This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/qgwM28zCMsMYstsZZspf-r4p7tc.roa File: qgwM28zCMsMYstsZZspf-r4p7tc.roa (raw, json) Hash identifier: ZC8uQNkGcALsZhl+yLEhxpCuDedOkoY7XXctytlr424= Subject key identifier: AA:0C:0C:DB:CC:C2:32:C3:18:B2:DB:19:66:CA:5F:FA:BE:29:EE:D7 Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392 Certificate serial: 019B7BA4ACA91AE5408531A0D60755200AF8 Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/qgwM28zCMsMYstsZZspf-r4p7tc.roa Signing time: Thu 01 Jan 2026 22:19:08 +0000 ROA not before: Thu 01 Jan 2026 22:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205063 IP address blocks: 94.127.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ac:a9:1a:e5:40:85:31:a0:d6:07:55:20:0a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392 Validity Not Before: Jan 1 22:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa0c0cdbccc232c318b2db1966ca5ffabe29eed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f8:24:c2:3f:77:c8:f3:65:b6:d7:8d:05:27: 28:ae:7a:22:40:b9:c2:33:dd:50:84:b6:19:ec:39: 4b:86:04:72:e4:84:63:71:20:6e:ed:c2:02:e0:a5: dd:c8:62:61:68:e8:f4:9f:64:d4:f8:39:9d:d3:2e: e6:de:7c:79:35:57:aa:2f:30:3c:03:21:1d:aa:bb: 39:de:9f:e6:f6:2b:6c:46:fb:8d:8d:8a:02:3f:c3: 78:95:d0:c9:0d:53:a5:00:1f:1e:ea:9c:45:4a:53: 83:17:13:78:eb:14:08:32:08:a5:2e:e4:78:80:43: c2:21:ad:5b:ff:b3:d2:e5:0d:e6:01:d0:47:88:2a: 16:55:02:d4:d4:76:62:01:1c:b6:ac:39:42:fc:45: 82:54:b6:77:61:79:76:8b:9f:36:88:a3:71:45:25: 28:07:6f:46:e3:5d:b8:76:0d:ca:2d:15:f6:98:58: 69:a1:36:ef:46:5d:28:dc:8e:7c:32:7f:35:b2:bb: 02:f5:81:26:1a:3c:15:28:32:a6:ba:b2:d0:8e:f8: 2a:37:90:c5:40:a8:ff:27:ea:a0:d0:14:53:06:e6: 42:48:18:96:84:52:22:54:54:f5:ac:9a:c6:b0:99: 8e:0c:00:ae:a5:bf:c1:26:b3:54:4f:8c:fe:02:ae: 0c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0C:0C:DB:CC:C2:32:C3:18:B2:DB:19:66:CA:5F:FA:BE:29:EE:D7 X509v3 Authority Key Identifier: keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/qgwM28zCMsMYstsZZspf-r4p7tc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.127.93.0/24 Signature Algorithm: sha256WithRSAEncryption 08:15:7d:46:2f:e4:f0:ff:b3:0a:64:83:a5:ba:6c:a7:a6:91: e5:0e:e3:0d:21:c3:81:83:17:fc:68:5a:3a:40:13:1a:96:0f: 83:bd:e2:52:10:15:f9:15:d5:ef:9a:e8:e4:09:39:53:df:fc: 2d:f1:01:7b:84:63:a8:73:0b:9c:cd:ec:77:b6:dc:16:77:70: 05:f9:bb:bd:1c:32:ac:41:ea:f4:e9:68:f2:32:ab:b1:b5:7c: 13:f0:13:59:cb:60:1b:d4:9f:8e:16:34:41:82:1f:4a:39:55: a0:68:9d:c7:fe:93:c9:b7:dd:fa:3a:38:16:8b:ca:45:fa:f0: b3:a3:4c:48:db:e0:db:49:5f:ce:1a:25:6e:d5:45:10:67:8b: 2f:11:fc:85:7e:2f:d1:65:bc:3a:ea:d6:a0:a4:3e:77:08:e7: 03:db:7c:7e:7b:eb:70:8e:5d:63:f2:1d:d7:a6:3b:eb:7e:03: be:fb:e8:14:f7:e1:53:dd:0f:1b:68:01:04:9c:91:b5:76:5c: aa:e6:80:c5:74:48:dc:67:fe:6a:a6:38:62:31:e4:a2:8c:16: 0b:4e:90:7f:75:23:05:24:53:cb:f1:45:6f:44:b8:82:06:84: 1f:7b:4a:6b:eb:c5:f1:cd:05:06:de:4f:57:8f:b5:97:9f:a1: 85:89:a8:0c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7pKypGuVAhTGg1gdVIAr4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MTFmYTVlZmYzNzBiYzM2ZDBlMzkyOTYyNWUzNDE0MDgx YTIzOTIwHhcNMjYwMTAxMjIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTBjMGNkYmNjYzIzMmMzMThiMmRiMTk2NmNhNWZmYWJlMjllZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfgkwj93yPNltteNBScornoiQLnC M91QhLYZ7DlLhgRy5IRjcSBu7cIC4KXdyGJhaOj0n2TU+Dmd0y7m3nx5NVeqLzA8 AyEdqrs53p/m9itsRvuNjYoCP8N4ldDJDVOlAB8e6pxFSlODFxN46xQIMgilLuR4 gEPCIa1b/7PS5Q3mAdBHiCoWVQLU1HZiARy2rDlC/EWCVLZ3YXl2i582iKNxRSUo B29G4124dg3KLRX2mFhpoTbvRl0o3I58Mn81srsC9YEmGjwVKDKmurLQjvgqN5DF QKj/J+qg0BRTBuZCSBiWhFIiVFT1rJrGsJmODACupb/BJrNUT4z+Aq4MeQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKoMDNvMwjLDGLLbGWbKX/q+Ke7XMB8GA1UdIwQY MBaAFPgR+l7/NwvDbQ45KWJeNBQIGiOSMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1CSDZYdjgzQzhOdERqa3BZbDQwRkFnYUk1SS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvNGEyOTNkLTJhZDMtNDExNC1hMmIx LTFjYzUwNTUwMWEwZi8xL3Fnd00yOHpDTXNNWXN0c1pac3BmLXI0cDd0Yy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNmEvNGEyOTNkLTJhZDMtNDExNC1hMmIxLTFjYzUwNTUwMWEw Zi8xLzEtQkg2WHY4M0M4TnREamtwWWw0MEZBZ2FJNUkuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABef10w DQYJKoZIhvcNAQELBQADggEBAAgVfUYv5PD/swpkg6W6bKemkeUO4w0hw4GDF/xo WjpAExqWD4O94lIQFfkV1e+a6OQJOVPf/C3xAXuEY6hzC5zN7He23BZ3cAX5u70c MqxB6vTpaPIyq7G1fBPwE1nLYBvUn44WNEGCH0o5VaBoncf+k8m33fo6OBaLykX6 8LOjTEjb4NtJX84aJW7VRRBniy8R/IV+L9FlvDrq1qCkPncI5wPbfH5763COXWPy HdemO+t+A7776BT34VPdDxtoAQSckbV2XKrmgMV0SNxn/mqmOGIx5KKMFgtOkH91 IwUkU8vxRW9EuIIGhB97SmvrxfHNBQbeT1ePtZefoYWJqAw= -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:06 2026 by rpki-client