This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/q-8noEh6b2f7clZvsd5WphsHq0A.roa File: q-8noEh6b2f7clZvsd5WphsHq0A.roa (raw, json) Hash identifier: Pn5ZPx0J/yGGt821PM9wYpMm6lTxTXU+s7PYclcgTP8= Subject key identifier: AB:EF:27:A0:48:7A:6F:67:FB:72:56:6F:B1:DE:56:A6:1B:07:AB:40 Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24 Certificate serial: 019B7E375A1A06545513BCE2995D7D3486E1 Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/q-8noEh6b2f7clZvsd5WphsHq0A.roa Signing time: Fri 02 Jan 2026 10:18:35 +0000 ROA not before: Fri 02 Jan 2026 10:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202391 IP address blocks: 31.25.92.0/22 maxlen: 22 31.25.92.0/24 maxlen: 24 31.25.93.0/24 maxlen: 24 31.25.94.0/24 maxlen: 24 31.25.95.0/24 maxlen: 24 178.236.32.0/22 maxlen: 22 185.118.13.0/24 maxlen: 24 185.118.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:5a:1a:06:54:55:13:bc:e2:99:5d:7d:34:86:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24 Validity Not Before: Jan 2 10:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abef27a0487a6f67fb72566fb1de56a61b07ab40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b5:17:18:5e:51:72:d5:ac:e8:ab:a2:d5:1d: ae:06:fd:bc:3f:0a:5c:74:7d:66:bd:bc:37:e8:97: ad:89:f8:6f:4f:ac:eb:ae:6e:3d:22:92:07:45:40: 42:02:15:79:7c:21:18:cd:f0:65:fa:3c:4e:01:0a: b6:6c:17:8f:b7:19:8b:2b:81:37:36:ae:db:55:a1: 19:21:f9:40:7a:46:d3:bf:b3:97:ea:45:5c:26:e5: 79:1f:cb:e2:64:5f:67:0e:14:de:97:c3:89:2a:d0: 5e:a8:7f:e7:f1:95:63:43:26:6c:03:45:38:34:2e: c6:40:6a:f7:cd:cd:84:cd:68:e7:55:5c:26:d6:90: 41:26:a0:56:81:31:6e:5c:42:d0:49:15:4f:a6:5b: 89:d5:5c:c2:b8:c2:62:04:bf:38:a2:83:59:ab:20: a1:5b:36:f5:7d:7f:a8:13:76:d3:95:1c:07:6b:b1: 94:27:ad:58:de:24:b9:eb:be:ce:5b:d1:d2:2e:9f: b1:39:5d:1f:f0:df:47:01:ea:fb:e6:60:85:3b:e2: 03:b7:80:79:ee:b5:b5:5c:3d:8c:bc:76:b6:5a:7b: ae:5f:77:db:94:bb:16:ff:9d:2a:c0:92:4c:64:79: cc:1e:73:e8:6b:42:13:73:32:54:dc:0a:61:8a:4d: b9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EF:27:A0:48:7A:6F:67:FB:72:56:6F:B1:DE:56:A6:1B:07:AB:40 X509v3 Authority Key Identifier: keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/q-8noEh6b2f7clZvsd5WphsHq0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.92.0/22 178.236.32.0/22 185.118.13.0-185.118.14.255 Signature Algorithm: sha256WithRSAEncryption 5b:3a:dd:5f:9f:a3:71:ee:0b:a7:ab:95:2e:85:18:e8:18:5f: 4c:92:26:2f:bf:6b:05:b2:ad:dc:17:26:11:b5:7b:e2:6d:3d: 2f:32:5a:49:80:f7:55:dc:4c:00:a7:b4:b7:9c:f7:e1:62:7f: 49:93:ad:92:72:ba:87:b6:bf:b9:8d:c4:94:bf:da:e3:2c:51: ab:2b:0b:a5:88:56:7a:9d:eb:87:1d:c1:90:1d:80:45:32:63: cc:8d:00:59:92:dc:d7:d8:a8:33:cf:cc:cb:31:cd:d7:c3:c8: c8:be:fb:ff:bb:9f:d7:56:15:7e:9c:52:03:29:61:7f:32:f4: 07:fe:a3:01:21:c1:51:72:a4:37:91:cc:97:5d:ed:ec:0e:84: 4a:04:d0:3e:fc:ee:79:84:cf:9c:5a:fd:f8:9c:37:31:7c:57: 93:39:65:29:f6:d2:f0:d0:18:50:b1:fc:d8:2b:31:f2:a7:ac: 14:82:bb:76:c5:57:e3:f0:2b:ba:cc:cd:b5:c0:b2:92:3b:3d: 07:81:9e:e4:35:12:be:30:a7:91:31:7c:f0:3b:2d:c2:ab:55: 5a:e5:2b:63:a5:a5:a1:bc:ff:e6:a7:37:aa:fd:ed:0a:f7:98: 7a:5a:c1:0d:8c:87:d3:21:5e:d5:6a:9f:61:a2:5a:c1:88:71: 2b:9e:3f:95 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt+N1oaBlRVE7zimV19NIbhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhM2QwYmMxMWIyOWRhNDRhZDU3MzA0YzNmODU2ODg3MGEw MTljMjQwHhcNMjYwMTAyMTAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmVmMjdhMDQ4N2E2ZjY3ZmI3MjU2NmZiMWRlNTZhNjFiMDdhYjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbUXGF5RctWs6Kui1R2uBv28Pwpc dH1mvbw36JetifhvT6zrrm49IpIHRUBCAhV5fCEYzfBl+jxOAQq2bBePtxmLK4E3 Nq7bVaEZIflAekbTv7OX6kVcJuV5H8viZF9nDhTel8OJKtBeqH/n8ZVjQyZsA0U4 NC7GQGr3zc2EzWjnVVwm1pBBJqBWgTFuXELQSRVPpluJ1VzCuMJiBL84ooNZqyCh Wzb1fX+oE3bTlRwHa7GUJ61Y3iS5677OW9HSLp+xOV0f8N9HAer75mCFO+IDt4B5 7rW1XD2MvHa2WnuuX3fblLsW/50qwJJMZHnMHnPoa0ITczJU3Aphik25HwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFKvvJ6BIem9n+3JWb7HeVqYbB6tAMB8GA1UdIwQY MBaAFPo9C8EbKdpErVcwTD+FaIcKAZwkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qMEx3UnNwMmtTdFZ6Qk1QNFZvaHdvQm5DUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1 LWQyMTA3MWVmNzM1Yi8xL3EtOG5vRWg2YjJmN2NsWnZzZDVXcGhzSHEwQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1LWQyMTA3MWVmNzM1 Yi8xLzEtajBMd1JzcDJrU3RWekJNUDRWb2h3b0JuQ1EuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgABMBoDBAIfGVwD BAKy7CAwDAMEALl2DQMEALl2DjANBgkqhkiG9w0BAQsFAAOCAQEAWzrdX5+jce4L p6uVLoUY6BhfTJImL79rBbKt3BcmEbV74m09LzJaSYD3VdxMAKe0t5z34WJ/SZOt knK6h7a/uY3ElL/a4yxRqysLpYhWep3rhx3BkB2ARTJjzI0AWZLc19ioM8/MyzHN 18PIyL77/7uf11YVfpxSAylhfzL0B/6jASHBUXKkN5HMl13t7A6ESgTQPvzueYTP nFr9+Jw3MXxXkzllKfbS8NAYULH82Csx8qesFIK7dsVX4/AruszNtcCykjs9B4Ge 5DUSvjCnkTF88DstwqtVWuUrY6Wlobz/5qc3qv3tCveYelrBDYyH0yFe1WqfYaJa wYhxK54/lQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:35 2026 by rpki-client