This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/qQfpp7t9DK9V6gL_8q23BxXNnRw.roa File: qQfpp7t9DK9V6gL_8q23BxXNnRw.roa (raw, json) Hash identifier: lJumWK87pFOc6ZFcfXBZ+TluPfr8swJRdJzi3gOyHEc= Subject key identifier: A9:07:E9:A7:BB:7D:0C:AF:55:EA:02:FF:F2:AD:B7:07:15:CD:9D:1C Certificate issuer: /CN=47d064fb3e541f23563065e48f300f2cfdfe009a Certificate serial: 019B7F1555824DF402A2FA58249733E39AD1 Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/qQfpp7t9DK9V6gL_8q23BxXNnRw.roa Signing time: Fri 02 Jan 2026 14:21:03 +0000 ROA not before: Fri 02 Jan 2026 14:21:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 195.244.28.0/23 maxlen: 23 195.244.28.0/24 maxlen: 24 195.244.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:55:82:4d:f4:02:a2:fa:58:24:97:33:e3:9a:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a Validity Not Before: Jan 2 14:21:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a907e9a7bb7d0caf55ea02fff2adb70715cd9d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:12:ec:fb:3d:90:b4:24:9a:00:fb:57:e7:d5: c3:07:44:8d:65:74:92:95:e7:66:e6:14:e9:13:86: 2e:f5:cc:11:eb:a6:a6:07:7d:74:e5:6d:78:3d:8f: 23:52:5f:02:cf:88:a0:11:b5:fd:c9:d6:0f:94:2e: 55:b5:d4:d9:d9:94:73:78:b7:ed:ed:ff:0f:26:5c: 36:a0:a0:7a:d7:2a:28:63:39:c6:17:34:35:62:27: ef:68:dc:9c:76:17:6e:6a:ba:a7:1d:7b:df:2f:55: 72:5d:47:2d:c6:df:04:ca:3c:60:ea:90:eb:02:08: 6f:f8:ae:29:f1:0f:b8:88:cb:da:f8:84:1a:f8:d3: d2:6a:86:94:0a:93:51:b2:9a:f8:5c:1c:91:29:94: 94:78:19:41:4f:bb:dc:62:22:f9:40:9d:36:a5:42: ec:e0:ad:33:a6:50:f9:69:6a:74:69:c6:28:ed:19: 5e:86:28:28:a3:9e:91:f2:82:49:cc:63:0d:63:1c: 15:a0:85:52:c0:b6:c7:6a:ab:fa:3f:f5:3e:8c:c1: e6:91:07:53:83:4b:bb:e8:50:b9:ae:6f:b8:0f:32: 75:81:a9:83:6a:2c:33:e7:ec:d3:b9:a1:ea:38:d8: d2:30:f6:4b:c2:5b:6e:70:8a:04:b4:5e:69:c8:2f: f8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:07:E9:A7:BB:7D:0C:AF:55:EA:02:FF:F2:AD:B7:07:15:CD:9D:1C X509v3 Authority Key Identifier: keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/qQfpp7t9DK9V6gL_8q23BxXNnRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.244.28.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:d7:91:e2:a8:b7:f2:d3:dd:24:6c:5b:34:73:fa:a4:d1:8f: 01:64:e9:5d:46:b0:8c:24:bb:26:8e:bb:0e:68:8e:51:54:28: 64:6f:24:68:47:56:77:bf:c9:46:e5:13:d1:91:1d:89:a6:85: d2:21:c5:70:28:92:3a:c1:65:88:fa:86:6b:23:90:95:10:7e: e0:46:1c:7d:db:82:f1:16:0b:21:94:94:62:be:48:92:f7:bc: 23:59:45:b9:00:07:ac:ed:b7:41:f2:59:fa:94:22:92:27:e1: fd:02:19:f0:fc:ef:ab:5f:6c:20:cc:e8:ba:f6:54:90:e1:f4: 45:d3:87:18:f8:33:12:5c:8c:e3:39:16:5c:eb:c8:a6:10:f7: 16:97:b5:ed:9f:4e:24:ea:5c:94:4c:b2:66:2f:af:c5:a5:4a: 43:72:d1:85:40:55:bf:3a:8f:bb:ae:eb:9c:0a:ca:07:82:9e: d7:7b:5d:57:ab:67:c0:c4:c9:ff:85:29:63:56:8a:01:c8:9f: e4:fa:b0:ec:22:e0:d5:b1:77:22:29:40:7d:a2:9b:61:c0:18: 4b:60:bb:ff:df:49:6a:f8:10:60:65:9a:e3:dd:fb:56:58:7e: de:2f:9c:b9:ac:f7:e3:b4:8b:43:f8:46:82:e8:13:39:bb:a0: 99:1e:c4:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FVWCTfQCovpYJJcz45rRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZDA2NGZiM2U1NDFmMjM1NjMwNjVlNDhmMzAwZjJjZmRm ZTAwOWEwHhcNMjYwMTAyMTQyMTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTA3ZTlhN2JiN2QwY2FmNTVlYTAyZmZmMmFkYjcwNzE1Y2Q5ZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhLs+z2QtCSaAPtX59XDB0SNZXSS ledm5hTpE4Yu9cwR66amB3105W14PY8jUl8Cz4igEbX9ydYPlC5VtdTZ2ZRzeLft 7f8PJlw2oKB61yooYznGFzQ1YifvaNycdhduarqnHXvfL1VyXUctxt8Eyjxg6pDr Aghv+K4p8Q+4iMva+IQa+NPSaoaUCpNRspr4XByRKZSUeBlBT7vcYiL5QJ02pULs 4K0zplD5aWp0acYo7Rlehigoo56R8oJJzGMNYxwVoIVSwLbHaqv6P/U+jMHmkQdT g0u76FC5rm+4DzJ1gamDaiwz5+zTuaHqONjSMPZLwltucIoEtF5pyC/4twIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKkH6ae7fQyvVeoC//KttwcVzZ0cMB8GA1UdIwQY MBaAFEfQZPs+VB8jVjBl5I8wDyz9/gCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kNTY2OTMtMjI1NC00YTNiLWFjYmIt ZWZhYWZmMGE5ODJmLzEvcVFmcHA3dDlESzlWNmdMXzhxMjNCeFhOblJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9kNTY2OTMtMjI1NC00YTNiLWFjYmItZWZhYWZmMGE5ODJm LzEvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/QcMA0G CSqGSIb3DQEBCwUAA4IBAQBf15HiqLfy090kbFs0c/qk0Y8BZOldRrCMJLsmjrsO aI5RVChkbyRoR1Z3v8lG5RPRkR2JpoXSIcVwKJI6wWWI+oZrI5CVEH7gRhx924Lx FgshlJRivkiS97wjWUW5AAes7bdB8ln6lCKSJ+H9Ahnw/O+rX2wgzOi69lSQ4fRF 04cY+DMSXIzjORZc68imEPcWl7Xtn04k6lyUTLJmL6/FpUpDctGFQFW/Oo+7ruuc CsoHgp7Xe11Xq2fAxMn/hSljVooByJ/k+rDsIuDVsXciKUB9opthwBhLYLv/30lq +BBgZZrj3ftWWH7eL5y5rPfjtItD+EaC6BM5u6CZHsRw -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:27 2026 by rpki-client