This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q-cmnczAq_R4WQig-JxyBCeiu3E.roa File: q-cmnczAq_R4WQig-JxyBCeiu3E.roa (raw, json) Hash identifier: QW62YPpx0nobzbNY1r86LME0OVZNaU0nQ5C4usrbmMM= Subject key identifier: AB:E7:26:9D:CC:C0:AB:F4:78:59:08:A0:F8:9C:72:04:27:A2:BB:71 Certificate issuer: /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb Certificate serial: 019B7D5D07C0EFEDBA1106EB83A22A797D16 Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q-cmnczAq_R4WQig-JxyBCeiu3E.roa Signing time: Fri 02 Jan 2026 06:20:07 +0000 ROA not before: Fri 02 Jan 2026 06:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49243 IP address blocks: 86.57.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:07:c0:ef:ed:ba:11:06:eb:83:a2:2a:79:7d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb Validity Not Before: Jan 2 06:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abe7269dccc0abf4785908a0f89c720427a2bb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:39:65:0e:72:02:0b:a9:56:5a:64:55:5e:a4: 84:ec:4b:d1:66:89:9a:29:67:c0:2f:75:86:4a:47: 6e:24:5b:a4:64:6e:3b:31:d5:4e:fe:d4:1f:62:99: bc:25:e7:5d:cd:bb:a1:44:da:eb:16:09:c1:9c:d0: b2:14:a8:b7:19:d8:3b:5d:82:48:43:a4:f6:a5:a9: fa:65:b3:ee:2b:52:b8:5c:e7:51:e6:73:fe:fa:77: 1d:ed:39:4e:73:85:9d:66:63:9e:76:9f:dc:3f:72: 4d:35:f1:5f:b1:6b:1e:d7:16:ba:89:e7:ca:f9:83: e9:de:7f:cb:b3:c2:8a:2c:f0:b0:4e:8e:eb:85:24: 92:fc:cb:a1:a7:ad:97:c2:39:67:b5:fa:65:38:9c: e8:e1:0c:f7:80:c0:20:76:80:0f:ab:3e:15:90:c8: 25:72:37:b0:e7:ef:57:8e:07:29:e4:7c:2b:f4:8e: 39:33:0e:74:8f:42:29:00:b4:b2:04:e7:d0:42:f7: 15:c2:ae:3f:1d:27:6b:0d:69:8b:4f:04:58:21:ce: 46:ec:9b:d9:83:5f:c3:1e:ed:f5:ed:91:05:e0:80: 61:e2:4c:f3:1b:24:f5:f4:ca:77:f0:c0:b9:82:c8: 98:6b:26:bb:7f:3b:d5:6f:74:66:80:a5:5a:1a:54: 6c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E7:26:9D:CC:C0:AB:F4:78:59:08:A0:F8:9C:72:04:27:A2:BB:71 X509v3 Authority Key Identifier: keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q-cmnczAq_R4WQig-JxyBCeiu3E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.57.128.0/17 Signature Algorithm: sha256WithRSAEncryption 2d:38:45:ab:b2:db:bb:ec:8f:53:5e:9c:60:b7:01:4f:53:e7: 1d:fd:1e:81:ec:6b:9f:76:f8:f5:8d:19:fc:2e:9d:fd:54:c7: f5:49:35:72:31:67:34:d9:f9:3c:ba:17:0a:a0:c7:f8:c9:7c: b1:d8:2f:0c:ad:44:ce:13:0b:a7:7f:07:23:57:d1:1a:aa:3a: 20:c3:ab:46:df:1a:a2:28:8a:f5:2a:eb:b7:01:55:01:00:19: 04:9c:7d:1e:72:4a:24:33:e6:35:27:52:64:92:cb:94:a3:bb: 82:95:b6:07:69:11:a1:ed:a6:4a:05:17:5d:fd:68:18:f0:2c: 69:15:1f:c1:8a:62:ad:e4:3f:3d:c8:b4:af:73:55:b1:c1:32: 2e:98:0f:c9:fe:f6:d5:0d:63:f6:34:4f:25:6a:32:18:30:51: 46:1a:f2:9d:4c:cf:80:3e:dd:7c:ad:3f:63:04:e4:c5:00:57: f6:9b:c1:1a:af:4a:b9:f9:86:d3:b7:51:87:ba:a7:bc:64:01: c5:6a:03:5b:1e:8a:9d:49:0f:cd:8a:70:cc:16:3f:d5:6d:d4: 25:35:12:f8:ac:dd:76:67:59:66:15:61:1b:05:4f:28:01:0c: a6:ef:a4:a5:95:9d:d9:b7:87:ba:88:dd:ac:b6:c9:53:ee:82: d9:c6:d3:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XQfA7+26EQbrg6IqeX0WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiODgyY2Q2ZDE5NmFlMWY5Njg3MmFjYWU3ODMyMWJlN2E5 MmI4ZWIwHhcNMjYwMTAyMDYyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmU3MjY5ZGNjYzBhYmY0Nzg1OTA4YTBmODljNzIwNDI3YTJiYjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljllDnICC6lWWmRVXqSE7EvRZoma KWfAL3WGSkduJFukZG47MdVO/tQfYpm8JeddzbuhRNrrFgnBnNCyFKi3Gdg7XYJI Q6T2pan6ZbPuK1K4XOdR5nP++ncd7TlOc4WdZmOedp/cP3JNNfFfsWse1xa6iefK +YPp3n/Ls8KKLPCwTo7rhSSS/Muhp62XwjlntfplOJzo4Qz3gMAgdoAPqz4VkMgl cjew5+9Xjgcp5Hwr9I45Mw50j0IpALSyBOfQQvcVwq4/HSdrDWmLTwRYIc5G7JvZ g1/DHu317ZEF4IBh4kzzGyT19Mp38MC5gsiYaya7fzvVb3RmgKVaGlRspwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKvnJp3MwKv0eFkIoPiccgQnortxMB8GA1UdIwQY MBaAFKuILNbRlq4flocqyueDIb56krjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTRnczF0R1dyaC1XaHlySzU0TWh2bnFTdU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80YjZjYzktMDlkMy00Njc4LWIwYTct OTUwYzE4MDU5NmQwLzEvcS1jbW5jekFxX1I0V1FpZy1KeHlCQ2VpdTNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80YjZjYzktMDlkMy00Njc4LWIwYTctOTUwYzE4MDU5NmQw LzEvcTRnczF0R1dyaC1XaHlySzU0TWh2bnFTdU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHVjmAMA0G CSqGSIb3DQEBCwUAA4IBAQAtOEWrstu77I9TXpxgtwFPU+cd/R6B7Gufdvj1jRn8 Lp39VMf1STVyMWc02fk8uhcKoMf4yXyx2C8MrUTOEwunfwcjV9Eaqjogw6tG3xqi KIr1Kuu3AVUBABkEnH0eckokM+Y1J1JkksuUo7uClbYHaRGh7aZKBRdd/WgY8Cxp FR/BimKt5D89yLSvc1WxwTIumA/J/vbVDWP2NE8lajIYMFFGGvKdTM+APt18rT9j BOTFAFf2m8Ear0q5+YbTt1GHuqe8ZAHFagNbHoqdSQ/NinDMFj/VbdQlNRL4rN12 Z1lmFWEbBU8oAQym76SllZ3Zt4e6iN2stslT7oLZxtOy -----END CERTIFICATE-----Generated at Mon Jan 26 08:59:01 2026 by rpki-client