This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/q4ymNypCeYCDh5Jdw23U-ypzjiE.roa File: q4ymNypCeYCDh5Jdw23U-ypzjiE.roa (raw, json) Hash identifier: zp/+BxeAmcCMbS7nT6vnltxLIb38O2i4zuujdCCgNJw= Subject key identifier: AB:8C:A6:37:2A:42:79:80:83:87:92:5D:C3:6D:D4:FB:2A:73:8E:21 Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11 Certificate serial: 019B7D5C2E770FB339AB49308C7D053928A5 Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/q4ymNypCeYCDh5Jdw23U-ypzjiE.roa Signing time: Fri 02 Jan 2026 06:19:11 +0000 ROA not before: Fri 02 Jan 2026 06:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208867 IP address blocks: 45.137.236.0/22 maxlen: 24 193.104.197.0/24 maxlen: 24 217.29.192.0/22 maxlen: 24 2a04:b1c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:2e:77:0f:b3:39:ab:49:30:8c:7d:05:39:28:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11 Validity Not Before: Jan 2 06:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab8ca6372a4279808387925dc36dd4fb2a738e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:e1:a2:04:f8:80:2d:f3:80:7a:d9:f3:15: df:85:c9:ac:c7:f8:d9:93:d6:86:24:33:bc:dd:51: 50:ab:1e:ee:75:87:37:88:43:a1:de:19:60:c2:c1: ca:7b:c8:ef:19:eb:de:2f:7e:fb:c2:7e:50:a2:bc: d2:34:ec:12:4a:24:00:c4:ab:14:75:3a:da:cc:02: 3f:18:35:bd:44:6d:18:b8:a5:7f:4d:d5:ba:1f:92: e1:ae:eb:aa:2c:83:9f:99:52:8a:38:a7:90:3f:e1: ee:d7:b7:06:12:52:60:7a:db:52:69:b9:5e:f5:95: 4d:56:e1:0e:23:1d:5a:77:f2:b2:26:65:b5:95:26: d4:91:3e:cf:f6:6c:2e:da:c4:5d:af:5e:33:cf:29: 1d:1f:c6:3a:8a:c1:bc:67:e4:3f:9b:34:27:95:56: cc:6d:e8:e0:e1:34:c7:0f:54:1e:2b:47:15:01:88: 4a:a3:a6:33:f7:76:9d:56:29:e5:6c:49:0b:68:39: 15:d7:a4:b1:77:15:4b:52:f3:56:56:4f:a6:7c:9f: 2d:83:1b:7f:65:f3:78:92:10:8f:be:b3:eb:a2:61: de:e7:05:f2:a5:8f:f9:dc:d1:3a:e0:bc:d7:72:b4: a3:71:e1:d2:ef:61:17:a4:f8:20:a1:86:c9:6b:53: d0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8C:A6:37:2A:42:79:80:83:87:92:5D:C3:6D:D4:FB:2A:73:8E:21 X509v3 Authority Key Identifier: keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/q4ymNypCeYCDh5Jdw23U-ypzjiE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.236.0/22 193.104.197.0/24 217.29.192.0/22 IPv6: 2a04:b1c0::/29 Signature Algorithm: sha256WithRSAEncryption 76:dc:4e:4f:69:9a:d8:5c:e4:71:ed:bc:23:9c:2c:5d:40:d9: d2:ae:43:32:8a:32:db:a4:9a:ec:02:11:ff:5d:40:e5:4f:cb: ae:93:0f:14:f0:9e:ac:a5:d8:fe:96:00:be:d1:96:24:b2:4b: 46:8a:19:22:06:a3:a3:13:77:91:57:1b:e6:2f:f7:33:76:2b: 84:f7:82:e1:8c:38:00:72:3f:5e:d0:13:77:74:ca:28:22:ad: d3:43:5c:e5:2f:76:d4:ad:bf:9f:aa:a1:a1:ed:96:ca:ef:4c: e4:ec:14:0c:f6:af:d0:22:48:fb:0f:ef:32:43:a2:f3:05:be: c6:75:c4:57:d3:f4:21:05:c5:e8:ea:cd:f2:9e:8a:ae:ee:96: bc:76:10:ee:c6:21:b7:91:58:66:44:4e:46:99:67:19:b7:be: f9:a2:75:b1:d4:43:b3:c3:36:fb:d7:29:6f:cb:cf:69:5e:af: a3:9e:a0:f5:82:17:6d:71:22:ec:c6:0a:b6:00:28:65:23:55: ee:74:6e:10:f7:27:d0:91:ba:eb:19:a8:58:f7:17:6c:00:c7: 17:eb:bb:a1:6a:10:2d:2f:9d:30:76:74:40:78:92:77:15:f4: 89:fb:85:24:01:74:b3:0e:a8:65:19:ac:7e:83:95:58:1e:e1: ea:2f:23:f6 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9XC53D7M5q0kwjH0FOSilMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTE5ZWQ4NWEyYzBjZmM0ZjUwYmVhZDE2ZmM5ZjZmMTQ2 NWFkMTEwHhcNMjYwMTAyMDYxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjhjYTYzNzJhNDI3OTgwODM4NzkyNWRjMzZkZDRmYjJhNzM4ZTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyvhogT4gC3zgHrZ8xXfhcmsx/jZ k9aGJDO83VFQqx7udYc3iEOh3hlgwsHKe8jvGeveL377wn5QorzSNOwSSiQAxKsU dTrazAI/GDW9RG0YuKV/TdW6H5LhruuqLIOfmVKKOKeQP+Hu17cGElJgettSable 9ZVNVuEOIx1ad/KyJmW1lSbUkT7P9mwu2sRdr14zzykdH8Y6isG8Z+Q/mzQnlVbM bejg4TTHD1QeK0cVAYhKo6Yz93adVinlbEkLaDkV16SxdxVLUvNWVk+mfJ8tgxt/ ZfN4khCPvrPromHe5wXypY/53NE64LzXcrSjceHS72EXpPggoYbJa1PQIwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKuMpjcqQnmAg4eSXcNt1Psqc44hMB8GA1UdIwQY MBaAFCKhnthaLAz8T1C+rRb8n28UZa0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9lN2VkZmYtODZkYS00NDlmLWI4OWMt ZDdiMmFkMDFhMWQ3LzEvcTR5bU55cENlWUNEaDVKZHcyM1UteXB6amlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9lN2VkZmYtODZkYS00NDlmLWI4OWMtZDdiMmFkMDFhMWQ3 LzEvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLYnsAwQA wWjFAwQC2R3AMA0EAgACMAcDBQMqBLHAMA0GCSqGSIb3DQEBCwUAA4IBAQB23E5P aZrYXORx7bwjnCxdQNnSrkMyijLbpJrsAhH/XUDlT8uukw8U8J6spdj+lgC+0ZYk sktGihkiBqOjE3eRVxvmL/czdiuE94LhjDgAcj9e0BN3dMooIq3TQ1zlL3bUrb+f qqGh7ZbK70zk7BQM9q/QIkj7D+8yQ6LzBb7GdcRX0/QhBcXo6s3ynoqu7pa8dhDu xiG3kVhmRE5GmWcZt775onWx1EOzwzb71ylvy89pXq+jnqD1ghdtcSLsxgq2AChl I1XudG4Q9yfQkbrrGahY9xdsAMcX67uhahAtL50wdnRAeJJ3FfSJ+4UkAXSzDqhl Gax+g5VYHuHqLyP2 -----END CERTIFICATE-----Generated at Wed Jan 21 07:22:15 2026 by rpki-client