This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/qY7Sk0rUw6xSZ-1HP9kbgPfOPbo.roa File: qY7Sk0rUw6xSZ-1HP9kbgPfOPbo.roa (raw, json) Hash identifier: J+fyJwGEO1szX1qe5b1pPbWaNW8W/mP2Me/+6swBagg= Subject key identifier: A9:8E:D2:93:4A:D4:C3:AC:52:67:ED:47:3F:D9:1B:80:F7:CE:3D:BA Certificate issuer: /CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf Certificate serial: 019B797F0EEF9C4434183F3030496265DA85 Authority key identifier: 41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/qY7Sk0rUw6xSZ-1HP9kbgPfOPbo.roa Signing time: Thu 01 Jan 2026 12:18:48 +0000 ROA not before: Thu 01 Jan 2026 12:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197524 IP address blocks: 5.22.240.0/21 maxlen: 21 88.133.0.0/17 maxlen: 17 88.133.128.0/20 maxlen: 20 88.133.156.0/22 maxlen: 22 91.235.8.0/22 maxlen: 23 109.199.160.0/19 maxlen: 19 185.9.64.0/22 maxlen: 22 185.18.36.0/22 maxlen: 23 185.93.200.0/22 maxlen: 23 2a01:a980::/29 maxlen: 29 2a05:fa40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:0e:ef:9c:44:34:18:3f:30:30:49:62:65:da:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf Validity Not Before: Jan 1 12:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a98ed2934ad4c3ac5267ed473fd91b80f7ce3dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:27:e9:8d:ba:50:2e:dc:23:c1:c2:6b:0a:5d: 29:68:2b:73:59:70:3e:0c:a8:67:e6:ac:d6:cd:44: 16:25:77:79:8f:95:98:a4:aa:85:f2:10:cd:f2:68: 0b:7e:3b:75:b3:10:71:31:a5:90:b7:a3:78:1a:7d: 93:89:ec:60:19:cc:5b:50:c4:27:0f:2a:18:9d:38: 0b:ee:cc:5b:b9:8b:87:78:87:86:fc:f3:bc:f3:0b: 14:24:19:e1:48:ca:90:cb:55:bb:da:19:31:1e:52: c2:2b:96:c9:fe:99:32:20:bd:fc:74:b2:c1:cc:93: 3f:0e:fc:d4:79:a1:90:bc:15:21:ea:c7:65:c6:1e: d7:68:b4:76:d5:e1:cd:bc:60:a6:e0:de:bf:8d:2a: f9:c7:39:d8:99:b9:d7:80:15:b1:9b:10:54:6d:53: 17:45:fa:2f:7e:54:27:f4:35:e6:83:5b:0b:d5:2e: ad:04:56:12:60:30:b7:12:a6:9c:f2:a9:eb:e2:6c: b9:93:d2:d2:3b:83:14:8b:97:f2:24:df:f3:e5:c0: 5c:e5:9c:5d:cb:e6:25:83:56:dc:f1:84:96:47:41: 93:46:ac:00:99:59:9b:e1:de:83:0f:69:26:ef:4d: 89:2a:ef:0a:b9:0c:4f:7d:c0:96:a0:ca:ba:20:c7: d9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8E:D2:93:4A:D4:C3:AC:52:67:ED:47:3F:D9:1B:80:F7:CE:3D:BA X509v3 Authority Key Identifier: keyid:41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/qY7Sk0rUw6xSZ-1HP9kbgPfOPbo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.22.240.0/21 88.133.0.0-88.133.143.255 88.133.156.0/22 91.235.8.0/22 109.199.160.0/19 185.9.64.0/22 185.18.36.0/22 185.93.200.0/22 IPv6: 2a01:a980::/29 2a05:fa40::/29 Signature Algorithm: sha256WithRSAEncryption 62:29:6a:c7:05:77:a0:51:70:dc:6d:d2:b7:86:d8:31:04:69: 02:21:82:6c:9c:94:47:36:7f:f1:3d:35:10:44:c1:1e:87:10: 71:91:1c:31:a0:57:bc:5f:d9:77:08:6f:e1:1f:0a:f2:e6:12: e5:18:a3:ac:aa:70:fd:db:68:39:8e:90:6d:07:8d:a0:c7:75: 69:3b:bd:b5:0f:8d:ed:d7:f1:49:e3:28:88:c4:1d:f7:1b:68: 66:f7:6b:31:a5:d0:55:f6:0b:75:6b:a8:ae:a7:cb:fa:95:80: aa:ef:28:d2:a3:92:84:6e:bd:72:ed:57:7e:58:76:fb:ab:e6: 31:81:b3:53:1e:7e:6b:c4:66:23:16:80:8c:28:9e:76:5a:2b: 10:e6:f9:d4:dd:7f:38:60:2f:ac:40:64:99:a5:5f:a8:d9:42: 52:bb:e5:7d:f1:26:82:2b:9e:cc:32:ae:ec:32:9d:a6:f8:3c: 22:17:2a:69:13:99:0f:98:51:c5:92:58:4c:af:7f:27:3d:30: 21:13:18:da:60:c5:30:62:04:bf:e9:09:22:c0:09:13:ec:95: a5:30:5a:9a:06:d0:d5:c7:ba:13:c6:95:21:97:4e:6a:c6:56: 87:35:b4:ba:ad:94:54:3b:b0:63:b2:d1:da:eb:56:b2:10:31: e0:eb:e3:e9 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgISAZt5fw7vnEQ0GD8wMEliZdqFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNWMxMGY4NGRjMjI5MzdlZjZkMTVlYjcxYmJiNGE1MzA4 MTYyYmYwHhcNMjYwMTAxMTIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOThlZDI5MzRhZDRjM2FjNTI2N2VkNDczZmQ5MWI4MGY3Y2UzZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSfpjbpQLtwjwcJrCl0paCtzWXA+ DKhn5qzWzUQWJXd5j5WYpKqF8hDN8mgLfjt1sxBxMaWQt6N4Gn2TiexgGcxbUMQn DyoYnTgL7sxbuYuHeIeG/PO88wsUJBnhSMqQy1W72hkxHlLCK5bJ/pkyIL38dLLB zJM/DvzUeaGQvBUh6sdlxh7XaLR21eHNvGCm4N6/jSr5xznYmbnXgBWxmxBUbVMX RfovflQn9DXmg1sL1S6tBFYSYDC3Eqac8qnr4my5k9LSO4MUi5fyJN/z5cBc5Zxd y+Ylg1bc8YSWR0GTRqwAmVmb4d6DD2km702JKu8KuQxPfcCWoMq6IMfZlQIDAQAB o4ICUDCCAkwwHQYDVR0OBBYEFKmO0pNK1MOsUmftRz/ZG4D3zj26MB8GA1UdIwQY MBaAFEFcEPhNwik3720V63G7tKUwgWK/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVZ3US1FM0NLVGZ2YlJYcmNidTBwVENCWXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81YzU3ZTctN2JhOC00YTYyLThkMTUt YzZiNmZkMTJjZTI3LzEvcVk3U2swclV3NnhTWi0xSFA5a2JnUGZPUGJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi81YzU3ZTctN2JhOC00YTYyLThkMTUtYzZiNmZkMTJjZTI3 LzEvUVZ3US1FM0NLVGZ2YlJYcmNidTBwVENCWXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTA9BAIAATA3AwQDBRbwMAsD AwBYhQMEBFiFgAMEAliFnAMEAlvrCAMEBW3HoAMEArkJQAMEArkSJAMEArldyDAU BAIAAjAOAwUDKgGpgAMFAyoF+kAwDQYJKoZIhvcNAQELBQADggEBAGIpascFd6BR cNxt0reG2DEEaQIhgmyclEc2f/E9NRBEwR6HEHGRHDGgV7xf2XcIb+EfCvLmEuUY o6yqcP3baDmOkG0HjaDHdWk7vbUPje3X8UnjKIjEHfcbaGb3azGl0FX2C3VrqK6n y/qVgKrvKNKjkoRuvXLtV35Ydvur5jGBs1MefmvEZiMWgIwonnZaKxDm+dTdfzhg L6xAZJmlX6jZQlK75X3xJoIrnswyruwynab4PCIXKmkTmQ+YUcWSWEyvfyc9MCET GNpgxTBiBL/pCSLACRPslaUwWpoG0NXHuhPGlSGXTmrGVoc1tLqtlFQ7sGOy0drr VrIQMeDr4+k= -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:27 2026 by rpki-client