This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/_qgjZUprLsuqYsWmj9vP9f6xthk.roa File: _qgjZUprLsuqYsWmj9vP9f6xthk.roa (raw, json) Hash identifier: GM0m9yFuCRSbpKde8jgOPR1V9tzQSRA4/KDcI3DgI1c= Subject key identifier: FE:A8:23:65:4A:6B:2E:CB:AA:62:C5:A6:8F:DB:CF:F5:FE:B1:B6:19 Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041 Certificate serial: 019B77592C60FA7817EBBF04CD21952D39FB Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/_qgjZUprLsuqYsWmj9vP9f6xthk.roa Signing time: Thu 01 Jan 2026 02:18:11 +0000 ROA not before: Thu 01 Jan 2026 02:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47377 IP address blocks: 85.94.224.0/19 maxlen: 24 85.94.226.0/23 maxlen: 23 85.94.228.0/23 maxlen: 23 85.94.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2c:60:fa:78:17:eb:bf:04:cd:21:95:2d:39:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041 Validity Not Before: Jan 1 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fea823654a6b2ecbaa62c5a68fdbcff5feb1b619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8f:d4:3c:e6:12:e0:35:05:20:4e:9d:3b:c6: 01:1d:d6:e3:38:fc:e3:a0:5b:58:43:15:cf:0f:08: a8:38:ec:25:ba:5a:0a:f3:29:98:84:69:d6:88:f9: 5c:26:2a:95:f7:e4:19:42:86:f2:59:b3:3f:03:ba: d7:ee:67:53:64:7e:4f:6f:ee:db:5b:68:fb:3d:e0: e5:45:9c:38:4a:d5:5b:1b:47:e2:a9:a4:b6:29:18: 12:2a:58:cf:e4:df:8f:a7:7c:47:11:9e:dc:d1:03: 21:1f:a3:43:42:cf:ba:23:b4:bc:7d:c0:53:7f:76: e9:f2:6f:97:25:39:1c:e8:6d:94:2c:44:e1:2b:7c: 2d:7e:e3:3d:dd:46:9b:5d:bf:c6:54:60:4f:4d:16: 7e:cc:8a:68:68:5a:6d:8b:55:51:91:0c:b7:54:05: d9:9b:f4:96:cd:d5:2d:75:66:b5:e8:48:5b:71:ac: fa:56:6f:78:72:86:d1:f7:ab:a2:21:0f:d7:43:99: 58:de:7b:cb:e9:45:7f:c7:77:5f:f7:93:ef:e5:e7: 3e:95:08:9b:25:79:8c:b4:e6:83:0e:fa:79:d3:ca: 8b:1f:43:15:7e:fe:2d:9c:44:df:86:5b:b1:fe:a9: 88:3d:be:b4:88:22:7f:44:6b:ef:b3:9f:cd:34:b4: 22:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A8:23:65:4A:6B:2E:CB:AA:62:C5:A6:8F:DB:CF:F5:FE:B1:B6:19 X509v3 Authority Key Identifier: keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/_qgjZUprLsuqYsWmj9vP9f6xthk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.94.224.0/19 Signature Algorithm: sha256WithRSAEncryption 49:f3:11:ae:9b:cc:fc:1a:fa:54:cc:b5:49:7c:70:13:8f:08: 80:7f:8c:21:1b:6c:12:4b:0b:5f:76:8d:48:82:54:e0:85:25: 36:ce:84:1d:dd:52:37:b3:e7:55:67:ec:75:65:d2:36:d3:ce: 3f:1b:fe:30:d8:b8:f9:49:0a:53:7c:c2:34:d6:30:e6:a7:4b: ab:b1:a7:99:32:95:82:eb:06:74:47:49:ef:8e:f7:2f:56:03: 4e:cd:76:9b:de:2b:a5:03:8e:c8:a3:b5:ed:89:4e:ae:11:22: e4:46:bc:46:db:0a:94:01:b2:9b:b3:a0:e9:69:b2:e7:1c:c2: 42:6a:b3:d4:d3:b4:3f:1d:66:78:6d:db:9e:38:97:0e:53:74: 83:9a:0a:ac:44:c3:d4:f5:a5:78:f2:a8:65:76:6c:91:fa:dc: d0:49:b7:60:44:d5:cf:0d:a3:32:2a:26:3e:59:86:1b:fb:b0: 1f:d8:1b:5e:fb:5e:0c:76:93:2d:c3:0d:55:90:0d:86:4d:54: e5:86:59:0d:25:85:eb:fc:6e:bd:ac:b2:33:6c:0a:c5:d5:04: 3b:47:91:a2:dd:ab:df:3b:92:9c:86:71:a3:c3:43:a9:e6:28: d1:41:32:06:d7:2c:03:3a:db:50:de:e4:ad:88:9d:69:fa:2c: 37:f7:98:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSxg+ngX678EzSGVLTn7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5M2E1MWRhMjA1MzA0NGY5NjI2MmY2MzdkMGM5Y2MwNWQ3 MzAwNDEwHhcNMjYwMTAxMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWE4MjM2NTRhNmIyZWNiYWE2MmM1YTY4ZmRiY2ZmNWZlYjFiNjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4/UPOYS4DUFIE6dO8YBHdbjOPzj oFtYQxXPDwioOOwluloK8ymYhGnWiPlcJiqV9+QZQobyWbM/A7rX7mdTZH5Pb+7b W2j7PeDlRZw4StVbG0fiqaS2KRgSKljP5N+Pp3xHEZ7c0QMhH6NDQs+6I7S8fcBT f3bp8m+XJTkc6G2ULEThK3wtfuM93UabXb/GVGBPTRZ+zIpoaFpti1VRkQy3VAXZ m/SWzdUtdWa16Ehbcaz6Vm94cobR96uiIQ/XQ5lY3nvL6UV/x3df95Pv5ec+lQib JXmMtOaDDvp508qLH0MVfv4tnETfhlux/qmIPb60iCJ/RGvvs5/NNLQiGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP6oI2VKay7LqmLFpo/bz/X+sbYZMB8GA1UdIwQY MBaAFLk6UdogUwRPliYvY30MnMBdcwBBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVRwUjJpQlRCRS1XSmk5amZReWN3RjF6QUVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8wMjQxNDMtMDQyYy00MjIyLWJlMGIt YTEyYjNjM2FlODhmLzEvX3FnalpVcHJMc3VxWXNXbWo5dlA5ZjZ4dGhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8wMjQxNDMtMDQyYy00MjIyLWJlMGItYTEyYjNjM2FlODhm LzEvdVRwUjJpQlRCRS1XSmk5amZReWN3RjF6QUVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFVV7gMA0G CSqGSIb3DQEBCwUAA4IBAQBJ8xGum8z8GvpUzLVJfHATjwiAf4whG2wSSwtfdo1I glTghSU2zoQd3VI3s+dVZ+x1ZdI2084/G/4w2Lj5SQpTfMI01jDmp0ursaeZMpWC 6wZ0R0nvjvcvVgNOzXab3iulA47Io7XtiU6uESLkRrxG2wqUAbKbs6DpabLnHMJC arPU07Q/HWZ4bdueOJcOU3SDmgqsRMPU9aV48qhldmyR+tzQSbdgRNXPDaMyKiY+ WYYb+7Af2Bte+14MdpMtww1VkA2GTVTlhlkNJYXr/G69rLIzbArF1QQ7R5Gi3avf O5KchnGjw0Op5ijRQTIG1ywDOttQ3uStiJ1p+iw395hC -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:15 2026 by rpki-client