This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/q_6rXYE5naFTYIqL8Xb1V5kt0hw.roa File: q_6rXYE5naFTYIqL8Xb1V5kt0hw.roa (raw, json) Hash identifier: oNdTo6cg1MBLR8xzU20UilfpNxSC7GvJArzxlqR/iAg= Subject key identifier: AB:FE:AB:5D:81:39:9D:A1:53:60:8A:8B:F1:76:F5:57:99:2D:D2:1C Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba Certificate serial: 019B7F1587DF020CA2FCDC26EB4BD4415FFA Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/q_6rXYE5naFTYIqL8Xb1V5kt0hw.roa Signing time: Fri 02 Jan 2026 14:21:16 +0000 ROA not before: Fri 02 Jan 2026 14:21:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29608 IP address blocks: 37.60.152.0/21 maxlen: 21 79.143.240.0/20 maxlen: 20 178.20.64.0/21 maxlen: 21 185.101.208.0/22 maxlen: 22 185.152.24.0/22 maxlen: 22 185.152.24.0/23 maxlen: 23 185.152.26.0/23 maxlen: 23 185.170.80.0/22 maxlen: 22 185.226.48.0/22 maxlen: 22 193.30.224.0/22 maxlen: 22 193.46.252.0/24 maxlen: 24 193.47.70.0/24 maxlen: 24 193.47.75.0/24 maxlen: 24 193.47.86.0/24 maxlen: 24 193.239.192.0/23 maxlen: 23 2a01:678::/29 maxlen: 29 2a01:40c0::/29 maxlen: 29 2a07:81c0::/29 maxlen: 29 2a0f:8340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:87:df:02:0c:a2:fc:dc:26:eb:4b:d4:41:5f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba Validity Not Before: Jan 2 14:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abfeab5d81399da153608a8bf176f557992dd21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:72:3e:48:2f:5b:4e:ed:45:cf:7d:60:76:8c: 3b:54:5c:05:55:77:ce:15:0f:2d:95:21:66:20:de: ce:2e:e7:85:b4:c5:48:6e:51:d5:dc:64:fa:45:33: be:99:7d:0f:a6:0f:0e:50:ed:c7:44:b3:a2:4f:c2: 35:ae:af:ed:bb:5c:12:9d:4b:a5:96:2d:5b:de:ed: b4:9f:95:16:fe:87:23:fa:81:67:cf:5f:9d:9c:03: 16:46:40:6f:e4:1d:10:b1:0e:8e:95:77:fb:6f:f7: 62:14:77:d5:ad:cc:f7:03:82:3b:e5:af:f4:8a:3e: 89:23:cc:b4:6f:5f:ce:1a:c3:35:42:61:ac:45:1e: 08:7a:48:20:eb:30:e4:9c:f6:c8:3f:f2:9c:e5:9c: cf:3f:6d:57:9f:d7:97:6a:2e:5e:62:b1:18:be:f4: fb:04:0c:01:dc:90:c0:d1:85:46:54:d6:2b:26:44: 74:e7:9e:82:c5:91:23:56:3a:66:40:e5:94:b8:f0: 93:65:55:3d:16:ab:bb:9f:61:a1:d0:b9:2b:7a:59: 2b:3a:ce:d6:75:c1:3c:b3:21:44:63:dc:8e:4a:39: 2f:99:fd:e8:f2:d9:d6:a2:fe:14:ef:cc:fa:ac:f3: 2f:0f:4a:07:c6:0b:d5:ef:a2:35:e8:17:5a:87:71: ee:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FE:AB:5D:81:39:9D:A1:53:60:8A:8B:F1:76:F5:57:99:2D:D2:1C X509v3 Authority Key Identifier: keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/q_6rXYE5naFTYIqL8Xb1V5kt0hw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.60.152.0/21 79.143.240.0/20 178.20.64.0/21 185.101.208.0/22 185.152.24.0/22 185.170.80.0/22 185.226.48.0/22 193.30.224.0/22 193.46.252.0/24 193.47.70.0/24 193.47.75.0/24 193.47.86.0/24 193.239.192.0/23 IPv6: 2a01:678::/29 2a01:40c0::/29 2a07:81c0::/29 2a0f:8340::/29 Signature Algorithm: sha256WithRSAEncryption 94:3a:d8:76:62:01:f8:ce:e6:3a:fb:5e:a6:72:e1:b8:2e:d8: 9d:5d:09:3a:89:92:21:10:d0:47:7a:f6:a3:ec:e1:0f:0e:51: 44:a7:19:dd:7c:3f:ce:a6:0f:04:9f:84:a5:17:92:16:42:c7: 12:53:4a:61:0f:e8:c6:ce:24:ba:7f:26:e4:ef:83:f6:af:4e: 54:dc:68:f5:da:f4:1d:9b:7a:7b:31:4d:99:45:56:8f:e1:43: 84:1e:a7:4f:c8:fb:2c:5d:96:fa:53:35:15:c9:16:e5:35:9a: 7e:b1:69:c9:ec:98:c6:85:f2:eb:5d:f4:1e:c3:b2:62:67:02: 6d:71:a8:36:94:f4:7c:89:c0:ce:8d:0a:86:75:19:b6:93:b7: 4c:8b:90:93:7d:ca:6d:df:29:43:6e:85:5d:51:7a:b0:13:e4: 18:ce:03:8d:6d:ea:6d:db:23:a2:a1:bb:4c:51:37:42:e7:01: d1:2c:5a:45:a0:9f:dd:82:d9:21:8c:1a:09:d3:ab:e7:54:70: 84:48:4a:19:34:0c:94:4e:ed:66:eb:e0:0e:b3:06:78:81:be: 24:34:36:0c:d5:d4:92:f5:c9:ff:84:f6:85:5c:b2:2f:3f:69: 2b:ba:7f:48:f6:d4:c7:ce:6e:75:71:02:d0:f0:a5:cf:68:46: 89:17:ae:58 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgISAZt/FYffAgyi/Nwm60vUQV/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YTMyZTQ0NWMyNGRlZDliODUyMTJkNDc5Yjg4MDA4MTY1 ZWJkYmEwHhcNMjYwMTAyMTQyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmZlYWI1ZDgxMzk5ZGExNTM2MDhhOGJmMTc2ZjU1Nzk5MmRkMjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3I+SC9bTu1Fz31gdow7VFwFVXfO FQ8tlSFmIN7OLueFtMVIblHV3GT6RTO+mX0Ppg8OUO3HRLOiT8I1rq/tu1wSnUul li1b3u20n5UW/ocj+oFnz1+dnAMWRkBv5B0QsQ6OlXf7b/diFHfVrcz3A4I75a/0 ij6JI8y0b1/OGsM1QmGsRR4Iekgg6zDknPbIP/Kc5ZzPP21Xn9eXai5eYrEYvvT7 BAwB3JDA0YVGVNYrJkR0556CxZEjVjpmQOWUuPCTZVU9Fqu7n2Gh0LkrelkrOs7W dcE8syFEY9yOSjkvmf3o8tnWov4U78z6rPMvD0oHxgvV76I16Bdah3HuDwIDAQAB o4ICdjCCAnIwHQYDVR0OBBYEFKv+q12BOZ2hU2CKi/F29VeZLdIcMB8GA1UdIwQY MBaAFJSjLkRcJN7ZuFIS1Hm4gAgWXr26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEtNdVJGd2szdG00VWhMVWViaUFDQlpldmJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mODkxYzQtMTlhYy00MzdjLWI3ODIt ZTE0ODdhNTRjMWU1LzEvcV82clhZRTVuYUZUWUlxTDhYYjFWNWt0MGh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mODkxYzQtMTlhYy00MzdjLWI3ODItZTE0ODdhNTRjMWU1 LzEvbEtNdVJGd2szdG00VWhMVWViaUFDQlpldmJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHowVAQCAAEwTgMEAyU8mAME BE+P8AMEA7IUQAMEArll0AMEArmYGAMEArmqUAMEArniMAMEAsEe4AMEAMEu/AME AMEvRgMEAMEvSwMEAMEvVgMEAcHvwDAiBAIAAjAcAwUDKgEGeAMFAyoBQMADBQMq B4HAAwUDKg+DQDANBgkqhkiG9w0BAQsFAAOCAQEAlDrYdmIB+M7mOvtepnLhuC7Y nV0JOomSIRDQR3r2o+zhDw5RRKcZ3Xw/zqYPBJ+EpReSFkLHElNKYQ/oxs4kun8m 5O+D9q9OVNxo9dr0HZt6ezFNmUVWj+FDhB6nT8j7LF2W+lM1FckW5TWafrFpyeyY xoXy6130HsOyYmcCbXGoNpT0fInAzo0KhnUZtpO3TIuQk33Kbd8pQ26FXVF6sBPk GM4DjW3qbdsjoqG7TFE3QucB0SxaRaCf3YLZIYwaCdOr51RwhEhKGTQMlE7tZuvg DrMGeIG+JDQ2DNXUkvXJ/4T2hVyyLz9pK7p/SPbUx85udXEC0PClz2hGiReuWA== -----END CERTIFICATE-----Generated at Tue Feb 10 04:26:32 2026 by rpki-client