This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/qe9MYSLX-eDkASoA6H4tOqsAe-Y.roa File: qe9MYSLX-eDkASoA6H4tOqsAe-Y.roa (raw, json) Hash identifier: 8hBnOFhlUkCN3eo0CONISdgb8NSE59yx1j93NOxJCf4= Subject key identifier: A9:EF:4C:61:22:D7:F9:E0:E4:01:2A:00:E8:7E:2D:3A:AB:00:7B:E6 Certificate issuer: /CN=48faed6714f46a2b843f14e40e54e626a0c500ee Certificate serial: 019B78A3437CE2DA08BC0FC3870F369B7867 Authority key identifier: 48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/qe9MYSLX-eDkASoA6H4tOqsAe-Y.roa Signing time: Thu 01 Jan 2026 08:18:44 +0000 ROA not before: Thu 01 Jan 2026 08:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34832 IP address blocks: 195.211.120.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:43:7c:e2:da:08:bc:0f:c3:87:0f:36:9b:78:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48faed6714f46a2b843f14e40e54e626a0c500ee Validity Not Before: Jan 1 08:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9ef4c6122d7f9e0e4012a00e87e2d3aab007be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:36:65:49:1a:dd:8e:b7:e6:22:fa:ef:70:91: 52:df:db:91:15:8a:47:4c:a6:4e:1f:78:76:c3:c3: c4:cd:92:a2:50:41:af:c5:63:83:30:05:7c:87:be: 5e:db:76:3d:3f:10:00:68:af:05:5b:99:03:d9:f0: a9:b5:50:c2:9e:5e:5f:98:4d:db:e7:52:60:d1:d6: 5d:7b:16:80:9d:9a:7f:90:31:f0:db:e3:17:10:a7: ab:2d:0a:30:02:c7:36:7e:8b:67:91:f2:48:16:18: 27:a0:ab:18:e2:00:16:a4:b3:9f:18:24:6d:06:d4: f7:cb:0c:a1:4e:f2:c4:18:60:0f:6e:78:4a:43:45: 6d:1c:52:3c:20:50:d5:fe:34:b6:d3:7e:36:ef:3e: c6:0f:d9:67:93:03:5c:27:84:dc:2c:89:12:d8:cc: bf:bc:6b:8b:f8:ad:9a:de:c9:a4:c2:9b:b7:9f:5e: 90:e6:e9:db:52:c4:6e:4e:cc:e9:94:c3:4a:c5:54: a3:6b:69:7d:98:0c:0f:f4:36:65:15:14:ca:db:d6: 16:c5:72:42:5c:ad:fb:27:95:c7:47:67:5e:06:f8: c3:a7:73:2a:2f:3a:d5:e0:6f:d3:f7:79:35:7a:84: 53:c7:04:d7:32:16:ca:73:8a:90:dd:00:a6:c0:1d: d3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EF:4C:61:22:D7:F9:E0:E4:01:2A:00:E8:7E:2D:3A:AB:00:7B:E6 X509v3 Authority Key Identifier: keyid:48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/qe9MYSLX-eDkASoA6H4tOqsAe-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.211.120.0/22 Signature Algorithm: sha256WithRSAEncryption 85:c0:86:50:42:9f:b2:cc:2d:e0:ae:ef:50:bd:45:c1:d5:74: 24:46:4f:8b:6b:13:53:8c:ce:da:6e:d3:c2:78:24:96:1e:ec: c6:1a:74:4c:7f:eb:11:c5:6d:72:76:76:21:03:ed:7d:b6:e5: 93:94:64:e0:66:96:26:f2:4f:b4:90:90:91:b7:f0:19:2a:e7: 72:68:89:9d:32:c9:c1:d6:8b:85:c1:37:09:e0:29:bf:d2:48: 3d:99:ad:94:22:e6:91:45:ec:e1:ec:dd:9f:0d:c8:fa:d3:aa: f3:ad:92:38:33:c2:c6:19:28:a5:54:df:2e:81:aa:4e:ed:2b: 27:27:c3:12:58:e6:42:e6:74:3b:aa:3c:80:98:13:41:6a:c8: 33:ea:13:33:9a:11:4a:89:2e:48:9f:3a:1c:e6:73:e8:8e:4b: 4f:99:db:09:e2:d4:33:e0:28:a4:80:0e:98:6a:f0:ae:ca:40: 46:06:82:bf:46:48:1d:ff:e6:22:0b:71:b0:e8:e8:6c:b2:45: e3:35:fc:8f:d7:42:5f:be:46:f2:e4:75:f7:ff:38:7b:68:90: 33:3f:87:c6:24:eb:2d:b7:78:e0:05:68:af:8d:ca:75:bc:f0: 5f:ef:6b:1c:51:f6:41:fb:15:f8:ef:c3:df:81:d3:b1:09:79: 4d:e2:fe:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0N84toIvA/Dhw82m3hnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZmFlZDY3MTRmNDZhMmI4NDNmMTRlNDBlNTRlNjI2YTBj NTAwZWUwHhcNMjYwMTAxMDgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWVmNGM2MTIyZDdmOWUwZTQwMTJhMDBlODdlMmQzYWFiMDA3YmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujZlSRrdjrfmIvrvcJFS39uRFYpH TKZOH3h2w8PEzZKiUEGvxWODMAV8h75e23Y9PxAAaK8FW5kD2fCptVDCnl5fmE3b 51Jg0dZdexaAnZp/kDHw2+MXEKerLQowAsc2fotnkfJIFhgnoKsY4gAWpLOfGCRt BtT3ywyhTvLEGGAPbnhKQ0VtHFI8IFDV/jS203427z7GD9lnkwNcJ4TcLIkS2My/ vGuL+K2a3smkwpu3n16Q5unbUsRuTszplMNKxVSja2l9mAwP9DZlFRTK29YWxXJC XK37J5XHR2deBvjDp3MqLzrV4G/T93k1eoRTxwTXMhbKc4qQ3QCmwB3TKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKnvTGEi1/ng5AEqAOh+LTqrAHvmMB8GA1UdIwQY MBaAFEj67WcU9GorhD8U5A5U5iagxQDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1BydFp4VDBhaXVFUHhUa0RsVG1KcURGQU80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80ZmYzZDEtY2MyZC00ZWJhLTkxM2Ut Mjc4MjQ3N2I5ZDFlLzEvcWU5TVlTTFgtZURrQVNvQTZINHRPcXNBZS1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC80ZmYzZDEtY2MyZC00ZWJhLTkxM2UtMjc4MjQ3N2I5ZDFl LzEvU1BydFp4VDBhaXVFUHhUa0RsVG1KcURGQU80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw9N4MA0G CSqGSIb3DQEBCwUAA4IBAQCFwIZQQp+yzC3gru9QvUXB1XQkRk+LaxNTjM7abtPC eCSWHuzGGnRMf+sRxW1ydnYhA+19tuWTlGTgZpYm8k+0kJCRt/AZKudyaImdMsnB 1ouFwTcJ4Cm/0kg9ma2UIuaRRezh7N2fDcj606rzrZI4M8LGGSilVN8ugapO7Ssn J8MSWOZC5nQ7qjyAmBNBasgz6hMzmhFKiS5Inzoc5nPojktPmdsJ4tQz4CikgA6Y avCuykBGBoK/Rkgd/+YiC3Gw6OhsskXjNfyP10Jfvkby5HX3/zh7aJAzP4fGJOst t3jgBWivjcp1vPBf72scUfZB+xX478PfgdOxCXlN4v4i -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:33 2026 by rpki-client