This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/qQSnBqfBKgqkQEeSjAXumHQo5Bg.roa File: qQSnBqfBKgqkQEeSjAXumHQo5Bg.roa (raw, json) Hash identifier: IjPwa+CDnwlkTVVKYg5BgkYKP8OCfq+y6znGfsQVrto= Subject key identifier: A9:04:A7:06:A7:C1:2A:0A:A4:40:47:92:8C:05:EE:98:74:28:E4:18 Certificate issuer: /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0 Certificate serial: 019B7BA42884FA20B9038E9CCCCD00B72F45 Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/qQSnBqfBKgqkQEeSjAXumHQo5Bg.roa Signing time: Thu 01 Jan 2026 22:18:34 +0000 ROA not before: Thu 01 Jan 2026 22:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51647 IP address blocks: 194.104.80.0/22 maxlen: 22 194.104.84.0/24 maxlen: 24 2a04:9fc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 22:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:28:84:fa:20:b9:03:8e:9c:cc:cd:00:b7:2f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0 Validity Not Before: Jan 1 22:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a904a706a7c12a0aa44047928c05ee987428e418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8b:35:0b:d4:30:56:12:74:18:4e:c8:85:5d: 98:a4:37:ad:94:16:dc:48:f9:61:3a:ea:b3:02:78: ad:cb:94:62:30:8c:d8:44:49:74:15:87:46:9c:8c: cc:9e:75:63:3d:68:b4:8e:98:a9:33:48:8b:40:42: cf:02:d5:80:35:12:41:66:38:74:eb:af:b1:a8:db: 17:ae:4e:11:ba:b1:15:2d:9e:02:0b:01:a3:53:64: 7c:15:dc:be:01:c8:72:78:de:c9:8c:47:26:60:f7: a7:c8:5b:ae:d1:ed:df:8d:89:fb:8e:50:09:f8:12: e7:44:78:d3:74:32:47:52:98:97:f0:e3:cd:40:a7: 18:1a:5f:d8:8d:f4:eb:7f:e6:32:2e:be:8d:2e:64: ef:76:db:75:7e:d2:19:7c:1d:aa:8e:56:c0:7a:9d: 8e:21:54:16:14:3a:19:1e:51:b1:e2:e2:3c:c4:96: 64:d2:a1:81:6f:7a:b4:26:66:0b:bd:44:5f:ea:e9: 7e:a5:c8:44:c4:4a:f9:68:bd:78:37:00:64:16:c9: 52:50:7f:17:9b:67:9f:5e:b9:9d:4c:c6:15:28:5e: 54:19:f8:b6:04:18:72:8d:21:f2:40:de:9e:3c:06: de:d9:ee:33:95:fd:62:95:7e:a2:3e:2e:2d:5c:c2: 66:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:04:A7:06:A7:C1:2A:0A:A4:40:47:92:8C:05:EE:98:74:28:E4:18 X509v3 Authority Key Identifier: keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/qQSnBqfBKgqkQEeSjAXumHQo5Bg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.80.0-194.104.84.255 IPv6: 2a04:9fc0::/29 Signature Algorithm: sha256WithRSAEncryption 29:26:fa:29:7a:4e:5b:48:7e:35:f8:d4:5e:b0:57:bc:18:e6: 5b:05:bd:84:c4:79:d6:db:5d:8e:09:78:a9:dd:28:87:44:a2: cd:57:0c:01:58:98:a7:80:8f:fa:2a:db:47:19:78:27:2e:fc: 1e:82:f2:ee:75:89:74:d5:4d:86:da:bc:a8:39:c3:3f:de:b0: 7a:fb:4d:89:a3:4d:31:68:50:e4:3f:90:82:17:5d:e6:95:94: 25:0e:fe:af:cb:02:78:f2:35:3a:29:d7:7f:16:45:9e:b3:f9: 31:13:07:be:7c:5d:17:c8:32:74:2c:e7:e4:75:e0:fc:2d:e7: c8:14:8a:e1:21:4e:76:21:48:87:4d:90:34:54:f1:11:eb:1c: d2:69:79:43:8d:47:2b:57:13:7a:7f:6c:0e:26:19:8c:dd:e3: 69:a4:2a:1a:ed:c7:88:de:c3:86:0a:90:b3:fe:b6:73:4b:46: 97:93:d8:25:f4:d6:b5:0b:1d:d3:76:5f:32:1b:2f:4a:3e:08: 0b:b6:8a:05:1f:c3:47:7c:b0:53:cb:23:0e:a3:cf:04:16:8f: 82:ea:bf:95:f4:c3:a4:82:41:14:99:09:99:ce:b2:59:da:d5: 59:2c:73:0b:df:c2:40:47:ad:d9:c2:f6:f1:3a:9c:de:7c:90: 30:52:85:06 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt7pCiE+iC5A46czM0Aty9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMDMwYWY4Yzc1MzhiOWM1YWY4NTJmMWM0MmExNzVhYWY0 NmY3ZTAwHhcNMjYwMTAxMjIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTA0YTcwNmE3YzEyYTBhYTQ0MDQ3OTI4YzA1ZWU5ODc0MjhlNDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYs1C9QwVhJ0GE7IhV2YpDetlBbc SPlhOuqzAnity5RiMIzYREl0FYdGnIzMnnVjPWi0jpipM0iLQELPAtWANRJBZjh0 66+xqNsXrk4RurEVLZ4CCwGjU2R8Fdy+AchyeN7JjEcmYPenyFuu0e3fjYn7jlAJ +BLnRHjTdDJHUpiX8OPNQKcYGl/YjfTrf+YyLr6NLmTvdtt1ftIZfB2qjlbAep2O IVQWFDoZHlGx4uI8xJZk0qGBb3q0JmYLvURf6ul+pchExEr5aL14NwBkFslSUH8X m2efXrmdTMYVKF5UGfi2BBhyjSHyQN6ePAbe2e4zlf1ilX6iPi4tXMJmWQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFKkEpwanwSoKpEBHkowF7ph0KOQYMB8GA1UdIwQY MBaAFNwDCvjHU4ucWvhS8cQqF1qvRvfgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0FNSy1NZFRpNXhhLUZMeHhDb1hXcTlHOS1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84ZjVlNzUtMTMzNC00ZmIwLTlmNmEt YmRkYzE4YzdhM2YzLzEvcVFTbkJxZkJLZ3FrUUVlU2pBWHVtSFFvNUJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84ZjVlNzUtMTMzNC00ZmIwLTlmNmEtYmRkYzE4YzdhM2Yz LzEvM0FNSy1NZFRpNXhhLUZMeHhDb1hXcTlHOS1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBATCaFAD BADCaFQwDQQCAAIwBwMFAyoEn8AwDQYJKoZIhvcNAQELBQADggEBACkm+il6TltI fjX41F6wV7wY5lsFvYTEedbbXY4JeKndKIdEos1XDAFYmKeAj/oq20cZeCcu/B6C 8u51iXTVTYbavKg5wz/esHr7TYmjTTFoUOQ/kIIXXeaVlCUO/q/LAnjyNTop138W RZ6z+TETB758XRfIMnQs5+R14Pwt58gUiuEhTnYhSIdNkDRU8RHrHNJpeUONRytX E3p/bA4mGYzd42mkKhrtx4jew4YKkLP+tnNLRpeT2CX01rULHdN2XzIbL0o+CAu2 igUfw0d8sFPLIw6jzwQWj4Lqv5X0w6SCQRSZCZnOslna1VkscwvfwkBHrdnC9vE6 nN58kDBShQY= -----END CERTIFICATE-----Generated at Tue Jan 20 07:57:11 2026 by rpki-client