This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/q-Ke3V2D6WXgo4eNjEOhBFbA4DE.roa File: q-Ke3V2D6WXgo4eNjEOhBFbA4DE.roa (raw, json) Hash identifier: UMbblSjvrcbzLQGVq5IGsidjO+hKNSTlIG+zD9o4Jco= Subject key identifier: AB:E2:9E:DD:5D:83:E9:65:E0:A3:87:8D:8C:43:A1:04:56:C0:E0:31 Certificate issuer: /CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19 Certificate serial: 019B7BA453AB52A0C584D91242362E329F26 Authority key identifier: 18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/q-Ke3V2D6WXgo4eNjEOhBFbA4DE.roa Signing time: Thu 01 Jan 2026 22:18:45 +0000 ROA not before: Thu 01 Jan 2026 22:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41230 IP address blocks: 31.205.0.0/16 maxlen: 16 31.205.0.0/18 maxlen: 18 31.205.64.0/18 maxlen: 18 31.205.128.0/18 maxlen: 18 31.205.176.0/20 maxlen: 20 31.205.192.0/18 maxlen: 18 45.81.120.0/22 maxlen: 22 45.154.248.0/22 maxlen: 22 78.40.62.0/23 maxlen: 23 78.109.176.0/20 maxlen: 20 81.23.48.0/20 maxlen: 20 176.119.145.0/24 maxlen: 24 185.134.128.0/22 maxlen: 22 185.134.136.0/22 maxlen: 23 185.134.138.0/24 maxlen: 24 185.134.139.0/24 maxlen: 24 185.134.144.0/22 maxlen: 22 185.198.228.0/22 maxlen: 23 213.143.0.0/19 maxlen: 19 2a00:1a10::/29 maxlen: 29 2a07:c300::/29 maxlen: 29 2a0e:2a40::/29 maxlen: 29 2a0e:2ac0::/29 maxlen: 29 2a0e:5680::/29 maxlen: 29 2a0f:dd00::/29 maxlen: 29 2a10:d00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:53:ab:52:a0:c5:84:d9:12:42:36:2e:32:9f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19 Validity Not Before: Jan 1 22:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abe29edd5d83e965e0a3878d8c43a10456c0e031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:21:4d:dc:59:e1:e8:ff:14:cf:62:c6:55:45: aa:e5:eb:01:54:b1:eb:ae:ec:a2:6e:8e:82:47:e8: 48:13:41:25:4a:8c:2e:6c:ab:05:1d:c4:27:10:40: c1:2a:53:a9:7f:c3:b5:5f:44:8b:5d:cb:2c:5f:ac: 66:86:54:55:90:52:c4:54:8c:78:49:23:b8:fc:8d: b7:56:c5:72:a2:f5:9f:86:85:1d:af:bc:a0:f6:15: 3f:9b:98:7d:ea:99:10:0f:ee:1c:ce:2c:4a:fe:0e: 26:bc:20:1d:e1:93:3f:4e:1d:16:99:52:7b:b1:55: 20:bd:46:6a:38:8c:06:a0:cc:36:94:0d:e3:ed:f0: f8:75:16:ab:64:52:f9:15:c4:c1:e3:79:3e:7b:ba: ce:4a:d0:1a:28:b6:cf:66:7b:8d:92:66:71:eb:e8: 37:36:6c:6c:32:20:6f:70:fb:2d:8c:7a:70:23:c9: ef:fd:6e:07:cf:d6:1c:0d:ee:a0:a2:5e:68:a4:b0: d1:80:bb:3d:af:27:54:75:c6:e7:2d:3f:96:30:4e: fe:f3:7f:19:de:e3:83:62:d1:fc:a5:cd:2d:94:f5: 7b:df:61:30:7b:3f:fe:ee:6c:11:57:2e:bf:14:46: 18:61:b0:49:db:83:c3:3e:2e:fd:5b:9d:dd:18:a5: 16:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E2:9E:DD:5D:83:E9:65:E0:A3:87:8D:8C:43:A1:04:56:C0:E0:31 X509v3 Authority Key Identifier: keyid:18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/q-Ke3V2D6WXgo4eNjEOhBFbA4DE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.205.0.0/16 45.81.120.0/22 45.154.248.0/22 78.40.62.0/23 78.109.176.0/20 81.23.48.0/20 176.119.145.0/24 185.134.128.0/22 185.134.136.0/22 185.134.144.0/22 185.198.228.0/22 213.143.0.0/19 IPv6: 2a00:1a10::/29 2a07:c300::/29 2a0e:2a40::/29 2a0e:2ac0::/29 2a0e:5680::/29 2a0f:dd00::/29 2a10:d00::/29 Signature Algorithm: sha256WithRSAEncryption 3e:a0:83:34:0d:1c:5c:e0:ea:1d:f0:a1:93:fb:a3:3a:46:6b: 30:b6:9d:08:43:42:8a:85:57:fa:98:97:e3:e4:39:61:ad:82: 60:db:b7:ea:4c:37:64:fc:51:0f:54:d7:9c:be:4e:60:13:76: 3b:4a:6e:59:15:95:ed:99:d0:6c:9e:f4:f5:01:43:bd:30:1f: 10:36:38:18:6b:93:e9:b8:ff:df:10:aa:3e:ca:24:c6:1f:6c: 5b:22:e9:6a:33:0b:c6:f5:f3:ff:a5:45:d7:b6:bb:33:19:29: 3e:dd:1a:88:bd:db:2e:9c:35:e0:dd:18:c7:fe:a5:fe:d0:09: 15:17:25:2c:2a:20:00:98:c8:a8:8d:65:f2:05:09:d3:2f:15: c7:8c:e8:b3:07:69:54:68:88:e9:72:41:77:18:62:55:fd:0a: 7d:52:05:81:68:fa:30:33:69:17:5f:71:13:ec:f5:0d:6a:71: 72:90:32:8f:46:3b:f2:b3:a0:c0:95:1c:a2:4b:96:5f:ab:30: 9a:b2:d8:b7:1e:6f:53:05:40:d1:0b:f5:5f:6c:33:9f:96:09: 12:6f:79:2a:80:e0:5a:17:3d:5d:00:19:39:78:4c:ee:a7:9f: ce:eb:eb:99:1a:2a:d2:46:ff:ee:9b:3d:78:b9:ca:8b:83:2e: 48:4a:dd:a5 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgISAZt7pFOrUqDFhNkSQjYuMp8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZTJhZWQ5YWYzYTRiZTU2MGFhMTliOTI4NDZjNWZiZTEx YzliMTkwHhcNMjYwMTAxMjIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmUyOWVkZDVkODNlOTY1ZTBhMzg3OGQ4YzQzYTEwNDU2YzBlMDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCFN3Fnh6P8Uz2LGVUWq5esBVLHr ruyibo6CR+hIE0ElSowubKsFHcQnEEDBKlOpf8O1X0SLXcssX6xmhlRVkFLEVIx4 SSO4/I23VsVyovWfhoUdr7yg9hU/m5h96pkQD+4czixK/g4mvCAd4ZM/Th0WmVJ7 sVUgvUZqOIwGoMw2lA3j7fD4dRarZFL5FcTB43k+e7rOStAaKLbPZnuNkmZx6+g3 NmxsMiBvcPstjHpwI8nv/W4Hz9YcDe6gol5opLDRgLs9rydUdcbnLT+WME7+838Z 3uODYtH8pc0tlPV732Ewez/+7mwRVy6/FEYYYbBJ24PDPi79W53dGKUWUQIDAQAB o4IChjCCAoIwHQYDVR0OBBYEFKvint1dg+ll4KOHjYxDoQRWwOAxMB8GA1UdIwQY MBaAFBjirtmvOkvlYKoZuShGxfvhHJsZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yMzkxZWQtZjI4NS00Mjg2LWFmMmYt ZDI1NTFjZGRlNGFmLzEvcS1LZTNWMkQ2V1hnbzRlTmpFT2hCRmJBNERFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yMzkxZWQtZjI4NS00Mjg2LWFmMmYtZDI1NTFjZGRlNGFm LzEvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGbBggrBgEFBQcBBwEB/wSBizCBiDBNBAIAATBHAwMAH80D BAItUXgDBAItmvgDBAFOKD4DBARObbADBARRFzADBACwd5EDBAK5hoADBAK5hogD BAK5hpADBAK5xuQDBAXVjwAwNwQCAAIwMQMFAyoAGhADBQMqB8MAAwUDKg4qQAMF AyoOKsADBQMqDlaAAwUDKg/dAAMFAyoQDQAwDQYJKoZIhvcNAQELBQADggEBAD6g gzQNHFzg6h3woZP7ozpGazC2nQhDQoqFV/qYl+PkOWGtgmDbt+pMN2T8UQ9U15y+ TmATdjtKblkVle2Z0Gye9PUBQ70wHxA2OBhrk+m4/98Qqj7KJMYfbFsi6WozC8b1 8/+lRde2uzMZKT7dGoi92y6cNeDdGMf+pf7QCRUXJSwqIACYyKiNZfIFCdMvFceM 6LMHaVRoiOlyQXcYYlX9Cn1SBYFo+jAzaRdfcRPs9Q1qcXKQMo9GO/KzoMCVHKJL ll+rMJqy2Lceb1MFQNEL9V9sM5+WCRJveSqA4FoXPV0AGTl4TO6nn87r65kaKtJG /+6bPXi5youDLkhK3aU= -----END CERTIFICATE-----Generated at Tue Feb 10 00:29:09 2026 by rpki-client