This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/RQ8JIGxsT6j17dfeEPWw2-YRi2c.roa File: RQ8JIGxsT6j17dfeEPWw2-YRi2c.roa (raw, json) Hash identifier: qbacCBbHQjk4PtD2GWcsUuyb/kcc9ZQ6pfK2TjjwNeA= Subject key identifier: 45:0F:09:20:6C:6C:4F:A8:F5:ED:D7:DE:10:F5:B0:DB:E6:11:8B:67 Certificate issuer: /CN=01a56c42ed7cb963f285503cec0606d60d0ab387 Certificate serial: 019BF99BC447FB23AD09A28C4486B1E5BB38 Authority key identifier: 01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/RQ8JIGxsT6j17dfeEPWw2-YRi2c.roa Signing time: Mon 26 Jan 2026 09:21:33 +0000 ROA not before: Mon 26 Jan 2026 09:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20546 IP address blocks: 178.250.164.0/24 maxlen: 24 185.158.156.0/24 maxlen: 24 188.172.112.0/24 maxlen: 24 188.172.113.0/24 maxlen: 24 188.172.114.0/24 maxlen: 24 188.172.121.0/24 maxlen: 24 188.172.125.0/24 maxlen: 24 195.64.132.0/24 maxlen: 24 195.64.133.0/24 maxlen: 24 217.19.176.0/24 maxlen: 24 217.19.181.0/24 maxlen: 24 217.19.182.0/24 maxlen: 24 217.19.184.0/24 maxlen: 24 217.19.185.0/24 maxlen: 24 217.19.189.0/24 maxlen: 24 2a00:1f08:400d::/48 maxlen: 48 2a00:1f08:403c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:9b:c4:47:fb:23:ad:09:a2:8c:44:86:b1:e5:bb:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01a56c42ed7cb963f285503cec0606d60d0ab387 Validity Not Before: Jan 26 09:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=450f09206c6c4fa8f5edd7de10f5b0dbe6118b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ae:02:01:eb:e9:bc:84:9e:25:c1:bc:6b:a8: e0:ad:e1:90:ab:35:cd:18:bb:e2:89:33:8a:ac:c6: 4f:38:99:e7:67:c5:e5:b6:50:ea:43:e4:cd:37:4c: 15:97:ac:ce:79:c7:a4:67:da:4f:e7:2c:be:5b:6a: c0:41:06:1b:ca:89:d8:37:e5:5f:c9:a3:66:e2:1c: e9:6f:4a:20:67:92:71:f1:c0:35:83:df:55:09:53: 89:10:4f:78:ae:7a:86:83:12:d6:88:43:cd:44:6c: cb:a7:58:c5:1b:ab:4d:9d:c1:b7:c6:af:59:1a:a4: 9e:b3:bf:a5:d1:e3:82:41:3b:59:f7:cd:e5:80:84: 18:3a:4b:08:a8:35:25:da:34:04:c7:79:dc:da:9d: 52:e2:c1:6d:13:11:d3:0d:33:16:41:d9:1f:7b:b3: c9:a5:81:36:a0:9a:4c:6f:dd:37:5b:4e:23:36:c5: fd:9a:61:03:6d:7d:23:41:4b:e9:d9:45:75:0e:b9: 65:7f:c1:d8:ec:ff:50:28:93:35:11:64:e3:0f:d5: ec:b3:09:00:72:0f:09:e3:2b:3d:78:9e:ef:3d:50: c7:8a:84:9a:d5:1f:e9:ce:4f:51:68:bf:f6:01:d0: 7b:62:4c:9d:81:a1:c4:9c:b4:1f:ea:f1:b6:fb:ae: 6d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0F:09:20:6C:6C:4F:A8:F5:ED:D7:DE:10:F5:B0:DB:E6:11:8B:67 X509v3 Authority Key Identifier: keyid:01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/RQ8JIGxsT6j17dfeEPWw2-YRi2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.250.164.0/24 185.158.156.0/24 188.172.112.0-188.172.114.255 188.172.121.0/24 188.172.125.0/24 195.64.132.0/23 217.19.176.0/24 217.19.181.0-217.19.182.255 217.19.184.0/23 217.19.189.0/24 IPv6: 2a00:1f08:400d::/48 2a00:1f08:403c::/48 Signature Algorithm: sha256WithRSAEncryption 36:b8:39:00:3a:f8:b8:bf:8d:05:11:e9:d5:3c:43:31:3b:f8: 01:e2:db:63:6d:d2:b6:33:3d:ba:b7:95:8e:38:6b:e0:0f:ca: fe:33:2c:d7:40:2c:7f:77:28:d3:25:62:fb:cc:13:ca:e1:e7: b0:51:d4:09:3e:8a:d4:ff:48:2e:9c:be:6b:8d:fb:d9:01:6a: 34:9c:17:2b:35:ec:21:48:f8:a0:80:e0:ad:25:72:2d:c1:70: 1c:3f:84:f0:6d:e5:ab:ec:14:76:0c:10:77:93:47:a6:e4:74: 2c:3b:ba:43:08:3e:8e:9e:dd:36:d5:11:22:3c:f2:6c:3b:19: c7:66:c6:00:b5:9b:6b:52:b5:ce:50:8c:2f:35:92:d6:7c:ec: 33:51:56:05:ab:79:1a:42:02:07:27:ca:e9:88:ef:51:48:a4: 02:9c:5a:17:28:00:91:9b:be:12:b6:9f:8a:de:e7:e9:72:da: bb:a6:55:9d:e6:9d:68:18:64:0d:84:09:98:ae:77:0c:a3:25: 08:f6:e3:5b:f3:90:d3:dd:f9:aa:f3:78:cd:2b:9f:57:f4:0e: 1f:c1:13:d8:9b:b6:b7:e9:29:71:92:39:70:a0:0b:26:b9:ba: f5:f0:e6:f2:fc:4b:e0:bc:8b:d5:00:12:be:2a:9a:13:d1:7c: 0e:a5:9c:83 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZv5m8RH+yOtCaKMRIax5bs4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYTU2YzQyZWQ3Y2I5NjNmMjg1NTAzY2VjMDYwNmQ2MGQw YWIzODcwHhcNMjYwMTI2MDkyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTBmMDkyMDZjNmM0ZmE4ZjVlZGQ3ZGUxMGY1YjBkYmU2MTE4YjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla4CAevpvISeJcG8a6jgreGQqzXN GLviiTOKrMZPOJnnZ8XltlDqQ+TNN0wVl6zOecekZ9pP5yy+W2rAQQYbyonYN+Vf yaNm4hzpb0ogZ5Jx8cA1g99VCVOJEE94rnqGgxLWiEPNRGzLp1jFG6tNncG3xq9Z GqSes7+l0eOCQTtZ983lgIQYOksIqDUl2jQEx3nc2p1S4sFtExHTDTMWQdkfe7PJ pYE2oJpMb903W04jNsX9mmEDbX0jQUvp2UV1Drllf8HY7P9QKJM1EWTjD9XsswkA cg8J4ys9eJ7vPVDHioSa1R/pzk9RaL/2AdB7YkydgaHEnLQf6vG2+65t4wIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFEUPCSBsbE+o9e3X3hD1sNvmEYtnMB8GA1UdIwQY MBaAFAGlbELtfLlj8oVQPOwGBtYNCrOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWFWc1F1MTh1V1B5aFZBODdBWUcxZzBLczRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85OWNmZTUtNGIzNS00OWM3LTlhNzMt ZWQwN2Y1Y2FkNmQ3LzEvUlE4SklHeHNUNmoxN2RmZUVQV3cyLVlSaTJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85OWNmZTUtNGIzNS00OWM3LTlhNzMtZWQwN2Y1Y2FkNmQ3 LzEvQWFWc1F1MTh1V1B5aFZBODdBWUcxZzBLczRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBSBAIAATBMAwQAsvqkAwQA uZ6cMAwDBAS8rHADBAC8rHIDBAC8rHkDBAC8rH0DBAHDQIQDBADZE7AwDAMEANkT tQMEANkTtgMEAdkTuAMEANkTvTAYBAIAAjASAwcAKgAfCEANAwcAKgAfCEA8MA0G CSqGSIb3DQEBCwUAA4IBAQA2uDkAOvi4v40FEenVPEMxO/gB4ttjbdK2Mz26t5WO OGvgD8r+MyzXQCx/dyjTJWL7zBPK4eewUdQJPorU/0gunL5rjfvZAWo0nBcrNewh SPiggOCtJXItwXAcP4TwbeWr7BR2DBB3k0em5HQsO7pDCD6Ont021REiPPJsOxnH ZsYAtZtrUrXOUIwvNZLWfOwzUVYFq3kaQgIHJ8rpiO9RSKQCnFoXKACRm74Stp+K 3ufpctq7plWd5p1oGGQNhAmYrncMoyUI9uNb85DT3fmq83jNK59X9A4fwRPYm7a3 6SlxkjlwoAsmubr18Oby/EvgvIvVABK+KpoT0XwOpZyD -----END CERTIFICATE-----Generated at Tue Jan 27 04:23:32 2026 by rpki-client