This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/qwWdo-9lTcBvLCHf4H2oZNKYs8g.roa File: qwWdo-9lTcBvLCHf4H2oZNKYs8g.roa (raw, json) Hash identifier: molpqRNT26EZTf8c40L3ZxZs9DbMAoqcJ+gd6HHZ1w4= Subject key identifier: AB:05:9D:A3:EF:65:4D:C0:6F:2C:21:DF:E0:7D:A8:64:D2:98:B3:C8 Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e Certificate serial: 019B7B35A0C043155FE4E46A9A0E2C6ED631 Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/qwWdo-9lTcBvLCHf4H2oZNKYs8g.roa Signing time: Thu 01 Jan 2026 20:17:50 +0000 ROA not before: Thu 01 Jan 2026 20:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61108 IP address blocks: 62.249.96.0/22 maxlen: 22 88.218.52.0/22 maxlen: 22 185.92.102.0/24 maxlen: 24 185.226.40.0/22 maxlen: 22 2a02:5e0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a0:c0:43:15:5f:e4:e4:6a:9a:0e:2c:6e:d6:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e Validity Not Before: Jan 1 20:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab059da3ef654dc06f2c21dfe07da864d298b3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:52:1a:71:46:1c:d3:55:1c:a7:75:be:b6:fc: 19:fa:c0:f9:c7:7a:d5:47:eb:c9:b8:bf:13:13:b3: 42:f6:9f:e9:bc:5a:5b:6e:f5:ef:a4:81:19:62:7a: 92:0c:0e:d3:50:4e:f5:07:f5:5d:d3:76:75:b0:1d: f0:02:d5:4f:36:2d:d8:90:ff:53:6e:76:5f:7d:09: db:4a:0f:35:4c:fe:77:bd:26:6b:cb:26:62:5d:fd: f5:56:9c:37:44:a9:a5:4f:27:d1:1f:c5:27:a7:55: 31:0d:23:08:09:c4:60:e1:8f:f6:1f:0d:48:66:59: b1:4c:f9:41:3d:00:bf:7d:53:31:90:45:c4:47:37: d7:27:7e:ce:7a:6c:6f:67:07:3a:7b:2e:3f:b6:ac: f1:72:68:32:d5:ad:81:48:0d:2f:0f:34:6b:d6:fd: 95:2b:1c:19:6a:81:17:55:07:a0:91:d9:6b:7a:8e: ac:da:04:72:10:87:21:b9:5d:64:83:40:5c:60:08: 41:88:16:b4:af:6d:22:aa:90:83:00:34:63:99:39: 01:d4:cf:94:5e:61:71:e7:97:49:aa:ea:64:d5:92: 98:7d:c8:93:dd:94:65:92:94:6d:b6:7c:f7:da:d5: b0:3e:52:4d:d8:d3:2a:c7:11:98:1d:d9:19:e0:c8: bb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:05:9D:A3:EF:65:4D:C0:6F:2C:21:DF:E0:7D:A8:64:D2:98:B3:C8 X509v3 Authority Key Identifier: keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/qwWdo-9lTcBvLCHf4H2oZNKYs8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.249.96.0/22 88.218.52.0/22 185.92.102.0/24 185.226.40.0/22 IPv6: 2a02:5e0:2::/48 Signature Algorithm: sha256WithRSAEncryption 7d:98:f7:94:0f:7d:ff:94:d8:c8:44:b9:b2:6a:3f:f7:80:f0: 44:d4:8b:22:7d:14:f0:7d:ea:62:ec:6b:32:5c:4e:ad:f8:40: 17:b9:17:fc:4e:6b:a1:4d:10:2e:b4:b9:ec:58:f2:1b:17:13: 1d:85:72:e3:63:ad:9e:ef:35:15:63:23:8b:e7:84:b4:a0:15: 16:79:4f:10:51:98:69:fa:7b:77:4e:d8:c9:3f:b5:3f:10:a4: 85:c5:dc:4a:47:40:3c:7e:3c:29:c8:89:b0:c9:e9:d3:50:d9: 91:42:80:9c:f7:5d:95:ec:6c:12:e3:8c:be:2c:ac:ce:55:f2: 92:49:e0:b2:49:a6:fe:96:24:6c:bc:73:ab:9c:06:a1:0c:8e: f6:42:d6:54:e7:c6:7d:b3:d8:28:d0:5c:6b:91:0b:8e:0e:46: 36:5d:2a:a6:e5:d3:5b:82:25:d3:94:e8:89:9e:8b:73:38:45: 54:2c:51:96:2c:a4:4e:e5:28:b4:94:db:92:fc:be:9a:f6:d9: e1:d6:f8:be:22:56:76:45:e7:b3:5e:97:40:c7:c4:30:04:b4: fd:d1:82:fc:f3:d2:aa:73:83:4b:22:a2:ba:9b:fd:6c:b9:bb: b3:a2:63:e1:2c:14:8b:42:e3:99:22:57:95:b8:3f:7d:0a:8a: 5e:ab:b7:a7 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt7NaDAQxVf5ORqmg4sbtYxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDI0MDYwM2VjNmViY2Q2MmY3MmQ0NmYxZGMwMGNiN2Ux ZjBiMmUwHhcNMjYwMTAxMjAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjA1OWRhM2VmNjU0ZGMwNmYyYzIxZGZlMDdkYTg2NGQyOThiM2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFIacUYc01Ucp3W+tvwZ+sD5x3rV R+vJuL8TE7NC9p/pvFpbbvXvpIEZYnqSDA7TUE71B/Vd03Z1sB3wAtVPNi3YkP9T bnZffQnbSg81TP53vSZryyZiXf31Vpw3RKmlTyfRH8Unp1UxDSMICcRg4Y/2Hw1I ZlmxTPlBPQC/fVMxkEXERzfXJ37OemxvZwc6ey4/tqzxcmgy1a2BSA0vDzRr1v2V KxwZaoEXVQegkdlreo6s2gRyEIchuV1kg0BcYAhBiBa0r20iqpCDADRjmTkB1M+U XmFx55dJqupk1ZKYfciT3ZRlkpRttnz32tWwPlJN2NMqxxGYHdkZ4Mi7/QIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFKsFnaPvZU3Abywh3+B9qGTSmLPIMB8GA1UdIwQY MBaAFIrSQGA+xuvNYvctRvHcAMt+HwsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80MjUxNDktOWM2OC00MWZiLTgwMzUt ZDc2YzhjNzM5ODYxLzEvcXdXZG8tOWxUY0J2TENIZjRIMm9aTktZczhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy80MjUxNDktOWM2OC00MWZiLTgwMzUtZDc2YzhjNzM5ODYx LzEvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQCPvlgAwQC WNo0AwQAuVxmAwQCueIoMA8EAgACMAkDBwAqAgXgAAIwDQYJKoZIhvcNAQELBQAD ggEBAH2Y95QPff+U2MhEubJqP/eA8ETUiyJ9FPB96mLsazJcTq34QBe5F/xOa6FN EC60uexY8hsXEx2FcuNjrZ7vNRVjI4vnhLSgFRZ5TxBRmGn6e3dO2Mk/tT8QpIXF 3EpHQDx+PCnIibDJ6dNQ2ZFCgJz3XZXsbBLjjL4srM5V8pJJ4LJJpv6WJGy8c6uc BqEMjvZC1lTnxn2z2CjQXGuRC44ORjZdKqbl01uCJdOU6Imei3M4RVQsUZYspE7l KLSU25L8vpr22eHW+L4iVnZF57Nel0DHxDAEtP3Rgvzz0qpzg0siorqb/Wy5u7Oi Y+EsFItC45kiV5W4P30Kil6rt6c= -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:48 2026 by rpki-client