This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/q9Fa6JR26MC4QZOUuqdi7wZHJaM.roa File: q9Fa6JR26MC4QZOUuqdi7wZHJaM.roa (raw, json) Hash identifier: 3/wBvJoRd+PUEsanx3dFoD+svg4rYF6hO6U8t6ArC7c= Subject key identifier: AB:D1:5A:E8:94:76:E8:C0:B8:41:93:94:BA:A7:62:EF:06:47:25:A3 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019BDF88C7F6B9DF371D3AEF0FF56ABD8A23 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/q9Fa6JR26MC4QZOUuqdi7wZHJaM.roa Signing time: Wed 21 Jan 2026 07:50:41 +0000 ROA not before: Wed 21 Jan 2026 07:50:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212860 IP address blocks: 46.8.176.0/24 maxlen: 24 46.8.194.0/23 maxlen: 24 95.182.117.0/24 maxlen: 24 95.182.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:88:c7:f6:b9:df:37:1d:3a:ef:0f:f5:6a:bd:8a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 21 07:50:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abd15ae89476e8c0b8419394baa762ef064725a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4d:cb:51:ff:e4:f8:2e:bd:95:fd:06:5a:36: 46:9d:53:55:74:e9:43:29:52:d1:1b:42:47:20:e6: a4:cf:02:95:66:4d:46:c1:da:42:51:42:aa:2d:93: 03:92:09:94:51:d7:de:db:d0:9f:38:6a:30:f5:dc: 61:33:8d:8e:65:2f:aa:27:09:ae:ea:06:b2:72:ac: 57:f7:c8:58:86:71:03:fb:87:27:f8:c6:82:38:10: ec:f7:39:2c:54:91:d9:88:c7:f0:46:14:e7:81:0b: f5:22:6a:a3:56:3d:bb:42:d7:e0:07:33:33:44:88: ed:4d:7a:70:62:d5:54:d0:84:dc:98:ed:21:0a:cb: 29:a7:9c:e7:d8:a5:2e:8a:83:a0:26:c8:3f:1e:f9: 34:60:ba:a6:3d:b6:95:c9:9a:6e:fb:c6:aa:99:07: 88:f6:bf:78:8a:b4:2b:97:34:8b:27:35:8e:cb:c2: 32:60:ed:6d:4f:b8:18:56:70:45:53:c1:00:54:41: 98:1d:e9:4a:d5:6b:e1:de:71:90:bd:f9:18:d2:7e: 62:08:5b:d9:a7:46:bc:99:bb:3b:81:2c:b2:d0:69: 6b:01:dd:a1:fb:67:6c:56:01:39:23:7b:14:59:95: e2:05:f1:54:6e:4c:ef:66:2a:1d:50:07:19:9c:08: fa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D1:5A:E8:94:76:E8:C0:B8:41:93:94:BA:A7:62:EF:06:47:25:A3 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/q9Fa6JR26MC4QZOUuqdi7wZHJaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.176.0/24 46.8.194.0/23 95.182.117.0-95.182.119.255 Signature Algorithm: sha256WithRSAEncryption a5:dd:54:e1:b1:82:fa:e2:02:9b:86:76:d1:6f:f2:5e:a1:18: 2a:0c:47:55:eb:65:38:18:5f:14:a7:57:62:d1:79:a8:6c:e8: 67:b5:31:07:09:7c:32:ec:93:cf:60:7f:0e:a5:fe:b2:1c:c1: 64:9e:cf:fe:77:46:bc:44:c6:78:1a:fa:3e:49:f1:2a:47:a3: 49:83:69:26:a6:36:88:c1:dc:3a:25:a3:c4:c0:7b:d9:84:42: fe:f7:c1:0e:8c:3e:73:1c:0e:60:9f:37:dc:f0:b4:c0:4f:91: 00:73:5b:c4:2b:36:51:47:42:f2:b4:3c:05:d6:17:75:b3:1f: 92:83:c7:ca:04:45:ed:50:64:9a:4e:75:4d:f1:c4:be:b7:d6: e5:90:ea:0b:d4:c2:12:25:23:46:bc:60:8c:44:d4:51:1c:55: 20:c0:52:a5:b9:08:c9:ab:ac:75:39:1f:4e:7d:b2:5e:25:3c: b4:6f:d7:2b:1b:c4:fd:9c:df:28:d4:77:c0:8c:2c:f3:14:a7: 5a:5a:31:91:79:a9:12:9c:3c:e3:4e:ca:c9:81:9d:e1:ef:ac: 33:84:10:9a:48:41:ae:40:1f:05:db:f5:e0:36:c3:92:04:24: 0f:27:b7:c7:1e:fc:97:2a:db:94:50:1e:f9:49:e8:39:df:fb: 71:af:46:ee -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZvfiMf2ud83HTrvD/VqvYojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTIxMDc1MDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmQxNWFlODk0NzZlOGMwYjg0MTkzOTRiYWE3NjJlZjA2NDcyNWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk3LUf/k+C69lf0GWjZGnVNVdOlD KVLRG0JHIOakzwKVZk1GwdpCUUKqLZMDkgmUUdfe29CfOGow9dxhM42OZS+qJwmu 6gaycqxX98hYhnED+4cn+MaCOBDs9zksVJHZiMfwRhTngQv1ImqjVj27QtfgBzMz RIjtTXpwYtVU0ITcmO0hCsspp5zn2KUuioOgJsg/Hvk0YLqmPbaVyZpu+8aqmQeI 9r94irQrlzSLJzWOy8IyYO1tT7gYVnBFU8EAVEGYHelK1Wvh3nGQvfkY0n5iCFvZ p0a8mbs7gSyy0GlrAd2h+2dsVgE5I3sUWZXiBfFUbkzvZiodUAcZnAj62wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFKvRWuiUdujAuEGTlLqnYu8GRyWjMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvcTlGYTZKUjI2TUM0UVpPVXVxZGk3d1pISmFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALgiwAwQB LgjCMAwDBABftnUDBANftnAwDQYJKoZIhvcNAQELBQADggEBAKXdVOGxgvriApuG dtFv8l6hGCoMR1XrZTgYXxSnV2LReahs6Ge1MQcJfDLsk89gfw6l/rIcwWSez/53 RrxExnga+j5J8SpHo0mDaSamNojB3Dolo8TAe9mEQv73wQ6MPnMcDmCfN9zwtMBP kQBzW8QrNlFHQvK0PAXWF3WzH5KDx8oERe1QZJpOdU3xxL631uWQ6gvUwhIlI0a8 YIxE1FEcVSDAUqW5CMmrrHU5H059sl4lPLRv1ysbxP2c3yjUd8CMLPMUp1paMZF5 qRKcPONOysmBneHvrDOEEJpIQa5AHwXb9eA2w5IEJA8nt8ce/Jcq25RQHvlJ6Dnf +3GvRu4= -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:42 2026 by rpki-client