This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qBBRB8HmJZEtxi-niy9T8cyyncw.roa File: qBBRB8HmJZEtxi-niy9T8cyyncw.roa (raw, json) Hash identifier: cgLv9kyCGCoNq0/R+t8v8q6At3djIYgfHJi87YrPrCE= Subject key identifier: A8:10:51:07:C1:E6:25:91:2D:C6:2F:A7:8B:2F:53:F1:CC:B2:9D:CC Certificate issuer: /CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c Certificate serial: 019B7F159710DA8E32A1D73975CFF934C86A Authority key identifier: A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qBBRB8HmJZEtxi-niy9T8cyyncw.roa Signing time: Fri 02 Jan 2026 14:21:19 +0000 ROA not before: Fri 02 Jan 2026 14:21:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34489 IP address blocks: 193.0.226.0/24 maxlen: 24 195.250.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:97:10:da:8e:32:a1:d7:39:75:cf:f9:34:c8:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c Validity Not Before: Jan 2 14:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8105107c1e625912dc62fa78b2f53f1ccb29dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a9:86:a3:3a:6d:b5:44:f1:68:34:75:63:b2: 04:99:a5:5c:b1:86:57:62:9c:eb:0a:87:5c:17:6a: 3d:05:79:5e:01:0d:68:82:72:03:11:38:a7:89:74: 25:ad:19:13:60:4a:6b:d8:49:b7:bb:c8:43:a1:5a: 3f:d2:35:15:ee:bc:8e:37:5f:a0:f1:6d:83:d6:1f: 16:d5:1f:13:8b:1b:3b:68:6f:73:91:c3:49:0a:47: e5:ad:46:74:36:2e:59:ec:a0:fb:b0:aa:39:be:ec: c5:2d:17:43:cb:7f:9b:ea:89:2e:b8:40:fc:4b:5c: 33:52:36:b6:bb:de:cf:ad:1a:c2:a0:c8:b2:fb:c0: f0:71:7c:29:16:8b:cc:44:fb:f1:79:f4:0f:51:35: 2a:d3:9b:0c:d0:0b:f1:fa:68:94:ab:0d:44:4d:66: ca:7c:9c:c9:bd:da:93:89:82:fb:a6:76:bc:22:aa: e1:42:24:10:92:a3:c1:c9:21:7a:4d:e0:ef:46:52: 81:59:8a:f8:94:bf:4f:ad:39:a7:5d:28:0a:c3:cd: 4e:dc:8f:05:00:1a:f9:5f:24:3b:ec:e6:5a:b4:9f: 7b:b7:8b:aa:df:79:b2:05:4a:bd:63:0c:3e:80:c1: fb:b3:71:22:32:5f:e4:46:82:26:b8:d7:40:b2:54: 9c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:10:51:07:C1:E6:25:91:2D:C6:2F:A7:8B:2F:53:F1:CC:B2:9D:CC X509v3 Authority Key Identifier: keyid:A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qBBRB8HmJZEtxi-niy9T8cyyncw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.226.0/24 195.250.39.0/24 Signature Algorithm: sha256WithRSAEncryption 38:57:0d:ec:f8:d8:81:e1:ea:f3:2e:f9:d9:e3:5d:7d:3b:d4: 0a:12:a9:54:ed:82:d0:9d:0c:9a:24:1d:56:73:21:99:aa:f7: 04:7c:3a:c1:11:67:31:20:c9:63:d6:5e:98:bf:a6:d0:2e:59: 14:fe:40:64:40:e3:45:48:48:87:0b:ca:dd:a3:f2:23:d4:b5: d4:e4:ec:c3:af:d4:aa:8d:4e:54:cd:42:2d:15:58:14:68:85: 3f:fd:50:e4:65:85:55:42:f4:bb:43:7d:bb:5e:14:d0:8c:41: 45:0e:d8:1d:59:d0:6c:2e:76:df:aa:6d:76:85:79:11:0c:4c: 18:23:5b:42:fc:a5:7f:58:df:c6:a8:15:55:48:fc:4e:03:2c: 2d:69:5a:2e:a8:d8:67:45:ef:14:72:c2:78:e3:e4:fa:b1:e0: 1b:94:e9:87:ee:35:46:00:b0:93:9c:9f:f0:08:46:6a:36:e0: 86:52:ae:e0:86:70:aa:9b:53:10:fd:7b:a4:31:95:fc:ed:e1: 92:a7:ab:99:d5:4f:2d:02:3a:2f:5b:fa:27:f1:99:87:a7:6e: ed:48:e4:ef:68:35:94:48:39:75:3a:f6:61:6b:d5:9c:ca:e4: 7b:51:09:5f:81:78:f0:76:0c:46:bc:b0:e1:83:ce:52:8b:6f: db:aa:e1:22 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FZcQ2o4yodc5dc/5NMhqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4OTI5Y2IzNDNiZGYzY2YyMDRjNDA1YWYwYTU1MzNlYTRi MDkzM2MwHhcNMjYwMTAyMTQyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODEwNTEwN2MxZTYyNTkxMmRjNjJmYTc4YjJmNTNmMWNjYjI5ZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26mGozpttUTxaDR1Y7IEmaVcsYZX YpzrCodcF2o9BXleAQ1ognIDETiniXQlrRkTYEpr2Em3u8hDoVo/0jUV7ryON1+g 8W2D1h8W1R8Tixs7aG9zkcNJCkflrUZ0Ni5Z7KD7sKo5vuzFLRdDy3+b6okuuED8 S1wzUja2u97PrRrCoMiy+8DwcXwpFovMRPvxefQPUTUq05sM0Avx+miUqw1ETWbK fJzJvdqTiYL7pna8IqrhQiQQkqPBySF6TeDvRlKBWYr4lL9PrTmnXSgKw81O3I8F ABr5XyQ77OZatJ97t4uq33myBUq9Yww+gMH7s3EiMl/kRoImuNdAslScEQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKgQUQfB5iWRLcYvp4svU/HMsp3MMB8GA1UdIwQY MBaAFKiSnLNDvfPPIExAWvClUz6ksJM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUpLY3MwTzk4ODhnVEVCYThLVlRQcVN3a3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iN2NjMzYtNzc3ZS00NGI5LWFkNjIt NTlkNDRlZjdlNGZmLzEvcUJCUkI4SG1KWkV0eGktbml5OVQ4Y3l5bmN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9iN2NjMzYtNzc3ZS00NGI5LWFkNjItNTlkNDRlZjdlNGZm LzEvcUpLY3MwTzk4ODhnVEVCYThLVlRQcVN3a3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwQDiAwQA w/onMA0GCSqGSIb3DQEBCwUAA4IBAQA4Vw3s+NiB4erzLvnZ4119O9QKEqlU7YLQ nQyaJB1WcyGZqvcEfDrBEWcxIMlj1l6Yv6bQLlkU/kBkQONFSEiHC8rdo/Ij1LXU 5OzDr9SqjU5UzUItFVgUaIU//VDkZYVVQvS7Q327XhTQjEFFDtgdWdBsLnbfqm12 hXkRDEwYI1tC/KV/WN/GqBVVSPxOAywtaVouqNhnRe8UcsJ44+T6seAblOmH7jVG ALCTnJ/wCEZqNuCGUq7ghnCqm1MQ/XukMZX87eGSp6uZ1U8tAjovW/on8ZmHp27t SOTvaDWUSDl1OvZha9WcyuR7UQlfgXjwdgxGvLDhg85Si2/bquEi -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:15 2026 by rpki-client