This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/qWWCnvnb1AjTvXVQe6eky9BUjfQ.roa File: qWWCnvnb1AjTvXVQe6eky9BUjfQ.roa (raw, json) Hash identifier: uhoA5mJH4PMkfCjpYTO4XK5e/8oJdkyHk7G+Sws4TBU= Subject key identifier: A9:65:82:9E:F9:DB:D4:08:D3:BD:75:50:7B:A7:A4:CB:D0:54:8D:F4 Certificate issuer: /CN=b278ed8f9780f29dafa22f9fdf03374da4980e94 Certificate serial: 019B78345D58B70F443D287094047CA20FBF Authority key identifier: B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/qWWCnvnb1AjTvXVQe6eky9BUjfQ.roa Signing time: Thu 01 Jan 2026 06:17:36 +0000 ROA not before: Thu 01 Jan 2026 06:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59852 IP address blocks: 185.253.10.0/24 maxlen: 24 2a10:b4c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5d:58:b7:0f:44:3d:28:70:94:04:7c:a2:0f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b278ed8f9780f29dafa22f9fdf03374da4980e94 Validity Not Before: Jan 1 06:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a965829ef9dbd408d3bd75507ba7a4cbd0548df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8f:9d:6a:08:b5:8f:b5:40:b2:80:75:90:a8: e8:ab:c9:dc:5d:4b:9e:bb:99:ec:ed:1d:04:ad:05: 97:c1:1d:90:d1:41:76:49:66:dc:5f:5d:5d:e0:ed: b1:c6:91:fa:19:f1:7e:48:ff:fd:4b:02:82:b3:16: 98:82:70:11:4d:2d:b2:ee:1b:5f:25:e9:f7:5b:0c: d9:4c:59:1e:ea:24:33:97:5d:b1:02:9a:ec:ca:36: dd:81:95:19:c8:7e:b9:1a:80:b7:b2:3b:93:91:9a: 40:0d:0f:80:85:94:c4:12:08:f3:eb:be:fd:48:7c: 4b:8e:da:0b:31:d7:26:c9:85:b0:e2:1f:1c:4e:12: 4e:c0:d6:c5:a4:de:60:6f:20:98:bf:75:b5:48:a9: 57:f0:ab:4f:9e:44:a7:b1:5b:43:fb:12:55:31:d3: b2:5d:69:ce:a0:92:6e:89:5f:b2:02:dc:0a:6b:43: 68:4a:5b:83:84:e3:8a:ac:67:5e:5c:c9:d2:40:93: 97:35:df:41:3b:38:c2:10:9c:6c:19:c0:e2:0b:48: e7:82:42:00:97:10:83:88:49:47:54:d5:0f:10:c2: 8d:89:83:d9:c5:76:96:5f:7b:a4:5a:85:54:41:a4: fe:f5:0b:ad:3a:7a:92:65:cb:0f:bf:0f:2c:ad:03: 3b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:65:82:9E:F9:DB:D4:08:D3:BD:75:50:7B:A7:A4:CB:D0:54:8D:F4 X509v3 Authority Key Identifier: keyid:B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/qWWCnvnb1AjTvXVQe6eky9BUjfQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.10.0/24 IPv6: 2a10:b4c0::/29 Signature Algorithm: sha256WithRSAEncryption 48:9e:a5:a3:7c:0c:1c:0c:7a:2f:7f:35:a8:cc:9b:ec:aa:77: 47:fb:82:1b:d2:24:03:26:35:38:7c:40:55:f0:1a:26:99:e6: 90:85:09:2f:8f:46:66:7e:f0:f7:9d:ce:9f:d1:a8:f8:da:59: cf:4c:6f:19:e7:82:83:8d:52:87:fe:b1:21:c4:ee:ca:77:5f: b0:62:b7:38:a1:ed:92:13:2a:66:02:6b:fb:7e:71:4e:7b:63: 54:2a:3d:32:32:8e:1b:ec:bc:51:79:d5:4f:cb:3e:c1:63:e7: ea:f0:5f:07:93:bb:00:b8:0b:97:0d:3d:6a:f3:2f:e6:3c:fe: 54:39:23:67:83:5b:76:3f:44:d9:2f:15:35:14:b5:68:99:df: e7:7d:5f:b6:a8:94:75:68:70:ab:a2:46:9c:a6:b5:aa:d7:b4: bd:07:88:6f:4b:b0:c5:86:85:7a:77:7d:6a:ad:f6:1e:c4:6c: 95:e7:16:1f:6f:4a:fc:3d:53:81:a0:c3:2d:26:55:66:1c:a6: b5:59:8a:7e:1e:1d:53:54:d1:e6:a5:71:b9:cb:80:dd:98:e5: a6:6b:05:00:10:0a:ad:60:8b:a3:4d:cc:30:47:c3:69:3f:dd: 69:ed:7d:12:30:88:5f:ef:40:5d:6c:aa:04:ea:7a:0d:08:f2: 79:57:b4:06 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NF1Ytw9EPShwlAR8og+/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzhlZDhmOTc4MGYyOWRhZmEyMmY5ZmRmMDMzNzRkYTQ5 ODBlOTQwHhcNMjYwMTAxMDYxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTY1ODI5ZWY5ZGJkNDA4ZDNiZDc1NTA3YmE3YTRjYmQwNTQ4ZGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4+dagi1j7VAsoB1kKjoq8ncXUue u5ns7R0ErQWXwR2Q0UF2SWbcX11d4O2xxpH6GfF+SP/9SwKCsxaYgnARTS2y7htf Jen3WwzZTFke6iQzl12xAprsyjbdgZUZyH65GoC3sjuTkZpADQ+AhZTEEgjz6779 SHxLjtoLMdcmyYWw4h8cThJOwNbFpN5gbyCYv3W1SKlX8KtPnkSnsVtD+xJVMdOy XWnOoJJuiV+yAtwKa0NoSluDhOOKrGdeXMnSQJOXNd9BOzjCEJxsGcDiC0jngkIA lxCDiElHVNUPEMKNiYPZxXaWX3ukWoVUQaT+9QutOnqSZcsPvw8srQM7ZwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKllgp7529QI0711UHunpMvQVI30MB8GA1UdIwQY MBaAFLJ47Y+XgPKdr6Ivn98DN02kmA6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25qdGo1ZUE4cDJ2b2ktZjN3TTNUYVNZRHBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xZTIzMTYtMWI1Yi00YmE1LTkzN2Qt MDI4NjRjNTg1MTljLzEvcVdXQ252bmIxQWpUdlhWUWU2ZWt5OUJVamZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8xZTIzMTYtMWI1Yi00YmE1LTkzN2QtMDI4NjRjNTg1MTlj LzEvc25qdGo1ZUE4cDJ2b2ktZjN3TTNUYVNZRHBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuf0KMA0E AgACMAcDBQMqELTAMA0GCSqGSIb3DQEBCwUAA4IBAQBInqWjfAwcDHovfzWozJvs qndH+4Ib0iQDJjU4fEBV8BommeaQhQkvj0ZmfvD3nc6f0aj42lnPTG8Z54KDjVKH /rEhxO7Kd1+wYrc4oe2SEypmAmv7fnFOe2NUKj0yMo4b7LxRedVPyz7BY+fq8F8H k7sAuAuXDT1q8y/mPP5UOSNng1t2P0TZLxU1FLVomd/nfV+2qJR1aHCrokacprWq 17S9B4hvS7DFhoV6d31qrfYexGyV5xYfb0r8PVOBoMMtJlVmHKa1WYp+Hh1TVNHm pXG5y4DdmOWmawUAEAqtYIujTcwwR8NpP91p7X0SMIhf70BdbKoE6noNCPJ5V7QG -----END CERTIFICATE-----Generated at Mon Feb 9 21:26:13 2026 by rpki-client