This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/q2PFrb86M-sx3oGt2HPK3a2tuMo.roa File: q2PFrb86M-sx3oGt2HPK3a2tuMo.roa (raw, json) Hash identifier: dRMMjShGGPzyUsWgtJ/udfTIxmOFqTOi+aPEPCOEsA8= Subject key identifier: AB:63:C5:AD:BF:3A:33:EB:31:DE:81:AD:D8:73:CA:DD:AD:AD:B8:CA Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 019B7EA545585A5B0C8291C4A910B678BDD2 Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/q2PFrb86M-sx3oGt2HPK3a2tuMo.roa Signing time: Fri 02 Jan 2026 12:18:39 +0000 ROA not before: Fri 02 Jan 2026 12:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 45.140.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:45:58:5a:5b:0c:82:91:c4:a9:10:b6:78:bd:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Jan 2 12:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab63c5adbf3a33eb31de81add873caddadadb8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e8:5c:8b:90:b6:cd:8b:13:dd:f2:02:45:23: 9a:65:5d:a4:86:75:df:25:be:f6:d6:27:18:0c:93: ed:b3:f4:98:4b:33:e1:70:ea:f5:c0:f4:fd:31:44: 18:ec:83:91:45:77:3e:bb:88:be:ac:6a:f0:15:3c: ef:37:80:f9:cb:90:53:e5:a8:c1:d4:e9:94:01:80: ea:80:2b:93:97:5b:ad:ca:e8:1f:2c:e9:71:ad:e9: 38:27:3c:1f:57:06:d8:51:d9:e1:07:66:4f:97:8a: 59:01:e2:b5:f6:77:2b:23:a5:52:64:fa:5a:e0:cc: 46:38:de:62:ab:f4:6c:5b:38:24:b7:c7:c5:c7:d5: 77:af:5e:08:2b:4a:9e:a5:8b:e8:92:7e:36:74:be: 3b:ca:a9:30:ca:be:91:29:af:ea:df:75:b8:a9:09: ad:6b:6c:29:a4:cf:eb:17:b2:d2:b1:06:f2:65:b4: 18:16:52:76:ec:22:cc:28:2b:c1:30:20:33:ca:3b: e6:08:0d:39:54:77:92:d8:b1:ff:01:18:f0:04:fe: 98:60:e4:66:b5:b2:c5:20:b7:fc:b2:46:5e:9f:c9: 98:1c:f4:6c:0e:fe:8a:b9:f7:23:66:1c:4d:48:0e: d5:c1:19:81:3a:0e:d0:6f:4b:00:f2:1d:2a:c8:8f: a3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:63:C5:AD:BF:3A:33:EB:31:DE:81:AD:D8:73:CA:DD:AD:AD:B8:CA X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/q2PFrb86M-sx3oGt2HPK3a2tuMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.194.0/24 Signature Algorithm: sha256WithRSAEncryption bd:3f:aa:a8:18:76:09:9d:ec:21:ff:30:ad:f6:44:98:75:b4: bc:cb:99:91:38:80:22:2a:8f:29:06:30:6f:79:bf:cb:6f:7e: 86:6c:54:96:4c:64:75:ed:44:c1:a5:0b:17:f2:7c:35:5d:1f: ca:86:fe:97:94:d4:61:7a:18:8b:45:7b:92:49:8d:bb:24:83: bb:80:5e:56:10:10:4d:02:f0:a9:d5:d0:6f:12:35:ff:94:89: c5:e0:c1:9a:bc:d7:0f:f2:e4:a0:9f:82:e0:9f:5d:dd:5d:91: ef:b6:93:01:40:81:34:35:ab:e8:ec:7d:a7:8f:1d:c4:cc:7f: 00:55:04:dd:a8:32:7f:0e:3c:09:3c:71:96:8a:de:aa:77:f5: 35:93:de:3d:d3:e1:e9:d2:6f:8b:4c:93:39:7e:4a:71:79:9c: f7:07:e6:c3:bc:14:fd:34:4c:a9:68:40:23:a9:0e:13:21:f7: da:ab:8b:24:2a:16:28:f8:93:f6:f3:cb:87:1f:e6:59:9f:e6: ba:d8:55:13:91:21:c3:ae:63:d0:fc:60:d8:08:ac:f9:0f:81: 21:5e:66:8b:7f:98:42:22:04:83:39:b6:66:0e:1d:4a:8f:ee: 73:99:e7:d1:98:27:b9:36:91:94:0c:f5:1f:db:6d:32:44:7a: d0:1b:88:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pUVYWlsMgpHEqRC2eL3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjYwMTAyMTIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjYzYzVhZGJmM2EzM2ViMzFkZTgxYWRkODczY2FkZGFkYWRiOGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+hci5C2zYsT3fICRSOaZV2khnXf Jb721icYDJPts/SYSzPhcOr1wPT9MUQY7IORRXc+u4i+rGrwFTzvN4D5y5BT5ajB 1OmUAYDqgCuTl1utyugfLOlxrek4JzwfVwbYUdnhB2ZPl4pZAeK19ncrI6VSZPpa 4MxGON5iq/RsWzgkt8fFx9V3r14IK0qepYvokn42dL47yqkwyr6RKa/q33W4qQmt a2wppM/rF7LSsQbyZbQYFlJ27CLMKCvBMCAzyjvmCA05VHeS2LH/ARjwBP6YYORm tbLFILf8skZen8mYHPRsDv6KufcjZhxNSA7VwRmBOg7Qb0sA8h0qyI+jFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKtjxa2/OjPrMd6Brdhzyt2trbjKMB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvcTJQRnJiODZNLXN4M29HdDJIUEszYTJ0dU1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYzCMA0G CSqGSIb3DQEBCwUAA4IBAQC9P6qoGHYJnewh/zCt9kSYdbS8y5mROIAiKo8pBjBv eb/Lb36GbFSWTGR17UTBpQsX8nw1XR/Khv6XlNRhehiLRXuSSY27JIO7gF5WEBBN AvCp1dBvEjX/lInF4MGavNcP8uSgn4Lgn13dXZHvtpMBQIE0Navo7H2njx3EzH8A VQTdqDJ/DjwJPHGWit6qd/U1k9490+Hp0m+LTJM5fkpxeZz3B+bDvBT9NEypaEAj qQ4TIffaq4skKhYo+JP288uHH+ZZn+a62FUTkSHDrmPQ/GDYCKz5D4EhXmaLf5hC IgSDObZmDh1Kj+5zmefRmCe5NpGUDPUf220yRHrQG4in -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:18 2026 by rpki-client