This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/quTJbQmG0wYBBRFhrjbNtJHrXMQ.roa File: quTJbQmG0wYBBRFhrjbNtJHrXMQ.roa (raw, json) Hash identifier: QoyxpX44rQlyLQKQYNYLnT369J4osXzhEZfhimIdwCw= Subject key identifier: AA:E4:C9:6D:09:86:D3:06:01:05:11:61:AE:36:CD:B4:91:EB:5C:C4 Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac Certificate serial: 019B78A36B5A20448B25748C7A13F74FB5D5 Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/quTJbQmG0wYBBRFhrjbNtJHrXMQ.roa Signing time: Thu 01 Jan 2026 08:18:54 +0000 ROA not before: Thu 01 Jan 2026 08:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34863 IP address blocks: 185.163.64.0/22 maxlen: 22 2a0a:7400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6b:5a:20:44:8b:25:74:8c:7a:13:f7:4f:b5:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac Validity Not Before: Jan 1 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aae4c96d0986d30601051161ae36cdb491eb5cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:be:f1:fa:e0:70:70:2b:eb:33:4b:e9:ae:f4: 09:4c:48:89:ad:eb:1d:c5:7b:9e:70:bf:03:fb:74: 53:5c:86:df:b9:29:c9:f7:7b:46:09:ce:bc:8a:fa: 7f:de:d4:b9:98:9c:33:18:d8:d8:b4:f5:21:5c:64: cf:45:9b:64:1f:e8:23:2b:1d:9c:2b:ce:e0:c0:cb: 27:e1:9c:bc:e2:6a:e8:18:76:8a:4d:eb:37:9b:12: 61:83:0a:9d:49:bf:c0:1a:6c:2b:dc:9c:da:85:6a: d0:3c:ed:2c:5a:0a:a2:1e:ac:fd:0a:ee:58:24:6f: f2:f8:d7:af:66:49:1a:74:dd:de:41:64:2b:95:a2: ab:d0:a2:7e:22:1c:16:51:40:d7:33:55:da:2d:6a: f3:93:7b:5b:50:9e:cd:75:e9:40:8a:a6:e9:90:89: 3c:45:68:ef:58:8d:b6:c5:7e:a2:f9:ab:10:72:d4: b0:95:81:25:c9:02:4c:17:4d:92:a8:3d:1f:c0:d6: 99:f6:b5:d3:26:74:9c:c8:dc:d1:ef:11:1e:e6:c9: 9e:9a:62:98:c9:b7:53:c9:3e:5f:61:d5:0f:86:38: 34:97:96:ea:1e:f5:63:06:d9:76:7e:25:f1:97:11: 54:ee:d0:54:51:31:c9:76:2c:16:fe:65:74:e0:6a: 5a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E4:C9:6D:09:86:D3:06:01:05:11:61:AE:36:CD:B4:91:EB:5C:C4 X509v3 Authority Key Identifier: keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/quTJbQmG0wYBBRFhrjbNtJHrXMQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.163.64.0/22 IPv6: 2a0a:7400::/29 Signature Algorithm: sha256WithRSAEncryption 3e:38:8c:38:07:00:76:28:5b:8b:98:76:62:1d:d4:6d:b5:cb: 46:07:5b:fb:8c:d4:cf:3e:04:93:20:c7:30:2a:48:fc:83:e5: b1:fe:8e:b1:3e:13:80:c5:12:28:a8:14:de:e9:d2:db:72:1b: 8f:2a:c4:08:f4:0a:6d:b0:80:a0:6e:13:25:61:75:2c:d3:7d: 85:83:be:1b:fa:8d:f0:18:f1:62:18:cf:72:a5:f5:55:24:6a: af:ff:30:4f:d6:98:63:c8:bd:5b:4e:48:21:a1:1c:f5:75:e6: f9:82:82:32:70:6d:44:38:d6:d5:64:4e:9d:0a:4d:76:e3:d3: c9:1c:f9:8d:a0:39:e9:1f:df:20:75:09:9e:08:45:21:1c:c6: c3:12:94:35:fa:4d:27:77:1d:10:b5:f5:62:f5:d2:1d:8d:ca: 0a:23:5f:0e:08:44:03:6e:c1:55:68:28:b6:7e:73:b7:67:88: d3:03:83:9e:53:87:3c:e3:bd:b0:b0:3a:dc:84:ff:89:50:6c: d5:7f:0b:e2:37:95:61:21:41:ad:6b:d0:1a:84:a4:ae:03:0f: e7:68:20:25:dc:a6:e5:60:14:d9:3a:f9:47:d6:45:4e:40:c5: 5a:e2:25:6d:c9:b3:bf:95:e1:ec:10:07:6a:48:64:49:03:59: 78:7b:84:62 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4o2taIESLJXSMehP3T7XVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhOGQxOWFkMzFjODRhNzQ4NTZiMGE2YjNjYzEwMGU0N2Ey YjJhYWMwHhcNMjYwMTAxMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWU0Yzk2ZDA5ODZkMzA2MDEwNTExNjFhZTM2Y2RiNDkxZWI1Y2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr7x+uBwcCvrM0vprvQJTEiJresd xXuecL8D+3RTXIbfuSnJ93tGCc68ivp/3tS5mJwzGNjYtPUhXGTPRZtkH+gjKx2c K87gwMsn4Zy84mroGHaKTes3mxJhgwqdSb/AGmwr3JzahWrQPO0sWgqiHqz9Cu5Y JG/y+NevZkkadN3eQWQrlaKr0KJ+IhwWUUDXM1XaLWrzk3tbUJ7NdelAiqbpkIk8 RWjvWI22xX6i+asQctSwlYElyQJMF02SqD0fwNaZ9rXTJnScyNzR7xEe5smemmKY ybdTyT5fYdUPhjg0l5bqHvVjBtl2fiXxlxFU7tBUUTHJdiwW/mV04GpadwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKrkyW0JhtMGAQURYa42zbSR61zEMB8GA1UdIwQY MBaAFIqNGa0xyEp0hWsKazzBAOR6KyqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgt MjQwMjM0MDNiYjBjLzEvcXVUSmJRbUcwd1lCQlJGaHJqYk50SkhyWE1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgtMjQwMjM0MDNiYjBj LzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaNAMA0E AgACMAcDBQMqCnQAMA0GCSqGSIb3DQEBCwUAA4IBAQA+OIw4BwB2KFuLmHZiHdRt tctGB1v7jNTPPgSTIMcwKkj8g+Wx/o6xPhOAxRIoqBTe6dLbchuPKsQI9AptsICg bhMlYXUs032Fg74b+o3wGPFiGM9ypfVVJGqv/zBP1phjyL1bTkghoRz1deb5goIy cG1EONbVZE6dCk1249PJHPmNoDnpH98gdQmeCEUhHMbDEpQ1+k0ndx0QtfVi9dId jcoKI18OCEQDbsFVaCi2fnO3Z4jTA4OeU4c8472wsDrchP+JUGzVfwviN5VhIUGt a9AahKSuAw/naCAl3KblYBTZOvlH1kVOQMVa4iVtybO/leHsEAdqSGRJA1l4e4Ri -----END CERTIFICATE-----Generated at Mon Jan 26 06:19:08 2026 by rpki-client