This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/qVHi1fxwukQKyy9qZXPHWWYuF9s.roa File: qVHi1fxwukQKyy9qZXPHWWYuF9s.roa (raw, json) Hash identifier: rLCAWZ688u7HxJId9n99ZCaph+X5TqTrkLTZDuztaFc= Subject key identifier: A9:51:E2:D5:FC:70:BA:44:0A:CB:2F:6A:65:73:C7:59:66:2E:17:DB Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C131E641A3CCB2589E782CAEE9D3AFD Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/qVHi1fxwukQKyy9qZXPHWWYuF9s.roa Signing time: Fri 02 Jan 2026 00:19:46 +0000 ROA not before: Fri 02 Jan 2026 00:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28467 IP address blocks: 89.42.71.0/24 maxlen: 24 89.45.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:1e:64:1a:3c:cb:25:89:e7:82:ca:ee:9d:3a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a951e2d5fc70ba440acb2f6a6573c759662e17db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a3:bd:02:14:5f:83:61:f8:7e:85:a4:be:e1: 38:97:74:55:7b:bf:56:c9:49:2a:b8:e3:3c:9f:8e: b8:16:87:d7:c4:cc:ab:1c:db:68:e0:80:c0:52:a2: 61:44:ce:fe:2f:e7:27:7d:0a:2c:9b:66:b0:66:74: 12:fa:a8:60:89:cd:75:a9:b0:e0:ea:01:c8:1b:5c: c2:11:2a:9b:ea:e7:60:33:99:1e:b8:65:97:e5:32: 3c:dd:bc:cf:0d:aa:9d:f1:b8:1f:12:17:e4:d5:db: b7:91:a4:57:7e:34:56:a4:50:90:4b:02:2b:3b:23: 03:ce:c9:9d:85:90:01:a0:16:08:8f:25:e4:84:3c: c5:3b:34:b6:c5:d5:0d:4e:ad:27:2c:45:4c:b9:35: 28:94:af:c2:5e:af:64:81:0b:19:14:03:62:2d:8e: 24:b4:0e:e6:f4:44:92:78:b6:e0:db:23:3f:9c:4d: 0e:9e:83:56:9d:98:d4:10:61:a3:86:dc:b1:04:09: 6d:5f:02:14:17:0b:44:9f:e7:7c:99:0d:53:0d:84: d7:cc:8f:5e:79:1c:fa:0b:90:96:66:af:e9:83:7c: 48:7c:91:0a:50:2f:da:72:71:2b:7d:3a:06:52:a3: 73:89:c9:f6:bd:87:31:e7:4d:6a:63:89:65:55:05: d2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:51:E2:D5:FC:70:BA:44:0A:CB:2F:6A:65:73:C7:59:66:2E:17:DB X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/qVHi1fxwukQKyy9qZXPHWWYuF9s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.42.71.0/24 89.45.209.0/24 Signature Algorithm: sha256WithRSAEncryption 58:6f:04:e1:e4:5b:5f:29:bb:93:dc:8e:d1:3a:f4:ab:d4:54: 63:79:fb:38:51:bb:ca:b2:3e:bf:77:1b:b2:63:10:07:9c:6a: 1f:14:4b:d2:c0:fe:88:04:40:94:ea:0c:70:72:60:d9:bb:67: 81:27:4b:ec:4f:37:9d:e0:e1:1a:ea:cc:db:1b:a1:af:80:0d: df:8f:63:bc:78:11:ad:7b:e1:ed:6c:9c:37:58:21:0c:0c:50: 61:7d:0a:cd:1e:84:c1:25:d9:b1:dc:26:27:72:e8:23:4e:92: d1:1a:63:e0:c9:72:c2:03:8d:03:82:d8:3e:40:58:b8:07:e4: d6:b4:ac:a8:8b:78:65:f7:a7:47:88:65:a8:d0:67:ab:9a:b6: f4:69:53:c3:94:60:63:a6:2a:dd:77:40:62:43:8a:b7:f6:48: bf:5a:ea:00:20:b9:d8:79:71:c0:92:36:14:a5:1a:0c:dd:ed: 27:b4:ea:01:64:1b:a1:4a:6d:76:49:a9:43:72:c5:a3:2f:d5: 5c:39:cd:a6:2f:c6:50:67:55:da:81:9a:25:13:e7:fe:d7:7b: e1:ab:61:f7:fa:59:77:59:86:87:1c:0f:81:8f:ef:c0:a6:c5: f0:34:ef:74:27:d4:47:e8:a6:38:bc:39:2b:60:08:06:dd:e6: 38:7e:78:7c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Ex5kGjzLJYnngsrunTr9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTUxZTJkNWZjNzBiYTQ0MGFjYjJmNmE2NTczYzc1OTY2MmUxN2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqO9AhRfg2H4foWkvuE4l3RVe79W yUkquOM8n464FofXxMyrHNto4IDAUqJhRM7+L+cnfQosm2awZnQS+qhgic11qbDg 6gHIG1zCESqb6udgM5keuGWX5TI83bzPDaqd8bgfEhfk1du3kaRXfjRWpFCQSwIr OyMDzsmdhZABoBYIjyXkhDzFOzS2xdUNTq0nLEVMuTUolK/CXq9kgQsZFANiLY4k tA7m9ESSeLbg2yM/nE0OnoNWnZjUEGGjhtyxBAltXwIUFwtEn+d8mQ1TDYTXzI9e eRz6C5CWZq/pg3xIfJEKUC/acnErfToGUqNzicn2vYcx501qY4llVQXSCQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKlR4tX8cLpECssvamVzx1lmLhfbMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvcVZIaTFmeHd1a1FLeXk5cVpYUEhXV1l1RjlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSpHAwQA WS3RMA0GCSqGSIb3DQEBCwUAA4IBAQBYbwTh5FtfKbuT3I7ROvSr1FRjefs4UbvK sj6/dxuyYxAHnGofFEvSwP6IBECU6gxwcmDZu2eBJ0vsTzed4OEa6szbG6GvgA3f j2O8eBGte+HtbJw3WCEMDFBhfQrNHoTBJdmx3CYncugjTpLRGmPgyXLCA40Dgtg+ QFi4B+TWtKyoi3hl96dHiGWo0Germrb0aVPDlGBjpirdd0BiQ4q39ki/WuoAILnY eXHAkjYUpRoM3e0ntOoBZBuhSm12SalDcsWjL9VcOc2mL8ZQZ1XagZolE+f+13vh q2H3+ll3WYaHHA+Bj+/ApsXwNO90J9RH6KY4vDkrYAgG3eY4fnh8 -----END CERTIFICATE-----Generated at Fri Jan 23 21:36:12 2026 by rpki-client