This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/vqpQX6Iz06R1EggExW7BWU4tAbU.roa File: vqpQX6Iz06R1EggExW7BWU4tAbU.roa (raw, json) Hash identifier: bBqYQdht/WXkhmcATy+bfto0/P5AbnT3jolfRGDWBGI= Subject key identifier: BE:AA:50:5F:A2:33:D3:A4:75:12:08:04:C5:6E:C1:59:4E:2D:01:B5 Certificate issuer: /CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95 Certificate serial: 019B76EB195727993FF952507B9FCABA957E Authority key identifier: 8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/vqpQX6Iz06R1EggExW7BWU4tAbU.roa Signing time: Thu 01 Jan 2026 00:17:57 +0000 ROA not before: Thu 01 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35266 IP address blocks: 193.46.61.0/24 maxlen: 24 193.104.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:19:57:27:99:3f:f9:52:50:7b:9f:ca:ba:95:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=beaa505fa233d3a475120804c56ec1594e2d01b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d3:81:c3:8c:1d:10:6a:71:04:34:23:7a:b7: b7:91:2e:6d:3b:d7:d9:05:5b:20:18:30:df:ee:cc: fb:e3:0f:56:02:09:f6:07:18:60:47:76:54:83:bc: b5:6a:fa:39:1a:e1:eb:db:4d:de:4a:40:d7:a2:9f: 75:a2:e7:42:16:84:2b:f3:12:41:8b:d0:19:6a:9d: 1b:f8:df:ea:c2:99:ba:ac:e5:d0:c2:ec:20:98:bd: 3c:ae:4c:d4:14:28:a1:71:ba:0f:67:25:47:6d:4c: 86:65:16:b5:d7:72:8d:b8:b7:08:4b:b9:05:57:d5: 46:fe:74:2b:c6:8e:01:60:de:4a:2c:57:f8:58:31: 92:d6:41:21:69:2a:19:ae:0c:be:43:f0:40:0c:80: ca:b3:86:17:f9:83:01:4f:b3:8c:a3:59:da:f2:22: d7:c4:c0:c2:84:c0:63:17:6f:ae:0a:67:9c:ec:70: c6:a3:0e:cd:48:1a:cd:68:15:bf:35:5a:2a:0c:06: 69:f1:2c:00:f5:59:f2:69:b5:06:cb:11:c3:60:37: 01:c5:8d:c4:99:09:ce:60:18:1a:fc:4b:9c:12:24: 48:84:e2:a0:9c:4a:04:8c:51:1e:bd:69:8b:51:7d: cc:1b:71:26:78:bb:f9:ed:93:b2:5b:d9:c6:b2:fa: 6c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AA:50:5F:A2:33:D3:A4:75:12:08:04:C5:6E:C1:59:4E:2D:01:B5 X509v3 Authority Key Identifier: keyid:8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/vqpQX6Iz06R1EggExW7BWU4tAbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.61.0/24 193.104.108.0/24 Signature Algorithm: sha256WithRSAEncryption 69:a6:bc:8b:05:c7:8d:73:e1:4c:1e:a1:6d:28:11:d4:e4:5e: 1b:03:bd:e9:9f:4d:91:ee:15:11:dd:de:92:3c:4e:eb:92:ee: 69:37:89:0d:b7:7c:52:3b:59:3c:53:38:3c:a4:1c:70:ff:9f: f1:bd:40:de:7a:05:80:a1:23:68:74:95:8a:fe:3d:c6:79:56: 23:56:28:ed:1c:dc:7a:b8:e3:78:e7:62:91:ba:d1:18:69:44: 6a:e6:94:24:09:32:69:54:36:a0:dd:98:bc:b6:f7:ea:a0:b5: 29:f2:25:5f:5a:3a:5e:7b:dd:2a:e8:de:9e:f5:52:1f:ea:fc: ec:1a:bb:f9:f7:f7:a3:2e:8c:fc:4f:9a:13:57:fd:9f:13:34: ed:11:56:e5:a6:15:e3:3a:87:2e:d6:5b:b8:30:8c:40:d3:24: ec:78:a3:d4:c1:b2:8e:eb:a2:52:90:ae:5e:f6:84:12:a7:f6: a9:01:43:56:3c:ba:03:93:4f:36:6b:e5:64:0c:29:97:68:19: 54:7c:2a:cf:52:33:c6:22:e3:88:13:46:f0:79:fe:fa:36:35: 5d:70:ec:88:58:30:28:0e:a5:9b:45:55:a2:9e:98:a0:b2:e6: 92:f6:5a:21:4c:7a:1c:18:9b:5f:71:c3:52:94:ee:24:49:e3: c9:d1:07:b1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26xlXJ5k/+VJQe5/KupV+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzFkNmJlM2JhNzg5YzVkYWViNTk3YTEzNWRlNWVjY2Nh YjhmOTUwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWFhNTA1ZmEyMzNkM2E0NzUxMjA4MDRjNTZlYzE1OTRlMmQwMWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtOBw4wdEGpxBDQjere3kS5tO9fZ BVsgGDDf7sz74w9WAgn2BxhgR3ZUg7y1avo5GuHr203eSkDXop91oudCFoQr8xJB i9AZap0b+N/qwpm6rOXQwuwgmL08rkzUFCihcboPZyVHbUyGZRa113KNuLcIS7kF V9VG/nQrxo4BYN5KLFf4WDGS1kEhaSoZrgy+Q/BADIDKs4YX+YMBT7OMo1na8iLX xMDChMBjF2+uCmec7HDGow7NSBrNaBW/NVoqDAZp8SwA9VnyabUGyxHDYDcBxY3E mQnOYBga/EucEiRIhOKgnEoEjFEevWmLUX3MG3EmeLv57ZOyW9nGsvpsjQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL6qUF+iM9OkdRIIBMVuwVlOLQG1MB8GA1UdIwQY MBaAFI/B1r47p4nF2utZehNd5ezMq4+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhIV3ZqdW5pY1hhNjFsNkUxM2w3TXlyajVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80NGVlOGQtMmFlOC00ODQ0LWE5MzUt ZDI0YzJjZTIzYWI3LzEvdnFwUVg2SXowNlIxRWdnRXhXN0JXVTR0QWJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi80NGVlOGQtMmFlOC00ODQ0LWE5MzUtZDI0YzJjZTIzYWI3 LzEvajhIV3ZqdW5pY1hhNjFsNkUxM2w3TXlyajVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwS49AwQA wWhsMA0GCSqGSIb3DQEBCwUAA4IBAQBppryLBceNc+FMHqFtKBHU5F4bA73pn02R 7hUR3d6SPE7rku5pN4kNt3xSO1k8Uzg8pBxw/5/xvUDeegWAoSNodJWK/j3GeVYj VijtHNx6uON452KRutEYaURq5pQkCTJpVDag3Zi8tvfqoLUp8iVfWjpee90q6N6e 9VIf6vzsGrv59/ejLoz8T5oTV/2fEzTtEVblphXjOocu1lu4MIxA0yTseKPUwbKO 66JSkK5e9oQSp/apAUNWPLoDk082a+VkDCmXaBlUfCrPUjPGIuOIE0bwef76NjVd cOyIWDAoDqWbRVWinpigsuaS9lohTHocGJtfccNSlO4kSePJ0Qex -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:10 2026 by rpki-client