This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/qrK8l-uIuryQmH_-AqhZga8WNz8.roa File: qrK8l-uIuryQmH_-AqhZga8WNz8.roa (raw, json) Hash identifier: eI1rOqGrZ+k2KHlXxvPdF7xmA3oDCvTfj+3Q37y0Fi8= Subject key identifier: AA:B2:BC:97:EB:88:BA:BC:90:98:7F:FE:02:A8:59:81:AF:16:37:3F Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 019B7A5B11A3BB18AC9AEE61F2EDD215849A Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/qrK8l-uIuryQmH_-AqhZga8WNz8.roa Signing time: Thu 01 Jan 2026 16:19:07 +0000 ROA not before: Thu 01 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1221 IP address blocks: 153.112.128.0/24 maxlen: 24 192.131.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:11:a3:bb:18:ac:9a:ee:61:f2:ed:d2:15:84:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aab2bc97eb88babc90987ffe02a85981af16373f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:32:9d:08:e6:24:d4:7d:00:cd:9f:35:77:f7: eb:3f:5f:fd:ee:5f:f7:98:c1:e7:13:68:c6:0a:8f: 1f:e7:3a:57:eb:05:15:8a:b4:74:bf:42:ba:48:eb: 1a:09:62:fd:cf:23:0e:97:39:2a:f9:8f:a4:f9:5c: fa:03:b0:f9:81:16:0f:9a:59:bd:44:09:65:a1:e5: 34:ca:d0:c2:90:1c:0d:e2:87:81:f2:5f:50:d9:59: be:84:0d:db:d5:82:4d:c4:e4:4b:69:9c:c4:57:23: cf:04:d4:3d:95:6d:18:b1:1e:0d:c8:81:a7:49:d4: 9e:fe:c4:0b:54:ed:1a:0d:6c:4a:c0:87:90:2c:67: 1d:84:22:8e:a8:43:4b:85:d8:71:eb:26:6d:6c:ad: 12:6f:fe:f0:b9:6c:13:97:7b:00:a9:02:f1:b1:22: 05:11:0a:59:9a:b8:5a:5f:5f:e4:7d:de:7a:62:7a: d7:d3:76:4c:af:ff:2a:9b:4d:89:7c:21:f1:3f:5f: 60:83:90:a2:33:fd:41:0d:36:4f:a7:4f:ee:ae:a4: 0a:14:d8:47:aa:f1:fe:96:36:5d:14:44:60:5e:2c: 2c:2c:9c:a4:a0:2e:c4:b5:3b:fc:e8:23:2a:b1:05: 3a:b8:8f:5f:ab:3c:af:2f:ab:3c:77:ac:5f:c5:7e: 3d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B2:BC:97:EB:88:BA:BC:90:98:7F:FE:02:A8:59:81:AF:16:37:3F X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/qrK8l-uIuryQmH_-AqhZga8WNz8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.112.128.0/24 192.131.25.0/24 Signature Algorithm: sha256WithRSAEncryption 71:ab:33:11:43:ef:f0:46:e1:45:d4:6c:d3:54:bb:97:e1:c4: b1:cd:fb:0e:4d:6f:14:54:e9:fc:5a:97:9f:7f:dd:54:e3:82: b3:9d:c8:4d:ed:c5:07:22:ba:96:6c:ce:46:2b:86:84:81:aa: 22:c9:31:bd:8e:d4:82:d9:de:ae:80:e8:cd:95:19:75:81:53: 4b:70:a9:df:bc:1d:ae:6b:58:d0:22:18:30:d0:6d:86:85:48: 97:47:1a:d9:4e:cd:b0:55:b8:64:6d:6c:ea:39:ab:b1:68:74: 71:47:4e:1c:61:93:ab:16:bd:65:57:12:91:4b:13:3a:b8:0e: 97:55:03:03:89:23:e7:b6:4e:fe:71:20:f4:61:ae:0f:88:91: 08:f4:5f:71:34:c4:a6:7d:e0:fe:df:61:1f:a5:06:f2:f4:86: 53:6c:ec:ce:4e:26:1e:4f:7e:b5:77:a3:b8:9e:9c:76:29:a8: af:e9:8a:38:ab:4c:08:bc:54:77:12:63:8b:bb:12:35:b2:bc: 86:df:48:88:09:91:12:e0:51:91:ac:ff:4b:3f:85:6c:35:67: 8b:c7:c1:9c:7a:03:f2:d4:00:60:42:32:06:5e:e0:7f:e5:84: a2:73:c4:78:54:05:0d:60:c2:8a:f5:fa:3e:57:b1:00:35:78: 89:34:6c:07 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WxGjuxismu5h8u3SFYSaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWIyYmM5N2ViODhiYWJjOTA5ODdmZmUwMmE4NTk4MWFmMTYzNzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDKdCOYk1H0AzZ81d/frP1/97l/3 mMHnE2jGCo8f5zpX6wUVirR0v0K6SOsaCWL9zyMOlzkq+Y+k+Vz6A7D5gRYPmlm9 RAlloeU0ytDCkBwN4oeB8l9Q2Vm+hA3b1YJNxORLaZzEVyPPBNQ9lW0YsR4NyIGn SdSe/sQLVO0aDWxKwIeQLGcdhCKOqENLhdhx6yZtbK0Sb/7wuWwTl3sAqQLxsSIF EQpZmrhaX1/kfd56YnrX03ZMr/8qm02JfCHxP19gg5CiM/1BDTZPp0/urqQKFNhH qvH+ljZdFERgXiwsLJykoC7EtTv86CMqsQU6uI9fqzyvL6s8d6xfxX499wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKqyvJfriLq8kJh//gKoWYGvFjc/MB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvcXJLOGwtdUl1cnlRbUhfLUFxaFpnYThXTno4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmXCAAwQA wIMZMA0GCSqGSIb3DQEBCwUAA4IBAQBxqzMRQ+/wRuFF1GzTVLuX4cSxzfsOTW8U VOn8Wpeff91U44KznchN7cUHIrqWbM5GK4aEgaoiyTG9jtSC2d6ugOjNlRl1gVNL cKnfvB2ua1jQIhgw0G2GhUiXRxrZTs2wVbhkbWzqOauxaHRxR04cYZOrFr1lVxKR SxM6uA6XVQMDiSPntk7+cSD0Ya4PiJEI9F9xNMSmfeD+32EfpQby9IZTbOzOTiYe T361d6O4npx2Kaiv6Yo4q0wIvFR3EmOLuxI1sryG30iICZES4FGRrP9LP4VsNWeL x8GcegPy1ABgQjIGXuB/5YSic8R4VAUNYMKK9fo+V7EANXiJNGwH -----END CERTIFICATE-----Generated at Sun Jan 25 16:40:10 2026 by rpki-client