This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/qYc1GDRHdMKB8iddli8zkMN3RVY.roa File: qYc1GDRHdMKB8iddli8zkMN3RVY.roa (raw, json) Hash identifier: Raz+vndSPY3IPBLJicVFRGraRf1O/aOAmmwEA/V9D9U= Subject key identifier: A9:87:35:18:34:47:74:C2:81:F2:27:5D:96:2F:33:90:C3:77:45:56 Certificate issuer: /CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace Certificate serial: 019B797F37261DFEEDC5ED7896465D742EC9 Authority key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/qYc1GDRHdMKB8iddli8zkMN3RVY.roa Signing time: Thu 01 Jan 2026 12:18:58 +0000 ROA not before: Thu 01 Jan 2026 12:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39686 IP address blocks: 37.72.110.0/24 maxlen: 24 185.217.63.0/24 maxlen: 24 2a05:7040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:37:26:1d:fe:ed:c5:ed:78:96:46:5d:74:2e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace Validity Not Before: Jan 1 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9873518344774c281f2275d962f3390c3774556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:45:ed:66:46:0f:46:b4:71:a4:98:fd:90:aa: d5:ad:36:24:6d:33:03:9d:69:ba:96:5b:2d:24:99: 2b:21:34:8b:3a:51:ce:de:99:f3:ff:97:b4:8c:9a: 8d:46:dc:16:e3:e7:8f:25:5a:fe:8a:f2:2b:03:df: c3:8f:68:eb:fa:32:ca:53:fd:43:fc:46:0b:2a:0c: 77:33:46:4e:ce:7d:b7:1a:9c:70:39:86:3d:8b:fb: 55:b1:00:7f:38:78:2a:c1:a7:99:3e:0f:a5:04:66: 90:41:f7:f1:58:83:67:97:bc:d0:5b:40:d2:4c:77: 47:79:45:44:62:32:df:c1:3f:10:3f:b4:b9:d8:b6: f0:f1:c8:ec:4c:58:65:96:16:20:11:20:d3:24:cc: ee:dd:05:29:23:9b:a6:6a:26:79:47:a9:e2:bc:83: 8e:e1:c3:b7:b8:4d:01:49:40:47:be:ca:d4:15:43: 25:20:49:8f:92:84:9d:62:c0:6f:d9:47:f5:95:91: be:08:eb:c1:aa:3b:c0:68:a0:1f:1a:b5:fb:9f:c8: 2b:22:d3:9f:86:7a:27:84:8d:36:ed:c9:37:7b:05: f2:5f:cf:82:61:f0:7b:e5:7a:8d:b9:40:a8:7c:0e: 49:62:f1:22:60:1d:e5:42:cf:9f:f3:c7:f4:aa:4b: 35:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:87:35:18:34:47:74:C2:81:F2:27:5D:96:2F:33:90:C3:77:45:56 X509v3 Authority Key Identifier: keyid:1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/qYc1GDRHdMKB8iddli8zkMN3RVY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.72.110.0/24 185.217.63.0/24 IPv6: 2a05:7040::/32 Signature Algorithm: sha256WithRSAEncryption d4:3c:08:e4:8a:d6:73:c1:f2:e1:3f:e7:74:08:98:ba:58:b7: 2b:8e:ef:9a:24:4d:22:10:b5:2e:1f:ca:a1:04:bf:05:bc:e9: 4b:ba:93:7e:07:03:48:cd:c6:c0:04:9b:7f:8e:fa:81:d4:05: ab:b8:dc:77:5b:36:f1:57:f6:df:17:ae:9f:bf:b1:79:fc:a5: 45:d7:34:c2:6b:6a:f5:91:ac:42:8f:77:9f:d4:b4:a5:1a:23: f5:e6:2b:3f:24:60:65:95:64:c9:ff:db:f5:10:0d:9b:96:c9: 6e:b7:ba:34:5d:9a:94:8d:75:19:df:42:01:a5:31:6f:dd:c7: b5:34:37:e8:0f:78:5c:42:e1:6d:dc:1c:45:fc:72:40:4d:53: c3:95:af:0b:43:0d:48:4e:b6:fe:a0:ca:da:77:85:f6:1a:a8: f7:6b:87:33:8a:26:61:e7:05:b0:21:e6:d8:c3:1c:03:87:ea: 86:15:0f:6f:bc:51:92:4d:69:ba:f0:fa:29:72:69:d0:1f:3a: 1b:74:01:10:c9:51:ef:1b:26:10:f4:82:2d:ae:ff:f4:fe:e9: d4:ba:bd:c9:16:e0:65:08:f7:5e:53:b3:b9:11:72:2d:c8:4d: 72:09:df:94:da:7a:cb:8d:ba:68:8f:11:c0:5c:be:a0:de:c1: fc:44:66:df -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fzcmHf7txe14lkZddC7JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDRhZjI4ZjhmN2FhODU4ZTI3ZDhlMmM3NjExNGM2ZmY0 OWJhY2UwHhcNMjYwMTAxMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTg3MzUxODM0NDc3NGMyODFmMjI3NWQ5NjJmMzM5MGMzNzc0NTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UXtZkYPRrRxpJj9kKrVrTYkbTMD nWm6llstJJkrITSLOlHO3pnz/5e0jJqNRtwW4+ePJVr+ivIrA9/Dj2jr+jLKU/1D /EYLKgx3M0ZOzn23GpxwOYY9i/tVsQB/OHgqwaeZPg+lBGaQQffxWINnl7zQW0DS THdHeUVEYjLfwT8QP7S52Lbw8cjsTFhllhYgESDTJMzu3QUpI5umaiZ5R6nivIOO 4cO3uE0BSUBHvsrUFUMlIEmPkoSdYsBv2Uf1lZG+COvBqjvAaKAfGrX7n8grItOf hnonhI027ck3ewXyX8+CYfB75XqNuUCofA5JYvEiYB3lQs+f88f0qks1zwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKmHNRg0R3TCgfInXZYvM5DDd0VWMB8GA1UdIwQY MBaAFB0Eryj496qFjifY4sdhFMb/SbrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFTdktQajNxb1dPSjlqaXgyRVV4djlKdXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNmQ0MDAtOGM0My00NGNjLTkzNTUt NzBiNGUwYjNmYzllLzEvcVljMUdEUkhkTUtCOGlkZGxpOHprTU4zUlZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hNmQ0MDAtOGM0My00NGNjLTkzNTUtNzBiNGUwYjNmYzll LzEvSFFTdktQajNxb1dPSjlqaXgyRVV4djlKdXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAJUhuAwQA udk/MA0EAgACMAcDBQAqBXBAMA0GCSqGSIb3DQEBCwUAA4IBAQDUPAjkitZzwfLh P+d0CJi6WLcrju+aJE0iELUuH8qhBL8FvOlLupN+BwNIzcbABJt/jvqB1AWruNx3 WzbxV/bfF66fv7F5/KVF1zTCa2r1kaxCj3ef1LSlGiP15is/JGBllWTJ/9v1EA2b lslut7o0XZqUjXUZ30IBpTFv3ce1NDfoD3hcQuFt3BxF/HJATVPDla8LQw1ITrb+ oMrad4X2Gqj3a4cziiZh5wWwIebYwxwDh+qGFQ9vvFGSTWm68PopcmnQHzobdAEQ yVHvGyYQ9IItrv/0/unUur3JFuBlCPdeU7O5EXItyE1yCd+U2nrLjbpojxHAXL6g 3sH8RGbf -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:42 2026 by rpki-client