This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/5qQ7K2Sw3wA3dSNaHobcrxLnZf8.roa File: 5qQ7K2Sw3wA3dSNaHobcrxLnZf8.roa (raw, json) Hash identifier: 3XSxcIAkBoWThD9Raz/rE6P+YouBEagvQQFhIuaHny4= Subject key identifier: E6:A4:3B:2B:64:B0:DF:00:37:75:23:5A:1E:86:DC:AF:12:E7:65:FF Certificate issuer: /CN=81c11512eee8fed91c422f33b658d68bc34eb780 Certificate serial: 019B7CED749714CEB4406B72CBF3AE5222B8 Authority key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/5qQ7K2Sw3wA3dSNaHobcrxLnZf8.roa Signing time: Fri 02 Jan 2026 04:18:15 +0000 ROA not before: Fri 02 Jan 2026 04:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50625 IP address blocks: 94.232.216.0/21 maxlen: 21 178.212.160.0/21 maxlen: 21 192.162.172.0/24 maxlen: 24 192.162.173.0/24 maxlen: 24 192.162.174.0/24 maxlen: 24 192.162.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:74:97:14:ce:b4:40:6b:72:cb:f3:ae:52:22:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c11512eee8fed91c422f33b658d68bc34eb780 Validity Not Before: Jan 2 04:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6a43b2b64b0df003775235a1e86dcaf12e765ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:63:c3:83:77:ad:fd:03:39:d4:b3:4b:b5:76: 95:e7:b8:09:91:fe:9d:fb:6a:4f:0b:26:f2:d1:64: 6a:fc:22:e9:76:81:5d:ef:1d:14:9d:df:a9:fb:b6: 2d:f1:46:ec:f0:1a:d1:e3:86:6e:ce:6f:5a:56:84: c6:ab:c1:a9:28:60:39:7b:c0:ce:0e:ba:50:ad:d0: e4:92:d4:2c:49:33:85:0e:07:43:26:5c:99:19:eb: 34:50:0c:5a:b0:4c:77:5a:00:c9:bb:a1:d6:27:6e: 2f:d3:49:63:f8:5b:03:5a:d4:0c:9d:0f:ca:6d:9b: 04:23:1a:f3:d8:25:29:a7:d3:88:65:65:17:da:2b: d7:a9:d2:c4:bd:04:88:d5:9f:b4:6f:1d:85:33:65: b8:f6:8f:82:74:54:e8:87:89:57:c9:a4:80:91:c3: c8:90:68:8e:98:94:25:ac:4b:82:3d:dc:87:63:66: 0d:92:4b:6a:5c:db:21:45:68:a8:e1:9e:1e:5c:a7: e6:38:75:8d:24:df:5c:c4:bc:45:64:1d:77:c7:1a: 49:81:8d:99:a5:c9:54:42:3e:7a:3d:f6:7d:ac:2c: 92:9c:8e:a4:0c:02:1d:83:5f:f7:c1:4a:95:01:62: e0:9e:1a:cc:69:1f:a3:31:37:48:fa:a0:b0:f6:47: 55:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A4:3B:2B:64:B0:DF:00:37:75:23:5A:1E:86:DC:AF:12:E7:65:FF X509v3 Authority Key Identifier: keyid:81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/5qQ7K2Sw3wA3dSNaHobcrxLnZf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.232.216.0/21 178.212.160.0/21 192.162.172.0/22 Signature Algorithm: sha256WithRSAEncryption 44:3d:e6:65:21:c5:99:1d:7b:f8:82:51:33:8b:6d:9f:9b:4f: 46:29:ce:da:e0:36:6f:2a:cc:a6:af:54:f2:53:cf:3c:a0:be: aa:fc:82:b3:d5:65:e0:cd:28:10:99:cd:af:fd:73:a1:91:d0: 8d:f9:4d:1b:46:9d:f9:ad:43:b1:75:7c:2f:2c:12:7e:8b:46: 7d:aa:bf:47:dc:20:e0:3a:bd:30:67:a7:bb:ad:ef:2c:9d:67: 1b:4b:04:00:0e:96:bc:78:ff:70:ba:23:3c:17:2b:60:b6:c8: 27:42:81:34:d6:9c:c9:18:49:97:a1:d4:2f:06:a5:05:97:68: c4:06:04:62:c4:db:5f:dc:fd:3b:41:52:c6:27:ff:65:ee:8f: 4a:01:8a:ed:ee:a5:b9:ae:c7:f7:85:c2:eb:34:36:81:18:64: df:ca:2c:4e:60:a3:69:6b:4c:1a:9e:9c:15:d4:5d:06:97:d9: b7:b8:63:42:e6:db:d3:39:e8:8b:8a:49:ee:c0:e8:30:ae:ad: 9b:1d:52:4d:52:cd:51:eb:eb:b0:6b:6b:ed:0a:c4:f3:4c:3e: c5:bc:06:39:4d:ec:ae:65:ef:47:f0:d3:2e:4b:a8:24:a6:e4: d8:4e:26:7f:19:d1:78:b2:49:01:97:36:ba:4b:cb:8a:da:73: 72:a4:ef:53 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87XSXFM60QGtyy/OuUiK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzExNTEyZWVlOGZlZDkxYzQyMmYzM2I2NThkNjhiYzM0 ZWI3ODAwHhcNMjYwMTAyMDQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmE0M2IyYjY0YjBkZjAwMzc3NTIzNWExZTg2ZGNhZjEyZTc2NWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWPDg3et/QM51LNLtXaV57gJkf6d +2pPCyby0WRq/CLpdoFd7x0Und+p+7Yt8Ubs8BrR44Zuzm9aVoTGq8GpKGA5e8DO DrpQrdDkktQsSTOFDgdDJlyZGes0UAxasEx3WgDJu6HWJ24v00lj+FsDWtQMnQ/K bZsEIxrz2CUpp9OIZWUX2ivXqdLEvQSI1Z+0bx2FM2W49o+CdFToh4lXyaSAkcPI kGiOmJQlrEuCPdyHY2YNkktqXNshRWio4Z4eXKfmOHWNJN9cxLxFZB13xxpJgY2Z pclUQj56PfZ9rCySnI6kDAIdg1/3wUqVAWLgnhrMaR+jMTdI+qCw9kdVBwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOakOytksN8AN3UjWh6G3K8S52X/MB8GA1UdIwQY MBaAFIHBFRLu6P7ZHEIvM7ZY1ovDTreAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jMmMwM2UtNTZlMS00MDNhLTkzZGUt ZTIzYWQ3OTliMWQxLzEvNXFRN0syU3czd0EzZFNOYUhvYmNyeExuWmY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9jMmMwM2UtNTZlMS00MDNhLTkzZGUtZTIzYWQ3OTliMWQx LzEvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDXujYAwQD stSgAwQCwKKsMA0GCSqGSIb3DQEBCwUAA4IBAQBEPeZlIcWZHXv4glEzi22fm09G Kc7a4DZvKsymr1TyU888oL6q/IKz1WXgzSgQmc2v/XOhkdCN+U0bRp35rUOxdXwv LBJ+i0Z9qr9H3CDgOr0wZ6e7re8snWcbSwQADpa8eP9wuiM8FytgtsgnQoE01pzJ GEmXodQvBqUFl2jEBgRixNtf3P07QVLGJ/9l7o9KAYrt7qW5rsf3hcLrNDaBGGTf yixOYKNpa0wanpwV1F0Gl9m3uGNC5tvTOeiLiknuwOgwrq2bHVJNUs1R6+uwa2vt CsTzTD7FvAY5TeyuZe9H8NMuS6gkpuTYTiZ/GdF4skkBlza6S8uK2nNypO9T -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:51 2026 by rpki-client