This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/qZFE4vvvTJ5M0gUNt0iW88jKACg.roa File: qZFE4vvvTJ5M0gUNt0iW88jKACg.roa (raw, json) Hash identifier: qVu2Vq/zJz0bGweHHRGe7Gy0T4GqhgX5DzTBtgSOzZg= Subject key identifier: A9:91:44:E2:FB:EF:4C:9E:4C:D2:05:0D:B7:48:96:F3:C8:CA:00:28 Certificate issuer: /CN=1f1293cbbe2f692540d3cc5a6e823660494c4063 Certificate serial: 019B7E38179C8CAC7E417E583DC7C0C9023B Authority key identifier: 1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/qZFE4vvvTJ5M0gUNt0iW88jKACg.roa Signing time: Fri 02 Jan 2026 10:19:23 +0000 ROA not before: Fri 02 Jan 2026 10:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8448 IP address blocks: 84.225.192.0/18 maxlen: 18 188.44.128.0/17 maxlen: 17 217.79.128.0/20 maxlen: 20 2a00:1878::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:17:9c:8c:ac:7e:41:7e:58:3d:c7:c0:c9:02:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1293cbbe2f692540d3cc5a6e823660494c4063 Validity Not Before: Jan 2 10:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a99144e2fbef4c9e4cd2050db74896f3c8ca0028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5f:5d:51:2a:7e:fe:81:80:d6:79:36:d6:d0: 90:a5:3a:0a:93:1f:3c:a4:6f:a6:6b:6d:3b:27:8c: 2b:be:24:67:cd:9a:59:50:f6:60:3d:9b:d3:91:20: c6:a4:3d:05:de:71:50:af:1f:be:87:b4:57:7f:f6: 03:97:aa:09:6a:ea:ba:28:99:af:7e:c1:11:97:0f: 25:3e:90:7f:43:79:d8:6d:4a:ed:49:23:97:04:95: 85:f3:0d:10:37:da:f7:33:f1:28:9f:07:20:43:49: 9c:73:da:9e:28:be:e3:9d:ed:91:d4:bb:58:9c:53: aa:fd:11:74:71:3c:01:f3:ad:5e:1a:3e:4c:45:6b: f8:47:72:9a:48:3b:4b:91:ce:e9:f5:df:5a:44:24: 85:50:ad:10:55:84:50:45:e6:0e:50:b5:d4:4d:1d: b9:13:90:a7:ca:e1:2d:20:3d:52:c3:50:78:90:cb: 01:1b:d5:2a:ee:1c:2f:87:7e:ec:d2:35:f9:4f:e2: f0:f4:7f:00:e3:2f:a6:75:b9:f5:2d:ba:8a:f1:68: cb:e5:4f:47:df:da:aa:5a:01:e4:cf:7d:b6:1c:76: 29:b3:1c:9e:ab:1f:37:7f:97:d0:3d:ad:0a:85:c3: 28:4d:17:d6:31:34:36:7b:55:53:fb:4a:9b:6d:ba: d2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:91:44:E2:FB:EF:4C:9E:4C:D2:05:0D:B7:48:96:F3:C8:CA:00:28 X509v3 Authority Key Identifier: keyid:1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/qZFE4vvvTJ5M0gUNt0iW88jKACg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.225.192.0/18 188.44.128.0/17 217.79.128.0/20 IPv6: 2a00:1878::/29 Signature Algorithm: sha256WithRSAEncryption 72:19:8c:0b:30:29:3c:cb:ef:df:d3:bb:df:d3:fa:b2:69:58: 98:8e:87:69:3e:c9:d8:6d:ad:60:cd:41:5c:9e:75:60:56:f1: c8:17:42:ca:51:f8:af:ed:46:50:cf:ca:64:b2:9b:53:f1:fe: 07:12:de:0f:cf:d1:aa:6c:16:e2:80:a4:75:53:50:fa:92:03: d1:c5:b2:47:25:96:ff:06:f5:dd:5d:08:c2:2d:91:23:54:94: 14:b5:49:eb:3f:0f:4f:1a:5b:fc:ce:c2:1c:cd:67:1f:03:00: 3e:9a:39:dd:85:c4:da:23:af:7b:ca:bc:66:94:8e:9b:2d:85: 53:c3:73:9a:a0:6e:6a:54:94:65:f7:16:a7:ad:b1:15:8b:33: 08:fb:db:22:d6:fe:74:8d:8e:04:01:39:e8:ef:b7:56:59:88: a8:22:b4:ce:9f:fe:21:c2:ea:00:7a:42:84:b6:4c:8a:fc:f1: b8:47:e7:50:d0:aa:c5:be:8c:71:f7:77:ef:c9:1c:5f:a1:9d: 35:2f:11:18:16:a0:e1:f0:6b:e9:e6:9d:81:f3:a9:2c:0c:16: 8b:ff:b5:09:df:89:88:00:b6:ae:bd:fe:0d:51:a7:ed:c6:34: fc:99:a3:e1:0c:b2:cf:cd:35:b0:d0:4b:86:74:95:0a:ee:dc: 66:90:99:ae -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+OBecjKx+QX5YPcfAyQI7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMTI5M2NiYmUyZjY5MjU0MGQzY2M1YTZlODIzNjYwNDk0 YzQwNjMwHhcNMjYwMTAyMTAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTkxNDRlMmZiZWY0YzllNGNkMjA1MGRiNzQ4OTZmM2M4Y2EwMDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl9dUSp+/oGA1nk21tCQpToKkx88 pG+ma207J4wrviRnzZpZUPZgPZvTkSDGpD0F3nFQrx++h7RXf/YDl6oJauq6KJmv fsERlw8lPpB/Q3nYbUrtSSOXBJWF8w0QN9r3M/EonwcgQ0mcc9qeKL7jne2R1LtY nFOq/RF0cTwB861eGj5MRWv4R3KaSDtLkc7p9d9aRCSFUK0QVYRQReYOULXUTR25 E5CnyuEtID1Sw1B4kMsBG9Uq7hwvh37s0jX5T+Lw9H8A4y+mdbn1LbqK8WjL5U9H 39qqWgHkz322HHYpsxyeqx83f5fQPa0KhcMoTRfWMTQ2e1VT+0qbbbrSowIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKmRROL770yeTNIFDbdIlvPIygAoMB8GA1UdIwQY MBaAFB8Sk8u+L2klQNPMWm6CNmBJTEBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQt MjY5NzE1OTlhNTU0LzEvcVpGRTR2dnZUSjVNMGdVTnQwaVc4OGpLQUNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQtMjY5NzE1OTlhNTU0 LzEvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGVOHAAwQH vCyAAwQE2U+AMA0EAgACMAcDBQMqABh4MA0GCSqGSIb3DQEBCwUAA4IBAQByGYwL MCk8y+/f07vf0/qyaViYjodpPsnYba1gzUFcnnVgVvHIF0LKUfiv7UZQz8pksptT 8f4HEt4Pz9GqbBbigKR1U1D6kgPRxbJHJZb/BvXdXQjCLZEjVJQUtUnrPw9PGlv8 zsIczWcfAwA+mjndhcTaI697yrxmlI6bLYVTw3OaoG5qVJRl9xanrbEVizMI+9si 1v50jY4EATno77dWWYioIrTOn/4hwuoAekKEtkyK/PG4R+dQ0KrFvoxx93fvyRxf oZ01LxEYFqDh8Gvp5p2B86ksDBaL/7UJ34mIALauvf4NUaftxjT8maPhDLLPzTWw 0EuGdJUK7txmkJmu -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:27 2026 by rpki-client