This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/Q2vpD-6qwdt6qZcrU-tjbUdpExw.roa File: Q2vpD-6qwdt6qZcrU-tjbUdpExw.roa (raw, json) Hash identifier: 9jt19Pmi5Pq9O2NgyYR6RNuRjtmVOOQv0b/3LhJW/n8= Subject key identifier: 43:6B:E9:0F:EE:AA:C1:DB:7A:A9:97:2B:53:EB:63:6D:47:69:13:1C Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d Certificate serial: 019B7F15BDC16EE7CCCBCF5787A4C1A1ECB3 Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/Q2vpD-6qwdt6qZcrU-tjbUdpExw.roa Signing time: Fri 02 Jan 2026 14:21:29 +0000 ROA not before: Fri 02 Jan 2026 14:21:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209759 IP address blocks: 78.40.220.0/23 maxlen: 23 178.218.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 05:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:bd:c1:6e:e7:cc:cb:cf:57:87:a4:c1:a1:ec:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d Validity Not Before: Jan 2 14:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=436be90feeaac1db7aa9972b53eb636d4769131c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8f:32:e7:c4:bd:9b:75:ce:07:be:88:7f:cd: b3:d5:d1:5f:b0:c5:28:0a:33:07:4b:aa:b6:1b:0b: 60:9d:69:8c:e3:e1:5a:ab:2b:e1:cc:82:4b:56:92: 4b:8e:0d:7a:0a:2f:c1:47:97:39:7d:da:89:58:b2: 84:52:6a:d9:aa:cb:e2:c2:58:52:43:af:72:1c:93: 24:02:82:49:46:1f:02:d2:69:93:2c:5d:f2:99:12: 96:af:bb:cc:8c:bf:47:e1:0d:9f:d0:b6:f0:a7:9e: c3:58:51:6a:da:93:d4:d1:57:a6:88:bd:e1:90:5c: bc:c5:8b:a6:c4:db:0b:bc:b6:32:6e:6b:d0:e8:c3: 47:60:fa:2f:42:81:a7:4f:27:32:68:cd:85:6e:0d: 71:0f:9e:3f:fb:94:07:c6:d9:a6:fb:f9:c5:31:65: 5a:99:9d:d5:ca:f3:99:df:ba:9c:45:ed:53:01:86: 3f:01:ec:0c:fa:20:13:9a:f8:6d:da:c5:4d:36:7c: b5:f3:c7:30:55:5d:4f:c3:dd:53:45:f5:6d:f4:cd: 57:6c:f8:3c:4e:91:cf:ae:04:29:07:ce:4a:ad:97: 67:86:5c:96:96:66:c8:6b:27:f5:38:56:f5:50:df: 46:a6:17:02:77:f6:67:d7:34:d1:6c:5f:b7:12:26: bb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6B:E9:0F:EE:AA:C1:DB:7A:A9:97:2B:53:EB:63:6D:47:69:13:1C X509v3 Authority Key Identifier: keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/Q2vpD-6qwdt6qZcrU-tjbUdpExw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.220.0/23 178.218.156.0/22 Signature Algorithm: sha256WithRSAEncryption 33:55:38:ac:db:f3:b1:33:14:ec:0c:86:97:11:c2:d1:44:a3: 7c:4a:83:3b:49:d9:96:90:4c:d8:3e:5e:21:e9:29:d8:bc:66: 51:e3:1c:15:7b:81:a6:06:40:28:85:8d:eb:70:e8:80:85:08: 03:08:a3:4d:89:e1:2a:36:1f:69:3a:31:1e:7b:5a:3d:ea:14: cc:06:f8:63:db:c4:26:c9:a9:ae:6f:45:89:2d:16:4e:2c:56: 16:b0:fd:b0:d1:d2:a6:32:6f:d8:b7:29:75:40:ad:43:a8:56: 5c:49:cc:53:00:d6:45:6d:1b:72:64:aa:05:3a:cb:c4:31:96: e8:7e:e8:40:45:c5:4c:cd:bc:79:2c:9e:c8:2a:5c:47:69:23: 5d:c1:c9:44:bd:7d:1a:b9:b9:c0:b1:90:dc:20:ef:8b:1a:41: 8a:3e:6f:a3:91:e3:fb:6f:ae:e5:d8:77:37:a9:4e:13:89:c1: 37:a2:19:12:b9:bc:c9:26:b5:01:57:4f:2a:0a:08:1b:22:5b: 0b:c3:53:39:a4:a7:1a:c0:85:da:89:e8:cc:7f:12:61:0c:93: dd:28:9a:48:ff:6e:ce:d6:03:eb:38:7c:27:35:ba:d2:95:97: f9:fe:e3:bf:7e:fe:ea:9a:74:05:53:d6:51:f7:32:47:39:f5: f9:40:0c:5b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/Fb3BbufMy89Xh6TBoeyzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMGE5ZTcxYWQ1ZDU2NDIzM2E5NDRkMWY0Nzk4NTE4ZDE4 MzFmN2QwHhcNMjYwMTAyMTQyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzZiZTkwZmVlYWFjMWRiN2FhOTk3MmI1M2ViNjM2ZDQ3NjkxMzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo8y58S9m3XOB76If82z1dFfsMUo CjMHS6q2GwtgnWmM4+FaqyvhzIJLVpJLjg16Ci/BR5c5fdqJWLKEUmrZqsviwlhS Q69yHJMkAoJJRh8C0mmTLF3ymRKWr7vMjL9H4Q2f0Lbwp57DWFFq2pPU0VemiL3h kFy8xYumxNsLvLYybmvQ6MNHYPovQoGnTycyaM2Fbg1xD54/+5QHxtmm+/nFMWVa mZ3VyvOZ37qcRe1TAYY/AewM+iATmvht2sVNNny188cwVV1Pw91TRfVt9M1XbPg8 TpHPrgQpB85KrZdnhlyWlmbIayf1OFb1UN9GphcCd/Zn1zTRbF+3Eia7zQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFENr6Q/uqsHbeqmXK1PrY21HaRMcMB8GA1UdIwQY MBaAFNoKnnGtXVZCM6lE0fR5hRjRgx99MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWIt YTM3YjNmMzIxNzAzLzEvUTJ2cEQtNnF3ZHQ2cVpjclUtdGpiVWRwRXh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWItYTM3YjNmMzIxNzAz LzEvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTijcAwQC stqcMA0GCSqGSIb3DQEBCwUAA4IBAQAzVTis2/OxMxTsDIaXEcLRRKN8SoM7SdmW kEzYPl4h6SnYvGZR4xwVe4GmBkAohY3rcOiAhQgDCKNNieEqNh9pOjEee1o96hTM Bvhj28Qmyamub0WJLRZOLFYWsP2w0dKmMm/Ytyl1QK1DqFZcScxTANZFbRtyZKoF OsvEMZbofuhARcVMzbx5LJ7IKlxHaSNdwclEvX0aubnAsZDcIO+LGkGKPm+jkeP7 b67l2Hc3qU4TicE3ohkSubzJJrUBV08qCggbIlsLw1M5pKcawIXaiejMfxJhDJPd KJpI/27O1gPrOHwnNbrSlZf5/uO/fv7qmnQFU9ZR9zJHOfX5QAxb -----END CERTIFICATE-----Generated at Tue Jan 20 14:14:55 2026 by rpki-client