This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/1-qBg34zi4uEP2wUXimFgeu2ZLSg.roa File: 1-qBg34zi4uEP2wUXimFgeu2ZLSg.roa (raw, json) Hash identifier: v4XIt7b4N5avM62zGNkWg4aOAQkBFwt2pFipfahj8vQ= Subject key identifier: FA:A0:60:DF:8C:E2:E2:E1:0F:DB:05:17:8A:61:60:7A:ED:99:2D:28 Certificate issuer: /CN=a8b31004df135aa1a8b943033db14691b11a63dd Certificate serial: 019B7B36B7EC2D88F0192953CB02ECA497C9 Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/1-qBg34zi4uEP2wUXimFgeu2ZLSg.roa Signing time: Thu 01 Jan 2026 20:19:02 +0000 ROA not before: Thu 01 Jan 2026 20:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31617 IP address blocks: 45.66.100.0/22 maxlen: 24 45.92.148.0/22 maxlen: 24 62.192.148.0/22 maxlen: 24 91.241.86.0/23 maxlen: 24 185.186.92.0/22 maxlen: 24 185.252.52.0/22 maxlen: 24 192.166.252.0/24 maxlen: 24 192.172.232.0/24 maxlen: 24 192.188.248.0/24 maxlen: 24 192.207.14.0/24 maxlen: 24 193.23.114.0/24 maxlen: 24 194.143.142.0/23 maxlen: 24 195.88.230.0/23 maxlen: 24 195.88.234.0/23 maxlen: 24 217.26.180.0/22 maxlen: 24 2a0b:7380::/29 maxlen: 29 2a0c:2140::/29 maxlen: 29 2a0d:9b40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b7:ec:2d:88:f0:19:29:53:cb:02:ec:a4:97:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd Validity Not Before: Jan 1 20:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=faa060df8ce2e2e10fdb05178a61607aed992d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b7:32:90:3a:f9:44:66:85:fd:86:44:e2:0e: b2:d6:c6:d8:a0:67:dd:39:83:68:56:9a:b8:f3:5a: 1a:fc:03:e4:42:31:ea:34:46:ef:a7:ba:b6:71:07: 76:a9:cb:41:7f:c1:8b:f7:9f:43:11:ff:94:e6:5f: 52:a3:21:a3:6b:e8:01:b6:3c:6a:70:c4:5f:bc:cb: d7:fb:04:4c:f9:ae:b9:de:20:0d:44:52:3d:e9:b6: eb:1d:9c:1f:f1:3f:a1:cf:08:b2:f5:11:db:9e:f9: 3a:2c:18:1f:72:4b:b2:82:57:68:e2:90:60:ee:41: 1c:9c:fb:6e:e7:76:e8:26:14:2f:86:cd:ae:c0:46: 80:ee:e6:a9:e7:4f:9e:a7:70:a4:2d:34:00:52:61: 5b:19:ef:a8:09:ee:b2:de:ab:e8:81:63:c2:d8:1e: 67:a9:1d:cd:1e:bd:22:cf:fa:51:6b:5f:e9:f0:fb: 99:f6:50:ce:89:6b:6d:8e:47:2c:bd:7d:2a:de:52: 7e:de:6c:5f:dc:c9:93:cd:ca:41:d0:97:74:d5:f7: a7:92:24:77:18:95:33:7b:2e:33:92:18:aa:80:a3: c2:c7:5f:5f:5f:67:b9:e5:35:bc:90:70:60:93:1e: d4:6e:97:28:0f:96:db:e6:7a:d6:05:7a:13:5f:01: e2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A0:60:DF:8C:E2:E2:E1:0F:DB:05:17:8A:61:60:7A:ED:99:2D:28 X509v3 Authority Key Identifier: keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/1-qBg34zi4uEP2wUXimFgeu2ZLSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.100.0/22 45.92.148.0/22 62.192.148.0/22 91.241.86.0/23 185.186.92.0/22 185.252.52.0/22 192.166.252.0/24 192.172.232.0/24 192.188.248.0/24 192.207.14.0/24 193.23.114.0/24 194.143.142.0/23 195.88.230.0/23 195.88.234.0/23 217.26.180.0/22 IPv6: 2a0b:7380::/29 2a0c:2140::/29 2a0d:9b40::/29 Signature Algorithm: sha256WithRSAEncryption 62:d5:dd:37:ed:43:a8:24:4b:8f:bd:5a:1c:b2:7c:cc:d1:86: a6:ff:e9:47:be:0e:81:d0:8e:ee:f0:c5:f9:13:41:43:63:b7: 26:d9:1e:ae:cc:12:0c:39:82:9c:34:c6:b9:a4:f8:23:53:57: 9a:3d:00:cf:84:e2:65:54:5b:d7:92:c3:db:14:9d:34:5a:75: 5e:ca:ed:4e:8f:dc:68:e9:33:dc:5b:d7:81:19:ed:c1:9b:82: 87:fe:67:bb:92:4f:a5:4d:51:60:7e:48:1d:ab:b7:c5:64:53: 18:ea:44:a0:1a:ec:87:e2:ef:fd:04:03:63:03:d3:f0:b3:39: 43:60:ab:b5:09:3a:92:04:41:54:8e:cc:66:56:15:55:9a:d3: 8a:77:a9:6f:4b:c2:32:b9:3b:11:64:d0:dc:92:c6:b9:8f:c9: aa:72:e4:4a:40:5a:34:89:3b:e2:f1:91:9a:14:31:bb:2c:b0: 01:47:81:11:4b:ba:ef:b3:95:30:6b:4a:bb:a3:80:b0:3e:a8: 2b:0c:6a:43:aa:c1:8b:51:7a:58:13:0b:bf:da:44:e9:ff:fe: 4c:6b:90:c8:3d:eb:2d:1d:38:52:ec:23:9d:bc:fe:99:13:96: 21:c5:cd:9a:19:f2:ec:49:14:81:cf:f5:ed:0b:47:35:1e:8e: 1d:b3:47:31 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgISAZt7NrfsLYjwGSlTywLspJfJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YjMxMDA0ZGYxMzVhYTFhOGI5NDMwMzNkYjE0NjkxYjEx YTYzZGQwHhcNMjYwMTAxMjAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWEwNjBkZjhjZTJlMmUxMGZkYjA1MTc4YTYxNjA3YWVkOTkyZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAircykDr5RGaF/YZE4g6y1sbYoGfd OYNoVpq481oa/APkQjHqNEbvp7q2cQd2qctBf8GL959DEf+U5l9SoyGja+gBtjxq cMRfvMvX+wRM+a653iANRFI96bbrHZwf8T+hzwiy9RHbnvk6LBgfckuygldo4pBg 7kEcnPtu53boJhQvhs2uwEaA7uap50+ep3CkLTQAUmFbGe+oCe6y3qvogWPC2B5n qR3NHr0iz/pRa1/p8PuZ9lDOiWttjkcsvX0q3lJ+3mxf3MmTzcpB0Jd01fenkiR3 GJUzey4zkhiqgKPCx19fX2e55TW8kHBgkx7UbpcoD5bb5nrWBXoTXwHiYwIDAQAB o4ICfTCCAnkwHQYDVR0OBBYEFPqgYN+M4uLhD9sFF4phYHrtmS0oMB8GA1UdIwQY MBaAFKizEATfE1qhqLlDAz2xRpGxGmPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS81ZTIzYWUtNjMzOC00OGRkLWEzMDQt YzJhNDNiMDgwZDZmLzEvMS1xQmczNHppNHVFUDJ3VVhpbUZnZXUyWkxTZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMWUvNWUyM2FlLTYzMzgtNDhkZC1hMzA0LWMyYTQzYjA4MGQ2 Zi8xL3FMTVFCTjhUV3FHb3VVTURQYkZHa2JFYVk5MC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCBkQYIKwYBBQUHAQcBAf8EgYEwfzBgBAIAATBaAwQCLUJk AwQCLVyUAwQCPsCUAwQBW/FWAwQCubpcAwQCufw0AwQAwKb8AwQAwKzoAwQAwLz4 AwQAwM8OAwQAwRdyAwQBwo+OAwQBw1jmAwQBw1jqAwQC2Rq0MBsEAgACMBUDBQMq C3OAAwUDKgwhQAMFAyoNm0AwDQYJKoZIhvcNAQELBQADggEBAGLV3TftQ6gkS4+9 WhyyfMzRhqb/6Ue+DoHQju7wxfkTQUNjtybZHq7MEgw5gpw0xrmk+CNTV5o9AM+E 4mVUW9eSw9sUnTRadV7K7U6P3GjpM9xb14EZ7cGbgof+Z7uST6VNUWB+SB2rt8Vk UxjqRKAa7Ifi7/0EA2MD0/CzOUNgq7UJOpIEQVSOzGZWFVWa04p3qW9LwjK5OxFk 0NySxrmPyapy5EpAWjSJO+LxkZoUMbsssAFHgRFLuu+zlTBrSrujgLA+qCsMakOq wYtRelgTC7/aROn//kxrkMg96y0dOFLsI528/pkTliHFzZoZ8uxJFIHP9e0LRzUe jh2zRzE= -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:33 2026 by rpki-client