This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/QlPUYBIgA-X6jp0IaJHxAc-p46U.roa File: QlPUYBIgA-X6jp0IaJHxAc-p46U.roa (raw, json) Hash identifier: HXbV30gZlG5FM4CNzA/Ff6hakg3IrjI+qN7q3gKgozw= Subject key identifier: 42:53:D4:60:12:20:03:E5:FA:8E:9D:08:68:91:F1:01:CF:A9:E3:A5 Certificate issuer: /CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0 Certificate serial: 019B7C80B96872BCEA7EC398FB3200E7B9A9 Authority key identifier: F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/QlPUYBIgA-X6jp0IaJHxAc-p46U.roa Signing time: Fri 02 Jan 2026 02:19:29 +0000 ROA not before: Fri 02 Jan 2026 02:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208310 IP address blocks: 94.137.128.0/20 maxlen: 20 193.223.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 05:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b9:68:72:bc:ea:7e:c3:98:fb:32:00:e7:b9:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0 Validity Not Before: Jan 2 02:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4253d460122003e5fa8e9d086891f101cfa9e3a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:92:26:52:20:b8:6c:36:a7:98:99:f1:1d:9e: 34:b8:56:64:34:27:a6:74:a0:be:45:0e:d6:87:42: 83:65:b2:af:1d:7c:d1:ba:89:a8:bf:31:89:b9:46: 7b:f9:73:6c:e4:c4:4f:13:bb:3c:7e:64:9a:92:92: b9:38:5f:70:28:24:d9:d6:8e:97:69:e1:71:e4:af: cc:b8:cc:10:f6:7d:cf:d1:4c:96:18:aa:bb:b6:69: 6a:de:f9:a1:9a:23:5d:f9:26:88:31:22:1f:72:d4: de:12:fb:12:02:31:a8:20:7e:d2:cf:34:3d:9d:32: f0:e1:05:80:09:ea:48:47:18:89:38:e9:58:a3:f3: 80:61:3e:23:0b:61:2a:df:06:18:90:a9:81:39:2d: 5e:43:3f:42:de:e1:00:0f:b3:7f:37:2b:6d:0c:90: 66:51:bc:b2:5d:b2:0b:f0:71:4f:0d:83:fe:2f:3c: 49:2f:3d:cb:79:91:bc:e9:f0:9a:00:dd:0a:46:67: cc:50:b4:bb:2c:2b:ce:62:53:bc:f1:60:85:9f:90: 58:07:c4:12:59:84:b0:df:24:58:bf:fc:6f:89:e5: cd:93:84:78:df:cd:db:dc:5e:69:8d:4f:b0:06:45: 07:bb:6e:fa:2b:23:02:a8:a7:e8:28:86:18:3b:d9: 85:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:53:D4:60:12:20:03:E5:FA:8E:9D:08:68:91:F1:01:CF:A9:E3:A5 X509v3 Authority Key Identifier: keyid:F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/QlPUYBIgA-X6jp0IaJHxAc-p46U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.137.128.0/20 193.223.248.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:99:14:52:9d:1e:4f:0a:35:75:6e:a0:4d:a9:90:0b:ad:ea: 9d:11:e0:9c:aa:4b:97:e2:1e:2a:5d:7c:dc:23:fb:c0:f9:de: d5:2a:60:90:6d:67:e0:98:9a:f5:f6:a6:59:d0:84:14:91:61: de:3a:0c:49:c7:f8:b7:88:94:74:89:76:25:d0:ad:ce:61:f3: d5:9c:c3:b5:1f:6f:58:b8:56:e0:4d:7d:18:bc:d9:c4:fc:3b: 60:65:32:a7:82:b0:37:b2:e6:f3:f4:dc:73:15:b9:45:ce:c0: da:30:4d:ef:c9:92:e4:51:f8:d7:0c:9d:23:75:01:9e:6e:a3: eb:b4:e8:1c:e9:0e:0f:f0:73:74:68:6d:83:0e:12:3a:6f:8e: 18:88:7a:6a:7d:23:e3:62:f0:db:76:1d:ae:40:1b:be:69:42: 8c:36:d6:b9:a2:d1:1b:a9:e1:f0:58:b1:21:15:e6:23:d4:e0: fb:30:42:da:b5:35:57:7e:18:a5:ed:c1:0b:0a:90:2e:24:26: 26:b7:e0:32:90:85:be:b0:03:59:c0:27:e7:9a:62:c7:cd:e2: 53:e8:68:bc:84:11:43:1d:9b:7d:f9:2b:48:12:7a:e7:a9:ee: d1:f1:68:d9:64:33:ac:17:15:c0:c5:25:5e:33:56:e0:37:13: e6:ab:3a:3a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gLlocrzqfsOY+zIA57mpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0OTUwMmM5NzQ4MmIyODUwMjg1MmM5N2VmOWJkM2EwYTJh NWU5ZjAwHhcNMjYwMTAyMDIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjUzZDQ2MDEyMjAwM2U1ZmE4ZTlkMDg2ODkxZjEwMWNmYTllM2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JImUiC4bDanmJnxHZ40uFZkNCem dKC+RQ7Wh0KDZbKvHXzRuomovzGJuUZ7+XNs5MRPE7s8fmSakpK5OF9wKCTZ1o6X aeFx5K/MuMwQ9n3P0UyWGKq7tmlq3vmhmiNd+SaIMSIfctTeEvsSAjGoIH7SzzQ9 nTLw4QWACepIRxiJOOlYo/OAYT4jC2Eq3wYYkKmBOS1eQz9C3uEAD7N/NyttDJBm UbyyXbIL8HFPDYP+LzxJLz3LeZG86fCaAN0KRmfMULS7LCvOYlO88WCFn5BYB8QS WYSw3yRYv/xvieXNk4R4383b3F5pjU+wBkUHu276KyMCqKfoKIYYO9mFiQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEJT1GASIAPl+o6dCGiR8QHPqeOlMB8GA1UdIwQY MBaAFPSVAsl0grKFAoUsl++b06CipenwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUpVQ3lYU0Nzb1VDaFN5WDc1dlRvS0tsNmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8xZjg2ZDMtMDg3ZC00ZDY5LWI4ZTct NzNiMGM3NGU5YjY0LzEvUWxQVVlCSWdBLVg2anAwSWFKSHhBYy1wNDZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8xZjg2ZDMtMDg3ZC00ZDY5LWI4ZTctNzNiMGM3NGU5YjY0 LzEvOUpVQ3lYU0Nzb1VDaFN5WDc1dlRvS0tsNmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEXomAAwQC wd/4MA0GCSqGSIb3DQEBCwUAA4IBAQBLmRRSnR5PCjV1bqBNqZALreqdEeCcqkuX 4h4qXXzcI/vA+d7VKmCQbWfgmJr19qZZ0IQUkWHeOgxJx/i3iJR0iXYl0K3OYfPV nMO1H29YuFbgTX0YvNnE/DtgZTKngrA3subz9NxzFblFzsDaME3vyZLkUfjXDJ0j dQGebqPrtOgc6Q4P8HN0aG2DDhI6b44YiHpqfSPjYvDbdh2uQBu+aUKMNta5otEb qeHwWLEhFeYj1OD7MELatTVXfhil7cELCpAuJCYmt+AykIW+sANZwCfnmmLHzeJT 6Gi8hBFDHZt9+StIEnrnqe7R8WjZZDOsFxXAxSVeM1bgNxPmqzo6 -----END CERTIFICATE-----Generated at Mon Jan 12 14:56:19 2026 by rpki-client