This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/RQ8xC9T79eYAnKVx9VhVrpoNTMY.roa File: RQ8xC9T79eYAnKVx9VhVrpoNTMY.roa (raw, json) Hash identifier: exNJaK8lpq9kvpL01DCgkaVHl771CgqPSPw4MI32Txo= Subject key identifier: 45:0F:31:0B:D4:FB:F5:E6:00:9C:A5:71:F5:58:55:AE:9A:0D:4C:C6 Certificate issuer: /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6 Certificate serial: 019B7D5BE414C2176BE58E00289F2BA11E35 Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/RQ8xC9T79eYAnKVx9VhVrpoNTMY.roa Signing time: Fri 02 Jan 2026 06:18:52 +0000 ROA not before: Fri 02 Jan 2026 06:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3221 IP address blocks: 171.22.244.0/22 maxlen: 22 193.40.0.0/16 maxlen: 16 2001:bb8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:e4:14:c2:17:6b:e5:8e:00:28:9f:2b:a1:1e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6 Validity Not Before: Jan 2 06:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=450f310bd4fbf5e6009ca571f55855ae9a0d4cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d3:c5:af:29:ba:fe:d6:e0:24:a6:88:57:99: 5e:15:dd:a1:77:e1:47:04:1f:20:26:f4:8d:09:28: 61:bc:bb:74:e8:0d:0a:a5:54:97:b1:e8:1e:34:61: 27:e0:e7:5d:17:c9:94:94:3c:37:e2:4f:41:2e:12: 67:ee:4a:83:11:6e:6c:83:27:cd:4d:2d:62:1b:da: 22:1c:71:a7:57:9e:e6:96:fb:5a:bd:50:85:86:f2: d6:d9:9d:96:68:b8:bc:01:b6:5c:e8:59:81:ab:72: e1:15:ed:86:97:bd:42:9a:90:df:34:9e:5d:6c:14: cf:fd:92:30:c6:42:c9:6e:34:3c:3c:2d:c8:52:4e: cc:17:5f:5f:ad:8b:ab:d5:21:e9:50:4b:4b:ab:55: de:ac:fa:c0:1a:1a:d4:55:d9:8f:de:8e:04:91:a3: ed:01:6b:d6:80:4f:7a:8c:2b:d2:7b:74:e4:dc:2e: 87:58:ab:0f:5c:77:1f:3e:57:20:67:90:15:57:0f: 7f:0e:c1:74:2e:ae:1a:49:1a:96:bf:d7:5b:02:83: 24:d3:71:10:a6:77:11:64:76:ed:c0:f4:8f:f5:32: 6b:9c:1a:0a:cb:a4:3f:4d:72:3e:48:27:7f:b2:ee: 6f:7d:1d:2e:fb:a1:d6:de:8e:6f:55:39:37:c4:cb: 79:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0F:31:0B:D4:FB:F5:E6:00:9C:A5:71:F5:58:55:AE:9A:0D:4C:C6 X509v3 Authority Key Identifier: keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/RQ8xC9T79eYAnKVx9VhVrpoNTMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.22.244.0/22 193.40.0.0/16 IPv6: 2001:bb8::/32 Signature Algorithm: sha256WithRSAEncryption 92:53:14:73:d1:0e:e0:4e:e0:4e:1f:65:6b:a6:75:77:a4:1d: ff:90:d0:71:97:1f:2b:51:5f:c1:3c:62:48:e1:0b:b7:12:e2: 53:11:dc:7a:13:ea:a6:0d:d0:a4:8a:af:b7:b5:9b:59:61:96: c3:34:02:fe:c6:2b:01:9d:f4:00:56:6a:f9:bf:45:f0:4d:47: 33:e4:c8:5d:25:00:c3:9e:02:d9:07:06:a1:31:bb:17:60:c0: 77:45:f0:cd:5d:d5:0f:63:ba:f1:5b:e6:57:d8:09:e0:dd:c3: f9:69:c9:01:4c:c1:5d:e9:3f:83:54:4c:57:97:ad:65:b0:ac: 6c:ba:c3:ba:dc:30:ff:7b:97:1e:3e:20:60:d1:4c:b3:eb:45: 3d:a6:14:a7:c8:71:34:07:82:c0:7c:e2:8d:67:db:f8:b2:ec: b3:4d:d5:a0:c5:5d:41:5f:c5:fd:46:ce:22:82:14:4b:97:07: fc:c7:2a:83:95:da:6d:bf:94:23:0d:8c:ad:43:87:51:c5:d4: 84:1b:3b:96:fd:93:a4:be:60:ba:f4:59:1f:cd:cf:07:62:e9: 47:60:a5:af:e9:f1:18:81:b0:bf:ad:69:a5:a6:e7:2d:b9:8a: c1:f9:41:e5:c7:2c:b3:e6:57:da:63:11:f0:5b:27:a6:90:e9: 80:90:d3:25 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt9W+QUwhdr5Y4AKJ8roR41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZTBkZjgyMTIxNDM4MjcxYzkxM2MyNGZmNTBmZDNiNjJk NDBkYzYwHhcNMjYwMTAyMDYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTBmMzEwYmQ0ZmJmNWU2MDA5Y2E1NzFmNTU4NTVhZTlhMGQ0Y2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtPFrym6/tbgJKaIV5leFd2hd+FH BB8gJvSNCShhvLt06A0KpVSXsegeNGEn4OddF8mUlDw34k9BLhJn7kqDEW5sgyfN TS1iG9oiHHGnV57mlvtavVCFhvLW2Z2WaLi8AbZc6FmBq3LhFe2Gl71CmpDfNJ5d bBTP/ZIwxkLJbjQ8PC3IUk7MF19frYur1SHpUEtLq1XerPrAGhrUVdmP3o4EkaPt AWvWgE96jCvSe3Tk3C6HWKsPXHcfPlcgZ5AVVw9/DsF0Lq4aSRqWv9dbAoMk03EQ pncRZHbtwPSP9TJrnBoKy6Q/TXI+SCd/su5vfR0u+6HW3o5vVTk3xMt56QIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFEUPMQvU+/XmAJylcfVYVa6aDUzGMB8GA1UdIwQY MBaAFM/g34ISFDgnHJE8JP9Q/Tti1A3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMt ZjJjNzkyMmZhZjMyLzEvUlE4eEM5VDc5ZVlBbktWeDlWaFZycG9OVE1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMtZjJjNzkyMmZhZjMy LzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwQCqxb0AwMA wSgwDQQCAAIwBwMFACABC7gwDQYJKoZIhvcNAQELBQADggEBAJJTFHPRDuBO4E4f ZWumdXekHf+Q0HGXHytRX8E8YkjhC7cS4lMR3HoT6qYN0KSKr7e1m1lhlsM0Av7G KwGd9ABWavm/RfBNRzPkyF0lAMOeAtkHBqExuxdgwHdF8M1d1Q9juvFb5lfYCeDd w/lpyQFMwV3pP4NUTFeXrWWwrGy6w7rcMP97lx4+IGDRTLPrRT2mFKfIcTQHgsB8 4o1n2/iy7LNN1aDFXUFfxf1GziKCFEuXB/zHKoOV2m2/lCMNjK1Dh1HF1IQbO5b9 k6S+YLr0WR/Nzwdi6Udgpa/p8RiBsL+taaWm5y25isH5QeXHLLPmV9pjEfBbJ6aQ 6YCQ0yU= -----END CERTIFICATE-----Generated at Tue Jan 20 04:44:12 2026 by rpki-client