This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/pqPIqfuErD5mbtSplqtkA0QY6aE.roa File: pqPIqfuErD5mbtSplqtkA0QY6aE.roa (raw, json) Hash identifier: 6vvDbqxKmpWsHd5Wn/2ZoKbmAa7IUMY34ZPHLrIESc8= Subject key identifier: A6:A3:C8:A9:FB:84:AC:3E:66:6E:D4:A9:96:AB:64:03:44:18:E9:A1 Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E3894578B470EDC9941129E6CB8C358 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/pqPIqfuErD5mbtSplqtkA0QY6aE.roa Signing time: Fri 02 Jan 2026 10:19:55 +0000 ROA not before: Fri 02 Jan 2026 10:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34624 IP address blocks: 62.80.124.0/24 maxlen: 24 62.80.125.0/24 maxlen: 24 62.80.126.0/24 maxlen: 24 62.80.127.0/24 maxlen: 24 62.93.200.0/24 maxlen: 24 62.93.216.0/23 maxlen: 23 82.98.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:94:57:8b:47:0e:dc:99:41:12:9e:6c:b8:c3:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6a3c8a9fb84ac3e666ed4a996ab64034418e9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5f:52:1c:f6:75:d3:f1:f0:09:84:07:31:6e: 05:bd:f5:d3:2a:26:73:5b:a2:7c:6c:d1:9e:2e:5c: de:a7:b6:f9:f0:ce:ae:61:69:4a:4f:70:21:bc:72: f7:8f:d8:40:51:24:8b:6a:f9:95:c7:d1:35:92:88: 76:37:92:8c:2a:f2:e1:55:b5:07:ce:c7:89:48:73: 69:3a:b1:54:4b:6d:63:5b:94:2b:6b:5f:43:55:2b: 20:a9:98:ae:fa:44:26:78:a3:b8:03:d6:b0:92:fb: da:fd:06:d6:92:2f:95:2a:80:e5:84:09:87:a1:90: 18:cc:7f:73:45:da:be:80:47:8b:1d:cb:bb:70:c8: 8e:f4:43:d1:30:3f:e5:be:cf:f9:cc:4a:56:38:fd: 11:4d:10:8d:a6:80:9b:c6:36:8e:e2:dc:7c:87:5d: 4b:5a:4e:d0:f1:47:9e:12:6e:54:c6:e7:b1:e0:c3: fe:5a:a6:a3:e4:e9:52:17:6d:9e:c6:d1:99:c2:64: 93:9e:e5:ea:8e:2f:ed:5a:7f:f2:89:22:fa:72:9d: f6:23:ee:ef:0f:c1:df:07:e8:2b:ec:62:bd:5f:14: 6f:5b:5e:96:aa:f7:c8:e7:6c:a6:8f:28:d1:29:45: 88:aa:1e:d0:84:4f:73:f6:92:ce:74:0d:11:93:d6: 84:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A3:C8:A9:FB:84:AC:3E:66:6E:D4:A9:96:AB:64:03:44:18:E9:A1 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/pqPIqfuErD5mbtSplqtkA0QY6aE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.80.124.0/22 62.93.200.0/24 62.93.216.0/23 82.98.201.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:cf:01:a0:9f:80:66:a9:b6:c2:9f:fe:2b:56:38:49:9f:e1: e7:c0:79:c4:cb:ad:80:26:6a:3f:91:28:13:b4:7a:43:b0:4e: 61:32:d9:da:db:59:ae:ac:a8:bc:05:19:46:31:8e:a4:a2:47: 38:32:ba:f2:4b:e0:a6:d3:bb:ff:17:5b:03:ce:90:3d:4b:bb: f2:fc:96:6b:db:a3:75:5c:7d:27:ec:9e:80:d3:a4:1c:54:e5: 13:3b:19:ca:b1:12:33:1b:36:6b:08:d1:d8:59:1a:69:88:02: fa:1d:bf:aa:f3:99:83:92:1b:ef:72:a4:96:a2:13:4e:08:e3: 54:76:de:00:a0:ad:5a:ef:4d:a8:cc:2c:d4:27:7a:ba:09:d3: 0f:10:11:d4:e3:53:18:2d:74:24:f6:7b:38:f1:ab:f8:3c:f9: 27:51:0b:37:7f:08:2f:99:86:b6:84:4f:e7:e5:34:55:6a:6f: 18:1e:9c:fa:9c:cb:a5:af:4e:37:c3:c5:c1:e9:a9:c0:c0:e0: 73:49:51:e3:5a:20:e7:2c:a1:37:3b:fd:bf:e4:40:cf:90:85: c1:ed:30:70:35:e9:e9:07:8e:52:23:9d:fc:aa:9e:2d:57:ba: dc:68:ab:3f:fb:73:08:19:11:51:fd:c6:67:da:ce:40:57:15: a4:a1:10:15 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OJRXi0cO3JlBEp5suMNYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmEzYzhhOWZiODRhYzNlNjY2ZWQ0YTk5NmFiNjQwMzQ0MThlOWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv19SHPZ10/HwCYQHMW4FvfXTKiZz W6J8bNGeLlzep7b58M6uYWlKT3AhvHL3j9hAUSSLavmVx9E1koh2N5KMKvLhVbUH zseJSHNpOrFUS21jW5Qra19DVSsgqZiu+kQmeKO4A9awkvva/QbWki+VKoDlhAmH oZAYzH9zRdq+gEeLHcu7cMiO9EPRMD/lvs/5zEpWOP0RTRCNpoCbxjaO4tx8h11L Wk7Q8UeeEm5Uxuex4MP+Wqaj5OlSF22extGZwmSTnuXqji/tWn/yiSL6cp32I+7v D8HfB+gr7GK9XxRvW16WqvfI52ymjyjRKUWIqh7QhE9z9pLOdA0Rk9aE5wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKajyKn7hKw+Zm7UqZarZANEGOmhMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvcHFQSXFmdUVyRDVtYnRTcGxxdGtBMFFZNmFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCPlB8AwQA Pl3IAwQBPl3YAwQAUmLJMA0GCSqGSIb3DQEBCwUAA4IBAQA6zwGgn4BmqbbCn/4r VjhJn+HnwHnEy62AJmo/kSgTtHpDsE5hMtna21murKi8BRlGMY6kokc4MrryS+Cm 07v/F1sDzpA9S7vy/JZr26N1XH0n7J6A06QcVOUTOxnKsRIzGzZrCNHYWRppiAL6 Hb+q85mDkhvvcqSWohNOCONUdt4AoK1a702ozCzUJ3q6CdMPEBHU41MYLXQk9ns4 8av4PPknUQs3fwgvmYa2hE/n5TRVam8YHpz6nMulr043w8XB6anAwOBzSVHjWiDn LKE3O/2/5EDPkIXB7TBwNenpB45SI538qp4tV7rcaKs/+3MIGRFR/cZn2s5AVxWk oRAV -----END CERTIFICATE-----Generated at Mon Jan 26 08:20:41 2026 by rpki-client