This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/quu8bKvWsrapvb9agdJWOzx8vCU.roa File: quu8bKvWsrapvb9agdJWOzx8vCU.roa (raw, json) Hash identifier: GuhXE2SWFgsGNwW07uZU74XAQZgfH3lzNUDa1zFBJKQ= Subject key identifier: AA:EB:BC:6C:AB:D6:B2:B6:A9:BD:BF:5A:81:D2:56:3B:3C:7C:BC:25 Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Certificate serial: 019B77C6771B8A36FD46DD64A8BFA66A9F41 Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/quu8bKvWsrapvb9agdJWOzx8vCU.roa Signing time: Thu 01 Jan 2026 04:17:33 +0000 ROA not before: Thu 01 Jan 2026 04:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197897 IP address blocks: 31.211.128.0/19 maxlen: 24 95.158.148.0/24 maxlen: 24 95.158.151.0/24 maxlen: 24 151.252.192.0/22 maxlen: 24 151.252.196.0/23 maxlen: 24 151.252.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:77:1b:8a:36:fd:46:dd:64:a8:bf:a6:6a:9f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Validity Not Before: Jan 1 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aaebbc6cabd6b2b6a9bdbf5a81d2563b3c7cbc25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dc:0c:0a:f2:ab:dc:9b:4a:26:f8:9c:b0:f7: d6:b3:d4:94:58:5e:e3:d1:8b:e3:ce:68:a7:a8:b3: c2:c2:e8:66:d5:db:70:85:6b:b2:7d:45:38:b5:38: 49:16:cb:89:b2:bf:66:78:95:f6:6b:88:6e:03:06: a2:0c:4b:6b:71:5e:0f:a0:1c:59:c3:15:19:84:95: 87:46:24:a4:28:a1:fb:9f:0d:1a:b0:20:98:92:9b: 7f:52:36:85:ec:e4:fc:9d:49:0c:f2:d2:0b:b2:68: 59:5d:86:f2:5b:e4:89:bc:d3:fc:93:f4:5e:7b:01: 42:c2:4a:19:1e:95:e0:11:67:ce:9b:0e:cc:8e:31: cd:dc:54:47:28:94:23:61:9e:b9:55:40:ca:ff:1e: b4:40:fa:ba:8f:51:fc:35:e9:7f:c9:92:56:06:33: 8c:01:0e:e4:b2:29:8d:87:b9:00:c4:ea:07:82:ee: 98:eb:5c:9f:2a:c3:f2:6b:93:56:75:dc:25:d5:93: da:55:2e:62:90:b8:e1:ef:16:4d:08:51:fd:e7:93: 8e:9e:b4:5f:f0:28:15:aa:c9:ef:ff:2f:15:67:57: f9:e7:f2:9b:a1:0e:f3:8b:3b:c7:d8:f5:23:57:f0: 54:a3:48:3b:3e:09:aa:f1:e8:a8:4b:ac:30:8e:c1: b5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EB:BC:6C:AB:D6:B2:B6:A9:BD:BF:5A:81:D2:56:3B:3C:7C:BC:25 X509v3 Authority Key Identifier: keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/quu8bKvWsrapvb9agdJWOzx8vCU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.211.128.0/19 95.158.148.0/24 95.158.151.0/24 151.252.192.0-151.252.197.255 151.252.200.0/21 Signature Algorithm: sha256WithRSAEncryption 3b:d5:66:45:f7:f3:6c:2b:47:76:50:7c:57:2a:86:02:d1:28: d6:28:ff:29:56:1e:7e:61:db:85:19:c4:06:9c:8f:7f:8e:3b: 0d:19:91:63:aa:70:d9:39:83:35:8e:49:c0:d8:3f:15:1c:09: 92:83:75:15:da:3a:c6:6f:13:53:21:49:62:4f:6d:8f:51:a1: 26:05:48:27:b3:23:33:07:63:24:92:f7:24:40:f7:0d:cf:82: 23:56:d0:61:d7:f0:45:35:8f:63:89:ac:13:02:77:f5:50:dd: f8:0d:7f:f8:bd:48:2d:b6:c0:6a:be:f0:c4:42:1f:69:89:5b: 4b:35:c5:9f:85:4f:ca:fe:5a:ab:21:f1:d5:21:86:03:70:1b: a4:a2:0e:79:ef:c5:b0:7d:7e:36:d8:7b:e0:32:d1:47:ff:48: 38:dd:81:19:b3:a8:d5:02:e1:df:01:b4:85:42:d2:b0:c3:0a: fc:0d:b5:55:8f:ab:b1:71:bd:ec:53:e9:95:96:08:0a:ff:21: 3a:a9:19:bb:b8:05:f6:0a:1c:60:33:ac:dd:e1:4e:e8:65:29: 9c:e4:87:c4:da:ac:52:d5:37:3c:f9:6a:80:ee:bc:61:e7:6d: a9:6b:18:a1:0a:4e:3f:dd:e3:f9:87:96:e7:73:b7:dd:46:6d: ec:04:4c:49 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt3xncbijb9Rt1kqL+map9BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0 MzQwYjMwHhcNMjYwMTAxMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWViYmM2Y2FiZDZiMmI2YTliZGJmNWE4MWQyNTYzYjNjN2NiYzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNwMCvKr3JtKJvicsPfWs9SUWF7j 0YvjzminqLPCwuhm1dtwhWuyfUU4tThJFsuJsr9meJX2a4huAwaiDEtrcV4PoBxZ wxUZhJWHRiSkKKH7nw0asCCYkpt/UjaF7OT8nUkM8tILsmhZXYbyW+SJvNP8k/Re ewFCwkoZHpXgEWfOmw7MjjHN3FRHKJQjYZ65VUDK/x60QPq6j1H8Nel/yZJWBjOM AQ7ksimNh7kAxOoHgu6Y61yfKsPya5NWddwl1ZPaVS5ikLjh7xZNCFH955OOnrRf 8CgVqsnv/y8VZ1f55/KboQ7zizvH2PUjV/BUo0g7Pgmq8eioS6wwjsG1pwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFKrrvGyr1rK2qb2/WoHSVjs8fLwlMB8GA1UdIwQY MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt NGE2Zjg2ODMyNjVjLzEvcXV1OGJLdldzcmFwdmI5YWdkSldPeng4dkNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQFH9OAAwQA X56UAwQAX56XMAwDBAaX/MADBAGX/MQDBAOX/MgwDQYJKoZIhvcNAQELBQADggEB ADvVZkX382wrR3ZQfFcqhgLRKNYo/ylWHn5h24UZxAacj3+OOw0ZkWOqcNk5gzWO ScDYPxUcCZKDdRXaOsZvE1MhSWJPbY9RoSYFSCezIzMHYySS9yRA9w3PgiNW0GHX 8EU1j2OJrBMCd/VQ3fgNf/i9SC22wGq+8MRCH2mJW0s1xZ+FT8r+Wqsh8dUhhgNw G6SiDnnvxbB9fjbYe+Ay0Uf/SDjdgRmzqNUC4d8BtIVC0rDDCvwNtVWPq7FxvexT 6ZWWCAr/ITqpGbu4BfYKHGAzrN3hTuhlKZzkh8TarFLVNzz5aoDuvGHnbalrGKEK Tj/d4/mHludzt91GbewETEk= -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:59 2026 by rpki-client