This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/QcKHUIb0ykf50SPR1Ki_C_mpYDQ.roa File: QcKHUIb0ykf50SPR1Ki_C_mpYDQ.roa (raw, json) Hash identifier: jXJ+eXWdyEUtOYkWh8o1m/VVINUVOvHgc2gRQU8crLU= Subject key identifier: 41:C2:87:50:86:F4:CA:47:F9:D1:23:D1:D4:A8:BF:0B:F9:A9:60:34 Certificate issuer: /CN=6a17de1887fcfa9244b931d96da82678c0147663 Certificate serial: 019B7D5ADC50C1C00AABAC7641CBFBCE848A Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/QcKHUIb0ykf50SPR1Ki_C_mpYDQ.roa Signing time: Fri 02 Jan 2026 06:17:45 +0000 ROA not before: Fri 02 Jan 2026 06:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44489 IP address blocks: 85.119.88.0/21 maxlen: 21 89.239.0.0/19 maxlen: 24 2a02:4000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:dc:50:c1:c0:0a:ab:ac:76:41:cb:fb:ce:84:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663 Validity Not Before: Jan 2 06:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41c2875086f4ca47f9d123d1d4a8bf0bf9a96034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a4:a9:5a:44:34:72:31:93:7b:54:bb:9f:ec: ee:23:3f:63:e6:51:8c:f3:eb:39:43:04:c5:fa:02: a6:8f:d9:fa:8b:3b:fd:b8:6f:af:78:ab:b9:cb:d2: 68:6a:3f:04:05:8f:a6:b2:ea:d6:11:87:4f:df:3a: 6b:c4:0e:84:00:d6:88:2b:57:e6:a7:9e:76:dd:84: 30:86:48:d6:24:e5:26:60:63:2f:94:73:ad:00:88: 19:45:3c:96:03:61:68:3d:d6:e4:5c:55:b8:7b:c7: c1:a6:cd:33:a8:9f:c9:d7:7d:96:b8:4b:a3:40:b3: 30:45:12:94:e4:62:e7:f1:9a:71:7d:66:d8:cc:df: 3d:52:c8:bd:f5:77:bc:83:59:8d:ce:30:45:51:d9: 37:90:ba:39:d0:ce:2d:e7:01:0b:b0:68:97:d6:14: a7:0a:ae:d2:ef:2e:43:32:ed:76:13:6f:b6:0e:94: a5:cc:6b:d3:9f:fc:7c:a9:44:fe:49:dc:63:c0:cd: 9e:18:55:92:f0:2a:15:94:cf:65:0b:00:d4:87:4b: fb:76:bb:b7:25:55:02:fe:46:fe:eb:10:43:60:41: fd:99:4c:2c:4f:43:9b:82:74:5c:ee:7a:56:a5:a8: b2:22:f8:98:97:e5:5b:02:e2:f6:c6:b4:f0:d1:f4: f4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C2:87:50:86:F4:CA:47:F9:D1:23:D1:D4:A8:BF:0B:F9:A9:60:34 X509v3 Authority Key Identifier: keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/QcKHUIb0ykf50SPR1Ki_C_mpYDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.119.88.0/21 89.239.0.0/19 IPv6: 2a02:4000::/32 Signature Algorithm: sha256WithRSAEncryption 25:a2:06:00:7a:a7:be:a7:58:50:0c:a2:d5:5f:15:da:ce:8f: 5a:62:06:c5:bd:91:d3:e2:63:14:74:53:ae:3e:c5:1d:10:15: f7:40:ca:14:87:b8:15:b2:f8:a4:cd:e5:72:98:b9:98:a5:33: e4:11:6b:13:02:7d:65:8c:75:7d:f9:3e:3d:ff:a6:ea:cd:55: 0d:96:7a:28:24:40:b2:ef:d4:8d:b9:3e:8d:72:e6:be:d4:ee: 03:78:25:d2:7f:92:59:8d:d5:81:6f:b3:3f:22:48:28:7b:56: f2:fb:49:a3:b0:8a:d6:a3:ff:e2:f8:1b:e0:cf:cc:cb:8e:e1: 4a:78:63:17:06:99:c3:00:98:67:fa:86:bb:00:91:32:14:37: b1:d7:da:bf:3b:e4:88:84:2e:98:a1:45:23:13:13:fb:f6:cc: 5a:eb:4e:43:c1:17:53:71:39:c5:c7:8b:68:11:e6:08:4f:90: 54:53:d0:88:d0:b0:63:43:98:6b:87:10:94:78:3c:42:64:28: c4:9c:d1:eb:6c:e6:ae:a4:b5:b0:45:ca:aa:d2:93:08:9d:c8: 9a:5b:1a:f3:93:bb:2b:06:0c:08:f2:c6:b2:54:68:5b:27:16: bd:3a:52:9e:fa:f2:7d:84:6e:d2:27:a1:4d:7a:76:32:bc:24: 11:14:91:7c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9WtxQwcAKq6x2Qcv7zoSKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMTdkZTE4ODdmY2ZhOTI0NGI5MzFkOTZkYTgyNjc4YzAx NDc2NjMwHhcNMjYwMTAyMDYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWMyODc1MDg2ZjRjYTQ3ZjlkMTIzZDFkNGE4YmYwYmY5YTk2MDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6SpWkQ0cjGTe1S7n+zuIz9j5lGM 8+s5QwTF+gKmj9n6izv9uG+veKu5y9Joaj8EBY+msurWEYdP3zprxA6EANaIK1fm p5523YQwhkjWJOUmYGMvlHOtAIgZRTyWA2FoPdbkXFW4e8fBps0zqJ/J132WuEuj QLMwRRKU5GLn8ZpxfWbYzN89Usi99Xe8g1mNzjBFUdk3kLo50M4t5wELsGiX1hSn Cq7S7y5DMu12E2+2DpSlzGvTn/x8qUT+SdxjwM2eGFWS8CoVlM9lCwDUh0v7dru3 JVUC/kb+6xBDYEH9mUwsT0ObgnRc7npWpaiyIviYl+VbAuL2xrTw0fT04QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEHCh1CG9MpH+dEj0dSovwv5qWA0MB8GA1UdIwQY MBaAFGoX3hiH/PqSRLkx2W2oJnjAFHZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWhmZUdJZjgtcEpFdVRIWmJhZ21lTUFVZG1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lYzI1YmQtMjE5ZS00ZDAyLWE1MzIt MDc5OWE1MmE2Mzg3LzEvUWNLSFVJYjB5a2Y1MFNQUjFLaV9DX21wWURRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9lYzI1YmQtMjE5ZS00ZDAyLWE1MzItMDc5OWE1MmE2Mzg3 LzEvYWhmZUdJZjgtcEpFdVRIWmJhZ21lTUFVZG1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDVXdYAwQF We8AMA0EAgACMAcDBQAqAkAAMA0GCSqGSIb3DQEBCwUAA4IBAQAlogYAeqe+p1hQ DKLVXxXazo9aYgbFvZHT4mMUdFOuPsUdEBX3QMoUh7gVsvikzeVymLmYpTPkEWsT An1ljHV9+T49/6bqzVUNlnooJECy79SNuT6Ncua+1O4DeCXSf5JZjdWBb7M/Ikgo e1by+0mjsIrWo//i+Bvgz8zLjuFKeGMXBpnDAJhn+oa7AJEyFDex19q/O+SIhC6Y oUUjExP79sxa605DwRdTcTnFx4toEeYIT5BUU9CI0LBjQ5hrhxCUeDxCZCjEnNHr bOaupLWwRcqq0pMInciaWxrzk7srBgwI8sayVGhbJxa9OlKe+vJ9hG7SJ6FNenYy vCQRFJF8 -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:44 2026 by rpki-client