This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/_QfreQ9EqD9ss46rDX_UENkjJZk.roa File: _QfreQ9EqD9ss46rDX_UENkjJZk.roa (raw, json) Hash identifier: zfUdwflwTagWZ9n75pKYGfQVwgMmnMON42g7fWb4fZ4= Subject key identifier: FD:07:EB:79:0F:44:A8:3F:6C:B3:8E:AB:0D:7F:D4:10:D9:23:25:99 Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 019B79EC0AA29F0AE283297016016A19B14A Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/_QfreQ9EqD9ss46rDX_UENkjJZk.roa Signing time: Thu 01 Jan 2026 14:17:50 +0000 ROA not before: Thu 01 Jan 2026 14:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213388 IP address blocks: 2a05:4144::/40 maxlen: 40 2a05:4144:100::/40 maxlen: 40 2a05:4144:200::/40 maxlen: 40 2a05:4144:300::/40 maxlen: 40 2a05:4144:400::/40 maxlen: 40 2a05:4144:500::/40 maxlen: 40 2a05:4144:600::/40 maxlen: 40 2a05:4144:700::/40 maxlen: 40 2a05:4144:800::/40 maxlen: 40 2a05:4144:900::/40 maxlen: 40 2a05:4144:a00::/40 maxlen: 40 2a05:4144:b00::/40 maxlen: 40 2a05:4144:c00::/40 maxlen: 40 2a05:4144:d00::/40 maxlen: 40 2a05:4144:e00::/40 maxlen: 40 2a05:4144:1000::/40 maxlen: 40 2a05:4144:1100::/40 maxlen: 40 2a05:4144:1200::/40 maxlen: 40 2a05:4144:1300::/40 maxlen: 40 2a05:4144:1400::/40 maxlen: 40 2a05:4144:1500::/40 maxlen: 40 2a05:4144:1600::/40 maxlen: 40 2a05:4144:1700::/40 maxlen: 40 2a05:4144:1800::/40 maxlen: 40 2a05:4144:1900::/40 maxlen: 40 2a05:4144:1a00::/40 maxlen: 40 2a05:4144:1b00::/40 maxlen: 40 2a05:4144:1c00::/40 maxlen: 40 2a05:4144:1d00::/40 maxlen: 40 2a05:4144:1e00::/40 maxlen: 40 2a05:4144:2000::/40 maxlen: 40 2a05:4144:2100::/40 maxlen: 40 2a05:4144:2200::/40 maxlen: 40 2a05:4144:2300::/40 maxlen: 40 2a05:4144:2400::/40 maxlen: 40 2a05:4144:2500::/40 maxlen: 40 2a05:4144:2600::/40 maxlen: 40 2a05:4144:2700::/40 maxlen: 40 2a05:4144:2800::/40 maxlen: 40 2a05:4144:2900::/40 maxlen: 40 2a05:4144:2a00::/40 maxlen: 40 2a05:4144:2b00::/40 maxlen: 40 2a05:4144:2c00::/40 maxlen: 40 2a05:4144:2d00::/40 maxlen: 40 2a05:4144:2e00::/40 maxlen: 40 2a05:4144:3000::/40 maxlen: 40 2a05:4144:3100::/40 maxlen: 40 2a05:4144:3200::/40 maxlen: 40 2a05:4144:3300::/40 maxlen: 40 2a05:4144:3400::/40 maxlen: 40 2a05:4144:3500::/40 maxlen: 40 2a05:4144:3600::/40 maxlen: 40 2a05:4144:3700::/40 maxlen: 40 2a05:4144:3800::/40 maxlen: 40 2a05:4144:3900::/40 maxlen: 40 2a05:4144:3a00::/40 maxlen: 40 2a05:4144:3b00::/40 maxlen: 40 2a05:4144:3c00::/40 maxlen: 40 2a05:4144:3d00::/40 maxlen: 40 2a05:4144:3e00::/40 maxlen: 40 2a05:4144:4000::/40 maxlen: 40 2a05:4144:4100::/40 maxlen: 40 2a05:4144:4200::/40 maxlen: 40 2a05:4144:4300::/40 maxlen: 40 2a05:4144:4400::/40 maxlen: 40 2a05:4144:4500::/40 maxlen: 40 2a05:4144:4600::/40 maxlen: 40 2a05:4144:4700::/40 maxlen: 40 2a05:4144:4800::/40 maxlen: 40 2a05:4144:4900::/40 maxlen: 40 2a05:4144:4a00::/40 maxlen: 40 2a05:4144:4b00::/40 maxlen: 40 2a05:4144:4c00::/40 maxlen: 40 2a05:4144:4d00::/40 maxlen: 40 2a05:4144:4e00::/40 maxlen: 40 2a05:4144:5000::/40 maxlen: 40 2a05:4144:5100::/40 maxlen: 40 2a05:4144:5200::/40 maxlen: 40 2a05:4144:5300::/40 maxlen: 40 2a05:4144:5400::/40 maxlen: 40 2a05:4144:5500::/40 maxlen: 40 2a05:4144:5600::/40 maxlen: 40 2a05:4144:5700::/40 maxlen: 40 2a05:4144:5800::/40 maxlen: 40 2a05:4144:5900::/40 maxlen: 40 2a05:4144:5a00::/40 maxlen: 40 2a05:4144:5b00::/40 maxlen: 40 2a05:4144:5c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:0a:a2:9f:0a:e2:83:29:70:16:01:6a:19:b1:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Jan 1 14:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd07eb790f44a83f6cb38eab0d7fd410d9232599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c5:08:d7:f2:56:9d:4a:76:e2:97:a9:6e:ac: 98:b2:90:14:6c:e8:f8:ee:1e:1c:6e:2c:3b:ba:88: d2:b3:a8:fe:12:59:00:a8:ab:9f:fa:97:d6:3d:80: bf:6c:bb:b9:ab:67:81:15:93:35:3f:b2:21:57:cf: ea:66:28:6f:6e:ff:ee:87:cb:26:e3:52:55:45:06: bb:92:96:51:d8:68:8c:1b:42:e9:52:21:1c:78:9a: d7:6f:58:93:d2:ef:89:bc:b5:19:0c:3e:49:a4:83: 88:3c:0d:b2:ac:14:90:f8:5d:9e:bc:e9:d8:62:c5: e3:33:66:09:68:2a:6f:2f:90:bc:9d:91:3f:65:2d: 34:03:37:38:ed:4b:eb:70:30:56:1b:e2:da:ef:ed: c0:bc:1e:bb:33:6e:72:03:c7:9a:a3:1d:06:69:3c: cc:b4:21:f4:83:97:13:6b:32:5a:d1:fa:85:2f:d1: 6f:ce:e4:9c:ef:30:7d:39:9a:b6:74:9a:d5:ee:b3: 50:96:95:f8:58:36:6e:1c:6e:7f:c4:24:4d:38:34: 15:a8:0c:1a:a2:cf:33:20:ae:b6:0d:bf:ce:e9:15: 50:13:7f:06:6d:1a:91:e0:34:64:47:93:7a:40:fb: 2d:e5:ef:90:d3:9c:5e:22:e2:dd:2f:ec:5a:e5:8a: d2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:07:EB:79:0F:44:A8:3F:6C:B3:8E:AB:0D:7F:D4:10:D9:23:25:99 X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/_QfreQ9EqD9ss46rDX_UENkjJZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:4144::-2a05:4144:eff:ffff:ffff:ffff:ffff:ffff 2a05:4144:1000::-2a05:4144:1eff:ffff:ffff:ffff:ffff:ffff 2a05:4144:2000::-2a05:4144:2eff:ffff:ffff:ffff:ffff:ffff 2a05:4144:3000::-2a05:4144:3eff:ffff:ffff:ffff:ffff:ffff 2a05:4144:4000::-2a05:4144:4eff:ffff:ffff:ffff:ffff:ffff 2a05:4144:5000::-2a05:4144:5cff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3f:c0:53:3b:88:e3:d9:2a:f2:39:a0:29:2f:4a:7a:88:85:69: 98:c9:e3:86:e0:b9:6e:27:cc:0d:ab:33:d4:a2:e1:ac:b8:9d: 22:af:fc:71:26:f8:fe:30:d6:17:7f:9d:6a:5d:df:5e:7c:de: 20:6a:67:7e:63:9b:77:e3:16:1d:a7:3c:bd:e3:be:c8:4a:0b: 5f:00:5c:99:9b:52:1d:30:72:f8:5c:ab:56:ca:78:46:77:66: 59:63:fb:e7:82:6e:1f:00:4e:90:95:e2:16:bc:ee:14:a1:b5: ab:99:cf:d4:fa:85:ea:df:c4:35:65:35:41:58:2d:a7:cf:c0: 58:de:13:bb:16:e9:ea:c6:39:5a:d7:d9:0e:bc:36:7c:5b:b8: 92:31:ac:a9:34:0e:ed:76:4a:05:20:80:a2:a9:3a:e8:f3:7a: 43:b2:2c:00:3b:8e:3e:26:4c:0a:c4:2b:06:77:81:03:90:1e: 6e:24:54:af:c4:15:75:de:12:af:04:09:96:a5:ec:49:89:1e: 6e:4e:44:94:24:eb:4c:52:b2:ed:5c:df:65:4c:0f:e8:4f:ad: 64:43:4c:b0:eb:6d:6f:5d:44:3f:ad:c0:dc:62:c8:da:cb:54: d0:75:b4:d1:32:82:f8:da:fb:15:b5:f2:4a:bf:70:f5:f7:1f: 83:af:73:4d -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISAZt57AqinwrigylwFgFqGbFKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjYwMTAxMTQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDA3ZWI3OTBmNDRhODNmNmNiMzhlYWIwZDdmZDQxMGQ5MjMyNTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncUI1/JWnUp24pepbqyYspAUbOj4 7h4cbiw7uojSs6j+ElkAqKuf+pfWPYC/bLu5q2eBFZM1P7IhV8/qZihvbv/uh8sm 41JVRQa7kpZR2GiMG0LpUiEceJrXb1iT0u+JvLUZDD5JpIOIPA2yrBSQ+F2evOnY YsXjM2YJaCpvL5C8nZE/ZS00Azc47UvrcDBWG+La7+3AvB67M25yA8eaox0GaTzM tCH0g5cTazJa0fqFL9FvzuSc7zB9OZq2dJrV7rNQlpX4WDZuHG5/xCRNODQVqAwa os8zIK62Db/O6RVQE38GbRqR4DRkR5N6QPst5e+Q05xeIuLdL+xa5YrSyQIDAQAB o4ICbzCCAmswHQYDVR0OBBYEFP0H63kPRKg/bLOOqw1/1BDZIyWZMB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEvX1FmcmVROUVxRDlzczQ2ckRYX1VFTmtqSlprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwcQQCAAIwazAPAwUCKgVB RAMGACoFQUQOMBADBgQqBUFEEAMGACoFQUQeMBADBgUqBUFEIAMGACoFQUQuMBAD BgQqBUFEMAMGACoFQUQ+MBADBgYqBUFEQAMGACoFQUROMBADBgQqBUFEUAMGACoF QURcMA0GCSqGSIb3DQEBCwUAA4IBAQA/wFM7iOPZKvI5oCkvSnqIhWmYyeOG4Llu J8wNqzPUouGsuJ0ir/xxJvj+MNYXf51qXd9efN4gamd+Y5t34xYdpzy9477ISgtf AFyZm1IdMHL4XKtWynhGd2ZZY/vngm4fAE6QleIWvO4UobWrmc/U+oXq38Q1ZTVB WC2nz8BY3hO7Funqxjla19kOvDZ8W7iSMaypNA7tdkoFIICiqTro83pDsiwAO44+ JkwKxCsGd4EDkB5uJFSvxBV13hKvBAmWpexJiR5uTkSUJOtMUrLtXN9lTA/oT61k Q0yw621vXUQ/rcDcYsjay1TQdbTRMoL42vsVtfJKv3D19x+Dr3NN -----END CERTIFICATE-----Generated at Wed Jan 21 16:15:59 2026 by rpki-client