This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/qf0Ycspt4xVZQfjdycoRsp7e6Fo.roa File: qf0Ycspt4xVZQfjdycoRsp7e6Fo.roa (raw, json) Hash identifier: 2/MeZvfl7joEETWKcQlH0Ir7c1uGTS+/TZ1/RRRy4hc= Subject key identifier: A9:FD:18:72:CA:6D:E3:15:59:41:F8:DD:C9:CA:11:B2:9E:DE:E8:5A Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E3833C8051BA69695149B4CDA4F2F9A Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/qf0Ycspt4xVZQfjdycoRsp7e6Fo.roa Signing time: Fri 02 Jan 2026 10:19:31 +0000 ROA not before: Fri 02 Jan 2026 10:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216185 IP address blocks: 5.8.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:33:c8:05:1b:a6:96:95:14:9b:4c:da:4f:2f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9fd1872ca6de3155941f8ddc9ca11b29edee85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:cb:14:b3:ce:bc:c3:fe:4a:a1:33:63:05: e1:ac:73:88:7c:76:ee:64:bb:7f:e7:a7:77:68:dd: 80:01:e5:b5:82:5c:ec:15:5b:8e:7a:1f:05:e0:bd: 39:a7:e8:a7:83:5b:8c:ff:5a:ea:4f:6b:7f:e1:db: a3:3f:31:00:85:ab:7d:5d:20:ad:ea:fa:d0:9e:93: 50:51:1e:87:d3:e3:0c:6e:b3:7a:bf:ed:f8:36:c4: 6e:42:4a:41:f3:45:27:1e:94:8d:a7:97:4e:08:bf: 30:41:f4:82:ae:c8:e0:d2:7c:a9:a5:ad:d5:7d:34: b1:ef:d7:8c:10:c1:fd:f3:a4:fd:eb:10:3c:d5:2b: 26:e4:83:4e:54:00:6e:db:57:d0:85:fb:cf:f1:6f: 3d:20:4d:cd:ee:7f:5f:92:36:3f:bd:c6:5a:23:66: 3c:a1:fc:71:ae:9d:7d:de:3a:bd:bb:10:9c:23:c7: 7c:7a:ab:12:ee:77:30:82:3d:40:7b:52:28:35:fa: 2c:42:9e:40:96:39:fc:bf:16:e2:6c:eb:27:b8:55: 4c:3c:ae:db:e8:a9:a2:a1:40:ab:b7:79:8c:4c:e4: 2f:34:46:4c:81:14:4e:61:24:e0:0e:1b:ec:a4:f7: c6:1a:5c:4c:73:fe:81:07:fc:80:30:7e:15:29:f4: c9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FD:18:72:CA:6D:E3:15:59:41:F8:DD:C9:CA:11:B2:9E:DE:E8:5A X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/qf0Ycspt4xVZQfjdycoRsp7e6Fo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.62.0/24 Signature Algorithm: sha256WithRSAEncryption 65:fb:67:83:27:e6:44:a4:4f:f1:92:3c:c2:cf:33:b6:e1:ae: 10:30:68:c5:f6:0d:ce:44:fb:de:3a:0f:dc:db:8a:cd:3d:59: d2:5b:07:0c:33:3a:8e:a6:58:0d:a0:7b:75:11:77:98:9e:53: 2d:1d:92:22:0c:4a:d1:49:51:07:7b:5f:08:27:c6:91:08:3a: a6:24:2e:df:2f:3c:a3:a2:6c:a4:8e:34:38:d8:68:89:80:e5: 4a:65:6a:fe:85:4e:96:0d:ff:ca:a6:61:d4:8d:dc:9a:bc:b8: 59:b4:cc:52:22:80:6a:a8:4a:8b:0d:c1:9e:98:0e:f5:3d:27: aa:24:00:4a:3c:b2:9c:67:32:8b:ab:db:5a:1b:2e:7a:0d:f9: 57:26:59:24:bf:c9:bb:31:3d:d0:da:0a:a1:a2:4d:ab:17:c7: 23:40:42:24:46:ce:ad:df:8c:2a:0a:ab:85:28:95:c9:ea:f5: aa:ed:22:d2:8b:bf:dc:2a:6c:43:b7:f4:a3:c9:48:ba:4f:66: d3:2e:28:93:6c:8f:0b:03:41:4b:fc:22:10:65:11:a1:40:e8: 5d:3d:1f:cc:11:37:81:55:88:1f:11:2f:6f:01:54:ba:f9:93: d7:cd:85:14:8c:aa:f2:64:7e:83:0f:8b:97:08:78:a5:47:7a: 07:12:fc:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ODPIBRumlpUUm0zaTy+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWZkMTg3MmNhNmRlMzE1NTk0MWY4ZGRjOWNhMTFiMjllZGVlODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8PLFLPOvMP+SqEzYwXhrHOIfHbu ZLt/56d3aN2AAeW1glzsFVuOeh8F4L05p+ing1uM/1rqT2t/4dujPzEAhat9XSCt 6vrQnpNQUR6H0+MMbrN6v+34NsRuQkpB80UnHpSNp5dOCL8wQfSCrsjg0nyppa3V fTSx79eMEMH986T96xA81Ssm5INOVABu21fQhfvP8W89IE3N7n9fkjY/vcZaI2Y8 ofxxrp193jq9uxCcI8d8eqsS7ncwgj1Ae1IoNfosQp5Aljn8vxbibOsnuFVMPK7b 6KmioUCrt3mMTOQvNEZMgRROYSTgDhvspPfGGlxMc/6BB/yAMH4VKfTJqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKn9GHLKbeMVWUH43cnKEbKe3uhaMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvcWYwWWNzcHQ0eFZaUWZqZHljb1JzcDdlNkZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQg+MA0G CSqGSIb3DQEBCwUAA4IBAQBl+2eDJ+ZEpE/xkjzCzzO24a4QMGjF9g3ORPveOg/c 24rNPVnSWwcMMzqOplgNoHt1EXeYnlMtHZIiDErRSVEHe18IJ8aRCDqmJC7fLzyj omykjjQ42GiJgOVKZWr+hU6WDf/KpmHUjdyavLhZtMxSIoBqqEqLDcGemA71PSeq JABKPLKcZzKLq9taGy56DflXJlkkv8m7MT3Q2gqhok2rF8cjQEIkRs6t34wqCquF KJXJ6vWq7SLSi7/cKmxDt/SjyUi6T2bTLiiTbI8LA0FL/CIQZRGhQOhdPR/METeB VYgfES9vAVS6+ZPXzYUUjKryZH6DD4uXCHilR3oHEvyq -----END CERTIFICATE-----Generated at Tue Jan 20 09:21:47 2026 by rpki-client