This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/qTa7UU6Qri1LNslfL1VV2t1o7uE.roa File: qTa7UU6Qri1LNslfL1VV2t1o7uE.roa (raw, json) Hash identifier: 2xhVFcGKtML/9CwTX6mgniStIE2RskPbIQ6SKVau5AA= Subject key identifier: A9:36:BB:51:4E:90:AE:2D:4B:36:C9:5F:2F:55:55:DA:DD:68:EE:E1 Certificate issuer: /CN=d90a8131029257bff7614448e6f6b503c12bb29d Certificate serial: 019B79EC107F2436023722853FB1CB09DAFB Authority key identifier: D9:0A:81:31:02:92:57:BF:F7:61:44:48:E6:F6:B5:03:C1:2B:B2:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/qTa7UU6Qri1LNslfL1VV2t1o7uE.roa Signing time: Thu 01 Jan 2026 14:17:52 +0000 ROA not before: Thu 01 Jan 2026 14:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35585 IP address blocks: 193.43.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:10:7f:24:36:02:37:22:85:3f:b1:cb:09:da:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90a8131029257bff7614448e6f6b503c12bb29d Validity Not Before: Jan 1 14:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a936bb514e90ae2d4b36c95f2f5555dadd68eee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:25:8f:f7:30:a9:e8:88:0a:54:c7:fa:7f:97: bd:98:d3:ac:1c:d3:7f:1d:e8:04:69:7c:92:06:ef: 93:f3:c4:95:73:d7:df:20:94:85:a4:5d:64:70:00: 06:90:09:5a:5b:32:e5:54:08:84:1f:8f:fd:ea:00: 99:a7:df:8a:0b:e6:48:68:84:9a:db:92:38:ce:73: 04:f0:9c:88:90:a1:49:7d:4b:34:a9:c3:18:c4:cf: db:7b:cb:60:b5:3d:4e:3a:64:32:6c:9b:a5:b4:3a: 29:7a:eb:a7:73:82:d8:ad:70:e3:a4:62:52:ac:dd: fc:27:e2:80:f0:2d:3c:25:09:7e:62:92:fa:d0:3b: b9:cc:60:29:25:bb:21:0d:03:76:36:8c:e9:52:f1: 12:04:ce:bf:ef:a4:8e:c5:19:08:6f:fa:de:12:1f: 28:52:33:ff:53:76:7c:ff:8b:3e:d3:39:41:f4:c2: bb:6a:12:c6:6a:40:15:30:f7:24:cb:bf:42:9b:35: 32:8a:f0:01:ba:1e:d0:3c:b5:20:97:4a:48:19:23: 1f:3c:69:b7:4d:f9:75:0f:ce:2b:e4:4d:49:dd:0a: 90:91:ac:af:e3:2f:f5:37:dd:b0:6d:e3:85:b6:64: 7f:08:e0:43:7f:79:79:f5:7e:48:80:cb:e5:4c:93: 4c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:36:BB:51:4E:90:AE:2D:4B:36:C9:5F:2F:55:55:DA:DD:68:EE:E1 X509v3 Authority Key Identifier: keyid:D9:0A:81:31:02:92:57:BF:F7:61:44:48:E6:F6:B5:03:C1:2B:B2:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/qTa7UU6Qri1LNslfL1VV2t1o7uE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.228.0/22 Signature Algorithm: sha256WithRSAEncryption 04:a7:04:89:8f:80:da:33:a3:f4:89:26:91:ac:29:19:c9:e4: 39:4c:0a:78:2d:c9:f3:7d:a1:ab:50:0b:fa:fd:70:c5:7c:19: 64:ee:b5:51:7a:66:d0:ba:0a:cc:0a:31:6e:48:d7:99:f8:7c: e4:af:22:81:65:11:5f:cf:06:6d:3a:b8:2d:bc:5c:ba:22:02: 0b:74:d2:87:65:36:b2:56:1f:e2:0c:23:3c:a4:d0:ec:96:04: ce:fd:4b:a8:17:fe:4d:79:d2:1f:fb:ff:88:59:1a:14:78:6f: 94:7c:ca:6b:db:18:22:a7:ae:9a:10:43:46:19:8d:4c:e3:65: 0b:ab:75:0d:30:8e:70:34:88:67:4c:1b:83:07:5d:27:c9:dd: 04:73:6d:f9:48:9c:76:38:08:57:e0:97:7c:a0:73:c2:e4:5e: 9c:ef:0d:3e:75:a6:3e:f8:bd:49:6b:0f:52:d9:80:0c:ff:d2: 67:37:6d:59:88:73:64:28:97:67:99:ee:72:e6:b2:d5:80:16: ed:3f:6f:1d:65:c7:a1:84:58:d7:e1:15:15:c9:ee:be:e6:48: 4e:69:93:6c:fd:ea:4a:fb:c3:6a:4d:13:db:fd:e5:7e:bc:de: 71:75:c6:52:0f:49:f8:c3:14:c2:b9:7b:60:00:f0:0f:dc:fb: 40:eb:b2:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57BB/JDYCNyKFP7HLCdr7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MGE4MTMxMDI5MjU3YmZmNzYxNDQ0OGU2ZjZiNTAzYzEy YmIyOWQwHhcNMjYwMTAxMTQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTM2YmI1MTRlOTBhZTJkNGIzNmM5NWYyZjU1NTVkYWRkNjhlZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yWP9zCp6IgKVMf6f5e9mNOsHNN/ HegEaXySBu+T88SVc9ffIJSFpF1kcAAGkAlaWzLlVAiEH4/96gCZp9+KC+ZIaISa 25I4znME8JyIkKFJfUs0qcMYxM/be8tgtT1OOmQybJultDopeuunc4LYrXDjpGJS rN38J+KA8C08JQl+YpL60Du5zGApJbshDQN2NozpUvESBM6/76SOxRkIb/reEh8o UjP/U3Z8/4s+0zlB9MK7ahLGakAVMPcky79CmzUyivABuh7QPLUgl0pIGSMfPGm3 Tfl1D84r5E1J3QqQkayv4y/1N92wbeOFtmR/COBDf3l59X5IgMvlTJNMxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKk2u1FOkK4tSzbJXy9VVdrdaO7hMB8GA1UdIwQY MBaAFNkKgTECkle/92FESOb2tQPBK7KdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlFxQk1RS1NWN18zWVVSSTV2YTFBOEVyc3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84ZmYyYWQtYTY4Zi00NDY1LThkMTgt OTZjZDg2ZmQwY2I3LzEvcVRhN1VVNlFyaTFMTnNsZkwxVlYydDFvN3VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi84ZmYyYWQtYTY4Zi00NDY1LThkMTgtOTZjZDg2ZmQwY2I3 LzEvMlFxQk1RS1NWN18zWVVSSTV2YTFBOEVyc3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSvkMA0G CSqGSIb3DQEBCwUAA4IBAQAEpwSJj4DaM6P0iSaRrCkZyeQ5TAp4LcnzfaGrUAv6 /XDFfBlk7rVRembQugrMCjFuSNeZ+HzkryKBZRFfzwZtOrgtvFy6IgILdNKHZTay Vh/iDCM8pNDslgTO/UuoF/5NedIf+/+IWRoUeG+UfMpr2xgip66aEENGGY1M42UL q3UNMI5wNIhnTBuDB10nyd0Ec235SJx2OAhX4Jd8oHPC5F6c7w0+daY++L1Jaw9S 2YAM/9JnN21ZiHNkKJdnme5y5rLVgBbtP28dZcehhFjX4RUVye6+5khOaZNs/epK +8NqTRPb/eV+vN5xdcZSD0n4wxTCuXtgAPAP3PtA67Iu -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:22 2026 by rpki-client