This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QYnZxr6Fuksej4UTLfu2OQAqVDk.roa File: QYnZxr6Fuksej4UTLfu2OQAqVDk.roa (raw, json) Hash identifier: 5+vJXh36Y9qlClF2z847/qXurk/7CnWpgzQeaG7gKSM= Subject key identifier: 41:89:D9:C6:BE:85:BA:4B:1E:8F:85:13:2D:FB:B6:39:00:2A:54:39 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DE04FC6510FF842C91684AEF78525 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QYnZxr6Fuksej4UTLfu2OQAqVDk.roa Signing time: Thu 01 Jan 2026 12:17:31 +0000 ROA not before: Thu 01 Jan 2026 12:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6939 IP address blocks: 89.125.16.0/22 maxlen: 22 89.125.64.0/22 maxlen: 22 89.125.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e0:4f:c6:51:0f:f8:42:c9:16:84:ae:f7:85:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4189d9c6be85ba4b1e8f85132dfbb639002a5439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b9:83:8e:f3:7e:49:89:dd:5e:7b:51:04:3f: 58:97:a5:a0:66:46:2d:ce:dc:39:95:b4:3e:44:02: fd:fb:a1:01:85:8d:ef:f6:b4:64:7e:82:d6:39:de: 3c:c7:e8:c8:40:a3:af:53:13:43:38:42:e4:7d:e9: d6:66:1a:c4:54:69:89:5a:de:cf:15:ec:fc:65:2c: 18:b3:94:3b:05:ed:24:bc:bc:51:02:c8:38:8d:b0: df:1d:74:f0:da:d1:8a:23:c7:2c:bc:3c:60:d7:c8: 6d:c8:f1:3a:fc:45:1c:77:cf:4c:cf:59:77:51:c2: 3d:2c:fd:3e:d7:c0:bf:df:fd:1c:55:c1:f7:37:d1: 1d:ed:b5:2a:67:d2:3e:1e:18:30:82:10:66:58:38: 33:97:61:41:c7:bc:0f:65:78:4a:08:ec:84:20:60: 29:d5:15:44:12:10:d8:d0:ab:b6:63:29:0e:91:eb: ac:3a:a7:41:33:9f:08:ba:70:60:22:4a:3a:58:04: 27:0f:13:ec:20:34:1b:ec:71:db:ae:d5:8c:72:2b: b0:f3:f5:be:64:29:98:95:91:d9:11:ee:4d:85:54: 33:3c:b8:67:8e:1a:59:87:0e:99:9e:09:08:7e:eb: 32:7e:dc:30:92:86:2b:50:75:10:29:87:f0:77:59: 20:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:89:D9:C6:BE:85:BA:4B:1E:8F:85:13:2D:FB:B6:39:00:2A:54:39 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QYnZxr6Fuksej4UTLfu2OQAqVDk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.16.0/22 89.125.64.0/22 89.125.80.0/22 Signature Algorithm: sha256WithRSAEncryption 60:9c:d8:e2:7b:33:7b:96:94:f6:a8:c3:a7:79:88:6d:71:7a: 5e:00:cb:5b:03:1e:f1:fa:e2:d3:a2:0e:02:b7:06:3d:4c:f4: ec:f8:34:23:46:65:9d:84:ef:7f:1c:08:43:b9:f4:75:31:58: 3d:67:43:da:5f:fc:5a:ac:df:c5:c1:5e:e1:c4:c7:4e:60:51: 61:51:1a:d4:3b:cf:c9:f7:45:c0:2a:2e:1e:b6:f3:cf:36:2a: f1:8e:d0:96:88:26:7a:c0:94:a0:a1:f2:ad:39:e6:25:cd:c3: 27:79:e8:63:d8:df:a6:2c:12:86:d5:7a:bb:ea:b2:84:59:ad: f0:1d:bd:09:89:27:69:9d:be:dc:1d:02:b9:14:5c:b0:d1:a9: 02:92:de:57:6c:65:a7:e9:38:68:72:55:cf:e8:8d:c9:f1:59: 14:13:b6:41:c7:6f:4c:f7:9a:0f:1b:92:7d:04:54:54:54:0d: 78:63:1a:51:47:93:85:d2:ae:30:b0:01:9a:6c:be:8b:cc:73: 0d:c2:b2:05:2b:83:fb:2d:a5:51:5f:98:b7:9c:3d:10:0b:80: d1:c4:e6:cb:a1:36:85:33:53:55:98:1e:36:f6:7e:62:f3:de: 9f:21:21:2f:bc:f6:f3:ce:7f:8b:2b:6c:cc:be:db:ca:05:5d: 49:1f:e5:d7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5feBPxlEP+ELJFoSu94UlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTg5ZDljNmJlODViYTRiMWU4Zjg1MTMyZGZiYjYzOTAwMmE1NDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27mDjvN+SYndXntRBD9Yl6WgZkYt ztw5lbQ+RAL9+6EBhY3v9rRkfoLWOd48x+jIQKOvUxNDOELkfenWZhrEVGmJWt7P Fez8ZSwYs5Q7Be0kvLxRAsg4jbDfHXTw2tGKI8csvDxg18htyPE6/EUcd89Mz1l3 UcI9LP0+18C/3/0cVcH3N9Ed7bUqZ9I+HhgwghBmWDgzl2FBx7wPZXhKCOyEIGAp 1RVEEhDY0Ku2YykOkeusOqdBM58IunBgIko6WAQnDxPsIDQb7HHbrtWMciuw8/W+ ZCmYlZHZEe5NhVQzPLhnjhpZhw6ZngkIfusyftwwkoYrUHUQKYfwd1kgNQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEGJ2ca+hbpLHo+FEy37tjkAKlQ5MB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvUVluWnhyNkZ1a3NlajRVVExmdTJPUUFxVkRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCWX0QAwQC WX1AAwQCWX1QMA0GCSqGSIb3DQEBCwUAA4IBAQBgnNjiezN7lpT2qMOneYhtcXpe AMtbAx7x+uLTog4CtwY9TPTs+DQjRmWdhO9/HAhDufR1MVg9Z0PaX/xarN/FwV7h xMdOYFFhURrUO8/J90XAKi4etvPPNirxjtCWiCZ6wJSgofKtOeYlzcMneehj2N+m LBKG1Xq76rKEWa3wHb0JiSdpnb7cHQK5FFyw0akCkt5XbGWn6ThoclXP6I3J8VkU E7ZBx29M95oPG5J9BFRUVA14YxpRR5OF0q4wsAGabL6LzHMNwrIFK4P7LaVRX5i3 nD0QC4DRxObLoTaFM1NVmB429n5i896fISEvvPbzzn+LK2zMvtvKBV1JH+XX -----END CERTIFICATE-----Generated at Sat Jan 17 08:18:56 2026 by rpki-client