This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/QoYf0tAUEKqIrSmIG2tWWODeEqY.roa File: QoYf0tAUEKqIrSmIG2tWWODeEqY.roa (raw, json) Hash identifier: xUGeL/d9PAos8zWTD1cTYvl/O/Fd7xB/QfyjZxYeQ2g= Subject key identifier: 42:86:1F:D2:D0:14:10:AA:88:AD:29:88:1B:6B:56:58:E0:DE:12:A6 Certificate issuer: /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0 Certificate serial: 019B7FF2015EFD54C74E62F51D49636911E0 Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/QoYf0tAUEKqIrSmIG2tWWODeEqY.roa Signing time: Fri 02 Jan 2026 18:22:05 +0000 ROA not before: Fri 02 Jan 2026 18:22:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8326 IP address blocks: 46.239.128.0/20 maxlen: 20 82.146.224.0/19 maxlen: 19 89.191.128.0/20 maxlen: 20 212.122.192.0/20 maxlen: 20 212.122.208.0/21 maxlen: 21 2001:908::/30 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:01:5e:fd:54:c7:4e:62:f5:1d:49:63:69:11:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0 Validity Not Before: Jan 2 18:22:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42861fd2d01410aa88ad29881b6b5658e0de12a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:e4:b9:9c:a7:e1:92:1c:43:5c:52:61:3e:27: 83:f6:be:e6:5d:34:c6:b6:21:8c:f8:a8:b3:d0:71: b2:fb:2f:ad:ff:bc:50:a5:d3:39:98:8a:93:c6:8c: bf:34:f5:0f:91:66:a5:51:11:c7:84:50:7f:f6:31: 63:c4:1c:50:53:a7:a2:b4:46:4a:9a:60:31:5a:fb: 04:cb:cc:12:7b:01:0e:4d:19:9d:e2:a7:68:a1:4f: 31:d2:8b:62:8d:0c:04:55:a8:31:9a:b1:06:fe:09: d8:19:e3:34:83:b0:6c:8d:fd:78:46:74:0f:82:33: 6d:97:cd:d5:29:76:2b:e0:87:77:b1:54:3b:7d:ef: 58:44:b7:9b:8c:8e:2e:bf:d8:ba:3f:3e:d3:86:d4: 76:c8:21:b6:9a:78:3d:ca:6b:49:45:ff:c3:f6:03: fd:38:f9:17:b0:df:33:97:5f:f3:2b:8a:9c:50:95: 6e:89:3e:1f:cf:79:5d:fb:18:b5:8e:ea:45:79:c6: 7d:13:75:ed:83:16:67:b9:83:ac:95:17:98:fb:19: 58:7e:d2:04:a3:44:48:82:8c:4f:af:2c:ee:65:70: b8:0b:bf:5a:8f:32:05:2b:dd:a4:b7:c4:fa:19:af: c8:5b:3d:a9:c1:f4:5c:b5:65:24:b7:e8:06:e8:04: a1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:86:1F:D2:D0:14:10:AA:88:AD:29:88:1B:6B:56:58:E0:DE:12:A6 X509v3 Authority Key Identifier: keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/QoYf0tAUEKqIrSmIG2tWWODeEqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.239.128.0/20 82.146.224.0/19 89.191.128.0/20 212.122.192.0-212.122.215.255 IPv6: 2001:908::/30 Signature Algorithm: sha256WithRSAEncryption 76:6e:b6:d8:74:02:10:9f:9b:08:44:31:c3:d0:5b:d4:dc:9d: 30:7c:a0:5b:aa:75:fd:b3:5c:ee:8d:c1:f8:ef:2d:67:e7:8b: 1c:8f:19:db:be:c6:e1:61:5a:5f:2e:dc:8b:66:be:8c:ee:c1: f0:3c:48:0c:7e:b2:7d:34:c4:ae:26:a8:57:cb:43:98:4f:c8: 43:1b:5f:db:04:49:8f:73:6a:43:19:8b:35:9d:bf:45:b9:86: 25:55:d2:88:96:08:08:90:a9:b7:8f:85:13:b0:fc:68:c2:aa: 2e:47:7c:06:e3:0b:09:6c:75:15:f2:42:7a:f7:ae:5b:6b:1c: 2c:98:23:f6:8e:a2:8f:cc:5b:f5:15:17:a8:8d:48:38:65:3c: 7b:da:53:5b:46:a2:50:ff:ce:4b:b3:f0:9b:32:d0:fa:12:28: 57:b6:97:f8:ee:96:09:f6:a1:3a:c0:bb:0a:00:37:d4:3e:99: 00:e4:e1:93:05:73:66:c7:08:1c:e5:f7:b9:7e:ef:ad:e9:e4: b4:67:16:81:2a:90:7d:bc:ef:e5:bc:19:b5:16:89:eb:d9:28: 89:f2:71:20:5e:7f:dd:13:d6:c9:cb:2b:9a:b0:74:26:fc:fa: 63:26:fd:d9:1a:52:88:22:b1:2e:e3:48:03:6f:fb:ee:5d:e7: ae:03:4b:a1 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt/8gFe/VTHTmL1HUljaRHgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZThmNTZiYzFmNTAxMDI5MTY4MWJjMmQ4YzAyZjlhY2Jm NzE0YTAwHhcNMjYwMTAyMTgyMjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Mjg2MWZkMmQwMTQxMGFhODhhZDI5ODgxYjZiNTY1OGUwZGUxMmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+eS5nKfhkhxDXFJhPieD9r7mXTTG tiGM+Kiz0HGy+y+t/7xQpdM5mIqTxoy/NPUPkWalURHHhFB/9jFjxBxQU6eitEZK mmAxWvsEy8wSewEOTRmd4qdooU8x0otijQwEVagxmrEG/gnYGeM0g7Bsjf14RnQP gjNtl83VKXYr4Id3sVQ7fe9YRLebjI4uv9i6Pz7ThtR2yCG2mng9ymtJRf/D9gP9 OPkXsN8zl1/zK4qcUJVuiT4fz3ld+xi1jupFecZ9E3XtgxZnuYOslReY+xlYftIE o0RIgoxPryzuZXC4C79ajzIFK92kt8T6Ga/IWz2pwfRctWUkt+gG6AShtwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFEKGH9LQFBCqiK0piBtrVljg3hKmMB8GA1UdIwQY MBaAFOLo9WvB9QECkWgbwtjAL5rL9xSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVqMWE4SDFBUUtSYUJ2QzJNQXZtc3YzRktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84MDQyYmYtNzFiYS00ZmJkLTllMTct NDQ3ZWRjNGY5YWY2LzEvUW9ZZjB0QVVFS3FJclNtSUcydFdXT0RlRXFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC84MDQyYmYtNzFiYS00ZmJkLTllMTctNDQ3ZWRjNGY5YWY2 LzEvNHVqMWE4SDFBUUtSYUJ2QzJNQXZtc3YzRktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQELu+AAwQF UpLgAwQEWb+AMAwDBAbUesADBAPUetAwDQQCAAIwBwMFAiABCQgwDQYJKoZIhvcN AQELBQADggEBAHZutth0AhCfmwhEMcPQW9TcnTB8oFuqdf2zXO6NwfjvLWfnixyP Gdu+xuFhWl8u3ItmvozuwfA8SAx+sn00xK4mqFfLQ5hPyEMbX9sESY9zakMZizWd v0W5hiVV0oiWCAiQqbePhROw/GjCqi5HfAbjCwlsdRXyQnr3rltrHCyYI/aOoo/M W/UVF6iNSDhlPHvaU1tGolD/zkuz8Jsy0PoSKFe2l/julgn2oTrAuwoAN9Q+mQDk 4ZMFc2bHCBzl97l+763p5LRnFoEqkH287+W8GbUWievZKInycSBef90T1snLK5qw dCb8+mMm/dkaUogisS7jSANv++5d564DS6E= -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:57 2026 by rpki-client