This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/quaERpVai1sNprczU8FisK5Qlbw.roa File: quaERpVai1sNprczU8FisK5Qlbw.roa (raw, json) Hash identifier: 0uc7UZicAoBceoPlFZS+k/jk7F3r3BjUwZ1eJiYDf4c= Subject key identifier: AA:E6:84:46:95:5A:8B:5B:0D:A6:B7:33:53:C1:62:B0:AE:50:95:BC Certificate issuer: /CN=54285ffee97312c51c3a805ff9340ebec3352720 Certificate serial: 019B7EA6B96D283E8CB91A44A45F4A20C12F Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/quaERpVai1sNprczU8FisK5Qlbw.roa Signing time: Fri 02 Jan 2026 12:20:14 +0000 ROA not before: Fri 02 Jan 2026 12:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20886 IP address blocks: 80.90.144.0/20 maxlen: 20 89.21.32.0/19 maxlen: 19 185.209.236.0/22 maxlen: 22 217.76.96.0/20 maxlen: 20 2a02:b30::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b9:6d:28:3e:8c:b9:1a:44:a4:5f:4a:20:c1:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720 Validity Not Before: Jan 2 12:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aae68446955a8b5b0da6b73353c162b0ae5095bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:aa:08:a2:24:46:a0:ec:fb:f5:c8:e2:39:57: 58:13:06:4d:07:ed:86:6a:cf:74:1a:18:dd:0b:18: 02:45:54:e5:ea:27:b5:80:ad:54:30:89:81:fb:71: 15:ed:61:dd:07:e0:64:54:a5:5f:39:1e:3c:07:9c: 0a:8c:f5:15:10:95:d5:9a:da:e7:a2:68:03:e4:0f: 58:ef:d9:ad:e2:18:2f:85:e0:ac:8e:0b:36:74:b7: f4:fa:04:e3:ca:a7:5d:52:ba:d3:c3:a5:30:cc:5a: fc:e1:54:50:bf:1f:0c:75:b6:92:03:0e:db:26:6e: f5:62:50:2a:93:3a:1b:df:0f:89:ac:05:dd:dd:f8: b5:b3:07:a5:f3:a6:9e:b9:c0:98:5d:48:13:28:bc: 84:c2:d6:64:de:ef:11:28:8c:eb:62:fe:dd:0d:4d: 24:35:74:67:25:84:65:11:03:ef:63:3c:5b:9d:fe: 82:28:be:6e:cc:f4:5e:04:b3:79:06:a7:d6:c9:4f: f0:74:68:26:db:2a:36:5a:69:0f:bc:f1:22:87:8b: 94:3a:2a:2d:63:58:45:20:0b:22:56:c9:55:0b:f2: ba:39:26:84:f6:82:66:64:26:79:ad:be:c5:86:d1: e4:39:e6:65:39:8f:80:5e:72:c5:49:72:ca:f5:f3: 37:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E6:84:46:95:5A:8B:5B:0D:A6:B7:33:53:C1:62:B0:AE:50:95:BC X509v3 Authority Key Identifier: keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/quaERpVai1sNprczU8FisK5Qlbw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.90.144.0/20 89.21.32.0/19 185.209.236.0/22 217.76.96.0/20 IPv6: 2a02:b30::/32 Signature Algorithm: sha256WithRSAEncryption db:b6:ac:af:4e:36:4a:b7:68:07:39:11:1a:e0:68:06:e6:e6: 3e:c2:fc:17:61:28:1e:c5:48:bc:c6:a4:95:b2:14:4b:16:e1: cd:09:56:86:2c:c9:7b:d1:54:44:68:9c:64:be:5f:27:69:12: b8:dd:c6:e5:2c:e4:08:b4:b3:73:d1:af:c1:54:4a:c9:c0:9a: af:9a:a2:a7:f7:31:64:80:fd:0f:1c:25:10:7f:78:9e:a0:ba: 0e:ab:18:c2:78:89:c9:2a:fa:d8:a3:90:65:cd:4b:96:59:63: 44:71:a0:49:e3:5a:ce:67:9b:91:85:b7:3c:ca:05:a6:1c:be: 68:b2:07:a4:7e:9f:c6:71:af:96:34:72:39:4b:2d:0a:57:18: 3e:ae:8e:37:4e:cd:2e:6c:9a:09:99:42:19:39:af:24:38:e9: 04:9a:1c:e9:ba:93:ad:ca:ec:b8:ef:80:5b:dc:5a:0c:94:9d: 6c:24:9f:fe:f3:23:fc:89:66:b4:9e:40:55:a6:90:05:be:9a: 24:25:e3:fc:15:2e:7f:fc:4e:32:22:2b:83:4a:ad:11:38:99: f6:e2:81:ec:1f:ab:7b:68:b9:9a:f9:e2:98:0b:6a:34:94:a8: 5a:c2:86:05:61:78:fa:55:4a:52:16:f5:5e:89:5b:c3:f1:fc: bd:23:13:1f -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt+prltKD6MuRpEpF9KIMEvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjg1ZmZlZTk3MzEyYzUxYzNhODA1ZmY5MzQwZWJlYzMz NTI3MjAwHhcNMjYwMTAyMTIyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWU2ODQ0Njk1NWE4YjViMGRhNmI3MzM1M2MxNjJiMGFlNTA5NWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KoIoiRGoOz79cjiOVdYEwZNB+2G as90GhjdCxgCRVTl6ie1gK1UMImB+3EV7WHdB+BkVKVfOR48B5wKjPUVEJXVmtrn omgD5A9Y79mt4hgvheCsjgs2dLf0+gTjyqddUrrTw6UwzFr84VRQvx8MdbaSAw7b Jm71YlAqkzob3w+JrAXd3fi1swel86aeucCYXUgTKLyEwtZk3u8RKIzrYv7dDU0k NXRnJYRlEQPvYzxbnf6CKL5uzPReBLN5BqfWyU/wdGgm2yo2WmkPvPEih4uUOiot Y1hFIAsiVslVC/K6OSaE9oJmZCZ5rb7FhtHkOeZlOY+AXnLFSXLK9fM3nQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFKrmhEaVWotbDaa3M1PBYrCuUJW8MB8GA1UdIwQY MBaAFFQoX/7pcxLFHDqAX/k0Dr7DNScgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNoZl91bHpFc1VjT29CZi1UUU92c00xSnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zMWJjYmQtZWU2NS00Zjk3LTlhMjIt OGE3ZTYzZThjZDc1LzEvcXVhRVJwVmFpMXNOcHJjelU4RmlzSzVRbGJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zMWJjYmQtZWU2NS00Zjk3LTlhMjItOGE3ZTYzZThjZDc1 LzEvVkNoZl91bHpFc1VjT29CZi1UUU92c00xSnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEUFqQAwQF WRUgAwQCudHsAwQE2UxgMA0EAgACMAcDBQAqAgswMA0GCSqGSIb3DQEBCwUAA4IB AQDbtqyvTjZKt2gHOREa4GgG5uY+wvwXYSgexUi8xqSVshRLFuHNCVaGLMl70VRE aJxkvl8naRK43cblLOQItLNz0a/BVErJwJqvmqKn9zFkgP0PHCUQf3ieoLoOqxjC eInJKvrYo5BlzUuWWWNEcaBJ41rOZ5uRhbc8ygWmHL5osgekfp/Gca+WNHI5Sy0K Vxg+ro43Ts0ubJoJmUIZOa8kOOkEmhzpupOtyuy474Bb3FoMlJ1sJJ/+8yP8iWa0 nkBVppAFvpokJeP8FS5//E4yIiuDSq0ROJn24oHsH6t7aLma+eKYC2o0lKhawoYF YXj6VUpSFvVeiVvD8fy9IxMf -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:28 2026 by rpki-client