This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/QswWzxGJPrCuags3T3sVZhymc5Q.roa File: QswWzxGJPrCuags3T3sVZhymc5Q.roa (raw, json) Hash identifier: /433oyyX1AGDgQHu0Vt/5hnmhr/+/BlPoLd3zml5Aq0= Subject key identifier: 42:CC:16:CF:11:89:3E:B0:AE:6A:0B:37:4F:7B:15:66:1C:A6:73:94 Certificate issuer: /CN=f4abcc79a367d9c012c1684a8422996cdc43de76 Certificate serial: 019B7E38D8477BB9081AF6993E4B44BE472F Authority key identifier: F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/QswWzxGJPrCuags3T3sVZhymc5Q.roa Signing time: Fri 02 Jan 2026 10:20:13 +0000 ROA not before: Fri 02 Jan 2026 10:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12581 IP address blocks: 185.27.252.0/22 maxlen: 22 212.79.160.0/19 maxlen: 19 2a00:c940::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d8:47:7b:b9:08:1a:f6:99:3e:4b:44:be:47:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4abcc79a367d9c012c1684a8422996cdc43de76 Validity Not Before: Jan 2 10:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42cc16cf11893eb0ae6a0b374f7b15661ca67394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9d:46:2c:61:21:83:66:64:39:3b:0b:d7:fb: 55:d6:61:7d:2c:c5:04:88:e8:ef:ff:a1:44:84:53: 11:49:0e:64:23:3b:2b:fe:34:1e:2d:8f:82:db:f6: fd:94:c7:00:41:a3:e9:ee:e8:be:aa:da:53:85:7c: 09:f2:d2:4c:fc:c9:45:62:f0:0e:2f:cc:18:7d:f9: c6:6f:cf:f2:f7:9e:85:60:cd:93:17:76:1a:ea:18: 87:a5:1e:ea:e5:21:02:27:7e:66:8e:b1:fd:4a:ac: 41:22:0d:3c:10:a5:c3:78:1e:c5:d5:e2:6b:35:16: 44:05:0f:94:39:f0:03:15:63:89:f4:6e:fc:b9:69: 0f:ea:96:6f:5a:6f:b6:59:76:8c:e7:60:3b:4c:1b: e4:55:33:3e:05:6d:63:0a:0e:f9:43:fe:9b:21:48: f6:6b:6f:9e:0e:f0:7e:a2:c3:c3:fd:c5:34:3b:f0: 09:da:2e:e9:30:5d:4f:16:3d:2c:5d:79:3f:62:b4: c5:dd:59:01:1b:6c:23:c7:ad:55:27:c8:b2:84:05: 10:ad:b4:bf:b9:47:ca:6d:6e:1e:2f:f5:a2:5b:ef: cb:b5:26:a8:97:54:67:d6:2c:64:64:e5:6e:1f:ae: 65:06:df:b2:94:cb:25:23:1e:55:9e:cb:ee:a2:95: 6f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CC:16:CF:11:89:3E:B0:AE:6A:0B:37:4F:7B:15:66:1C:A6:73:94 X509v3 Authority Key Identifier: keyid:F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/QswWzxGJPrCuags3T3sVZhymc5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.27.252.0/22 212.79.160.0/19 IPv6: 2a00:c940::/32 Signature Algorithm: sha256WithRSAEncryption 62:be:06:b3:7b:87:30:19:22:05:10:ef:4b:78:85:d8:6d:ab: 8d:7f:f8:ef:be:88:04:e1:d5:8e:3f:49:50:c7:02:cc:84:f9: 41:52:23:ba:4b:27:09:d9:a7:5d:25:57:15:24:f3:48:af:b8: 8e:09:80:2a:56:07:5d:68:e9:cc:d5:1b:26:29:fd:8a:b8:e3: fc:2c:12:e0:27:32:05:52:66:7c:c3:8c:f4:63:e9:10:16:58: 8f:63:60:64:0d:fb:e2:18:7d:d9:eb:a8:12:6d:fb:be:e2:bb: a9:f7:23:4d:51:4d:73:1a:a0:a5:d1:8a:71:d8:cd:31:26:1f: 11:c5:22:f0:80:47:3d:bd:bd:0d:02:e4:0a:53:ca:2d:0f:e5: f3:5d:13:77:ee:22:7c:a4:a3:1b:66:dd:be:ed:1e:47:7a:3e: a2:f9:cb:59:39:bb:a7:33:9f:8c:1c:c0:72:b7:f7:20:ca:24: a4:60:1d:af:14:48:2e:ff:58:21:7b:aa:dc:7c:b6:11:a1:45: 67:99:49:a0:dd:78:ef:6b:f6:9b:02:0f:ae:02:c7:82:d4:e6: ee:90:0c:e3:0e:7e:2d:44:11:64:b3:63:44:05:36:4b:46:4c: 19:55:3c:83:d4:d7:a2:1e:9c:c2:d9:bc:5c:d5:06:f6:0f:94: b9:5c:46:64 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+ONhHe7kIGvaZPktEvkcvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YWJjYzc5YTM2N2Q5YzAxMmMxNjg0YTg0MjI5OTZjZGM0 M2RlNzYwHhcNMjYwMTAyMTAyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmNjMTZjZjExODkzZWIwYWU2YTBiMzc0ZjdiMTU2NjFjYTY3Mzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp1GLGEhg2ZkOTsL1/tV1mF9LMUE iOjv/6FEhFMRSQ5kIzsr/jQeLY+C2/b9lMcAQaPp7ui+qtpThXwJ8tJM/MlFYvAO L8wYffnGb8/y956FYM2TF3Ya6hiHpR7q5SECJ35mjrH9SqxBIg08EKXDeB7F1eJr NRZEBQ+UOfADFWOJ9G78uWkP6pZvWm+2WXaM52A7TBvkVTM+BW1jCg75Q/6bIUj2 a2+eDvB+osPD/cU0O/AJ2i7pMF1PFj0sXXk/YrTF3VkBG2wjx61VJ8iyhAUQrbS/ uUfKbW4eL/WiW+/LtSaol1Rn1ixkZOVuH65lBt+ylMslIx5VnsvuopVvSwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFELMFs8RiT6wrmoLN097FWYcpnOUMB8GA1UdIwQY MBaAFPSrzHmjZ9nAEsFoSoQimWzcQ952MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUt2TWVhTm4yY0FTd1doS2hDS1piTnhEM25ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84OGJmMWUtZDljNS00ZDI0LTk0Yjgt ZGU0NGVlODE0NzBiLzEvUXN3V3p4R0pQckN1YWdzM1Qzc1ZaaHltYzVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi84OGJmMWUtZDljNS00ZDI0LTk0YjgtZGU0NGVlODE0NzBi LzEvOUt2TWVhTm4yY0FTd1doS2hDS1piTnhEM25ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuRv8AwQF 1E+gMA0EAgACMAcDBQAqAMlAMA0GCSqGSIb3DQEBCwUAA4IBAQBivgaze4cwGSIF EO9LeIXYbauNf/jvvogE4dWOP0lQxwLMhPlBUiO6SycJ2addJVcVJPNIr7iOCYAq VgddaOnM1RsmKf2KuOP8LBLgJzIFUmZ8w4z0Y+kQFliPY2BkDfviGH3Z66gSbfu+ 4rup9yNNUU1zGqCl0Ypx2M0xJh8RxSLwgEc9vb0NAuQKU8otD+XzXRN37iJ8pKMb Zt2+7R5Hej6i+ctZObunM5+MHMByt/cgyiSkYB2vFEgu/1ghe6rcfLYRoUVnmUmg 3Xjva/abAg+uAseC1ObukAzjDn4tRBFks2NEBTZLRkwZVTyD1NeiHpzC2bxc1Qb2 D5S5XEZk -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:17 2026 by rpki-client