This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/q-zHlZ8R7JWcvMZz-zaXHGrX8c4.roa File: q-zHlZ8R7JWcvMZz-zaXHGrX8c4.roa (raw, json) Hash identifier: pG4KhppNK142bR4AexJxy0jiJbTAYsh40ncpfhftQwo= Subject key identifier: AB:EC:C7:95:9F:11:EC:95:9C:BC:C6:73:FB:36:97:1C:6A:D7:F1:CE Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019B7E38B04C334385C018B1791164EF1B7D Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/q-zHlZ8R7JWcvMZz-zaXHGrX8c4.roa Signing time: Fri 02 Jan 2026 10:20:02 +0000 ROA not before: Fri 02 Jan 2026 10:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 93.89.216.0/24 maxlen: 24 193.109.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b0:4c:33:43:85:c0:18:b1:79:11:64:ef:1b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Jan 2 10:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abecc7959f11ec959cbcc673fb36971c6ad7f1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ff:a3:7c:63:cc:b5:31:0b:83:2a:f7:21:a5: 15:3f:03:cf:a2:39:14:16:d4:b0:ab:3a:4a:1a:e6: f4:dc:65:be:a2:a5:04:58:cc:0b:32:69:21:15:95: ae:7b:0a:cf:d9:79:5f:a6:eb:10:44:db:a4:82:c2: 0e:9b:b4:4f:14:c7:77:55:90:b4:5a:cd:8b:9b:5a: 63:0f:0e:2e:3f:cf:d9:66:49:41:a7:df:d9:c7:1a: 20:b1:f7:19:0d:05:9f:38:3b:1b:03:6e:34:02:43: 67:9d:c5:bb:d1:05:5e:75:a2:f4:8c:4a:26:75:e6: 8c:a5:cc:9c:62:c5:8e:b5:bb:49:10:0b:a4:a8:38: 50:40:46:6c:ad:9e:65:c7:6e:ad:f2:14:40:d1:30: 38:f0:0b:7c:ee:db:51:bf:41:ed:28:4e:d5:42:e3: b8:a4:aa:b7:6f:f9:ac:33:1e:8d:00:09:5f:49:15: 4c:83:4d:35:e5:40:71:03:96:cc:b8:73:b1:7e:5f: fc:69:6c:22:5d:bb:f0:48:38:19:d9:48:ad:90:c0: 3c:8e:14:11:d1:44:7b:fa:10:98:21:d8:04:ba:25: 1e:fe:f7:cf:07:c1:9d:e0:0b:cc:1b:19:2e:97:f0: 4d:6f:ec:ce:48:53:97:11:b7:d4:4c:9a:b9:0b:97: 52:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EC:C7:95:9F:11:EC:95:9C:BC:C6:73:FB:36:97:1C:6A:D7:F1:CE X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/q-zHlZ8R7JWcvMZz-zaXHGrX8c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.89.216.0/24 193.109.160.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:ec:f3:5b:f9:81:ac:08:73:26:f0:a2:5f:87:5a:c5:ea:b7: f5:a7:22:69:45:4c:32:e9:3d:24:86:28:ae:b9:ef:f0:97:ac: 4d:64:0a:79:8b:d4:40:1c:01:06:51:79:42:86:12:65:00:07: c6:94:40:b7:7c:33:73:eb:61:ff:45:6b:94:82:98:24:f2:00: 00:18:72:ff:8e:ab:ce:a5:e2:62:c4:16:0a:f7:69:e9:aa:6e: e2:91:41:f9:a1:a1:ae:4a:a7:c1:4d:23:18:ee:f3:9e:9f:9a: e2:0a:7c:01:a2:38:21:e4:49:39:cb:fa:40:9f:63:68:c0:a7: 32:df:a7:c4:19:6a:c1:0c:ba:83:08:a6:33:a5:5d:ab:5c:99: f3:09:7f:65:13:f8:de:a2:a3:c6:cc:e7:f8:5a:bb:71:73:de: 85:9d:68:4e:08:25:0a:3a:fb:d2:91:4a:9e:80:28:bb:5c:f3: a2:b9:b6:84:57:53:5e:5b:29:ce:f0:f1:a9:f4:d2:b0:b3:63: 04:db:7f:1f:6b:47:47:84:e2:1a:0d:da:2e:ff:3b:63:bf:8e: 94:e8:d8:5c:d7:12:51:b7:6e:1b:82:53:ba:81:4a:de:a4:89: de:03:0e:08:63:38:64:56:89:5d:23:fe:76:7c:a5:0a:9b:0d: e1:84:ab:8b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OLBMM0OFwBixeRFk7xt9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjYwMTAyMTAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmVjYzc5NTlmMTFlYzk1OWNiY2M2NzNmYjM2OTcxYzZhZDdmMWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/+jfGPMtTELgyr3IaUVPwPPojkU FtSwqzpKGub03GW+oqUEWMwLMmkhFZWuewrP2XlfpusQRNukgsIOm7RPFMd3VZC0 Ws2Lm1pjDw4uP8/ZZklBp9/ZxxogsfcZDQWfODsbA240AkNnncW70QVedaL0jEom deaMpcycYsWOtbtJEAukqDhQQEZsrZ5lx26t8hRA0TA48At87ttRv0HtKE7VQuO4 pKq3b/msMx6NAAlfSRVMg0015UBxA5bMuHOxfl/8aWwiXbvwSDgZ2UitkMA8jhQR 0UR7+hCYIdgEuiUe/vfPB8Gd4AvMGxkul/BNb+zOSFOXEbfUTJq5C5dScQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKvsx5WfEeyVnLzGc/s2lxxq1/HOMB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvcS16SGxaOFI3Sldjdk1aei16YVhIR3JYOGM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXVnYAwQC wW2gMA0GCSqGSIb3DQEBCwUAA4IBAQBr7PNb+YGsCHMm8KJfh1rF6rf1pyJpRUwy 6T0khiiuue/wl6xNZAp5i9RAHAEGUXlChhJlAAfGlEC3fDNz62H/RWuUgpgk8gAA GHL/jqvOpeJixBYK92npqm7ikUH5oaGuSqfBTSMY7vOen5riCnwBojgh5Ek5y/pA n2NowKcy36fEGWrBDLqDCKYzpV2rXJnzCX9lE/jeoqPGzOf4Wrtxc96FnWhOCCUK OvvSkUqegCi7XPOiubaEV1NeWynO8PGp9NKws2ME238fa0dHhOIaDdou/ztjv46U 6Nhc1xJRt24bglO6gUrepIneAw4IYzhkVoldI/52fKUKmw3hhKuL -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:21 2026 by rpki-client