This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/QIkShXbbHThv1aeU1a-peKPDkSs.roa File: QIkShXbbHThv1aeU1a-peKPDkSs.roa (raw, json) Hash identifier: VjCUy/EF7Rus5PhS1elNAKUIyC4Ng0/nopkU975oiO4= Subject key identifier: 40:89:12:85:76:DB:1D:38:6F:D5:A7:94:D5:AF:A9:78:A3:C3:91:2B Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d Certificate serial: 019B98558017626D99B5B4E81D40FE840EC1 Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/QIkShXbbHThv1aeU1a-peKPDkSs.roa Signing time: Wed 07 Jan 2026 12:01:38 +0000 ROA not before: Wed 07 Jan 2026 12:01:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49493 IP address blocks: 89.26.144.0/20 maxlen: 24 89.26.160.0/20 maxlen: 24 89.26.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:98:55:80:17:62:6d:99:b5:b4:e8:1d:40:fe:84:0e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d Validity Not Before: Jan 7 12:01:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4089128576db1d386fd5a794d5afa978a3c3912b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:90:51:7e:d1:bf:e2:29:52:24:38:55:40:fc: 46:68:94:6a:36:2f:7e:58:fe:c8:2a:b1:5a:c6:55: 1a:44:5b:d1:d8:47:2d:dc:19:2a:49:f4:9d:79:76: 27:31:1c:61:6a:c4:6b:89:6d:85:8d:af:b5:0d:36: 1a:2a:c3:d2:c1:2a:2a:fd:d2:74:c6:15:64:90:3e: 3b:a2:55:0a:05:36:4d:88:0a:d3:0f:a7:bb:d0:7f: 4b:cc:2e:81:e0:99:5c:1e:da:7a:3a:07:db:df:98: f2:ba:05:ac:34:dd:26:e6:50:57:a1:ed:61:b7:2c: 92:15:5c:c4:46:b6:e3:63:bd:e9:dc:e9:09:25:03: bd:04:2d:4d:cb:64:d0:83:d1:6f:88:0f:4d:ac:ef: 7a:1b:c3:6d:32:dc:01:75:50:8a:3f:1e:26:4a:84: 49:97:1b:c0:2b:e1:b2:23:e4:8f:43:95:ec:9f:6c: 43:3a:58:72:18:63:40:e8:1e:38:98:ed:8c:8b:67: 2f:ef:9a:0b:3c:6a:55:b6:d4:fc:6e:42:12:67:34: e3:93:f7:85:09:87:3e:2c:78:fe:9d:bd:21:70:0d: 6f:2a:fb:4c:2a:20:d2:e1:37:d7:69:cd:8e:64:fe: e7:d8:6c:07:b6:c5:a3:13:33:70:ec:1f:5e:79:4e: 71:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:89:12:85:76:DB:1D:38:6F:D5:A7:94:D5:AF:A9:78:A3:C3:91:2B X509v3 Authority Key Identifier: keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/QIkShXbbHThv1aeU1a-peKPDkSs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.26.144.0-89.26.191.255 Signature Algorithm: sha256WithRSAEncryption 37:9a:89:6b:8f:f0:7b:78:a1:dd:8f:88:e4:96:28:72:36:fb: 23:8f:95:8c:b3:c3:5b:7e:37:62:b1:64:49:89:8e:1b:ae:2a: 56:1d:5a:e9:5f:1b:0f:03:e0:6b:de:62:cc:89:83:68:c2:51: 74:3c:99:23:b3:9e:47:50:31:22:97:4c:25:6f:76:2f:4c:80: fe:d2:f4:2e:8c:b7:8f:39:61:6d:33:bb:74:89:59:f2:46:89: 18:83:9a:0e:06:bf:4f:8d:63:c4:59:93:75:6d:1c:a3:75:5e: ba:b3:2f:44:b7:6f:12:49:02:3d:f1:1e:f2:ad:26:11:5c:7f: 58:8b:9e:25:f1:9a:91:1f:1e:41:a9:f7:66:4d:09:e1:47:6a: 6e:5c:33:d5:41:a2:1d:66:eb:b1:48:5f:54:cb:b0:a7:fd:8a: db:b2:b5:16:8d:cf:87:99:18:e9:6c:6a:b7:29:fc:12:90:9c: da:33:23:df:5e:b4:22:af:a1:e1:f0:92:5e:1a:5c:d1:4f:5a: a1:d4:34:03:7a:86:94:55:20:01:9c:b3:9d:2f:0c:fd:5a:90: ef:b9:85:c9:19:f7:e7:a3:00:4d:be:d4:4f:1e:83:5a:bc:9d: 56:40:9a:85:10:69:8d:21:3e:c3:7b:14:63:6c:1e:f2:1c:cd: 70:c0:7b:84 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZuYVYAXYm2ZtbToHUD+hA7BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMWQxOGQ5YTIyMjczNmRiYWMyMzExMTBiODhkZWFjOGRi MDMzNmQwHhcNMjYwMTA3MTIwMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDg5MTI4NTc2ZGIxZDM4NmZkNWE3OTRkNWFmYTk3OGEzYzM5MTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpBRftG/4ilSJDhVQPxGaJRqNi9+ WP7IKrFaxlUaRFvR2Ect3BkqSfSdeXYnMRxhasRriW2Fja+1DTYaKsPSwSoq/dJ0 xhVkkD47olUKBTZNiArTD6e70H9LzC6B4JlcHtp6Ogfb35jyugWsNN0m5lBXoe1h tyySFVzERrbjY73p3OkJJQO9BC1Ny2TQg9FviA9NrO96G8NtMtwBdVCKPx4mSoRJ lxvAK+GyI+SPQ5Xsn2xDOlhyGGNA6B44mO2Mi2cv75oLPGpVttT8bkISZzTjk/eF CYc+LHj+nb0hcA1vKvtMKiDS4TfXac2OZP7n2GwHtsWjEzNw7B9eeU5xfQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFECJEoV22x04b9WnlNWvqXijw5ErMB8GA1UdIwQY MBaAFP4dGNmiInNtusIxEQuI3qyNsDNtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2gwWTJhSWljMjI2d2pFUkM0amVySTJ3TTIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82NGUxZWYtOWJhOC00MzA3LWJmYWQt NjU4N2Y3NmZkODEwLzEvUUlrU2hYYmJIVGh2MWFlVTFhLXBlS1BEa1NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC82NGUxZWYtOWJhOC00MzA3LWJmYWQtNjU4N2Y3NmZkODEw LzEvX2gwWTJhSWljMjI2d2pFUkM0amVySTJ3TTIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARZGpAD BAZZGoAwDQYJKoZIhvcNAQELBQADggEBADeaiWuP8Ht4od2PiOSWKHI2+yOPlYyz w1t+N2KxZEmJjhuuKlYdWulfGw8D4GveYsyJg2jCUXQ8mSOznkdQMSKXTCVvdi9M gP7S9C6Mt485YW0zu3SJWfJGiRiDmg4Gv0+NY8RZk3VtHKN1XrqzL0S3bxJJAj3x HvKtJhFcf1iLniXxmpEfHkGp92ZNCeFHam5cM9VBoh1m67FIX1TLsKf9ituytRaN z4eZGOlsarcp/BKQnNozI99etCKvoeHwkl4aXNFPWqHUNAN6hpRVIAGcs50vDP1a kO+5hckZ9+ejAE2+1E8eg1q8nVZAmoUQaY0hPsN7FGNsHvIczXDAe4Q= -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:43 2026 by rpki-client