This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/qA7d0hV7yweCVccdWUkIJoRwGhY.roa File: qA7d0hV7yweCVccdWUkIJoRwGhY.roa (raw, json) Hash identifier: 4eWS0DS3mR7iZPRi58DdU3aTkA34+LKikPGGrZPgsSM= Subject key identifier: A8:0E:DD:D2:15:7B:CB:07:82:55:C7:1D:59:49:08:26:84:70:1A:16 Certificate issuer: /CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76 Certificate serial: 019B7CEE32D043593E60EAF11AEBC9D45031 Authority key identifier: 70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/qA7d0hV7yweCVccdWUkIJoRwGhY.roa Signing time: Fri 02 Jan 2026 04:19:03 +0000 ROA not before: Fri 02 Jan 2026 04:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210958 IP address blocks: 46.254.64.0/21 maxlen: 21 93.190.56.0/21 maxlen: 21 2a02:a28::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:32:d0:43:59:3e:60:ea:f1:1a:eb:c9:d4:50:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76 Validity Not Before: Jan 2 04:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a80eddd2157bcb078255c71d5949082684701a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:88:ab:f9:96:68:ce:bf:e8:81:10:f7:8f: 51:c4:a5:55:8f:5e:9e:85:a4:cb:f5:00:53:99:a3: 13:14:2b:47:12:a2:c3:62:30:98:e5:fe:19:9e:e1: 9a:69:80:ff:2c:3f:b7:2d:36:33:bb:48:4e:52:d3: d2:fb:a8:e5:ef:af:04:70:ef:d1:ad:5a:1a:70:ba: fa:39:9b:49:23:d3:f5:25:58:3e:8b:2f:12:9c:4b: 15:3b:16:9b:55:f4:a8:7c:fd:d8:af:59:39:ec:6a: 80:65:47:cc:90:c9:4c:d4:d7:28:7a:1c:ec:dd:de: 61:19:6b:f2:3b:c9:86:60:d2:68:50:11:50:bd:1a: 03:6b:a4:a1:05:cf:86:a6:08:4d:63:54:aa:ad:f4: fc:a1:34:06:88:4b:ec:13:af:41:c6:44:7e:d5:2b: 86:53:fe:69:81:e5:a4:6c:b0:29:0d:40:9a:6f:c9: e9:45:56:2c:15:33:e7:7a:69:cd:c8:ee:8e:6e:31: 1d:6d:53:80:96:e2:59:5a:04:9e:e5:25:b4:71:1c: c5:37:7a:9a:03:07:f1:ac:ae:3d:15:45:09:44:93: 5b:96:92:0d:2b:be:23:aa:ed:1f:3a:ab:07:00:66: aa:09:94:1c:1c:71:4a:5c:a9:94:83:40:55:7f:f5: 46:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:0E:DD:D2:15:7B:CB:07:82:55:C7:1D:59:49:08:26:84:70:1A:16 X509v3 Authority Key Identifier: keyid:70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/qA7d0hV7yweCVccdWUkIJoRwGhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.64.0/21 93.190.56.0/21 IPv6: 2a02:a28::/32 Signature Algorithm: sha256WithRSAEncryption b7:99:e9:72:a4:84:b4:a9:a7:e5:b3:15:89:34:64:4e:41:cf: fd:40:3d:4b:3e:46:17:2c:3a:63:75:e8:61:b3:88:e3:60:9c: cc:ac:42:8e:f0:3d:05:c8:c7:d7:4a:d4:99:7a:f7:46:a0:d8: 80:f8:47:0c:40:1d:50:d1:92:28:86:17:d1:6e:0e:27:3a:a7: d3:34:f7:7e:0b:86:2d:7c:16:92:dc:7f:73:de:7d:f1:49:57: 5a:9f:6d:a3:cc:00:c9:90:ee:24:05:e2:fc:6e:2e:f5:05:4f: 8f:25:d8:81:0b:b8:ed:7e:24:3d:74:2f:3e:05:76:3d:36:8b: 55:8d:12:63:10:55:19:09:93:5a:d9:f1:f6:a3:48:86:ec:bb: 11:b9:77:fb:e9:ee:d8:ee:28:21:a2:e3:5e:b0:8a:b8:87:1b: 37:12:df:16:98:07:2f:f2:75:e2:09:04:6c:7a:27:20:66:70: de:9c:82:06:b8:43:60:ce:c7:84:3a:2e:0d:15:ef:a4:7f:a2: 80:09:bf:3f:08:68:e4:bb:76:0d:12:87:5d:2d:f6:1e:c3:7d: 5f:f3:f5:d8:11:b3:f0:c5:7b:27:10:cf:6e:8e:df:38:62:bc: c6:e3:0a:fc:d3:e3:ba:f7:08:6d:42:e3:ef:54:d2:50:d0:ca: be:b7:82:d8 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87jLQQ1k+YOrxGuvJ1FAxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZWY5NWQyY2YwZTdkODQwNThiNTI4ZTc5MDJkNjBiNDAz ZDdiNzYwHhcNMjYwMTAyMDQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODBlZGRkMjE1N2JjYjA3ODI1NWM3MWQ1OTQ5MDgyNjg0NzAxYTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3SIq/mWaM6/6IEQ949RxKVVj16e haTL9QBTmaMTFCtHEqLDYjCY5f4ZnuGaaYD/LD+3LTYzu0hOUtPS+6jl768EcO/R rVoacLr6OZtJI9P1JVg+iy8SnEsVOxabVfSofP3Yr1k57GqAZUfMkMlM1Ncoehzs 3d5hGWvyO8mGYNJoUBFQvRoDa6ShBc+GpghNY1SqrfT8oTQGiEvsE69BxkR+1SuG U/5pgeWkbLApDUCab8npRVYsFTPnemnNyO6ObjEdbVOAluJZWgSe5SW0cRzFN3qa AwfxrK49FUUJRJNblpINK74jqu0fOqsHAGaqCZQcHHFKXKmUg0BVf/VG+wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKgO3dIVe8sHglXHHVlJCCaEcBoWMB8GA1UdIwQY MBaAFHDvldLPDn2EBYtSjnkC1gtAPXt2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY08tVjBzOE9mWVFGaTFLT2VRTFdDMEE5ZTNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xNTNlZTItYmE4NC00NDliLTgxZmEt YTA0MGM3YjZhNjcwLzEvcUE3ZDBoVjd5d2VDVmNjZFdVa0lKb1J3R2hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xNTNlZTItYmE4NC00NDliLTgxZmEtYTA0MGM3YjZhNjcw LzEvY08tVjBzOE9mWVFGaTFLT2VRTFdDMEE5ZTNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDLv5AAwQD Xb44MA0EAgACMAcDBQAqAgooMA0GCSqGSIb3DQEBCwUAA4IBAQC3melypIS0qafl sxWJNGROQc/9QD1LPkYXLDpjdehhs4jjYJzMrEKO8D0FyMfXStSZevdGoNiA+EcM QB1Q0ZIohhfRbg4nOqfTNPd+C4YtfBaS3H9z3n3xSVdan22jzADJkO4kBeL8bi71 BU+PJdiBC7jtfiQ9dC8+BXY9NotVjRJjEFUZCZNa2fH2o0iG7LsRuXf76e7Y7igh ouNesIq4hxs3Et8WmAcv8nXiCQRseicgZnDenIIGuENgzseEOi4NFe+kf6KACb8/ CGjku3YNEoddLfYew31f8/XYEbPwxXsnEM9ujt84YrzG4wr80+O69whtQuPvVNJQ 0Mq+t4LY -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:57 2026 by rpki-client