This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/qxD1W6hqRWConVGSQ-eLV8mf_vc.roa File: qxD1W6hqRWConVGSQ-eLV8mf_vc.roa (raw, json) Hash identifier: 82D2ADqVdGbGAgEAlHSx5QuT441/zoNjvjslWGw4J00= Subject key identifier: AB:10:F5:5B:A8:6A:45:60:A8:9D:51:92:43:E7:8B:57:C9:9F:FE:F7 Certificate issuer: /CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53 Certificate serial: 019B7F13A30BD31EBF5A3D0451E53EF829EE Authority key identifier: 78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/qxD1W6hqRWConVGSQ-eLV8mf_vc.roa Signing time: Fri 02 Jan 2026 14:19:11 +0000 ROA not before: Fri 02 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59794 IP address blocks: 185.211.88.0/22 maxlen: 22 185.211.88.0/23 maxlen: 23 185.211.88.0/24 maxlen: 24 185.211.89.0/24 maxlen: 24 185.211.90.0/23 maxlen: 23 185.211.90.0/24 maxlen: 24 185.211.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:a3:0b:d3:1e:bf:5a:3d:04:51:e5:3e:f8:29:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53 Validity Not Before: Jan 2 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab10f55ba86a4560a89d519243e78b57c99ffef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:03:1b:68:0d:90:94:2d:8f:90:3e:39:b4:46: fd:06:9d:1c:da:f0:ea:cf:de:6b:06:f1:35:cf:be: 19:f6:80:b6:fd:5d:ff:f6:a6:61:08:f3:ea:2e:a3: 5c:6d:cf:ea:e7:e6:c5:f1:c9:a4:d8:0c:4a:a6:1e: b4:40:33:0b:7b:2e:74:69:6a:43:20:4f:cb:aa:2d: 67:34:21:d7:d0:51:37:fd:4e:87:00:28:c3:32:ca: da:7a:4f:73:45:56:85:23:1e:72:79:aa:95:e8:dc: 39:e2:0b:71:5d:ea:f4:c6:aa:2e:4e:98:4d:e3:5b: c1:91:28:39:7c:ab:44:d1:bd:ea:e6:a9:aa:8f:d3: 44:51:5b:c7:46:0e:b4:2c:0d:e2:63:6c:a5:0c:09: 51:89:35:cf:dc:9c:53:25:fd:2a:98:7e:f6:5f:e0: c5:86:20:2c:aa:52:e0:b8:b1:a8:d9:19:27:8f:8b: 2c:c4:fe:90:a5:ce:27:38:91:69:ef:48:0b:ae:f2: 9a:c0:e9:ab:6e:2e:72:03:1f:5a:19:f9:94:72:93: 5a:58:a9:c1:77:d6:93:dd:cd:76:71:c1:cb:54:9c: f7:13:38:cc:f3:04:da:dd:0c:aa:56:39:36:a9:7f: f4:2a:db:f4:c7:3b:51:8f:05:5e:2f:1c:01:a5:2d: 06:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:10:F5:5B:A8:6A:45:60:A8:9D:51:92:43:E7:8B:57:C9:9F:FE:F7 X509v3 Authority Key Identifier: keyid:78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/qxD1W6hqRWConVGSQ-eLV8mf_vc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.88.0/22 Signature Algorithm: sha256WithRSAEncryption d1:0e:f7:62:dc:2b:34:32:78:40:29:97:96:52:da:d2:18:72: 80:fd:14:1a:1c:fa:2b:cf:11:07:49:d3:e7:0f:05:d2:18:9c: e3:ee:fd:52:70:44:3b:d9:0b:30:5b:c3:d2:48:78:be:b4:e9: 64:af:7b:51:11:2a:7c:53:89:5e:3c:ee:0e:46:ef:6b:c8:d4: 46:42:50:bc:85:15:ef:cf:e0:6d:12:3f:8b:ef:76:46:b8:dd: bf:3e:6e:61:21:56:19:86:a4:f6:3e:57:a3:09:4a:c9:1b:e6: 40:b8:5d:0d:74:9f:76:37:bb:c3:44:cc:78:39:e8:2b:71:4a: 1e:85:8d:a0:a0:2f:bd:4e:1f:43:f1:5c:f0:4a:8e:52:47:75: 0a:dc:75:cb:a0:17:f5:f7:31:bc:59:e6:5b:4d:ff:8a:1f:b7: a9:a9:90:a0:a7:fd:d1:5e:32:15:e8:c5:56:b7:8c:45:ff:e7: 13:48:92:cc:41:8a:72:8b:c2:c4:2d:3f:db:6f:3e:34:af:d2: a9:b1:36:aa:3c:c1:3e:b2:5b:a0:b8:cb:3b:da:c4:40:93:51: bf:54:e5:a0:b2:79:1f:ed:54:9f:13:40:ff:37:57:55:a4:7c: 47:5a:68:7e:27:c3:6d:9f:02:b6:f9:a5:89:a9:3b:02:35:f3: ea:42:7a:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E6ML0x6/Wj0EUeU++CnuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MTM2NjNjNjRhNWRhOGRjYWY1YjNhY2ZkM2VlYWY4MzVi NDFhNTMwHhcNMjYwMTAyMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjEwZjU1YmE4NmE0NTYwYTg5ZDUxOTI0M2U3OGI1N2M5OWZmZWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwMbaA2QlC2PkD45tEb9Bp0c2vDq z95rBvE1z74Z9oC2/V3/9qZhCPPqLqNcbc/q5+bF8cmk2AxKph60QDMLey50aWpD IE/Lqi1nNCHX0FE3/U6HACjDMsraek9zRVaFIx5yeaqV6Nw54gtxXer0xqouTphN 41vBkSg5fKtE0b3q5qmqj9NEUVvHRg60LA3iY2ylDAlRiTXP3JxTJf0qmH72X+DF hiAsqlLguLGo2Rknj4ssxP6Qpc4nOJFp70gLrvKawOmrbi5yAx9aGfmUcpNaWKnB d9aT3c12ccHLVJz3EzjM8wTa3QyqVjk2qX/0Ktv0xztRjwVeLxwBpS0GVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKsQ9VuoakVgqJ1RkkPni1fJn/73MB8GA1UdIwQY MBaAFHgTZjxkpdqNyvWzrP0+6vg1tBpTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUJObVBHU2wybzNLOWJPc19UN3EtRFcwR2xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82NDUxZWYtMzJkMi00ZjUxLWIzYmQt OWQxY2RhMjNlYzRmLzEvcXhEMVc2aHFSV0NvblZHU1EtZUxWOG1mX3ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy82NDUxZWYtMzJkMi00ZjUxLWIzYmQtOWQxY2RhMjNlYzRm LzEvZUJObVBHU2wybzNLOWJPc19UN3EtRFcwR2xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudNYMA0G CSqGSIb3DQEBCwUAA4IBAQDRDvdi3Cs0MnhAKZeWUtrSGHKA/RQaHPorzxEHSdPn DwXSGJzj7v1ScEQ72QswW8PSSHi+tOlkr3tRESp8U4lePO4ORu9ryNRGQlC8hRXv z+BtEj+L73ZGuN2/Pm5hIVYZhqT2PlejCUrJG+ZAuF0NdJ92N7vDRMx4OegrcUoe hY2goC+9Th9D8VzwSo5SR3UK3HXLoBf19zG8WeZbTf+KH7epqZCgp/3RXjIV6MVW t4xF/+cTSJLMQYpyi8LELT/bbz40r9KpsTaqPME+sluguMs72sRAk1G/VOWgsnkf 7VSfE0D/N1dVpHxHWmh+J8NtnwK2+aWJqTsCNfPqQnpu -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:56 2026 by rpki-client