This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/qqoPemYi4_pyOzOVoO62_Uat0so.roa File: qqoPemYi4_pyOzOVoO62_Uat0so.roa (raw, json) Hash identifier: Sdr4R7TpF1P6pqqGJyLye0mNOG4fczQyXXubw1Zcqyg= Subject key identifier: AA:AA:0F:7A:66:22:E3:FA:72:3B:33:95:A0:EE:B6:FD:46:AD:D2:CA Certificate issuer: /CN=9a6cdbf475113f96ca78a07afbd4458c88880771 Certificate serial: 019B78A32473260EE0CD521556749B3AC910 Authority key identifier: 9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/qqoPemYi4_pyOzOVoO62_Uat0so.roa Signing time: Thu 01 Jan 2026 08:18:36 +0000 ROA not before: Thu 01 Jan 2026 08:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215792 IP address blocks: 185.37.239.0/24 maxlen: 24 185.92.204.0/22 maxlen: 22 2a13:a3c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:24:73:26:0e:e0:cd:52:15:56:74:9b:3a:c9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a6cdbf475113f96ca78a07afbd4458c88880771 Validity Not Before: Jan 1 08:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aaaa0f7a6622e3fa723b3395a0eeb6fd46add2ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:16:35:66:d5:a3:d0:e1:41:6e:1a:76:a7:56: 26:d3:20:ab:f5:79:f8:60:0b:25:81:91:0e:8a:d1: e3:b8:db:c5:74:a5:8e:29:e1:89:50:60:b8:5d:a8: a6:fe:5c:03:7d:ae:4c:11:03:f1:ff:5b:91:0c:62: 36:d6:eb:41:5c:36:c5:ae:92:d6:1b:a3:f2:0d:a1: 46:6d:2b:a7:8a:10:28:77:d3:3d:72:65:0d:f2:c3: d7:09:11:71:55:0f:e1:e0:73:ca:d7:66:15:43:cb: 36:6b:60:0a:6b:75:03:a1:53:42:69:ca:86:94:c1: 35:18:94:63:a2:ab:cb:41:ba:12:d6:d2:4b:46:00: e2:24:1e:a0:b0:b3:7b:39:6a:9a:f8:0d:bd:46:95: af:4a:2b:24:ee:12:08:79:4e:03:7e:ab:98:e8:24: 97:c6:9e:43:c4:02:64:ff:ea:68:5d:58:8b:67:35: 44:e6:93:ff:48:fb:0d:18:55:98:11:38:d1:fd:eb: 84:cf:40:3d:04:85:79:1c:bc:5f:ba:c5:5d:14:9b: 7b:38:cb:0d:f8:71:d4:ea:db:ab:67:8f:fa:3a:b3: 1e:b9:1b:78:7c:9f:a0:22:db:3f:ce:c2:4e:b7:72: ed:45:c2:7b:63:70:95:99:7d:c4:d5:69:45:0a:b1: b9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AA:0F:7A:66:22:E3:FA:72:3B:33:95:A0:EE:B6:FD:46:AD:D2:CA X509v3 Authority Key Identifier: keyid:9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/qqoPemYi4_pyOzOVoO62_Uat0so.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.239.0/24 185.92.204.0/22 IPv6: 2a13:a3c0::/29 Signature Algorithm: sha256WithRSAEncryption 2e:3e:60:89:0a:fb:b1:27:8e:da:44:58:e3:1f:5e:6a:79:f4: 50:83:3a:11:24:f3:0b:0f:75:fa:92:fc:ad:98:7d:2c:47:2a: c3:7b:c2:6c:9e:fa:d7:c1:45:b1:95:49:d6:39:bc:32:0e:09: f0:67:a6:e0:f7:cb:4c:2c:50:af:11:18:42:8d:8b:8d:9f:49: 8f:36:35:43:a5:20:1f:8d:9f:f3:ac:78:96:5a:8f:e5:f4:1e: 31:1f:4e:6d:12:cb:cb:48:d1:55:ce:8c:b9:6e:0e:bc:eb:02: bc:35:7a:18:00:a5:7f:55:4b:37:5c:10:c5:c2:8b:a6:73:8a: aa:34:13:8c:aa:db:af:46:75:a9:0e:5c:58:e7:b5:b3:23:de: af:ef:2d:18:f5:ff:83:bb:a8:8c:d5:b1:0a:3d:2c:19:5f:ac: 24:d5:ac:62:6a:2c:90:82:22:26:9d:1b:8a:e7:4d:c1:43:cf: c2:1a:1a:c4:89:f5:4e:db:ec:c9:d6:37:be:09:09:f0:54:1e: 08:e8:67:6c:5f:7b:c0:8b:ae:97:b2:73:e8:54:16:54:2e:13: 5a:d9:a9:ed:c1:7e:90:aa:17:1c:c3:bc:01:c8:2c:bb:f7:4b: 8a:d0:9b:3c:5a:16:5a:f0:64:ed:35:01:d2:ad:47:1a:92:cb: f2:f3:f6:39 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4oyRzJg7gzVIVVnSbOskQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNmNkYmY0NzUxMTNmOTZjYTc4YTA3YWZiZDQ0NThjODg4 ODA3NzEwHhcNMjYwMTAxMDgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWFhMGY3YTY2MjJlM2ZhNzIzYjMzOTVhMGVlYjZmZDQ2YWRkMmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxY1ZtWj0OFBbhp2p1Ym0yCr9Xn4 YAslgZEOitHjuNvFdKWOKeGJUGC4Xaim/lwDfa5MEQPx/1uRDGI21utBXDbFrpLW G6PyDaFGbSunihAod9M9cmUN8sPXCRFxVQ/h4HPK12YVQ8s2a2AKa3UDoVNCacqG lME1GJRjoqvLQboS1tJLRgDiJB6gsLN7OWqa+A29RpWvSisk7hIIeU4DfquY6CSX xp5DxAJk/+poXViLZzVE5pP/SPsNGFWYETjR/euEz0A9BIV5HLxfusVdFJt7OMsN +HHU6turZ4/6OrMeuRt4fJ+gIts/zsJOt3LtRcJ7Y3CVmX3E1WlFCrG5aQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKqqD3pmIuP6cjszlaDutv1GrdLKMB8GA1UdIwQY MBaAFJps2/R1ET+WynigevvURYyIiAdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80NzM1NzctNGMzMS00Mjk1LWFiZGUt ZGMyZmVhYzM3ODI5LzEvcXFvUGVtWWk0X3B5T3pPVm9PNjJfVWF0MHNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi80NzM1NzctNGMzMS00Mjk1LWFiZGUtZGMyZmVhYzM3ODI5 LzEvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuSXvAwQC uVzMMA0EAgACMAcDBQMqE6PAMA0GCSqGSIb3DQEBCwUAA4IBAQAuPmCJCvuxJ47a RFjjH15qefRQgzoRJPMLD3X6kvytmH0sRyrDe8JsnvrXwUWxlUnWObwyDgnwZ6bg 98tMLFCvERhCjYuNn0mPNjVDpSAfjZ/zrHiWWo/l9B4xH05tEsvLSNFVzoy5bg68 6wK8NXoYAKV/VUs3XBDFwoumc4qqNBOMqtuvRnWpDlxY57WzI96v7y0Y9f+Du6iM 1bEKPSwZX6wk1axiaiyQgiImnRuK503BQ8/CGhrEifVO2+zJ1je+CQnwVB4I6Gds X3vAi66XsnPoVBZULhNa2antwX6Qqhccw7wByCy790uK0Js8WhZa8GTtNQHSrUca ksvy8/Y5 -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:10 2026 by rpki-client