This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/q-7Ws7q0jDYung0XnxU4hwFEoqw.roa File: q-7Ws7q0jDYung0XnxU4hwFEoqw.roa (raw, json) Hash identifier: kLEC8ykLDYdJM5qWo6Fc1YoTmSHEnK8bCiHZuP9btTQ= Subject key identifier: AB:EE:D6:B3:BA:B4:8C:36:2E:9E:0D:17:9F:15:38:87:01:44:A2:AC Certificate issuer: /CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7 Certificate serial: 019B7BA4D2860307547C8FFA7FCAB21B226C Authority key identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/q-7Ws7q0jDYung0XnxU4hwFEoqw.roa Signing time: Thu 01 Jan 2026 22:19:17 +0000 ROA not before: Thu 01 Jan 2026 22:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6461 IP address blocks: 5.133.172.0/22 maxlen: 24 46.231.8.0/21 maxlen: 24 85.95.32.0/19 maxlen: 24 91.209.142.0/24 maxlen: 24 91.214.228.0/22 maxlen: 24 151.249.64.0/20 maxlen: 24 185.44.248.0/22 maxlen: 24 185.113.0.0/22 maxlen: 24 185.168.144.0/22 maxlen: 24 209.35.128.0/20 maxlen: 24 2a01:5640::/32 maxlen: 32 2a0d:ea00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d2:86:03:07:54:7c:8f:fa:7f:ca:b2:1b:22:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7 Validity Not Before: Jan 1 22:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abeed6b3bab48c362e9e0d179f1538870144a2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2c:26:6d:df:be:59:98:52:31:ab:f5:85:fa: 7a:f6:68:ab:fd:da:2d:f5:17:8d:e6:a6:e8:d9:e5: c8:17:cf:c0:58:40:81:39:f9:ac:9b:30:c3:e5:e8: 82:e6:f4:5b:33:a6:d7:71:0a:31:14:65:f3:98:9f: fd:62:d0:c6:70:ea:cb:23:6f:9f:b4:59:47:ed:8d: 0f:9a:ff:f4:ad:99:17:0f:a5:15:d0:5b:3f:cc:2e: a5:c4:21:be:f4:a5:26:a2:ff:19:df:12:63:88:83: b9:9d:fe:52:99:6b:e4:52:d0:88:2f:fc:2c:b5:b7: d5:5d:67:59:cc:ea:a1:20:7b:4c:3f:35:cf:69:60: ab:98:58:5f:31:49:16:cb:24:2d:92:49:9c:68:2d: e4:c7:bd:f9:91:1d:53:64:bd:c4:2e:00:a8:7d:6d: 6e:6a:d4:02:a4:4d:c2:be:e8:02:23:3e:0b:4d:4d: f1:84:a5:f3:db:16:6c:92:e2:6a:d0:fd:2e:2e:42: c4:47:5f:f3:04:61:0d:25:36:0a:17:1a:59:19:46: 10:91:70:da:67:a1:30:49:94:bf:9c:a8:25:a7:53: 4a:31:06:00:b9:fe:08:84:a7:7e:4d:f3:7e:9d:b1: 64:c7:8d:15:f2:bd:73:ee:91:a0:04:35:8d:1c:c3: e8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EE:D6:B3:BA:B4:8C:36:2E:9E:0D:17:9F:15:38:87:01:44:A2:AC X509v3 Authority Key Identifier: keyid:7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/q-7Ws7q0jDYung0XnxU4hwFEoqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.172.0/22 46.231.8.0/21 85.95.32.0/19 91.209.142.0/24 91.214.228.0/22 151.249.64.0/20 185.44.248.0/22 185.113.0.0/22 185.168.144.0/22 209.35.128.0/20 IPv6: 2a01:5640::/32 2a0d:ea00::/29 Signature Algorithm: sha256WithRSAEncryption 8d:17:fa:dc:4f:b3:10:13:f2:3e:6c:22:47:3d:37:a2:66:a7: 77:0a:4c:bb:35:17:2f:27:86:13:ab:25:58:fc:c7:6d:42:0b: 50:52:b5:ab:39:91:4a:3f:a5:a8:f8:47:90:25:e9:0e:fc:9b: 15:b5:34:e5:e9:70:a2:e5:3f:00:06:65:ad:a9:08:c1:9a:41: e7:4b:13:bc:98:ff:66:34:f4:04:32:36:7e:1f:84:82:32:92: 7f:23:39:7d:0d:c3:80:6f:17:e9:d9:bf:b9:b0:06:00:24:f3: c7:42:5e:db:43:2b:04:2c:e9:74:e0:0f:1e:8f:ee:1b:b6:ee: cf:a8:64:eb:07:2c:8b:9c:a0:7e:fa:8f:f6:3f:f1:f3:13:e0: 68:ff:03:bb:1e:ca:0d:de:94:9d:fb:fc:3e:7e:3b:cd:ee:de: 68:ce:88:23:1b:d9:1d:9a:d2:19:cc:6f:24:9a:2f:06:2c:65: f0:e2:86:0f:31:87:6e:77:24:b2:2d:df:8c:1e:ac:78:f9:9c: 12:89:3f:a7:f0:f2:96:4c:0d:9a:74:12:fb:39:4d:11:25:bd: 36:a5:3f:ee:d0:fd:2f:c5:a5:a5:81:64:c1:55:35:7f:53:87: b7:1b:ca:46:c8:a9:05:21:c9:8c:ef:f5:98:10:41:99:9e:c6: 50:78:07:7f -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZt7pNKGAwdUfI/6f8qyGyJsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNDVhOWEwMzUzYTMzYzZhNGY5MzYwOGY5ZDI1ZjI3Yzg1 OTQ4YjcwHhcNMjYwMTAxMjIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmVlZDZiM2JhYjQ4YzM2MmU5ZTBkMTc5ZjE1Mzg4NzAxNDRhMmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSwmbd++WZhSMav1hfp69mir/dot 9ReN5qbo2eXIF8/AWECBOfmsmzDD5eiC5vRbM6bXcQoxFGXzmJ/9YtDGcOrLI2+f tFlH7Y0Pmv/0rZkXD6UV0Fs/zC6lxCG+9KUmov8Z3xJjiIO5nf5SmWvkUtCIL/ws tbfVXWdZzOqhIHtMPzXPaWCrmFhfMUkWyyQtkkmcaC3kx735kR1TZL3ELgCofW1u atQCpE3CvugCIz4LTU3xhKXz2xZskuJq0P0uLkLER1/zBGENJTYKFxpZGUYQkXDa Z6EwSZS/nKglp1NKMQYAuf4IhKd+TfN+nbFkx40V8r1z7pGgBDWNHMPoxQIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFKvu1rO6tIw2Lp4NF58VOIcBRKKsMB8GA1UdIwQY MBaAFH5FqaA1OjPGpPk2CPnSXyfIWUi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmtXcG9EVTZNOGFrLVRZSS1kSmZKOGhaU0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kZDdiZWItNmY3OC00MTliLTk1N2Qt MzdhNjBjMzM1YTVkLzEvcS03V3M3cTBqRFl1bmcwWG54VTRod0ZFb3F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9kZDdiZWItNmY3OC00MTliLTk1N2QtMzdhNjBjMzM1YTVk LzEvZmtXcG9EVTZNOGFrLVRZSS1kSmZKOGhaU0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBCBAIAATA8AwQCBYWsAwQD LucIAwQFVV8gAwQAW9GOAwQCW9bkAwQEl/lAAwQCuSz4AwQCuXEAAwQCuaiQAwQE 0SOAMBQEAgACMA4DBQAqAVZAAwUDKg3qADANBgkqhkiG9w0BAQsFAAOCAQEAjRf6 3E+zEBPyPmwiRz03omandwpMuzUXLyeGE6slWPzHbUILUFK1qzmRSj+lqPhHkCXp DvybFbU05elwouU/AAZlrakIwZpB50sTvJj/ZjT0BDI2fh+EgjKSfyM5fQ3DgG8X 6dm/ubAGACTzx0Je20MrBCzpdOAPHo/uG7buz6hk6wcsi5ygfvqP9j/x8xPgaP8D ux7KDd6Unfv8Pn47ze7eaM6IIxvZHZrSGcxvJJovBixl8OKGDzGHbncksi3fjB6s ePmcEok/p/DylkwNmnQS+zlNESW9NqU/7tD9L8WlpYFkwVU1f1OHtxvKRsipBSHJ jO/1mBBBmZ7GUHgHfw== -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:22 2026 by rpki-client