This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/q45NW9ILWXRj7KEDEoB0elTRYN0.roa File: q45NW9ILWXRj7KEDEoB0elTRYN0.roa (raw, json) Hash identifier: nnMWIhcjMTz5ErkFaNjKVileFt+Q5rGZenkw7duVHz8= Subject key identifier: AB:8E:4D:5B:D2:0B:59:74:63:EC:A1:03:12:80:74:7A:54:D1:60:DD Certificate issuer: /CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0 Certificate serial: 019B79112B572BF145E4E18F17770727CEDC Authority key identifier: 9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/q45NW9ILWXRj7KEDEoB0elTRYN0.roa Signing time: Thu 01 Jan 2026 10:18:46 +0000 ROA not before: Thu 01 Jan 2026 10:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62462 IP address blocks: 31.216.176.0/22 maxlen: 24 31.216.180.0/22 maxlen: 24 185.35.40.0/22 maxlen: 24 188.95.184.0/22 maxlen: 24 188.95.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2b:57:2b:f1:45:e4:e1:8f:17:77:07:27:ce:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0 Validity Not Before: Jan 1 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab8e4d5bd20b597463eca1031280747a54d160dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d5:08:e0:b3:13:22:e8:02:4d:a2:b8:ff:27: 38:a3:93:06:52:3f:bc:b7:4c:0f:e5:c2:a3:07:91: 1d:92:2c:c8:ea:0d:03:82:41:76:2d:78:b2:b3:cb: bb:42:76:ae:2c:fd:2b:d9:62:6d:f4:cf:49:a2:57: 5c:aa:fc:c8:ff:d9:8a:96:29:3b:3a:5f:c2:a7:94: d9:e5:07:39:3e:d6:e6:4a:e1:f4:c9:49:8f:7f:53: a2:3e:87:0d:76:ef:19:c8:5a:60:d4:1c:a0:c7:1f: b2:a1:ba:b6:a4:69:02:e8:b7:29:30:b8:9b:ef:ed: 39:46:9b:7d:8a:8e:2e:a2:5f:6f:49:68:20:59:f7: a0:82:d8:b8:ee:36:08:88:cb:f6:2f:de:12:06:72: ec:90:69:68:b9:d8:17:b1:4f:ea:e0:56:9c:96:53: f6:7a:7d:d1:4b:7c:05:2a:ab:06:8b:c7:d0:4c:c6: 7c:42:8a:2c:87:1e:7d:7e:01:b4:6c:b8:97:79:fc: d3:82:97:b5:e2:0f:a1:41:e9:03:a3:96:c7:32:2c: ee:55:0f:c9:eb:83:b9:67:92:97:52:06:cd:61:7a: d5:6e:21:ef:bf:8a:31:ad:d8:ae:1c:e0:10:b4:7a: b8:6a:6a:27:2b:11:8a:89:3a:74:aa:9b:a4:c3:80: c7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8E:4D:5B:D2:0B:59:74:63:EC:A1:03:12:80:74:7A:54:D1:60:DD X509v3 Authority Key Identifier: keyid:9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/q45NW9ILWXRj7KEDEoB0elTRYN0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.216.176.0/21 185.35.40.0/22 188.95.184.0/21 Signature Algorithm: sha256WithRSAEncryption 2b:60:e8:4c:01:60:89:04:bf:f4:86:a4:a4:9c:47:b0:0a:d9: 40:d4:37:d9:63:12:b7:de:02:f1:9f:c8:9d:ee:a1:9d:8e:55: 27:71:5c:40:63:cb:fc:fd:b2:70:2e:30:0e:7a:89:a0:d5:39: f7:51:ba:7c:2b:1b:73:f5:65:c6:d9:50:f3:f4:07:ff:f9:b5: b2:6c:d9:d7:a1:11:b6:e7:49:7b:08:0b:c3:8c:21:60:08:42: 4e:cf:91:2c:d6:58:94:08:9d:94:ad:e5:09:f5:cb:68:1c:32: cb:3e:d4:3e:a7:4a:bc:c9:a2:dc:f6:47:a2:d7:eb:22:fc:ab: 14:1f:5d:71:b6:12:eb:23:e8:ae:16:e2:17:a0:c8:04:78:df: ed:60:27:e6:bf:d1:d1:e3:ff:15:75:97:2b:b8:74:5e:c4:40: 9c:7a:ad:0f:0e:f2:a2:75:6e:04:bc:6b:9c:c0:03:8a:c7:1b: 20:d4:e0:81:72:1f:77:4a:57:1d:e3:97:bf:d5:0b:41:6a:e2: 45:be:2e:32:1f:42:62:ee:ac:c2:01:60:bb:3e:c7:92:9b:db: 4c:ed:e0:17:54:61:55:f2:9f:3b:a5:07:d2:8e:be:18:f7:40: 9e:59:b7:c5:33:77:04:b5:64:c5:c9:73:12:ba:7d:c5:ad:f1: 27:d0:77:48 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EStXK/FF5OGPF3cHJ87cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYmI3N2JhYjQzOGE5M2QzNGQ5ZDVjMGE4ZTBiOWVmMzJh ZTVkYTAwHhcNMjYwMTAxMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjhlNGQ1YmQyMGI1OTc0NjNlY2ExMDMxMjgwNzQ3YTU0ZDE2MGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktUI4LMTIugCTaK4/yc4o5MGUj+8 t0wP5cKjB5EdkizI6g0DgkF2LXiys8u7QnauLP0r2WJt9M9JoldcqvzI/9mKlik7 Ol/Cp5TZ5Qc5PtbmSuH0yUmPf1OiPocNdu8ZyFpg1Bygxx+yobq2pGkC6LcpMLib 7+05Rpt9io4uol9vSWggWfeggti47jYIiMv2L94SBnLskGloudgXsU/q4FacllP2 en3RS3wFKqsGi8fQTMZ8Qooshx59fgG0bLiXefzTgpe14g+hQekDo5bHMizuVQ/J 64O5Z5KXUgbNYXrVbiHvv4oxrdiuHOAQtHq4amonKxGKiTp0qpukw4DHTQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKuOTVvSC1l0Y+yhAxKAdHpU0WDdMB8GA1UdIwQY MBaAFJy7d7q0OKk9NNnVwKjgue8yrl2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkx0M3VyUTRxVDAwMmRYQXFPQzU3ekt1WGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yMjkxODItNGJkYy00MjM0LWE5ODkt OTBkNThjNjAzMjU2LzEvcTQ1Tlc5SUxXWFJqN0tFREVvQjBlbFRSWU4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8yMjkxODItNGJkYy00MjM0LWE5ODktOTBkNThjNjAzMjU2 LzEvbkx0M3VyUTRxVDAwMmRYQXFPQzU3ekt1WGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDH9iwAwQC uSMoAwQDvF+4MA0GCSqGSIb3DQEBCwUAA4IBAQArYOhMAWCJBL/0hqSknEewCtlA 1DfZYxK33gLxn8id7qGdjlUncVxAY8v8/bJwLjAOeomg1Tn3Ubp8Kxtz9WXG2VDz 9Af/+bWybNnXoRG250l7CAvDjCFgCEJOz5Es1liUCJ2UreUJ9ctoHDLLPtQ+p0q8 yaLc9kei1+si/KsUH11xthLrI+iuFuIXoMgEeN/tYCfmv9HR4/8VdZcruHRexECc eq0PDvKidW4EvGucwAOKxxsg1OCBch93Slcd45e/1QtBauJFvi4yH0Ji7qzCAWC7 PseSm9tM7eAXVGFV8p87pQfSjr4Y90CeWbfFM3cEtWTFyXMSun3FrfEn0HdI -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:43 2026 by rpki-client