This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/qm9g69jYnWNc78LF3m9f86Ep1QU.roa File: qm9g69jYnWNc78LF3m9f86Ep1QU.roa (raw, json) Hash identifier: M/tK1MAFQ93LFa0QgLHnChdjSMrNpdZDpgg6UVG6Za4= Subject key identifier: AA:6F:60:EB:D8:D8:9D:63:5C:EF:C2:C5:DE:6F:5F:F3:A1:29:D5:05 Certificate issuer: /CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e Certificate serial: 019B7758A9AA296BA0FC2A2884FE6D6E4189 Authority key identifier: FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/qm9g69jYnWNc78LF3m9f86Ep1QU.roa Signing time: Thu 01 Jan 2026 02:17:37 +0000 ROA not before: Thu 01 Jan 2026 02:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49229 IP address blocks: 89.39.166.0/24 maxlen: 24 91.226.181.0/24 maxlen: 24 185.12.192.0/22 maxlen: 24 185.29.172.0/22 maxlen: 24 185.34.232.0/22 maxlen: 24 195.88.236.0/23 maxlen: 24 2a04:6040::/32 maxlen: 32 2a04:6041::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a9:aa:29:6b:a0:fc:2a:28:84:fe:6d:6e:41:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e Validity Not Before: Jan 1 02:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa6f60ebd8d89d635cefc2c5de6f5ff3a129d505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:78:1b:09:4b:f2:34:c7:d5:4f:0f:38:8c:e7: 45:04:f4:c1:18:21:91:91:b5:e3:b5:9f:9b:21:8b: b4:9d:ab:0e:83:bf:c4:f6:db:91:ce:97:a1:90:e2: 07:68:c5:6d:b0:6f:fb:35:41:3f:d9:8f:4c:43:38: 8c:c3:93:e6:8e:b6:f8:2b:64:05:b3:42:1c:14:a6: c0:ce:cd:11:38:00:01:62:d9:f8:23:47:77:00:7d: 13:00:39:17:55:79:4a:da:43:1b:92:a2:d2:0d:36: 07:44:b6:03:2b:26:a0:96:ed:32:c5:d0:9d:45:28: 60:ac:6e:1e:b0:ac:e4:82:3e:64:e8:2d:3f:ae:80: a5:bd:93:8a:05:2f:fb:83:ef:c8:50:39:84:de:58: f9:33:53:8c:95:dc:7f:89:ab:2f:64:ff:d9:6c:bb: 49:40:fe:e3:96:e4:04:db:02:c0:1e:76:ab:5d:9b: 0f:53:ac:74:bf:fa:5f:2f:e2:28:b9:b8:6e:7a:09: a0:a1:11:11:57:72:68:b6:aa:8f:60:4b:d3:93:c2: a2:e6:9a:77:bb:25:18:52:48:38:25:43:42:58:bb: ec:64:fd:64:9c:4b:69:14:8f:00:aa:5c:d1:e9:8f: 6c:d8:5d:c3:a6:06:ed:eb:b6:34:25:75:a9:49:24: 51:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6F:60:EB:D8:D8:9D:63:5C:EF:C2:C5:DE:6F:5F:F3:A1:29:D5:05 X509v3 Authority Key Identifier: keyid:FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/qm9g69jYnWNc78LF3m9f86Ep1QU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.39.166.0/24 91.226.181.0/24 185.12.192.0/22 185.29.172.0/22 185.34.232.0/22 195.88.236.0/23 IPv6: 2a04:6040::/31 Signature Algorithm: sha256WithRSAEncryption 42:3f:75:30:d0:32:86:ee:82:d6:71:92:f9:db:38:8a:81:ba: ac:56:18:98:95:89:51:29:ab:e8:db:e9:42:0d:d3:9b:42:24: 39:92:66:0d:04:42:fc:d4:0f:2a:13:f5:55:e0:02:4e:ab:18: 06:01:c9:7d:1d:19:76:c3:32:d9:10:0b:c2:0b:97:8f:20:e3: d9:7b:7e:df:e3:bf:fd:d2:ba:c8:d5:c9:1d:f4:16:22:e8:36: 30:23:2f:76:cd:54:21:ba:34:f1:06:83:45:d1:d6:fd:65:16: b0:60:cd:4f:79:31:f8:de:92:3c:f2:12:3d:be:41:bd:0f:10: 6c:da:33:51:b3:1d:b3:b5:5c:44:85:d9:74:0e:46:98:9a:e5: 8e:32:40:be:42:f8:03:1a:35:6a:7d:51:17:60:8e:27:ec:11: 9a:97:32:e0:ab:88:ef:d3:2a:4c:40:0f:27:4c:66:ca:3b:cd: ea:83:6b:f7:41:86:7f:c0:c3:e2:2c:51:ec:c3:44:1b:ed:3e: 5e:2b:7a:70:e3:7e:80:5b:6f:a1:78:e4:b4:48:be:9b:1f:6f: fb:f5:ea:70:16:a2:f6:8e:f2:74:1d:a6:78:77:6a:22:43:f6: 60:5d:b2:00:28:16:44:81:38:a8:9e:83:d8:26:ed:29:7f:ee: cf:0c:72:d4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt3WKmqKWug/CoohP5tbkGJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYzFmMjVjYTU3ZjMzZmQ4NGQyNjY2MGU4MjMwNTg1NmQ0 ZmY1NGUwHhcNMjYwMTAxMDIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTZmNjBlYmQ4ZDg5ZDYzNWNlZmMyYzVkZTZmNWZmM2ExMjlkNTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33gbCUvyNMfVTw84jOdFBPTBGCGR kbXjtZ+bIYu0nasOg7/E9tuRzpehkOIHaMVtsG/7NUE/2Y9MQziMw5Pmjrb4K2QF s0IcFKbAzs0ROAABYtn4I0d3AH0TADkXVXlK2kMbkqLSDTYHRLYDKyaglu0yxdCd RShgrG4esKzkgj5k6C0/roClvZOKBS/7g+/IUDmE3lj5M1OMldx/iasvZP/ZbLtJ QP7jluQE2wLAHnarXZsPU6x0v/pfL+IoubhuegmgoRERV3JotqqPYEvTk8Ki5pp3 uyUYUkg4JUNCWLvsZP1knEtpFI8AqlzR6Y9s2F3Dpgbt67Y0JXWpSSRRsQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFKpvYOvY2J1jXO/Cxd5vX/OhKdUFMB8GA1UdIwQY MBaAFP3B8lylfzP9hNJmYOgjBYVtT/VOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2NIeVhLVl9NXzJFMG1aZzZDTUZoVzFQOVU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kNzU4NjktYWUwZC00NDZkLTkzZWQt MDBhMGEzMjhiYjczLzEvcW05ZzY5alluV05jNzhMRjNtOWY4NkVwMVFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9kNzU4NjktYWUwZC00NDZkLTkzZWQtMDBhMGEzMjhiYjcz LzEvX2NIeVhLVl9NXzJFMG1aZzZDTUZoVzFQOVU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQAWSemAwQA W+K1AwQCuQzAAwQCuR2sAwQCuSLoAwQBw1jsMA0EAgACMAcDBQEqBGBAMA0GCSqG SIb3DQEBCwUAA4IBAQBCP3Uw0DKG7oLWcZL52ziKgbqsVhiYlYlRKavo2+lCDdOb QiQ5kmYNBEL81A8qE/VV4AJOqxgGAcl9HRl2wzLZEAvCC5ePIOPZe37f47/90rrI 1ckd9BYi6DYwIy92zVQhujTxBoNF0db9ZRawYM1PeTH43pI88hI9vkG9DxBs2jNR sx2ztVxEhdl0DkaYmuWOMkC+QvgDGjVqfVEXYI4n7BGalzLgq4jv0ypMQA8nTGbK O83qg2v3QYZ/wMPiLFHsw0Qb7T5eK3pw436AW2+heOS0SL6bH2/79epwFqL2jvJ0 HaZ4d2oiQ/ZgXbIAKBZEgTionoPYJu0pf+7PDHLU -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:37 2026 by rpki-client