRPDvGmtQyP1ir+AnLX4bLFjT VbtQ+R8QVwpBBbnFGwaCwqhABZCur68LeREygUEwcoWs6CYjUE2CR2RpYnJR/FEh S9rzS408IszC8VbZyyiDd1fbZ0DmMpHHkthg4PPjozFCsaq52moHpuAgAt7bMrGr Np2SFDeLqudlV/zo1FpxIzOplLp1d6uzfp9BmRVge+o/dHGHLEf8MQGxVgJDoK5U +/QSdjt/ -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:09 2026 by rpki-client