This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/QU7_3XfMPgpIQHQ50_jrWQFQx7o.roa File: QU7_3XfMPgpIQHQ50_jrWQFQx7o.roa (raw, json) Hash identifier: LAB6ax0DqVCa39oB2jLFatVSxmBNDm8xZgfRNR237Ws= Subject key identifier: 41:4E:FF:DD:77:CC:3E:0A:48:40:74:39:D3:F8:EB:59:01:50:C7:BA Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Certificate serial: 019B7C12DBC864EC78EF5036603C66646C00 Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/QU7_3XfMPgpIQHQ50_jrWQFQx7o.roa Signing time: Fri 02 Jan 2026 00:19:29 +0000 ROA not before: Fri 02 Jan 2026 00:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 137.174.0.0/16 maxlen: 22 137.174.128.0/18 maxlen: 22 137.174.192.0/19 maxlen: 22 141.137.0.0/16 maxlen: 22 147.123.32.0/19 maxlen: 24 147.123.128.0/17 maxlen: 22 147.123.208.0/21 maxlen: 24 155.204.0.0/16 maxlen: 22 155.204.119.0/24 maxlen: 24 155.204.128.0/18 maxlen: 22 155.204.200.0/21 maxlen: 24 155.204.208.0/21 maxlen: 21 155.204.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:db:c8:64:ec:78:ef:50:36:60:3c:66:64:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Validity Not Before: Jan 2 00:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=414effdd77cc3e0a48407439d3f8eb590150c7ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:27:72:3f:73:0b:c6:1a:5c:06:d8:fa:36:f7: 17:0d:03:8f:4e:d2:05:52:0a:76:21:cd:46:66:2a: c0:77:54:3a:44:07:bc:8c:1b:7f:86:2a:4b:b1:4f: c2:09:a1:4f:92:c4:54:6e:6a:50:92:8f:b8:73:be: 54:29:4f:c0:97:95:b4:34:39:64:a6:65:cb:08:fb: 32:c8:78:d5:7b:72:02:ef:a2:af:a4:9e:db:45:5e: e4:03:c6:2e:2c:f3:65:12:06:76:80:a8:6a:a5:75: 21:68:78:15:23:7b:d7:f5:22:e1:2f:b7:11:f7:2d: be:74:8b:4b:80:41:19:91:07:cd:b0:93:90:c4:31: 40:04:f4:9d:ef:b8:88:3e:d5:3a:8e:cf:c9:ed:a3: 99:9d:c6:ce:8a:c2:94:b0:02:77:c9:5a:81:c9:5b: 87:67:a8:1c:66:d7:42:f4:de:bf:0c:2d:d1:07:0d: 6b:b7:64:83:a0:23:aa:0f:f9:2b:4c:b1:6c:7e:cc: 80:4a:83:79:ba:e9:68:4d:dc:15:96:4c:49:a3:d8: e9:ca:ca:2f:9b:00:dc:11:b7:3f:97:60:59:97:81: c6:74:ba:b2:bf:61:8d:73:85:20:af:49:90:0d:e6: 1d:a2:e7:d1:2b:87:7d:57:cd:ac:29:dd:b6:3d:9f: 03:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4E:FF:DD:77:CC:3E:0A:48:40:74:39:D3:F8:EB:59:01:50:C7:BA X509v3 Authority Key Identifier: keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/QU7_3XfMPgpIQHQ50_jrWQFQx7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.174.0.0/16 141.137.0.0/16 147.123.32.0/19 147.123.128.0/17 155.204.0.0/16 Signature Algorithm: sha256WithRSAEncryption 56:8c:83:1b:fc:00:39:12:14:cc:bb:3a:70:80:07:9f:c5:c0: d0:80:c2:91:c6:c5:a0:5c:d8:60:9d:09:f3:1d:06:4b:a3:f0: dd:94:22:6c:aa:75:21:0c:60:7b:49:c4:f3:f9:a2:22:d6:5e: f9:e2:ca:e6:de:26:4e:03:f3:f8:fa:d4:81:8c:ee:35:01:21: 46:75:1b:1c:2b:b1:57:8d:b2:ea:17:39:34:d8:4e:f4:17:e5: e6:f0:11:13:df:62:72:c0:a6:de:1b:1a:23:ec:32:56:44:88: ec:36:03:f6:b4:03:1c:bc:3a:2e:06:93:c8:be:ce:cb:c8:b3: e5:cb:24:91:77:13:47:c1:f6:6b:43:b1:91:5b:17:47:00:d0: d7:bf:89:52:ea:d8:00:6c:cc:97:b5:6b:55:a7:77:ad:e5:d0: 7e:35:f0:1b:16:82:d1:1d:53:7a:12:d6:95:90:d6:39:a1:d2: fd:b4:41:49:e4:ec:14:3e:39:d3:93:b3:98:d5:77:7f:bd:71: d8:a9:a9:6e:c2:39:93:25:ea:36:cb:fa:a3:63:7d:49:2c:44: da:da:9d:f9:74:97:24:69:8c:d7:9f:8f:ff:33:7f:b5:35:d6: 64:3b:6f:88:6b:80:7f:b0:3d:e1:38:f6:e6:c2:5c:83:b6:a6: 51:88:4e:3e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8EtvIZOx471A2YDxmZGwAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTVkODQwNTNlMmIwYzMxM2FmMWUzYmE1MTAyNDY2YTVm Nzk2NzgwHhcNMjYwMTAyMDAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTRlZmZkZDc3Y2MzZTBhNDg0MDc0MzlkM2Y4ZWI1OTAxNTBjN2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSdyP3MLxhpcBtj6NvcXDQOPTtIF Ugp2Ic1GZirAd1Q6RAe8jBt/hipLsU/CCaFPksRUbmpQko+4c75UKU/Al5W0NDlk pmXLCPsyyHjVe3IC76KvpJ7bRV7kA8YuLPNlEgZ2gKhqpXUhaHgVI3vX9SLhL7cR 9y2+dItLgEEZkQfNsJOQxDFABPSd77iIPtU6js/J7aOZncbOisKUsAJ3yVqByVuH Z6gcZtdC9N6/DC3RBw1rt2SDoCOqD/krTLFsfsyASoN5uuloTdwVlkxJo9jpysov mwDcEbc/l2BZl4HGdLqyv2GNc4Ugr0mQDeYdoufRK4d9V82sKd22PZ8DIQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEFO/913zD4KSEB0OdP461kBUMe6MB8GA1UdIwQY MBaAFCKl2EBT4rDDE68eO6UQJGal95Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUt NTkxY2FmNTM2ZWNjLzEvUVU3XzNYZk1QZ3BJUUhRNTBfanJXUUZReDdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUtNTkxY2FmNTM2ZWNj LzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbAwMAia4DAwCN iQMEBZN7IAMEB5N7gAMDAJvMMA0GCSqGSIb3DQEBCwUAA4IBAQBWjIMb/AA5EhTM uzpwgAefxcDQgMKRxsWgXNhgnQnzHQZLo/DdlCJsqnUhDGB7ScTz+aIi1l754srm 3iZOA/P4+tSBjO41ASFGdRscK7FXjbLqFzk02E70F+Xm8BET32JywKbeGxoj7DJW RIjsNgP2tAMcvDouBpPIvs7LyLPlyySRdxNHwfZrQ7GRWxdHANDXv4lS6tgAbMyX tWtVp3et5dB+NfAbFoLRHVN6EtaVkNY5odL9tEFJ5OwUPjnTk7OY1Xd/vXHYqalu wjmTJeo2y/qjY31JLETa2p35dJckaYzXn4//M3+1NdZkO2+Ia4B/sD3hOPbmwlyD tqZRiE4+ -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:28 2026 by rpki-client