This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/cqsm3cZPpf_tObwDEACdHxs7fkA.roa File: cqsm3cZPpf_tObwDEACdHxs7fkA.roa (raw, json) Hash identifier: d+AU9b3PeXFxvtfVifLL55zjYWSVguy94TW2GQv8rLQ= Subject key identifier: 72:AB:26:DD:C6:4F:A5:FF:ED:39:BC:03:10:00:9D:1F:1B:3B:7E:40 Certificate issuer: /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc Certificate serial: 019B7AC93704074783661681EF4393A904E7 Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/cqsm3cZPpf_tObwDEACdHxs7fkA.roa Signing time: Thu 01 Jan 2026 18:19:25 +0000 ROA not before: Thu 01 Jan 2026 18:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206207 IP address blocks: 185.190.208.0/22 maxlen: 24 2a0a:d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:37:04:07:47:83:66:16:81:ef:43:93:a9:04:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc Validity Not Before: Jan 1 18:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72ab26ddc64fa5ffed39bc0310009d1f1b3b7e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4a:bc:a6:ec:23:35:51:56:65:fa:79:9b:e1: 11:7d:93:75:f9:c1:63:43:92:31:05:3d:c5:a8:52: cc:36:61:f9:24:85:26:dd:24:dc:3b:f6:7d:ad:6d: 7e:3f:0e:f2:0f:3f:4e:de:78:3c:6f:51:dd:6b:91: f8:f9:3a:fc:58:0d:0c:07:45:b0:7f:2e:0a:6c:43: 8f:af:20:b0:64:2b:36:73:03:2a:b1:b6:3d:e8:de: 15:b9:68:80:e6:68:9a:74:4d:74:33:1b:3a:cc:f7: e5:47:99:40:38:8d:89:64:2c:1e:d5:6a:a4:75:b8: 8a:c6:40:53:ba:4b:05:23:ca:1d:f7:82:78:f2:d9: 1c:0e:aa:74:be:a4:91:3a:56:ed:f3:1c:24:b2:19: 57:6e:7c:1a:ed:63:53:3d:f0:35:3e:52:fa:8d:58: 00:3c:6c:2d:dc:b9:01:72:fb:09:ee:65:71:8f:a5: e1:b8:a7:38:41:a1:00:db:77:23:96:79:88:e6:4e: b3:94:fb:19:35:5d:fa:d9:51:7b:15:fc:d8:cc:49: 36:74:24:54:42:ae:43:22:4a:c7:4d:22:94:6f:d8: 6a:a9:b0:b9:3d:59:ca:5b:4a:75:00:8d:a3:a2:20: b1:8c:0a:30:76:00:20:51:81:75:52:1e:12:6b:25: f2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AB:26:DD:C6:4F:A5:FF:ED:39:BC:03:10:00:9D:1F:1B:3B:7E:40 X509v3 Authority Key Identifier: keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/cqsm3cZPpf_tObwDEACdHxs7fkA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.190.208.0/22 IPv6: 2a0a:d40::/32 Signature Algorithm: sha256WithRSAEncryption 4a:48:e3:a6:9a:a5:4f:b8:b7:61:63:56:0c:08:a3:7d:af:b0: d9:bb:ae:e2:20:fd:13:c2:4b:14:e1:e8:d4:7f:ac:29:6d:69: b1:5e:2f:6c:0d:68:23:22:5c:dc:be:8e:46:da:38:db:5f:7b: 69:0a:f2:86:21:fc:b5:26:e0:91:40:9f:b1:f4:e9:a1:33:7d: 06:26:da:bc:e1:10:d5:0f:6b:36:79:ec:d8:12:c1:80:f3:63: 66:39:cb:f4:08:9f:80:d3:5d:61:8d:25:4d:de:d9:90:42:fa: ff:53:08:95:cf:44:c9:c8:8c:f7:fb:df:61:ad:30:91:c1:7a: bb:d8:67:3d:3f:34:84:8e:c9:69:c6:92:2b:82:8d:d8:7e:ec: 21:78:c2:83:2a:41:05:46:21:06:73:13:2c:a9:50:06:3b:75: ed:4a:f1:db:17:9e:de:dd:86:e6:84:3c:34:c9:c1:05:b8:25: 37:a2:f0:da:ff:48:50:d1:1a:14:59:26:5f:9d:d7:1f:0b:3c: 7e:49:93:e1:2d:5f:b5:9e:24:2c:70:2c:32:62:37:3b:b9:99: 25:e2:c4:41:48:74:9e:09:d8:34:bf:09:7a:77:b1:d0:49:96: 64:36:2d:ed:77:27:74:18:45:bd:d6:5f:8d:d0:24:b1:95:b3: 1f:e2:af:cc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yTcEB0eDZhaB70OTqQTnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMGU3N2Q5YzZmZjY4ZGNhNjhmMDVkZjhmNDY3NWVlN2Jk Y2IwYmMwHhcNMjYwMTAxMTgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmFiMjZkZGM2NGZhNWZmZWQzOWJjMDMxMDAwOWQxZjFiM2I3ZTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0q8puwjNVFWZfp5m+ERfZN1+cFj Q5IxBT3FqFLMNmH5JIUm3STcO/Z9rW1+Pw7yDz9O3ng8b1Hda5H4+Tr8WA0MB0Ww fy4KbEOPryCwZCs2cwMqsbY96N4VuWiA5miadE10Mxs6zPflR5lAOI2JZCwe1Wqk dbiKxkBTuksFI8od94J48tkcDqp0vqSROlbt8xwkshlXbnwa7WNTPfA1PlL6jVgA PGwt3LkBcvsJ7mVxj6XhuKc4QaEA23cjlnmI5k6zlPsZNV362VF7FfzYzEk2dCRU Qq5DIkrHTSKUb9hqqbC5PVnKW0p1AI2joiCxjAowdgAgUYF1Uh4SayXy0QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHKrJt3GT6X/7Tm8AxAAnR8bO35AMB8GA1UdIwQY MBaAFE8Od9nG/2jcpo8F349Gde573LC8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHc1MzJjYl9hTnltandYZmowWjE3bnZjc0x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zZGMyMjItMTIwNi00OTIyLTg4OTAt NDU1YjE5Zjc2NmNjLzEvY3FzbTNjWlBwZl90T2J3REVBQ2RIeHM3ZmtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8zZGMyMjItMTIwNi00OTIyLTg4OTAtNDU1YjE5Zjc2NmNj LzEvVHc1MzJjYl9hTnltandYZmowWjE3bnZjc0x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCub7QMA0E AgACMAcDBQAqCg1AMA0GCSqGSIb3DQEBCwUAA4IBAQBKSOOmmqVPuLdhY1YMCKN9 r7DZu67iIP0TwksU4ejUf6wpbWmxXi9sDWgjIlzcvo5G2jjbX3tpCvKGIfy1JuCR QJ+x9OmhM30GJtq84RDVD2s2eezYEsGA82NmOcv0CJ+A011hjSVN3tmQQvr/UwiV z0TJyIz3+99hrTCRwXq72Gc9PzSEjslpxpIrgo3YfuwheMKDKkEFRiEGcxMsqVAG O3XtSvHbF57e3YbmhDw0ycEFuCU3ovDa/0hQ0RoUWSZfndcfCzx+SZPhLV+1niQs cCwyYjc7uZkl4sRBSHSeCdg0vwl6d7HQSZZkNi3tdyd0GEW91l+N0CSxlbMf4q/M -----END CERTIFICATE-----Generated at Mon Jan 26 12:27:01 2026 by rpki-client