This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/q2AmJFBB5-pPwWba1wo_Xr8dY5E.roa File: q2AmJFBB5-pPwWba1wo_Xr8dY5E.roa (raw, json) Hash identifier: Nw82VEs4qogV9w8ws+aZviuxxEYSu5f5/sBd608uDxM= Subject key identifier: AB:60:26:24:50:41:E7:EA:4F:C1:66:DA:D7:0A:3F:5E:BF:1D:63:91 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B7834467D50EE28DF5DB7E00591A7B1E2 Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/q2AmJFBB5-pPwWba1wo_Xr8dY5E.roa Signing time: Thu 01 Jan 2026 06:17:30 +0000 ROA not before: Thu 01 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 18186 IP address blocks: 2.58.244.0/22 maxlen: 24 2.58.248.0/22 maxlen: 24 5.183.116.0/22 maxlen: 24 5.183.120.0/22 maxlen: 24 45.8.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:46:7d:50:ee:28:df:5d:b7:e0:05:91:a7:b1:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab6026245041e7ea4fc166dad70a3f5ebf1d6391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:07:4b:a6:f1:e5:4b:15:a7:8d:e5:80:48:fb: 0e:9c:c9:c3:4c:9f:62:8c:77:49:44:f7:a5:a3:37: ed:60:97:33:7a:38:29:15:ec:d9:ff:6b:92:9c:9b: 2e:40:68:76:03:eb:97:8c:d0:4a:11:e0:ed:f6:69: 4c:24:22:cf:f8:20:a4:a5:8d:c3:d8:5a:89:ac:86: f7:71:de:2a:38:39:d2:ae:7f:a6:13:ea:23:a9:94: 92:89:ad:a1:f5:ad:cb:81:13:ec:03:fe:f3:4c:c9: 40:53:be:4e:55:28:53:d0:30:3f:a5:73:65:4d:1a: d1:be:e1:36:27:08:61:40:76:52:08:ef:b6:36:be: 6e:54:0e:67:6f:55:87:05:fe:c9:e3:48:61:0c:4d: de:5e:9e:17:ff:1b:f3:58:74:47:c7:1e:b7:6c:2b: 3f:ef:be:f2:18:31:2b:41:1c:df:d1:34:f7:85:f8: 06:6a:3a:f6:4f:86:71:dc:e3:41:71:6b:f2:ca:25: cd:01:91:78:83:c9:50:37:2a:c1:38:5a:10:53:10: 32:22:7d:6a:de:42:1e:36:0e:49:d2:a0:20:87:81: 73:f7:59:35:6a:e1:f9:07:78:04:e5:f2:fd:7a:7a: 7b:5b:fa:38:9c:3a:68:c2:52:ad:8c:92:6c:22:cd: a7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:60:26:24:50:41:E7:EA:4F:C1:66:DA:D7:0A:3F:5E:BF:1D:63:91 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/q2AmJFBB5-pPwWba1wo_Xr8dY5E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.244.0-2.58.251.255 5.183.116.0-5.183.123.255 45.8.32.0/22 Signature Algorithm: sha256WithRSAEncryption 42:00:0c:d1:a6:68:97:ed:ef:47:23:97:f0:55:88:70:ce:6f: 03:35:61:59:1e:38:25:61:10:e5:4c:f7:cd:09:fc:0e:5d:85: ea:97:24:75:42:c8:f3:a7:79:3d:5f:05:8d:6c:97:ed:84:2e: dd:26:80:e1:86:df:7d:cd:94:6a:47:1c:31:e6:9b:a1:91:14: 0c:c8:d4:e6:23:ce:74:5a:cb:d4:ae:24:93:3e:42:72:57:35: 42:07:43:c1:26:90:62:31:5b:ff:d1:b1:c5:21:93:95:5e:05: 4f:14:fe:24:d9:b2:8b:63:f9:fd:3a:0e:f6:86:55:b8:b7:8e: 56:54:6b:20:e5:13:f8:bc:48:e8:e6:89:2e:9c:83:e4:3b:a1: 72:fb:b3:d1:c2:a5:97:5b:6d:7e:44:44:01:00:bf:e1:d3:61: f3:ea:90:82:65:08:17:fd:4f:83:0a:31:b9:db:09:4a:cd:3b: 7f:2b:67:79:fb:f2:9f:97:f3:39:ac:70:12:a5:35:6c:10:5c: 3c:f3:17:cf:40:46:66:f7:67:78:85:e7:e5:84:a3:2a:62:e8: b5:9a:af:a8:bb:ad:38:23:fc:fb:f4:82:73:a7:c0:59:6e:75: 05:dd:7f:5e:52:80:33:7d:b9:bc:93:f7:19:af:94:f1:7c:80: f5:30:fe:49 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt4NEZ9UO4o31234AWRp7HiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjYwMjYyNDUwNDFlN2VhNGZjMTY2ZGFkNzBhM2Y1ZWJmMWQ2MzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAdLpvHlSxWnjeWASPsOnMnDTJ9i jHdJRPelozftYJczejgpFezZ/2uSnJsuQGh2A+uXjNBKEeDt9mlMJCLP+CCkpY3D 2FqJrIb3cd4qODnSrn+mE+ojqZSSia2h9a3LgRPsA/7zTMlAU75OVShT0DA/pXNl TRrRvuE2JwhhQHZSCO+2Nr5uVA5nb1WHBf7J40hhDE3eXp4X/xvzWHRHxx63bCs/ 777yGDErQRzf0TT3hfgGajr2T4Zx3ONBcWvyyiXNAZF4g8lQNyrBOFoQUxAyIn1q 3kIeNg5J0qAgh4Fz91k1auH5B3gE5fL9enp7W/o4nDpowlKtjJJsIs2n3wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKtgJiRQQefqT8Fm2tcKP16/HWORMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvcTJBbUpGQkI1LXBQd1diYTF3b19YcjhkWTVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAICOvQD BAICOvgwDAMEAgW3dAMEAgW3eAMEAi0IIDANBgkqhkiG9w0BAQsFAAOCAQEAQgAM 0aZol+3vRyOX8FWIcM5vAzVhWR44JWEQ5Uz3zQn8Dl2F6pckdULI86d5PV8FjWyX 7YQu3SaA4Ybffc2UakccMeaboZEUDMjU5iPOdFrL1K4kkz5Cclc1QgdDwSaQYjFb /9GxxSGTlV4FTxT+JNmyi2P5/ToO9oZVuLeOVlRrIOUT+LxI6OaJLpyD5Duhcvuz 0cKll1ttfkREAQC/4dNh8+qQgmUIF/1PgwoxudsJSs07fytnefvyn5fzOaxwEqU1 bBBcPPMXz0BGZvdneIXn5YSjKmLotZqvqLutOCP8+/SCc6fAWW51Bd1/XlKAM325 vJP3Ga+U8XyA9TD+SQ== -----END CERTIFICATE-----Generated at Mon Jan 19 11:49:49 2026 by rpki-client