This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Qa6SwamcmrwuASA0H2XFgj_rCEQ.roa File: Qa6SwamcmrwuASA0H2XFgj_rCEQ.roa (raw, json) Hash identifier: ApH/HR9918jz6SVfzLpYVnlHLJ7nN239NAo0IqRRNqA= Subject key identifier: 41:AE:92:C1:A9:9C:9A:BC:2E:01:20:34:1F:65:C5:82:3F:EB:08:44 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019B7AC82F89986DBC34706B35A75DD84B26 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Qa6SwamcmrwuASA0H2XFgj_rCEQ.roa Signing time: Thu 01 Jan 2026 18:18:18 +0000 ROA not before: Thu 01 Jan 2026 18:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62005 IP address blocks: 45.83.180.0/23 maxlen: 24 92.118.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:2f:89:98:6d:bc:34:70:6b:35:a7:5d:d8:4b:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Jan 1 18:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41ae92c1a99c9abc2e0120341f65c5823feb0844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a2:69:95:91:87:f2:1b:5a:c6:3d:04:2d:af: 23:a2:93:18:ab:b1:fe:e8:40:8d:0b:66:98:a3:9a: 7f:ab:c3:67:df:9a:ad:89:a6:d7:41:a6:3d:70:be: a1:7a:e7:b5:e6:ca:2e:b9:1d:af:85:04:0f:75:2c: 3d:34:07:97:0e:cb:ce:46:93:f3:87:59:dd:4f:68: 61:37:02:89:50:70:6e:88:6e:7d:1f:2d:22:b3:48: 98:d7:b9:d4:32:b2:e1:11:7e:15:26:ee:c9:c0:7e: 2e:f8:6d:84:44:2b:9c:16:01:1c:d2:79:3e:7f:5c: fd:e8:7a:fc:71:88:6c:0c:a2:5a:18:6b:0a:33:2b: 31:e1:d5:a8:ed:b1:86:9c:fb:27:16:70:2a:f3:8b: 04:5e:1f:e7:07:ee:6a:24:88:25:43:61:49:bc:71: 55:ca:d3:84:74:34:2e:e7:9d:43:5e:9d:4e:43:d0: 37:66:5f:4c:26:d9:58:80:f4:a9:0b:5e:e7:15:49: 9c:ec:7e:fd:8d:0b:a5:bc:6d:69:63:d0:37:37:aa: d5:de:c1:a7:f8:4d:58:ae:72:e8:47:7b:d7:2d:fd: 79:36:3e:a8:7b:c5:5f:74:8d:79:77:cd:e6:0a:4c: c9:e6:8f:a8:b7:ff:be:c6:a2:4e:1f:41:90:8f:7a: 3b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AE:92:C1:A9:9C:9A:BC:2E:01:20:34:1F:65:C5:82:3F:EB:08:44 X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Qa6SwamcmrwuASA0H2XFgj_rCEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.180.0/23 92.118.124.0/24 Signature Algorithm: sha256WithRSAEncryption 35:63:6b:ef:2d:2d:b9:c2:81:3e:9a:de:d5:a7:f4:44:ef:3f: 90:dc:8b:f3:6a:db:06:2a:e5:9f:57:0b:62:37:2f:6c:6c:c0: 69:51:b1:e1:1a:25:e8:08:a7:cd:e9:73:fa:ea:6f:d3:84:47: 81:80:c9:9d:dc:c0:16:e1:5a:7f:86:0d:d6:27:6c:e0:f5:ba: b1:69:ce:c5:63:65:3f:7b:29:62:1b:9b:ed:ae:41:22:e5:40: f5:b4:87:e9:d4:fd:e8:cd:91:2b:7b:b3:d4:a0:30:93:72:9f: 89:e8:7e:45:a9:71:cf:01:ec:38:dc:36:bb:fd:c3:b4:c2:e0: 3d:9f:d5:85:15:bf:17:a9:41:90:fd:35:33:5e:73:a2:dc:c0: c2:72:2d:de:ff:76:d8:da:ad:88:b9:77:a6:5c:fc:cb:2e:61: bb:d7:88:97:2c:d1:7b:2a:3c:25:4d:7a:88:9f:7f:b8:a7:71: a0:0e:34:2f:47:46:33:97:10:bc:7c:eb:9c:87:df:33:b7:4e: 54:7e:60:82:41:51:cb:58:ba:c6:31:2c:ff:89:8c:3f:02:59: 99:b9:a6:a1:3a:61:13:bd:6d:c6:af:32:b1:39:ea:b5:e4:1e: 6f:ee:29:b0:2e:37:aa:a6:71:99:45:f4:44:64:53:19:37:c9: 0a:bd:58:3d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yC+JmG28NHBrNadd2EsmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwMTAxMTgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWFlOTJjMWE5OWM5YWJjMmUwMTIwMzQxZjY1YzU4MjNmZWIwODQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaJplZGH8htaxj0ELa8jopMYq7H+ 6ECNC2aYo5p/q8Nn35qtiabXQaY9cL6heue15souuR2vhQQPdSw9NAeXDsvORpPz h1ndT2hhNwKJUHBuiG59Hy0is0iY17nUMrLhEX4VJu7JwH4u+G2ERCucFgEc0nk+ f1z96Hr8cYhsDKJaGGsKMysx4dWo7bGGnPsnFnAq84sEXh/nB+5qJIglQ2FJvHFV ytOEdDQu551DXp1OQ9A3Zl9MJtlYgPSpC17nFUmc7H79jQulvG1pY9A3N6rV3sGn +E1YrnLoR3vXLf15Nj6oe8VfdI15d83mCkzJ5o+ot/++xqJOH0GQj3o7oQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEGuksGpnJq8LgEgNB9lxYI/6whEMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvUWE2U3dhbWNtcnd1QVNBMEgyWEZnal9yQ0VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLVO0AwQA XHZ8MA0GCSqGSIb3DQEBCwUAA4IBAQA1Y2vvLS25woE+mt7Vp/RE7z+Q3IvzatsG KuWfVwtiNy9sbMBpUbHhGiXoCKfN6XP66m/ThEeBgMmd3MAW4Vp/hg3WJ2zg9bqx ac7FY2U/eyliG5vtrkEi5UD1tIfp1P3ozZEre7PUoDCTcp+J6H5FqXHPAew43Da7 /cO0wuA9n9WFFb8XqUGQ/TUzXnOi3MDCci3e/3bY2q2IuXemXPzLLmG714iXLNF7 KjwlTXqIn3+4p3GgDjQvR0YzlxC8fOuch98zt05UfmCCQVHLWLrGMSz/iYw/AlmZ uaahOmETvW3GrzKxOeq15B5v7imwLjeqpnGZRfREZFMZN8kKvVg9 -----END CERTIFICATE-----Generated at Wed Jan 21 12:42:50 2026 by rpki-client