This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/rQy2SPGFQEjuSOt_AqL8QZIw6H0.roa File: rQy2SPGFQEjuSOt_AqL8QZIw6H0.roa (raw, json) Hash identifier: +JefNV5OaeJsN9RpkGDkCiA4z+6Up7RrUi0ftPxyKfY= Subject key identifier: AD:0C:B6:48:F1:85:40:48:EE:48:EB:7F:02:A2:FC:41:92:30:E8:7D Certificate issuer: /CN=6b5e8b0701e35d66a97876d8055012a89682fdc3 Certificate serial: 019B76EAFF3E78B01717940730B466DBC7A2 Authority key identifier: 6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/rQy2SPGFQEjuSOt_AqL8QZIw6H0.roa Signing time: Thu 01 Jan 2026 00:17:50 +0000 ROA not before: Thu 01 Jan 2026 00:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60017 IP address blocks: 185.156.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ff:3e:78:b0:17:17:94:07:30:b4:66:db:c7:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5e8b0701e35d66a97876d8055012a89682fdc3 Validity Not Before: Jan 1 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad0cb648f1854048ee48eb7f02a2fc419230e87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bb:4a:05:2d:0e:38:a3:7e:ef:00:f9:df:48: 73:30:ab:ba:13:d0:0c:13:f6:59:2d:5a:e9:e9:5b: c3:7a:f4:30:aa:6d:23:0a:0c:00:fd:77:89:fe:0a: b1:98:2e:69:c1:5c:18:6d:fe:ab:6f:6d:52:7b:6b: 71:7c:53:28:83:53:bf:44:1b:57:71:18:6e:6e:cf: c7:9d:d5:72:6e:eb:44:74:47:c0:05:b1:16:91:1f: c3:e5:f3:86:21:6d:d2:c9:46:97:12:71:51:fc:b7: 6e:36:06:59:33:34:32:e9:be:39:67:e4:54:bc:cb: 97:99:63:98:76:af:3e:6d:bd:37:54:45:a9:49:8a: da:50:19:a7:76:6b:bf:50:2f:e6:fa:dd:ce:9f:95: 20:03:e6:f9:cc:90:04:18:94:01:54:59:30:86:81: b9:14:4f:2e:6f:a4:0f:bf:1d:65:c8:53:30:6e:bd: 91:bb:95:95:7e:1c:2f:c5:d0:39:5f:eb:b4:7f:27: 45:32:eb:40:95:e3:dc:8b:fc:78:3b:1d:17:ed:e5: a2:04:e8:18:d1:ac:60:b3:f4:3f:c9:bc:a3:02:d0: 76:95:00:5c:b2:72:7e:eb:6a:69:06:75:d1:1a:33: e3:20:27:b6:ce:d3:c5:4f:fe:da:e4:cb:4c:d2:d7: 91:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0C:B6:48:F1:85:40:48:EE:48:EB:7F:02:A2:FC:41:92:30:E8:7D X509v3 Authority Key Identifier: keyid:6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/rQy2SPGFQEjuSOt_AqL8QZIw6H0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.156.232.0/22 Signature Algorithm: sha256WithRSAEncryption a9:28:f2:34:50:85:00:b4:bd:36:09:c4:2d:95:91:0a:d3:43: a7:9c:30:f0:31:f8:37:2d:4a:36:38:26:bb:73:3c:fc:5e:64: a6:03:11:5a:2d:5d:57:2b:1b:20:0d:01:d5:7a:36:6f:b4:ed: 5e:9b:c9:1c:63:6c:2c:b9:49:fe:f2:0c:24:08:cd:01:8f:51: 3e:23:dd:79:dc:5d:c3:13:af:6a:ad:c1:5a:36:ec:4e:6c:56: 8d:b8:30:0c:7a:0d:30:5d:17:9f:4f:6f:f1:76:45:f8:90:6d: 95:82:68:ce:47:ef:71:04:3f:20:d2:51:50:8a:2e:2f:51:88: 09:bd:b2:60:7a:21:53:43:e9:5e:e8:91:9f:48:13:a8:f7:29: be:7f:95:17:35:e5:98:5d:74:0c:ae:62:c3:1d:11:ca:b5:70: 0b:0b:c0:03:be:15:7f:37:92:8c:61:1f:8a:1b:77:3b:e9:60: 88:71:ec:d1:50:fd:f5:5b:2e:e8:d5:35:41:95:b6:cb:0c:87: 77:59:78:99:20:96:1a:cb:9e:7b:b1:8d:ce:4f:3c:84:71:bd: e7:98:ba:20:b0:9e:5a:cc:33:35:65:f7:37:04:b1:a2:0f:34: c8:96:90:c1:08:6d:2a:8f:1b:3e:a9:3c:5a:bc:29:09:50:c1: d9:25:d6:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26v8+eLAXF5QHMLRm28eiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWU4YjA3MDFlMzVkNjZhOTc4NzZkODA1NTAxMmE4OTY4 MmZkYzMwHhcNMjYwMTAxMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDBjYjY0OGYxODU0MDQ4ZWU0OGViN2YwMmEyZmM0MTkyMzBlODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7tKBS0OOKN+7wD530hzMKu6E9AM E/ZZLVrp6VvDevQwqm0jCgwA/XeJ/gqxmC5pwVwYbf6rb21Se2txfFMog1O/RBtX cRhubs/HndVybutEdEfABbEWkR/D5fOGIW3SyUaXEnFR/LduNgZZMzQy6b45Z+RU vMuXmWOYdq8+bb03VEWpSYraUBmndmu/UC/m+t3On5UgA+b5zJAEGJQBVFkwhoG5 FE8ub6QPvx1lyFMwbr2Ru5WVfhwvxdA5X+u0fydFMutAlePci/x4Ox0X7eWiBOgY 0axgs/Q/ybyjAtB2lQBcsnJ+62ppBnXRGjPjICe2ztPFT/7a5MtM0teRGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK0MtkjxhUBI7kjrfwKi/EGSMOh9MB8GA1UdIwQY MBaAFGteiwcB411mqXh22AVQEqiWgv3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTE2TEJ3SGpYV2FwZUhiWUJWQVNxSmFDX2NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8wMmFhM2ItZTNhOC00YzY5LTgyY2Ut ZDk1NzI2NDY1M2UyLzEvclF5MlNQR0ZRRWp1U090X0FxTDhRWkl3NkgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8wMmFhM2ItZTNhOC00YzY5LTgyY2UtZDk1NzI2NDY1M2Uy LzEvYTE2TEJ3SGpYV2FwZUhiWUJWQVNxSmFDX2NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZzoMA0G CSqGSIb3DQEBCwUAA4IBAQCpKPI0UIUAtL02CcQtlZEK00OnnDDwMfg3LUo2OCa7 czz8XmSmAxFaLV1XKxsgDQHVejZvtO1em8kcY2wsuUn+8gwkCM0Bj1E+I9153F3D E69qrcFaNuxObFaNuDAMeg0wXRefT2/xdkX4kG2VgmjOR+9xBD8g0lFQii4vUYgJ vbJgeiFTQ+le6JGfSBOo9ym+f5UXNeWYXXQMrmLDHRHKtXALC8ADvhV/N5KMYR+K G3c76WCIcezRUP31Wy7o1TVBlbbLDId3WXiZIJYay557sY3OTzyEcb3nmLogsJ5a zDM1Zfc3BLGiDzTIlpDBCG0qjxs+qTxavCkJUMHZJdZS -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:57 2026 by rpki-client