This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/qF5xd0E9VHjEoVDgrR2EV2reNkg.roa File: qF5xd0E9VHjEoVDgrR2EV2reNkg.roa (raw, json) Hash identifier: +LVENHANP4Wm2qt1oX01yx6cEEPM3z4kpbtQOwe00sQ= Subject key identifier: A8:5E:71:77:41:3D:54:78:C4:A1:50:E0:AD:1D:84:57:6A:DE:36:48 Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 019B79ED5CD830CD7F968236B1ABFEDCC586 Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/qF5xd0E9VHjEoVDgrR2EV2reNkg.roa Signing time: Thu 01 Jan 2026 14:19:17 +0000 ROA not before: Thu 01 Jan 2026 14:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2027 IP address blocks: 45.13.104.0/22 maxlen: 22 62.204.43.0/24 maxlen: 24 193.58.42.0/23 maxlen: 24 195.20.209.0/24 maxlen: 24 2a0e:e700::/31 maxlen: 31 2a0f:ce00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5c:d8:30:cd:7f:96:82:36:b1:ab:fe:dc:c5:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Jan 1 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a85e7177413d5478c4a150e0ad1d84576ade3648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:04:22:dd:2d:ba:64:60:ec:59:ad:5b:f1:95: d1:97:66:c0:9f:f4:82:90:69:a9:9e:43:b3:fa:3e: d1:e9:ee:b4:00:d9:80:59:89:7d:bc:3c:88:1c:e9: ea:48:42:24:4f:41:15:db:5a:0c:e9:8b:18:88:d3: bf:7e:cc:87:b4:d8:b7:21:91:ce:f3:8e:63:51:b5: c4:6e:32:7f:de:38:4b:b6:78:8a:95:5b:65:ab:85: 47:2d:b0:9b:d4:4a:5f:18:5f:fc:8a:aa:9e:23:b6: ee:a8:42:34:d1:fc:3c:04:13:5a:10:3a:5d:cb:a1: 7b:ce:0c:3f:9e:50:46:71:6e:89:62:c1:80:50:48: 2d:01:00:45:1e:88:bb:e4:11:40:65:ea:1a:3b:48: f3:81:85:2b:56:6e:97:54:dd:00:88:62:d3:df:bd: 88:19:a9:50:d7:33:55:17:8b:50:c6:36:0b:42:a7: f6:c4:f4:3e:e8:9c:3d:b2:ac:88:7b:56:fd:86:30: 3a:8c:ee:41:50:4c:df:a2:44:e6:98:73:69:b5:6c: 79:7d:29:ab:5f:bd:c7:50:49:9c:d2:e9:74:bd:71: be:c5:68:77:38:69:cd:b8:14:a0:0c:61:45:27:a3: a0:13:3b:98:55:04:1e:6c:db:11:48:05:7b:b2:c9: 48:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5E:71:77:41:3D:54:78:C4:A1:50:E0:AD:1D:84:57:6A:DE:36:48 X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/qF5xd0E9VHjEoVDgrR2EV2reNkg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.104.0/22 62.204.43.0/24 193.58.42.0/23 195.20.209.0/24 IPv6: 2a0e:e700::/31 2a0f:ce00::/29 Signature Algorithm: sha256WithRSAEncryption 41:2b:8b:a8:fb:45:fc:4c:2b:61:34:6e:1a:81:0e:80:fd:ad: 94:47:dd:89:01:7b:a5:cd:e6:bd:6e:04:b6:00:0a:93:f7:71: 84:bc:78:c5:3e:5d:ca:02:4f:c4:74:da:09:49:60:b2:58:66: af:a6:39:46:d2:01:f5:85:42:9d:35:b6:69:ea:2b:63:3e:7f: d0:0d:e7:d1:0e:fd:39:18:40:34:3e:14:29:79:18:a3:17:84: e6:5d:9d:8c:17:26:01:a7:10:31:15:6b:64:59:24:21:2c:95: 7a:b3:74:87:69:4f:76:2a:d2:c4:b8:74:29:6c:ee:5b:88:74: 69:e3:cc:4b:be:67:91:f2:b5:41:ed:65:2b:57:74:58:25:81: 94:ff:76:ee:a2:c8:9f:34:6b:b8:6f:f8:05:c7:94:26:06:83: 70:62:c6:58:90:80:7e:7d:19:88:0f:9d:9c:4c:e5:ef:83:c4: 58:d5:25:60:53:65:52:d0:55:53:31:ba:8d:2e:c4:4b:e5:fb: 31:c2:8b:d9:3d:a4:f9:1d:ee:42:42:10:55:77:dd:9a:11:52: 2b:e8:92:42:1d:44:e5:79:da:d2:47:58:5a:96:2c:d8:ba:81: 85:ee:dd:a2:4e:91:46:6b:dc:87:00:d6:92:ce:99:fd:d5:0d: 60:0c:e2:08 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt57VzYMM1/loI2sav+3MWGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjYwMTAxMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODVlNzE3NzQxM2Q1NDc4YzRhMTUwZTBhZDFkODQ1NzZhZGUzNjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AQi3S26ZGDsWa1b8ZXRl2bAn/SC kGmpnkOz+j7R6e60ANmAWYl9vDyIHOnqSEIkT0EV21oM6YsYiNO/fsyHtNi3IZHO 845jUbXEbjJ/3jhLtniKlVtlq4VHLbCb1EpfGF/8iqqeI7buqEI00fw8BBNaEDpd y6F7zgw/nlBGcW6JYsGAUEgtAQBFHoi75BFAZeoaO0jzgYUrVm6XVN0AiGLT372I GalQ1zNVF4tQxjYLQqf2xPQ+6Jw9sqyIe1b9hjA6jO5BUEzfokTmmHNptWx5fSmr X73HUEmc0ul0vXG+xWh3OGnNuBSgDGFFJ6OgEzuYVQQebNsRSAV7sslIBwIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFKhecXdBPVR4xKFQ4K0dhFdq3jZIMB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvcUY1eGQwRTlWSGpFb1ZEZ3JSMkVWMnJlTmtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQCLQ1oAwQA PswrAwQBwToqAwQAwxTRMBQEAgACMA4DBQEqDucAAwUDKg/OADANBgkqhkiG9w0B AQsFAAOCAQEAQSuLqPtF/EwrYTRuGoEOgP2tlEfdiQF7pc3mvW4EtgAKk/dxhLx4 xT5dygJPxHTaCUlgslhmr6Y5RtIB9YVCnTW2aeorYz5/0A3n0Q79ORhAND4UKXkY oxeE5l2djBcmAacQMRVrZFkkISyVerN0h2lPdirSxLh0KWzuW4h0aePMS75nkfK1 Qe1lK1d0WCWBlP927qLInzRruG/4BceUJgaDcGLGWJCAfn0ZiA+dnEzl74PEWNUl YFNlUtBVUzG6jS7ES+X7McKL2T2k+R3uQkIQVXfdmhFSK+iSQh1E5Xna0kdYWpYs 2LqBhe7dok6RRmvchwDWks6Z/dUNYAziCA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:51 2026 by rpki-client