This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/qyP69zaDTmNmYkyQ7c7evEHMFbc.roa File: qyP69zaDTmNmYkyQ7c7evEHMFbc.roa (raw, json) Hash identifier: NqwYrk8FLr9zreZXVBBWmFtU5YYuWHkOztqiuxftrew= Subject key identifier: AB:23:FA:F7:36:83:4E:63:66:62:4C:90:ED:CE:DE:BC:41:CC:15:B7 Certificate issuer: /CN=ef678469574acc03d782e63281ff44faaab3f847 Certificate serial: 019B7E378AA7350EC03394F8ED0F9FAFF560 Authority key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/qyP69zaDTmNmYkyQ7c7evEHMFbc.roa Signing time: Fri 02 Jan 2026 10:18:47 +0000 ROA not before: Fri 02 Jan 2026 10:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209231 IP address blocks: 2.56.140.0/22 maxlen: 24 86.110.204.0/22 maxlen: 24 89.232.174.0/23 maxlen: 24 185.161.236.0/22 maxlen: 24 2a09:c540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:8a:a7:35:0e:c0:33:94:f8:ed:0f:9f:af:f5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef678469574acc03d782e63281ff44faaab3f847 Validity Not Before: Jan 2 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab23faf736834e6366624c90edcedebc41cc15b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f8:d3:8a:bd:d6:a8:35:f8:20:40:ec:18:70: 1b:df:72:a1:8f:69:ac:19:9f:44:31:ae:6c:a6:0d: c2:7f:21:57:09:5b:55:62:c4:44:61:9b:f3:4b:89: 68:09:65:2d:90:3f:cc:8c:1d:39:cd:97:14:54:ec: a9:c1:c4:77:82:83:dd:23:22:2e:a8:78:0c:1a:a4: dc:2f:8d:1f:ec:9c:54:18:bf:65:89:b6:a6:b4:3a: 57:d3:eb:01:9c:61:6d:11:c1:d6:42:cd:dd:49:d3: da:ab:c3:74:49:26:d2:db:11:8c:c5:67:5d:bb:03: 65:f1:22:f9:77:ec:2f:ce:98:22:32:4c:67:77:bb: 92:f5:76:29:fc:da:0e:6e:f8:66:a7:70:10:94:c6: 50:37:2d:92:65:5c:66:d8:d8:32:52:18:fe:43:f7: 79:bb:c5:93:dd:30:88:f4:e1:97:d0:4c:3d:e4:42: 95:2b:70:7a:00:f1:a3:6a:63:ed:25:00:51:81:d1: 9b:cf:e4:77:aa:71:3e:58:e2:eb:6b:33:75:a1:1e: 91:a1:49:c2:71:1f:4f:ee:ee:14:85:95:4f:19:16: 1a:e7:8c:3c:93:11:e9:93:da:9d:da:b0:7a:f1:3e: 73:2f:e6:ca:ce:26:85:b2:32:a8:a5:f0:76:86:34: 54:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:23:FA:F7:36:83:4E:63:66:62:4C:90:ED:CE:DE:BC:41:CC:15:B7 X509v3 Authority Key Identifier: keyid:EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/qyP69zaDTmNmYkyQ7c7evEHMFbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.140.0/22 86.110.204.0/22 89.232.174.0/23 185.161.236.0/22 IPv6: 2a09:c540::/32 Signature Algorithm: sha256WithRSAEncryption 82:ab:13:f4:8c:1d:35:6c:b3:ec:3b:2f:2b:2c:45:d8:16:b3: 41:c3:11:a6:92:e7:55:c0:86:e5:07:0f:76:e0:ff:87:99:a9: 7a:a8:b5:a7:9b:e8:e1:cb:32:37:29:4b:7a:24:18:15:42:96: 5c:1e:7f:af:1e:0e:dc:33:e1:2c:7e:0f:b0:ce:c7:ad:25:d3: d9:83:4d:c7:93:d9:49:9c:b0:bc:49:47:b9:7d:ff:78:98:07: df:08:b0:c3:95:87:c0:59:23:8b:c3:22:e4:ee:7a:79:8c:cd: 75:ab:bc:11:78:d0:08:28:01:cd:a0:5c:96:70:06:41:94:ae: 73:a8:94:80:52:5b:51:e4:b8:07:5e:7f:fb:67:48:54:0b:cf: 5f:91:9c:c6:56:7b:cf:fe:7d:79:41:cd:1d:4a:a1:a0:71:19: be:7a:1e:b9:e1:71:21:45:18:2f:23:95:18:4b:3e:d5:b0:43: ee:84:9f:0d:06:e6:a8:ff:65:e5:61:72:95:37:3a:cd:32:89: b3:2c:53:fc:9d:62:91:7a:a3:62:7b:11:61:1e:59:b2:bf:71: a6:8d:30:33:79:a2:12:c8:43:e2:ae:80:37:c9:cf:23:7a:b3: ca:bb:62:97:4f:2c:c6:98:04:09:0b:0a:e8:6c:71:da:c9:9b: 1d:9c:62:10 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt+N4qnNQ7AM5T47Q+fr/VgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNjc4NDY5NTc0YWNjMDNkNzgyZTYzMjgxZmY0NGZhYWFi M2Y4NDcwHhcNMjYwMTAyMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjIzZmFmNzM2ODM0ZTYzNjY2MjRjOTBlZGNlZGViYzQxY2MxNWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PjTir3WqDX4IEDsGHAb33Khj2ms GZ9EMa5spg3CfyFXCVtVYsREYZvzS4loCWUtkD/MjB05zZcUVOypwcR3goPdIyIu qHgMGqTcL40f7JxUGL9libamtDpX0+sBnGFtEcHWQs3dSdPaq8N0SSbS2xGMxWdd uwNl8SL5d+wvzpgiMkxnd7uS9XYp/NoObvhmp3AQlMZQNy2SZVxm2NgyUhj+Q/d5 u8WT3TCI9OGX0Ew95EKVK3B6APGjamPtJQBRgdGbz+R3qnE+WOLrazN1oR6RoUnC cR9P7u4UhZVPGRYa54w8kxHpk9qd2rB68T5zL+bKziaFsjKopfB2hjRUuQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFKsj+vc2g05jZmJMkO3O3rxBzBW3MB8GA1UdIwQY MBaAFO9nhGlXSswD14LmMoH/RPqqs/hHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzJlRWFWZEt6QVBYZ3VZeWdmOUUtcXF6LUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iNDY3M2ItMjEwYi00ZTVhLTg3NmEt ZGMwNTllNjliMWQwLzEvcXlQNjl6YURUbU5tWWt5UTdjN2V2RUhNRmJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iNDY3M2ItMjEwYi00ZTVhLTg3NmEtZGMwNTllNjliMWQw LzEvNzJlRWFWZEt6QVBYZ3VZeWdmOUUtcXF6LUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCAjiMAwQC Vm7MAwQBWeiuAwQCuaHsMA0EAgACMAcDBQAqCcVAMA0GCSqGSIb3DQEBCwUAA4IB AQCCqxP0jB01bLPsOy8rLEXYFrNBwxGmkudVwIblBw924P+Hmal6qLWnm+jhyzI3 KUt6JBgVQpZcHn+vHg7cM+Esfg+wzsetJdPZg03Hk9lJnLC8SUe5ff94mAffCLDD lYfAWSOLwyLk7np5jM11q7wReNAIKAHNoFyWcAZBlK5zqJSAUltR5LgHXn/7Z0hU C89fkZzGVnvP/n15Qc0dSqGgcRm+eh654XEhRRgvI5UYSz7VsEPuhJ8NBuao/2Xl YXKVNzrNMomzLFP8nWKReqNiexFhHlmyv3GmjTAzeaISyEPiroA3yc8jerPKu2KX TyzGmAQJCwrobHHayZsdnGIQ -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:33 2026 by rpki-client