This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/qhGEEQ0HGWcbgHqPIorSOb9nl0Q.roa File: qhGEEQ0HGWcbgHqPIorSOb9nl0Q.roa (raw, json) Hash identifier: DggCFNvWeU+DQZNC4vJn2wU5MlmsNXtXoMhViia2938= Subject key identifier: AA:11:84:11:0D:07:19:67:1B:80:7A:8F:22:8A:D2:39:BF:67:97:44 Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361 Certificate serial: 019B7758CD7CDBF07243EFC1DB03C1222311 Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/qhGEEQ0HGWcbgHqPIorSOb9nl0Q.roa Signing time: Thu 01 Jan 2026 02:17:46 +0000 ROA not before: Thu 01 Jan 2026 02:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204196 IP address blocks: 80.209.252.0/23 maxlen: 23 185.145.128.0/22 maxlen: 22 185.207.204.0/22 maxlen: 22 185.217.92.0/22 maxlen: 22 185.221.200.0/22 maxlen: 22 185.224.80.0/22 maxlen: 22 185.235.176.0/22 maxlen: 22 185.243.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:cd:7c:db:f0:72:43:ef:c1:db:03:c1:22:23:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361 Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa1184110d0719671b807a8f228ad239bf679744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0d:3e:7e:80:ba:66:64:24:09:4e:74:ef:be: fc:69:37:1d:d1:06:9c:11:da:8d:a3:6a:73:1e:01: 28:f8:d1:e1:16:8f:0b:85:3a:3c:68:d6:85:54:ee: c9:e1:7e:56:c2:bc:57:2e:ec:1e:a4:cd:d7:10:09: d2:f8:67:2b:0a:a4:6f:fc:95:03:5b:59:84:20:8f: 29:34:2a:e4:70:b2:53:c7:c6:52:d0:4a:9b:a5:2c: 70:78:5f:30:18:6d:43:44:74:a0:d9:c8:20:84:6c: a0:1d:e5:50:5d:17:0a:c5:16:83:27:21:c3:f1:f1: cd:00:7b:f4:85:49:b0:45:a8:52:d0:cb:f2:ff:e4: 42:0d:c0:6a:c3:e3:d7:67:da:7e:0a:97:69:62:a9: fe:20:39:07:96:7f:51:d1:c1:d1:48:25:e3:48:2b: 67:86:5f:76:0e:71:44:16:9e:cc:be:a9:5b:91:91: cd:37:93:06:82:53:e6:9c:0f:5b:02:3d:69:a4:59: 5b:5a:7d:97:78:30:ed:58:9b:e4:2d:e5:0e:90:f2: 2d:d9:f4:f8:49:89:c2:b1:12:b7:e3:33:7f:c9:0e: c0:22:40:f9:20:70:07:90:d4:93:4b:c8:f2:a2:82: 1f:e5:76:c5:e7:53:85:c4:d5:fc:c5:1c:e6:09:61: ae:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:11:84:11:0D:07:19:67:1B:80:7A:8F:22:8A:D2:39:BF:67:97:44 X509v3 Authority Key Identifier: keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/qhGEEQ0HGWcbgHqPIorSOb9nl0Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.209.252.0/23 185.145.128.0/22 185.207.204.0/22 185.217.92.0/22 185.221.200.0/22 185.224.80.0/22 185.235.176.0/22 185.243.188.0/22 Signature Algorithm: sha256WithRSAEncryption 58:0f:49:57:a9:fe:c7:fb:04:2e:a1:6c:31:f6:d0:1e:5e:a2: 33:c0:2f:8b:20:93:c2:34:cc:6a:52:07:58:aa:f2:06:1c:35: e6:0e:c8:74:0a:43:70:59:02:2f:a4:ec:bd:90:1a:e4:d3:af: 0e:d6:a6:78:e4:2a:92:57:49:ae:6f:df:44:f9:89:87:51:44: e5:9b:ce:e5:66:81:74:f2:46:e0:5b:e4:da:8a:fc:95:35:4d: 4c:77:a3:b4:80:06:16:68:05:c7:7f:c3:a7:f6:d9:47:0c:4a: 25:72:87:59:f5:1c:0b:c3:36:55:20:0c:22:02:95:68:ac:5b: ea:ce:6a:bc:50:64:5e:f8:6a:df:0c:d3:2b:7a:48:3b:27:9c: 82:3e:57:47:0b:84:7b:b3:b1:b2:52:1a:02:4a:90:53:e9:a9: 9e:65:a7:4d:f9:e6:ba:36:c0:00:1a:14:c3:9d:b6:42:25:cf: 2f:df:05:d3:43:65:75:6e:82:b8:81:6b:e1:33:f4:c1:43:cd: 2e:7e:30:98:19:a1:ea:a6:fb:7a:dd:c0:08:2f:cf:9e:bb:d8: 91:e7:62:9b:65:67:13:6a:c8:1c:0c:0d:65:4f:9a:95:e5:75: 00:c3:3a:89:8c:e2:0c:69:51:52:b7:95:ac:19:c1:6b:d5:2f: 3f:27:31:03 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt3WM182/ByQ+/B2wPBIiMRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMmU3MmFiZjdiMTcyOGZkYTZhYTBiMDQxM2Q4ODU0ODEy ZWEzNjEwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTExODQxMTBkMDcxOTY3MWI4MDdhOGYyMjhhZDIzOWJmNjc5NzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Q0+foC6ZmQkCU507778aTcd0Qac EdqNo2pzHgEo+NHhFo8LhTo8aNaFVO7J4X5WwrxXLuwepM3XEAnS+GcrCqRv/JUD W1mEII8pNCrkcLJTx8ZS0EqbpSxweF8wGG1DRHSg2cgghGygHeVQXRcKxRaDJyHD 8fHNAHv0hUmwRahS0Mvy/+RCDcBqw+PXZ9p+CpdpYqn+IDkHln9R0cHRSCXjSCtn hl92DnFEFp7MvqlbkZHNN5MGglPmnA9bAj1ppFlbWn2XeDDtWJvkLeUOkPIt2fT4 SYnCsRK34zN/yQ7AIkD5IHAHkNSTS8jyooIf5XbF51OFxNX8xRzmCWGuawIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFKoRhBENBxlnG4B6jyKK0jm/Z5dEMB8GA1UdIwQY MBaAFPoucqv3sXKP2mqgsEE9iFSBLqNhMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1pNXlxX2V4Y29fYWFxQ3dRVDJJVklFdW8yRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvZjYxNTkxLTdjYTgtNGE5YS04OTlm LWEzNjZkYTI1MWE4My8xL3FoR0VFUTBIR1djYmdIcVBJb3JTT2I5bmwwUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWMvZjYxNTkxLTdjYTgtNGE5YS04OTlmLWEzNjZkYTI1MWE4 My8xLzEtaTV5cV9leGNvX2FhcUN3UVQySVZJRXVvMkUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwSQYIKwYBBQUHAQcBAf8EOjA4MDYEAgABMDADBAFQ0fwD BAK5kYADBAK5z8wDBAK52VwDBAK53cgDBAK54FADBAK567ADBAK587wwDQYJKoZI hvcNAQELBQADggEBAFgPSVep/sf7BC6hbDH20B5eojPAL4sgk8I0zGpSB1iq8gYc NeYOyHQKQ3BZAi+k7L2QGuTTrw7WpnjkKpJXSa5v30T5iYdRROWbzuVmgXTyRuBb 5NqK/JU1TUx3o7SABhZoBcd/w6f22UcMSiVyh1n1HAvDNlUgDCIClWisW+rOarxQ ZF74at8M0yt6SDsnnII+V0cLhHuzsbJSGgJKkFPpqZ5lp0355ro2wAAaFMOdtkIl zy/fBdNDZXVugriBa+Ez9MFDzS5+MJgZoeqm+3rdwAgvz5672JHnYptlZxNqyBwM DWVPmpXldQDDOomM4gxpUVK3lawZwWvVLz8nMQM= -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:24 2026 by rpki-client