This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/qxIHz0gdUrUI7XFzETlLNlQ2giI.roa File: qxIHz0gdUrUI7XFzETlLNlQ2giI.roa (raw, json) Hash identifier: +fNR5V2i+vsAHl4QPkN51sUmbQaQV/iejPc96bQJ02A= Subject key identifier: AB:12:07:CF:48:1D:52:B5:08:ED:71:73:11:39:4B:36:54:36:82:22 Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b Certificate serial: 019B7C1333105A7638A98408B1FBDC2ED188 Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/qxIHz0gdUrUI7XFzETlLNlQ2giI.roa Signing time: Fri 02 Jan 2026 00:19:51 +0000 ROA not before: Fri 02 Jan 2026 00:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 89.19.56.0/24 maxlen: 24 89.19.57.0/24 maxlen: 24 89.19.58.0/24 maxlen: 24 89.19.59.0/24 maxlen: 24 185.68.245.0/24 maxlen: 24 185.81.174.0/23 maxlen: 24 185.81.184.0/23 maxlen: 23 185.81.186.0/23 maxlen: 23 185.89.104.0/22 maxlen: 22 185.89.108.0/22 maxlen: 22 185.96.38.0/24 maxlen: 24 185.96.81.0/24 maxlen: 24 185.96.132.0/24 maxlen: 24 185.97.0.0/22 maxlen: 24 185.101.203.0/24 maxlen: 24 185.175.224.0/23 maxlen: 24 213.170.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:33:10:5a:76:38:a9:84:08:b1:fb:dc:2e:d1:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b Validity Not Before: Jan 2 00:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab1207cf481d52b508ed717311394b3654368222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bb:c6:6b:c3:ac:94:03:ab:07:a8:88:5d:d6: d2:7b:67:0a:90:21:21:47:cc:cb:73:40:d1:94:10: 8c:9f:61:50:cf:1c:c2:48:8f:f3:2a:f6:2f:4f:bd: e9:16:80:9f:65:e7:45:78:ad:32:9e:33:e1:f5:95: 22:7a:43:f2:3c:fe:e6:28:87:9f:66:84:a4:c1:2d: c0:9a:a7:95:02:15:1c:16:86:f4:0d:eb:31:9c:29: 70:b9:80:f6:d1:60:37:10:9b:4d:fc:ee:f1:d5:be: 4c:a0:08:29:2c:96:2a:e2:36:b9:b0:34:77:dc:31: b0:05:a2:85:5a:10:33:b3:c5:de:e7:14:8f:cc:87: 0f:39:d2:7f:98:a5:d8:2a:93:2f:90:cb:e2:a7:65: cd:60:7f:a6:a3:75:a1:16:62:d8:3d:65:e8:be:c9: 00:9e:43:cc:80:de:f7:ba:da:44:02:ce:9d:49:3e: d9:70:81:90:f3:26:81:f3:57:50:a3:67:2d:91:d8: 54:d0:6c:41:81:7b:cd:c9:9f:a9:6b:d1:d7:3c:86: aa:82:5c:62:66:3d:e1:06:48:3d:e1:64:13:4a:ca: 72:37:b1:54:dd:f2:84:52:68:3a:d1:ee:b5:99:03: 76:dd:bf:fc:92:6c:58:fe:0f:04:a1:dc:66:ef:68: 7b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:12:07:CF:48:1D:52:B5:08:ED:71:73:11:39:4B:36:54:36:82:22 X509v3 Authority Key Identifier: keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/qxIHz0gdUrUI7XFzETlLNlQ2giI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.19.56.0/22 185.68.245.0/24 185.81.174.0/23 185.81.184.0/22 185.89.104.0/21 185.96.38.0/24 185.96.81.0/24 185.96.132.0/24 185.97.0.0/22 185.101.203.0/24 185.175.224.0/23 213.170.223.0/24 Signature Algorithm: sha256WithRSAEncryption 76:d6:7f:54:a5:9d:22:25:36:56:b3:e3:0e:7b:b0:67:c1:ff: 96:d6:66:2a:3a:96:92:f9:0e:68:b8:da:72:27:2d:a8:46:ac: fe:ed:9b:bf:d1:ec:00:a3:e7:86:7e:5f:31:de:7b:fa:50:3d: fd:6b:35:de:a2:61:65:28:f1:68:e2:35:82:77:d4:5d:ad:4f: 5f:25:d7:6f:68:e9:5b:bf:d6:19:5e:85:94:2c:d6:d7:63:ca: d2:b8:23:af:a5:ee:e9:5e:a0:68:a6:fd:50:dc:9f:df:64:ef: 33:41:ac:5d:48:70:a2:47:26:20:ae:d9:31:0c:08:a6:d5:59: 34:ee:cd:9d:4b:88:1e:66:8d:f7:bc:22:ac:cc:8d:ab:f8:d5: 36:99:56:dc:3a:5c:1b:e3:59:03:c5:1f:a9:ac:42:9a:cc:7a: 4c:fa:47:d0:55:66:2c:89:ee:9d:23:ea:03:ac:7f:1e:8d:6d: 2e:41:d9:3d:c2:8c:38:96:69:95:70:2c:5e:82:01:ae:ca:6c: 59:31:24:8b:2b:9e:8f:00:51:8f:08:fd:29:8f:e5:b2:fc:e2: bf:6a:76:cc:c2:3a:62:5d:d2:a6:14:97:52:5a:10:87:82:43: c3:ad:33:e4:08:97:4f:d5:69:f7:77:2e:05:4a:45:51:11:cf: ba:d2:95:44 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt8EzMQWnY4qYQIsfvcLtGIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4 OWU4NWIwHhcNMjYwMTAyMDAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjEyMDdjZjQ4MWQ1MmI1MDhlZDcxNzMxMTM5NGIzNjU0MzY4MjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLvGa8OslAOrB6iIXdbSe2cKkCEh R8zLc0DRlBCMn2FQzxzCSI/zKvYvT73pFoCfZedFeK0ynjPh9ZUiekPyPP7mKIef ZoSkwS3AmqeVAhUcFob0DesxnClwuYD20WA3EJtN/O7x1b5MoAgpLJYq4ja5sDR3 3DGwBaKFWhAzs8Xe5xSPzIcPOdJ/mKXYKpMvkMvip2XNYH+mo3WhFmLYPWXovskA nkPMgN73utpEAs6dST7ZcIGQ8yaB81dQo2ctkdhU0GxBgXvNyZ+pa9HXPIaqglxi Zj3hBkg94WQTSspyN7FU3fKEUmg60e61mQN23b/8kmxY/g8Eodxm72h7BwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKsSB89IHVK1CO1xcxE5SzZUNoIiMB8GA1UdIwQY MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt NmVlNTM0ZDkyZTUyLzEvcXhJSHowZ2RVclVJN1hGekVUbExObFEyZ2lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQCWRM4AwQA uUT1AwQBuVGuAwQCuVG4AwQDuVloAwQAuWAmAwQAuWBRAwQAuWCEAwQCuWEAAwQA uWXLAwQBua/gAwQA1arfMA0GCSqGSIb3DQEBCwUAA4IBAQB21n9UpZ0iJTZWs+MO e7Bnwf+W1mYqOpaS+Q5ouNpyJy2oRqz+7Zu/0ewAo+eGfl8x3nv6UD39azXeomFl KPFo4jWCd9RdrU9fJddvaOlbv9YZXoWULNbXY8rSuCOvpe7pXqBopv1Q3J/fZO8z QaxdSHCiRyYgrtkxDAim1Vk07s2dS4geZo33vCKszI2r+NU2mVbcOlwb41kDxR+p rEKazHpM+kfQVWYsie6dI+oDrH8ejW0uQdk9wow4lmmVcCxeggGuymxZMSSLK56P AFGPCP0pj+Wy/OK/anbMwjpiXdKmFJdSWhCHgkPDrTPkCJdP1Wn3dy4FSkVREc+6 0pVE -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:03 2026 by rpki-client