This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/RqkjHn1__XEjnWyHvV0T7PxyWK0.roa File: RqkjHn1__XEjnWyHvV0T7PxyWK0.roa (raw, json) Hash identifier: Ssqz1V4GBD9MzNBS/3Ky31egjDUQPgdZXUNSxQFlN6Y= Subject key identifier: 46:A9:23:1E:7D:7F:FD:71:23:9D:6C:87:BD:5D:13:EC:FC:72:58:AD Certificate issuer: /CN=82b53661f621b6f574a5f38f1162ca679c3b30ee Certificate serial: 019B7F14F88935DAB82469BA47C750009849 Authority key identifier: 82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/RqkjHn1__XEjnWyHvV0T7PxyWK0.roa Signing time: Fri 02 Jan 2026 14:20:39 +0000 ROA not before: Fri 02 Jan 2026 14:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209377 IP address blocks: 152.89.4.0/22 maxlen: 22 152.89.4.0/24 maxlen: 24 2a09:2c40::/29 maxlen: 29 2a09:2c40:a::/48 maxlen: 48 2a09:2c40:b::/48 maxlen: 48 2a09:2c40:c::/48 maxlen: 48 2a09:2c40:d::/48 maxlen: 48 2a09:2c40:e::/48 maxlen: 48 2a09:2c40:f::/48 maxlen: 48 2a09:2c40:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f8:89:35:da:b8:24:69:ba:47:c7:50:00:98:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82b53661f621b6f574a5f38f1162ca679c3b30ee Validity Not Before: Jan 2 14:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46a9231e7d7ffd71239d6c87bd5d13ecfc7258ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:99:cb:0f:73:c4:cc:78:18:ff:7c:7d:8e:a6: 32:34:c9:13:2b:c1:16:1e:c5:1a:15:d2:18:2b:8c: 4b:5e:22:be:a9:d6:da:56:a6:92:a5:7b:68:6a:24: ba:32:b6:8a:78:d8:63:ae:b5:a6:a9:da:86:3c:7d: fb:4a:60:c2:24:92:20:c5:8b:40:74:3d:8d:54:79: 12:04:18:88:65:2e:5a:60:2e:42:c2:5d:2e:49:8b: 4a:6a:a6:58:d3:5f:51:07:b0:67:cd:f8:2b:e9:e5: 6c:b5:e9:3f:88:7d:0d:90:21:e5:3a:78:0a:ef:3f: 97:c4:fa:ed:26:c1:d0:84:8f:45:2d:4a:57:ac:66: ce:81:be:e0:b8:1a:21:ac:18:bf:0d:a5:a4:a0:d4: 38:ea:c4:63:33:ac:bb:38:27:45:d7:ea:1b:c0:dd: b3:f3:de:9b:a3:39:67:f4:90:d0:0f:8a:b9:36:3e: 00:ad:a3:d4:c0:81:62:1e:a9:27:33:f9:d4:52:5d: 9a:13:61:87:be:e5:59:8e:70:67:a3:86:a6:47:a5: 66:0b:69:3d:ab:2d:4e:c2:c9:13:0e:ef:68:95:62: 0d:7b:72:22:72:91:5b:46:ba:48:e3:cb:db:04:1e: 2c:60:a7:17:be:99:65:9b:c2:dc:38:a6:f7:46:f0: f7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A9:23:1E:7D:7F:FD:71:23:9D:6C:87:BD:5D:13:EC:FC:72:58:AD X509v3 Authority Key Identifier: keyid:82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/RqkjHn1__XEjnWyHvV0T7PxyWK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.4.0/22 IPv6: 2a09:2c40::/29 Signature Algorithm: sha256WithRSAEncryption 68:a5:1b:b9:ba:45:88:c3:12:6b:7d:61:9c:68:03:29:61:fc: 1e:fd:ef:47:d0:f4:33:b1:cd:91:18:d7:fb:27:86:5c:f1:e5: b0:00:d4:4f:a2:6a:11:9e:90:7e:12:64:a5:2b:78:1d:ba:db: ac:90:72:20:3c:90:75:1e:8f:46:fe:96:8b:6c:28:7c:56:c8: 75:88:64:80:66:02:1e:7e:99:38:99:dd:71:d6:34:d1:7e:3b: eb:ad:3c:fd:1f:29:2c:c3:86:9e:cf:4e:26:f2:98:bc:b6:26: e7:b1:8a:1c:53:b0:4e:e7:4f:63:2d:05:b9:0f:3d:45:10:37: ac:4f:91:99:25:fc:98:86:0c:04:09:02:07:4a:1d:d9:89:8a: 25:0f:95:e2:c6:51:50:de:91:0b:cf:b3:b4:69:5c:1a:c2:6d: c5:30:2b:ef:35:29:2f:1e:ba:7f:a8:53:db:5b:12:6b:fd:93: 42:cf:39:1a:cd:32:4e:53:aa:1e:f6:aa:ee:87:e5:8b:20:e1: ef:97:c4:b7:d8:33:b4:73:c3:82:67:d3:57:45:60:24:fd:d7: 83:48:f9:d7:30:51:59:6f:de:67:0b:85:3d:09:8d:5c:c2:39: d2:65:1b:e4:d6:af:18:09:7f:d7:31:12:62:26:1f:4f:d4:9c: 52:67:9e:ca -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FPiJNdq4JGm6R8dQAJhJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYjUzNjYxZjYyMWI2ZjU3NGE1ZjM4ZjExNjJjYTY3OWMz YjMwZWUwHhcNMjYwMTAyMTQyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmE5MjMxZTdkN2ZmZDcxMjM5ZDZjODdiZDVkMTNlY2ZjNzI1OGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJnLD3PEzHgY/3x9jqYyNMkTK8EW HsUaFdIYK4xLXiK+qdbaVqaSpXtoaiS6MraKeNhjrrWmqdqGPH37SmDCJJIgxYtA dD2NVHkSBBiIZS5aYC5Cwl0uSYtKaqZY019RB7Bnzfgr6eVstek/iH0NkCHlOngK 7z+XxPrtJsHQhI9FLUpXrGbOgb7guBohrBi/DaWkoNQ46sRjM6y7OCdF1+obwN2z 896bozln9JDQD4q5Nj4AraPUwIFiHqknM/nUUl2aE2GHvuVZjnBno4amR6VmC2k9 qy1OwskTDu9olWINe3IicpFbRrpI48vbBB4sYKcXvpllm8LcOKb3RvD3XwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEapIx59f/1xI51sh71dE+z8clitMB8GA1UdIwQY MBaAFIK1NmH2Ibb1dKXzjxFiymecOzDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iNzRhZDYtYWE1YS00OTQ5LWI4NjAt NjQ5YmZjNTQ4NTg3LzEvUnFrakhuMV9fWEVqbld5SHZWMFQ3UHh5V0swLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9iNzRhZDYtYWE1YS00OTQ5LWI4NjAtNjQ5YmZjNTQ4NTg3 LzEvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCmFkEMA0E AgACMAcDBQMqCSxAMA0GCSqGSIb3DQEBCwUAA4IBAQBopRu5ukWIwxJrfWGcaAMp Yfwe/e9H0PQzsc2RGNf7J4Zc8eWwANRPomoRnpB+EmSlK3gdutuskHIgPJB1Ho9G /paLbCh8Vsh1iGSAZgIefpk4md1x1jTRfjvrrTz9Hyksw4aez04m8pi8tibnsYoc U7BO509jLQW5Dz1FEDesT5GZJfyYhgwECQIHSh3ZiYolD5XixlFQ3pELz7O0aVwa wm3FMCvvNSkvHrp/qFPbWxJr/ZNCzzkazTJOU6oe9qruh+WLIOHvl8S32DO0c8OC Z9NXRWAk/deDSPnXMFFZb95nC4U9CY1cwjnSZRvk1q8YCX/XMRJiJh9P1JxSZ57K -----END CERTIFICATE-----Generated at Tue Feb 10 01:28:17 2026 by rpki-client