This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/qqX7tn_1-G6wyhuI7D-pY_z8cJM.roa File: qqX7tn_1-G6wyhuI7D-pY_z8cJM.roa (raw, json) Hash identifier: waXhpbDhDQFEFQ+gAIGqGi8goRYcv+WaYeskXKbjrdM= Subject key identifier: AA:A5:FB:B6:7F:F5:F8:6E:B0:CA:1B:88:EC:3F:A9:63:FC:FC:70:93 Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907 Certificate serial: 019B7C1234454D5E282547349C7E1DDF0B0F Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/qqX7tn_1-G6wyhuI7D-pY_z8cJM.roa Signing time: Fri 02 Jan 2026 00:18:46 +0000 ROA not before: Fri 02 Jan 2026 00:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31689 IP address blocks: 193.140.40.0/21 maxlen: 21 193.140.40.0/24 maxlen: 24 193.140.41.0/24 maxlen: 24 193.140.42.0/24 maxlen: 24 193.140.43.0/24 maxlen: 24 193.140.44.0/24 maxlen: 24 193.140.45.0/24 maxlen: 24 193.140.46.0/24 maxlen: 24 193.140.47.0/24 maxlen: 24 193.140.172.0/22 maxlen: 22 193.140.172.0/24 maxlen: 24 193.140.173.0/24 maxlen: 24 193.140.174.0/24 maxlen: 24 193.140.175.0/24 maxlen: 24 194.27.73.0/24 maxlen: 24 194.27.76.0/22 maxlen: 22 194.27.76.0/24 maxlen: 24 194.27.77.0/24 maxlen: 24 194.27.78.0/24 maxlen: 24 194.27.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:34:45:4d:5e:28:25:47:34:9c:7e:1d:df:0b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907 Validity Not Before: Jan 2 00:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aaa5fbb67ff5f86eb0ca1b88ec3fa963fcfc7093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5d:ef:e3:f6:33:78:c5:51:87:50:17:69:e8: 7e:39:78:06:77:9b:00:01:12:f1:d2:b3:c9:4c:fb: 5a:a9:e5:85:eb:ee:04:cf:b3:64:8c:5a:da:a6:6a: f6:f6:60:6b:66:fb:78:3f:32:88:e2:d6:a6:7c:e6: 15:a9:e7:e4:0f:b1:2f:25:b8:a0:7a:e4:ae:bf:73: b5:99:64:ad:6b:40:39:b9:3f:be:cc:29:1a:77:3a: 81:ec:54:7f:11:2c:f0:22:a7:fd:d6:4f:05:ac:10: dc:8d:55:b1:d4:bb:31:99:9c:0d:ce:0a:4e:fa:3e: 08:91:9a:9b:3a:87:aa:d9:1f:3a:f0:ae:42:e5:53: a8:a5:b2:87:a8:0d:69:7c:5d:8d:f3:13:41:76:35: 70:9c:86:8a:1e:01:60:94:a6:f5:9d:35:69:79:c4: 53:b3:da:9f:94:44:c5:fb:0e:ef:06:98:88:cd:59: 15:cd:c9:16:b2:7d:2f:4b:4e:f8:4b:6a:2e:d9:93: 26:19:d5:eb:fe:36:f2:9b:30:8d:f7:1d:8b:28:82: f6:77:e3:cf:11:c0:a8:fd:0f:fd:c2:df:cf:50:83: 04:88:c5:21:36:4d:00:de:a0:c9:80:2f:b9:06:db: 99:94:0e:8b:9f:71:9c:35:2c:cd:62:db:d1:6b:c8: 9f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A5:FB:B6:7F:F5:F8:6E:B0:CA:1B:88:EC:3F:A9:63:FC:FC:70:93 X509v3 Authority Key Identifier: keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/qqX7tn_1-G6wyhuI7D-pY_z8cJM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.140.40.0/21 193.140.172.0/22 194.27.73.0/24 194.27.76.0/22 Signature Algorithm: sha256WithRSAEncryption bb:67:a7:2a:6a:68:40:05:7c:fe:7b:13:5b:a2:80:6b:33:73: 12:ea:c7:93:71:b4:42:2a:20:a9:c1:4e:16:13:6e:f2:b4:f0: 2f:13:76:4a:7b:c1:72:5d:46:23:37:29:22:34:63:9c:d7:e2: 0f:54:3e:57:97:42:21:22:20:6d:2e:f8:eb:bb:c4:d6:51:d6: 01:f1:ea:67:06:fe:99:c6:86:2f:4d:f4:46:9d:19:d2:b5:dc: 10:9e:67:f1:8d:4b:90:cf:17:14:98:ad:38:e6:7d:a0:d9:60: 6d:c2:dc:48:a3:6b:11:ee:50:ad:4d:5f:8b:c3:c6:ef:f2:fd: 8a:b2:f1:34:1a:b5:9a:67:b5:be:e7:fe:38:8b:78:ec:4e:5c: e6:f5:c8:50:b6:41:da:a9:f2:dc:2d:65:e4:36:6c:cb:27:a3: d4:be:43:93:2a:8c:9d:4b:71:29:fb:6c:7a:39:23:5c:1f:c1: 0e:32:dd:91:11:91:cf:fb:0a:02:a8:a4:f4:5a:e5:17:7b:64: 66:94:43:76:8a:9f:c2:d1:d7:b0:ec:0d:58:04:3a:90:5a:cf: 53:a6:f0:06:e3:51:31:03:c6:64:22:5c:f2:7a:cc:b3:47:58: 3e:b9:d3:63:32:5c:1d:a2:01:12:62:2f:da:7f:6b:9c:6f:4c: 87:6b:a6:d8 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8EjRFTV4oJUc0nH4d3wsPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh YWI5MDcwHhcNMjYwMTAyMDAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWE1ZmJiNjdmZjVmODZlYjBjYTFiODhlYzNmYTk2M2ZjZmM3MDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr13v4/YzeMVRh1AXaeh+OXgGd5sA ARLx0rPJTPtaqeWF6+4Ez7NkjFrapmr29mBrZvt4PzKI4tamfOYVqefkD7EvJbig euSuv3O1mWSta0A5uT++zCkadzqB7FR/ESzwIqf91k8FrBDcjVWx1LsxmZwNzgpO +j4IkZqbOoeq2R868K5C5VOopbKHqA1pfF2N8xNBdjVwnIaKHgFglKb1nTVpecRT s9qflETF+w7vBpiIzVkVzckWsn0vS074S2ou2ZMmGdXr/jbymzCN9x2LKIL2d+PP EcCo/Q/9wt/PUIMEiMUhNk0A3qDJgC+5BtuZlA6Ln3GcNSzNYtvRa8ifjQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKql+7Z/9fhusMobiOw/qWP8/HCTMB8GA1UdIwQY MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt NTk2NzE5MjBmYjYwLzEvcXFYN3RuXzEtRzZ3eWh1STdELXBZX3o4Y0pNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDwYwoAwQC wYysAwQAwhtJAwQCwhtMMA0GCSqGSIb3DQEBCwUAA4IBAQC7Z6cqamhABXz+exNb ooBrM3MS6seTcbRCKiCpwU4WE27ytPAvE3ZKe8FyXUYjNykiNGOc1+IPVD5Xl0Ih IiBtLvjru8TWUdYB8epnBv6ZxoYvTfRGnRnStdwQnmfxjUuQzxcUmK045n2g2WBt wtxIo2sR7lCtTV+Lw8bv8v2KsvE0GrWaZ7W+5/44i3jsTlzm9chQtkHaqfLcLWXk NmzLJ6PUvkOTKoydS3Ep+2x6OSNcH8EOMt2REZHP+woCqKT0WuUXe2RmlEN2ip/C 0dew7A1YBDqQWs9TpvAG41ExA8ZkIlzyesyzR1g+udNjMlwdogESYi/af2ucb0yH a6bY -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:39 2026 by rpki-client