This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/qIXEy_F6qfNB1iqYTrvJEkvpTsQ.roa File: qIXEy_F6qfNB1iqYTrvJEkvpTsQ.roa (raw, json) Hash identifier: 04pk0BNn+nyzGxexSqXjPihhWnR9IS/ncaQz3LI+rOs= Subject key identifier: A8:85:C4:CB:F1:7A:A9:F3:41:D6:2A:98:4E:BB:C9:12:4B:E9:4E:C4 Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80 Certificate serial: 019B7834E017282FF9571B4607E02ECF1B6F Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/qIXEy_F6qfNB1iqYTrvJEkvpTsQ.roa Signing time: Thu 01 Jan 2026 06:18:09 +0000 ROA not before: Thu 01 Jan 2026 06:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48045 IP address blocks: 46.46.64.0/18 maxlen: 18 94.240.128.0/22 maxlen: 22 94.240.132.0/24 maxlen: 24 94.240.133.0/24 maxlen: 24 94.240.134.0/23 maxlen: 23 94.240.144.0/20 maxlen: 20 2a09:65c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e0:17:28:2f:f9:57:1b:46:07:e0:2e:cf:1b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80 Validity Not Before: Jan 1 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a885c4cbf17aa9f341d62a984ebbc9124be94ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4f:a0:bf:82:21:53:08:76:cd:e1:5e:35:ea: 56:79:75:59:a8:fa:7b:a1:71:13:3f:e3:87:6e:3f: 51:96:81:78:84:12:2d:19:4f:25:63:7a:6b:7f:ca: 50:55:22:bc:bd:bc:dd:1d:a5:ff:41:69:12:4f:b7: a7:66:0e:b1:00:22:01:07:b2:c8:e2:11:e1:3a:f9: f3:94:56:1f:85:96:69:b5:b0:53:99:ab:7e:9b:19: 80:4e:5f:2d:ca:e7:7e:a9:51:1a:9e:7f:58:29:5b: cb:da:c5:3b:07:46:ca:4a:94:62:ef:92:20:b7:7c: 2f:5d:2f:9a:27:33:d6:1b:79:47:68:64:88:d3:66: 58:8b:c8:1e:2e:7d:f3:0b:fd:75:95:7e:e7:67:33: 31:38:d7:e0:40:b8:96:bc:65:03:71:60:4e:f0:1a: bd:3e:2d:8d:7a:c9:3a:cc:c9:fc:8b:8f:80:8b:76: d1:af:ba:96:bc:ae:42:b5:9c:a9:ef:20:89:4c:a3: 80:a7:d9:61:b5:3f:12:d2:43:e3:69:68:7a:38:50: fa:fe:60:7c:b1:20:28:0d:1b:4d:e8:ce:a5:c1:fb: 54:a6:9e:bb:68:38:6b:fb:04:f8:f4:e1:37:d7:9a: 5d:51:1a:17:dc:88:fb:c2:8e:db:72:ee:ff:8e:2c: 34:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:85:C4:CB:F1:7A:A9:F3:41:D6:2A:98:4E:BB:C9:12:4B:E9:4E:C4 X509v3 Authority Key Identifier: keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/qIXEy_F6qfNB1iqYTrvJEkvpTsQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.46.64.0/18 94.240.128.0/21 94.240.144.0/20 IPv6: 2a09:65c0::/32 Signature Algorithm: sha256WithRSAEncryption 2c:75:61:08:64:14:32:be:bc:a4:e9:4e:19:a3:ef:32:27:39: 3f:6b:c9:26:42:ef:ea:9c:d4:94:41:60:a9:89:b0:40:c6:21: da:4b:22:64:69:a9:9c:42:bb:73:08:51:8d:e2:7b:4c:0a:c7: 68:f3:74:be:a3:07:bb:b6:7b:2a:28:61:7b:37:25:85:c4:a2: 01:0e:00:88:66:a1:14:ca:da:6c:78:c2:07:25:a1:e1:b8:b1: 78:d9:2d:22:6d:84:38:5d:63:06:8d:e7:16:39:70:e1:e3:23: e4:27:87:27:d0:07:c4:ea:be:36:50:fe:3e:24:3f:69:d6:87: 53:2f:6d:f7:12:df:cf:6a:e1:49:bb:b2:b7:ce:31:74:6b:a6: 82:1b:c2:34:a3:b3:39:3c:3b:0d:47:8c:c7:bb:8c:8a:d6:15: 00:f9:82:7b:d3:62:26:a9:e5:7c:b7:e6:02:6f:7d:e1:1e:5e: fc:46:e6:26:5c:3d:ff:c3:b6:5c:07:bb:d2:23:71:06:1d:50: 5c:62:d4:b9:34:fe:61:3b:ea:6f:05:5f:41:d7:b4:b3:5a:6b: 93:09:24:5b:f3:dd:f5:ab:cb:43:ed:e7:b0:27:cb:a1:7f:cc: 0d:f7:f0:bd:4b:35:51:4c:8a:91:96:83:45:c0:c6:8b:03:98: c0:8d:1d:72 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4NOAXKC/5VxtGB+AuzxtvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODI1ZmJlZTdjNDNhMjk4MzhlYWJlNGZjODdkNzk0MzQ5 YzBjODAwHhcNMjYwMTAxMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODg1YzRjYmYxN2FhOWYzNDFkNjJhOTg0ZWJiYzkxMjRiZTk0ZWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE+gv4IhUwh2zeFeNepWeXVZqPp7 oXETP+OHbj9RloF4hBItGU8lY3prf8pQVSK8vbzdHaX/QWkST7enZg6xACIBB7LI 4hHhOvnzlFYfhZZptbBTmat+mxmATl8tyud+qVEann9YKVvL2sU7B0bKSpRi75Ig t3wvXS+aJzPWG3lHaGSI02ZYi8geLn3zC/11lX7nZzMxONfgQLiWvGUDcWBO8Bq9 Pi2Nesk6zMn8i4+Ai3bRr7qWvK5CtZyp7yCJTKOAp9lhtT8S0kPjaWh6OFD6/mB8 sSAoDRtN6M6lwftUpp67aDhr+wT49OE315pdURoX3Ij7wo7bcu7/jiw0gQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKiFxMvxeqnzQdYqmE67yRJL6U7EMB8GA1UdIwQY MBaAFOWCX77nxDopg46r5PyH15Q0nAyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2Qt MDQxYWIzMDJjMmY5LzEvcUlYRXlfRjZxZk5CMWlxWVRydkpFa3ZwVHNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2QtMDQxYWIzMDJjMmY5 LzEvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGLi5AAwQD XvCAAwQEXvCQMA0EAgACMAcDBQAqCWXAMA0GCSqGSIb3DQEBCwUAA4IBAQAsdWEI ZBQyvryk6U4Zo+8yJzk/a8kmQu/qnNSUQWCpibBAxiHaSyJkaamcQrtzCFGN4ntM Csdo83S+owe7tnsqKGF7NyWFxKIBDgCIZqEUytpseMIHJaHhuLF42S0ibYQ4XWMG jecWOXDh4yPkJ4cn0AfE6r42UP4+JD9p1odTL233Et/PauFJu7K3zjF0a6aCG8I0 o7M5PDsNR4zHu4yK1hUA+YJ702ImqeV8t+YCb33hHl78RuYmXD3/w7ZcB7vSI3EG HVBcYtS5NP5hO+pvBV9B17SzWmuTCSRb8931q8tD7eewJ8uhf8wN9/C9SzVRTIqR loNFwMaLA5jAjR1y -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:13 2026 by rpki-client