This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/QvVVhK4SLUURXLWzSlCSQnsxU_0.roa File: QvVVhK4SLUURXLWzSlCSQnsxU_0.roa (raw, json) Hash identifier: bCJLMO2d2KsUAtIgwfRpTRpXl2cSUUuH6iW/kjGwb6A= Subject key identifier: 42:F5:55:84:AE:12:2D:45:11:5C:B5:B3:4A:50:92:42:7B:31:53:FD Certificate issuer: /CN=48f495e2ec9d07fd595d22b628d3756e9d8fa763 Certificate serial: 019B7DCB027CC5F4506FA1FA234C391735D0 Authority key identifier: 48:F4:95:E2:EC:9D:07:FD:59:5D:22:B6:28:D3:75:6E:9D:8F:A7:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/QvVVhK4SLUURXLWzSlCSQnsxU_0.roa Signing time: Fri 02 Jan 2026 08:20:15 +0000 ROA not before: Fri 02 Jan 2026 08:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207517 IP address blocks: 84.252.105.0/24 maxlen: 24 2a0c:4500:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.crl rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft rsync://rpki.ripe.net/repository/DEFAULT/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:02:7c:c5:f4:50:6f:a1:fa:23:4c:39:17:35:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48f495e2ec9d07fd595d22b628d3756e9d8fa763 Validity Not Before: Jan 2 08:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42f55584ae122d45115cb5b34a5092427b3153fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:04:b2:39:07:3a:f2:70:c4:18:fe:47:01:4b: 45:f5:51:49:72:7c:90:d9:35:64:69:05:94:a5:0d: 1e:41:e1:df:00:72:b3:78:ae:8c:71:41:a2:80:31: 17:69:79:fb:23:5b:87:7b:10:db:3f:8e:23:41:5f: 46:23:c5:2b:ea:f0:bf:30:5a:02:ca:58:b1:63:4c: f1:2a:47:1f:d8:2b:07:e1:46:b2:b1:dc:dc:72:9e: f4:84:7b:bc:35:54:7a:07:93:f5:6d:2e:7e:9b:e8: 88:54:ef:b3:f4:46:b5:09:5f:1b:2e:d3:a9:3a:ea: 32:14:19:3e:41:fc:87:2b:d1:08:b1:16:5a:47:7e: 15:7a:7b:cb:cb:5e:68:02:1c:4e:76:29:a6:ac:0c: d4:67:df:ee:a7:b0:46:d3:96:ac:0a:e7:45:c0:cb: 32:b1:3f:c1:c7:c1:69:01:ff:89:de:7a:d0:e7:91: 21:d9:32:bc:d1:a1:68:ed:b3:8a:0c:6d:5c:df:d9: 62:0f:c0:a0:a8:ef:e8:d1:e2:26:26:25:61:d5:79: 23:49:7e:ce:ea:a2:80:92:d1:a7:4b:a1:3c:f1:71: 21:57:7b:c4:95:c8:63:aa:3a:fc:c8:ae:db:61:d7: f2:90:77:8c:9d:7a:01:83:a3:57:e4:a5:af:7e:f4: 6d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F5:55:84:AE:12:2D:45:11:5C:B5:B3:4A:50:92:42:7B:31:53:FD X509v3 Authority Key Identifier: keyid:48:F4:95:E2:EC:9D:07:FD:59:5D:22:B6:28:D3:75:6E:9D:8F:A7:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/QvVVhK4SLUURXLWzSlCSQnsxU_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.252.105.0/24 IPv6: 2a0c:4500:100::/40 Signature Algorithm: sha256WithRSAEncryption 34:b3:5f:86:9a:12:2d:47:87:5e:46:54:52:a8:8d:0a:80:c8: 09:3d:4d:86:9e:d5:3b:75:89:c4:f5:31:a6:b2:18:cd:de:f4: b7:12:f1:bc:83:4c:b9:41:cd:f0:13:c4:36:cc:bb:b6:02:d1: 56:cb:78:36:ed:2d:9b:88:8b:04:e8:ce:08:f8:42:51:61:77: 70:f2:be:3f:48:10:d9:f7:ef:d4:da:cd:6f:d5:0c:c0:a0:bb: 72:35:4b:35:c3:14:66:cf:bd:8c:f3:5f:57:42:0a:fa:4d:29: 0d:e2:4b:c8:13:31:3d:2a:8b:49:f5:63:4f:89:b5:c8:75:c7: 50:4a:05:6b:cf:4e:6c:b0:9a:9f:c6:ed:b2:1e:37:fc:a5:0c: 76:60:a2:c4:b4:70:e0:03:1b:a8:13:fa:f6:1b:1d:8a:9c:ef: 41:8d:29:4c:13:07:03:50:73:ac:77:5e:98:d6:cf:ac:9f:50: 77:08:dc:cc:68:81:f9:3f:3e:6c:b5:4b:20:8f:c8:e1:59:91: 47:f0:97:fe:bd:74:d1:0a:56:a0:bf:be:e3:ff:dc:1c:0c:2d: ef:eb:7b:76:07:24:88:e5:45:35:bb:f4:ef:65:4c:e1:b2:be: 68:cb:d6:c4:1d:cc:ed:26:3e:7d:7e:1d:34:41:99:0d:7f:12: ad:32:a1:85 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt9ywJ8xfRQb6H6I0w5FzXQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZjQ5NWUyZWM5ZDA3ZmQ1OTVkMjJiNjI4ZDM3NTZlOWQ4 ZmE3NjMwHhcNMjYwMTAyMDgyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmY1NTU4NGFlMTIyZDQ1MTE1Y2I1YjM0YTUwOTI0MjdiMzE1M2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wSyOQc68nDEGP5HAUtF9VFJcnyQ 2TVkaQWUpQ0eQeHfAHKzeK6McUGigDEXaXn7I1uHexDbP44jQV9GI8Ur6vC/MFoC ylixY0zxKkcf2CsH4Uaysdzccp70hHu8NVR6B5P1bS5+m+iIVO+z9Ea1CV8bLtOp OuoyFBk+QfyHK9EIsRZaR34VenvLy15oAhxOdimmrAzUZ9/up7BG05asCudFwMsy sT/Bx8FpAf+J3nrQ55Eh2TK80aFo7bOKDG1c39liD8CgqO/o0eImJiVh1XkjSX7O 6qKAktGnS6E88XEhV3vElchjqjr8yK7bYdfykHeMnXoBg6NX5KWvfvRtYwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFEL1VYSuEi1FEVy1s0pQkkJ7MVP9MB8GA1UdIwQY MBaAFEj0leLsnQf9WV0itijTdW6dj6djMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1BTVjR1eWRCXzFaWFNLMktOTjFicDJQcDJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84ZDhkNGItMTYzYy00YmM2LWFlY2Et N2RjYWJjMTZlYmFlLzEvUXZWVmhLNFNMVVVSWExXelNsQ1NRbnN4VV8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi84ZDhkNGItMTYzYy00YmM2LWFlY2EtN2RjYWJjMTZlYmFl LzEvU1BTVjR1eWRCXzFaWFNLMktOTjFicDJQcDJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAVPxpMA4E AgACMAgDBgAqDEUAATANBgkqhkiG9w0BAQsFAAOCAQEANLNfhpoSLUeHXkZUUqiN CoDICT1Nhp7VO3WJxPUxprIYzd70txLxvINMuUHN8BPENsy7tgLRVst4Nu0tm4iL BOjOCPhCUWF3cPK+P0gQ2ffv1NrNb9UMwKC7cjVLNcMUZs+9jPNfV0IK+k0pDeJL yBMxPSqLSfVjT4m1yHXHUEoFa89ObLCan8btsh43/KUMdmCixLRw4AMbqBP69hsd ipzvQY0pTBMHA1BzrHdemNbPrJ9QdwjczGiB+T8+bLVLII/I4VmRR/CX/r100QpW oL++4//cHAwt7+t7dgckiOVFNbv072VM4bK+aMvWxB3M7SY+fX4dNEGZDX8SrTKh hQ== -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:10 2026 by rpki-client