This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/rQcEs3Af4LaLGUacDsSGTWNpXEg.roa File: rQcEs3Af4LaLGUacDsSGTWNpXEg.roa (raw, json) Hash identifier: yjLuvj/zIi87kGkUau/dqofBhr3Db1ixSQwKoxIfjdc= Subject key identifier: AD:07:04:B3:70:1F:E0:B6:8B:19:46:9C:0E:C4:86:4D:63:69:5C:48 Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2 Certificate serial: 019BFABB9358CC14FAA4B2ADC9167928D0CB Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/rQcEs3Af4LaLGUacDsSGTWNpXEg.roa Signing time: Mon 26 Jan 2026 14:35:55 +0000 ROA not before: Mon 26 Jan 2026 14:35:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62212 IP address blocks: 85.137.164.0/22 maxlen: 24 87.236.146.0/24 maxlen: 24 91.184.248.0/22 maxlen: 24 91.199.137.0/24 maxlen: 24 91.199.147.0/24 maxlen: 24 91.199.154.0/24 maxlen: 24 91.199.160.0/24 maxlen: 24 92.61.70.0/23 maxlen: 24 109.172.8.0/23 maxlen: 24 188.127.246.0/23 maxlen: 24 2a11:3b80::/29 maxlen: 48 2a11:3b80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:bb:93:58:cc:14:fa:a4:b2:ad:c9:16:79:28:d0:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2 Validity Not Before: Jan 26 14:35:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad0704b3701fe0b68b19469c0ec4864d63695c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b9:04:f8:7a:7e:03:51:cc:68:03:77:5e:b6: 88:98:26:af:fd:5a:7e:a0:e5:39:c9:8f:a1:c9:63: 83:2d:d7:80:0f:ec:1b:9e:86:21:b5:26:8b:70:10: 68:96:74:81:61:83:3a:7f:03:6c:a5:d0:73:ce:da: 96:43:c5:bb:90:b4:e1:6d:f4:03:5e:0f:f2:2e:e7: 29:2e:69:47:cf:fc:ad:19:dc:50:af:61:c0:17:f9: ef:a9:4d:17:20:7e:e7:5b:19:e3:b8:b4:d7:18:f9: fa:2f:76:6b:b6:0f:5d:04:56:bb:ac:44:5f:15:13: 3b:47:25:8c:cf:c0:a2:36:64:f0:98:a1:57:83:45: f6:aa:60:ff:ac:b9:e3:10:54:c8:fb:b6:16:b8:2f: 29:8d:2b:b2:6b:87:db:71:ce:46:de:73:92:42:22: f5:7a:3f:3a:fd:5a:3a:b2:22:a5:aa:65:1e:a1:86: b5:5d:31:8b:e9:82:c7:03:74:47:ba:85:2f:e2:02: 9d:aa:6c:2d:51:80:b7:22:21:45:cc:7b:56:9b:96: 82:c2:44:ca:86:1f:fd:c2:80:cc:76:7b:2f:d9:f2: dc:e9:03:92:88:76:83:26:a3:11:14:6e:8c:85:57: 76:c8:da:08:eb:19:34:0a:0d:88:40:a8:e4:d3:13: 37:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:07:04:B3:70:1F:E0:B6:8B:19:46:9C:0E:C4:86:4D:63:69:5C:48 X509v3 Authority Key Identifier: keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/rQcEs3Af4LaLGUacDsSGTWNpXEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.137.164.0/22 87.236.146.0/24 91.184.248.0/22 91.199.137.0/24 91.199.147.0/24 91.199.154.0/24 91.199.160.0/24 92.61.70.0/23 109.172.8.0/23 188.127.246.0/23 IPv6: 2a11:3b80::/29 Signature Algorithm: sha256WithRSAEncryption 03:e7:1c:3c:b7:36:ff:4a:ff:ab:d9:7b:24:4f:18:d1:38:0b: de:56:54:65:89:43:48:d6:03:1a:f0:40:cd:dd:66:ce:42:8f: c1:60:f7:a3:05:d9:36:9f:77:83:fd:12:a9:e2:c2:34:80:32: e8:bb:e5:9b:5b:70:da:20:14:55:fc:e2:cd:5c:c1:1d:60:47: c2:5a:59:56:eb:b5:5a:78:fe:bd:c9:09:24:3b:b7:b3:4c:39: 8f:28:ff:29:1f:00:9c:ec:63:86:77:c9:2d:17:e8:bc:9a:e0: f2:a7:87:21:9a:2a:2e:d1:8e:1f:de:f2:ce:5c:f0:ab:55:1c: a0:f4:6c:5d:42:9f:01:95:f7:f5:54:06:e3:62:cf:a8:48:f9: 64:6a:27:18:81:95:43:e2:d0:f3:4b:23:81:de:42:ae:df:01: 59:67:09:24:26:4d:2e:db:56:99:28:2e:61:1a:85:8b:0a:14: b5:bd:b7:e1:f5:31:df:7c:de:d4:aa:51:be:89:f9:91:a9:31: 6b:5e:68:36:54:55:3b:11:f2:39:66:09:3e:fc:70:93:ca:c6: 0b:dc:1a:97:09:47:36:4c:35:67:d2:71:f8:92:78:84:da:0e: a8:a5:5c:11:57:7c:e7:64:6a:e1:92:df:30:3e:b3:6f:5b:8f: a8:0c:a4:8c -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZv6u5NYzBT6pLKtyRZ5KNDLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjIwY2VjNzA5NzRkMDM3ZDc3Njk3NThjNzQ2NjgzMDVi MzJjZjIwHhcNMjYwMTI2MTQzNTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDA3MDRiMzcwMWZlMGI2OGIxOTQ2OWMwZWM0ODY0ZDYzNjk1YzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrkE+Hp+A1HMaAN3XraImCav/Vp+ oOU5yY+hyWODLdeAD+wbnoYhtSaLcBBolnSBYYM6fwNspdBzztqWQ8W7kLThbfQD Xg/yLucpLmlHz/ytGdxQr2HAF/nvqU0XIH7nWxnjuLTXGPn6L3Zrtg9dBFa7rERf FRM7RyWMz8CiNmTwmKFXg0X2qmD/rLnjEFTI+7YWuC8pjSuya4fbcc5G3nOSQiL1 ej86/Vo6siKlqmUeoYa1XTGL6YLHA3RHuoUv4gKdqmwtUYC3IiFFzHtWm5aCwkTK hh/9woDMdnsv2fLc6QOSiHaDJqMRFG6MhVd2yNoI6xk0Cg2IQKjk0xM38QIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFK0HBLNwH+C2ixlGnA7Ehk1jaVxIMB8GA1UdIwQY MBaAFNViDOxwl00DfXdpdYx0ZoMFsyzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdJTTdIQ1hUUU45ZDJsMWpIUm1nd1d6TFBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMjNhOTItN2QzOC00OWVjLWJhOTkt YmU0MzRjYjlmOGY4LzEvclFjRXMzQWY0TGFMR1VhY0RzU0dUV05wWEVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8zMjNhOTItN2QzOC00OWVjLWJhOTktYmU0MzRjYjlmOGY4 LzEvMVdJTTdIQ1hUUU45ZDJsMWpIUm1nd1d6TFBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQCVYmkAwQA V+ySAwQCW7j4AwQAW8eJAwQAW8eTAwQAW8eaAwQAW8egAwQBXD1GAwQBbawIAwQB vH/2MA0EAgACMAcDBQMqETuAMA0GCSqGSIb3DQEBCwUAA4IBAQAD5xw8tzb/Sv+r 2XskTxjROAveVlRliUNI1gMa8EDN3WbOQo/BYPejBdk2n3eD/RKp4sI0gDLou+Wb W3DaIBRV/OLNXMEdYEfCWllW67VaeP69yQkkO7ezTDmPKP8pHwCc7GOGd8ktF+i8 muDyp4chmiou0Y4f3vLOXPCrVRyg9GxdQp8Blff1VAbjYs+oSPlkaicYgZVD4tDz SyOB3kKu3wFZZwkkJk0u21aZKC5hGoWLChS1vbfh9THffN7UqlG+ifmRqTFrXmg2 VFU7EfI5Zgk+/HCTysYL3BqXCUc2TDVn0nH4kniE2g6opVwRV3znZGrhkt8wPrNv W4+oDKSM -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:15 2026 by rpki-client