This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/QfmRg80ICP0Wk2irMKs9YP6N-6U.roa File: QfmRg80ICP0Wk2irMKs9YP6N-6U.roa (raw, json) Hash identifier: wg6LRoWXAbVsyyU2ZxflvOEDF09pfNJqXiMahee/sYk= Subject key identifier: 41:F9:91:83:CD:08:08:FD:16:93:68:AB:30:AB:3D:60:FE:8D:FB:A5 Certificate issuer: /CN=1b6df0bc093f298b043522ebd4ede19793081a29 Certificate serial: 019B7FF2B8AB7EA2DB4D3989CD7B5A998224 Authority key identifier: 1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/QfmRg80ICP0Wk2irMKs9YP6N-6U.roa Signing time: Fri 02 Jan 2026 18:22:52 +0000 ROA not before: Fri 02 Jan 2026 18:22:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200109 IP address blocks: 212.46.61.0/24 maxlen: 24 2a13:cd00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:b8:ab:7e:a2:db:4d:39:89:cd:7b:5a:99:82:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b6df0bc093f298b043522ebd4ede19793081a29 Validity Not Before: Jan 2 18:22:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41f99183cd0808fd169368ab30ab3d60fe8dfba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f5:9f:b5:1e:0c:5d:eb:56:0b:d3:8a:c8:4a: 21:8a:f9:10:4c:15:bc:4b:10:f4:da:69:e3:8c:41: 68:01:41:4f:e1:3a:a5:83:7c:7c:10:4e:a6:d8:ce: 33:d7:e7:30:24:be:b7:f0:25:24:81:04:73:5e:54: 0f:68:fb:79:0b:9a:87:be:c3:81:09:43:d2:73:88: 3a:df:24:bc:71:9d:09:7b:a5:19:b5:ee:39:c4:b9: 60:da:81:6b:03:31:d1:b7:f4:c2:63:37:ce:64:bd: 83:5e:67:4f:2a:02:7b:86:4e:b2:a0:38:84:e4:45: a6:5b:62:98:46:73:46:72:c9:87:e6:e8:79:8e:8c: d9:d8:15:11:2d:e0:c9:16:bc:d0:23:98:34:1c:d6: 58:28:c2:02:aa:30:4b:9e:40:2f:92:b6:de:7d:24: 48:fa:82:20:0d:0e:ec:65:0f:51:4f:5d:c3:f0:53: 8d:33:0a:f1:80:45:e1:36:92:7e:36:c9:a0:5e:8d: ab:7c:33:59:8b:44:33:b0:b6:00:2f:a8:ff:67:38: 39:1e:b9:15:5e:3c:31:15:da:8d:fc:cd:5c:ae:a8: 0c:44:e7:b7:1e:eb:ad:fb:c6:db:4b:8c:57:d9:8f: 83:4b:00:7b:ad:94:f4:eb:09:01:6a:c2:20:00:12: c6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F9:91:83:CD:08:08:FD:16:93:68:AB:30:AB:3D:60:FE:8D:FB:A5 X509v3 Authority Key Identifier: keyid:1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/QfmRg80ICP0Wk2irMKs9YP6N-6U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.46.61.0/24 IPv6: 2a13:cd00::/29 Signature Algorithm: sha256WithRSAEncryption b2:2c:83:6a:a5:ab:7a:bf:c8:00:71:35:d6:23:ff:d5:1c:23: 43:16:4e:40:5e:0b:17:55:7c:9b:f4:4a:d9:27:b3:88:15:b0: f0:b0:b0:3a:2a:4e:56:bb:bb:b1:97:e5:b5:0e:69:28:bc:a3: 3d:2d:32:f6:3a:83:37:cf:ed:a9:ad:8d:fe:17:e8:95:05:2f: 86:3a:a4:ad:fb:1c:b8:ad:ca:cb:3c:79:a9:21:5b:ee:74:62: 4a:21:23:2b:c1:5e:df:77:73:29:6d:3a:36:ed:3a:be:26:fc: eb:16:5a:87:61:2b:c7:25:4b:c0:69:c6:9f:48:b3:e9:74:f7: 0f:52:52:c5:70:3d:b7:b6:dc:2c:4c:e0:69:43:f1:af:58:98: 9c:2c:1b:cc:0a:dc:5a:cb:87:4d:c3:60:b7:bd:33:08:e0:f0: 63:bc:23:26:b7:55:0f:8a:ac:93:08:c2:93:f4:50:92:26:76: 09:24:09:5b:24:9f:c4:f1:b0:41:59:0b:43:ff:74:e4:a5:d7: 27:d0:4f:8a:dd:00:9c:d0:61:c9:c5:d7:77:02:ad:67:8a:52: ee:19:d2:1e:c4:42:0c:79:00:e2:d9:d7:d2:a2:60:ea:43:d1: 33:fc:a2:0b:3e:55:e3:a2:2d:aa:8b:84:aa:da:48:50:85:32: ac:e2:ab:37 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8rirfqLbTTmJzXtamYIkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNmRmMGJjMDkzZjI5OGIwNDM1MjJlYmQ0ZWRlMTk3OTMw ODFhMjkwHhcNMjYwMTAyMTgyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWY5OTE4M2NkMDgwOGZkMTY5MzY4YWIzMGFiM2Q2MGZlOGRmYmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPWftR4MXetWC9OKyEohivkQTBW8 SxD02mnjjEFoAUFP4Tqlg3x8EE6m2M4z1+cwJL638CUkgQRzXlQPaPt5C5qHvsOB CUPSc4g63yS8cZ0Je6UZte45xLlg2oFrAzHRt/TCYzfOZL2DXmdPKgJ7hk6yoDiE 5EWmW2KYRnNGcsmH5uh5jozZ2BURLeDJFrzQI5g0HNZYKMICqjBLnkAvkrbefSRI +oIgDQ7sZQ9RT13D8FONMwrxgEXhNpJ+NsmgXo2rfDNZi0QzsLYAL6j/Zzg5HrkV XjwxFdqN/M1crqgMROe3Huut+8bbS4xX2Y+DSwB7rZT06wkBasIgABLG6wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEH5kYPNCAj9FpNoqzCrPWD+jfulMB8GA1UdIwQY MBaAFBtt8LwJPymLBDUi69Tt4ZeTCBopMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84M2NmMDEtNmNjYS00OGQxLTljYmYt NWFjNmZkZmRjMGNjLzEvUWZtUmc4MElDUDBXazJpck1LczlZUDZOLTZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC84M2NmMDEtNmNjYS00OGQxLTljYmYtNWFjNmZkZmRjMGNj LzEvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1C49MA0E AgACMAcDBQMqE80AMA0GCSqGSIb3DQEBCwUAA4IBAQCyLINqpat6v8gAcTXWI//V HCNDFk5AXgsXVXyb9ErZJ7OIFbDwsLA6Kk5Wu7uxl+W1DmkovKM9LTL2OoM3z+2p rY3+F+iVBS+GOqSt+xy4rcrLPHmpIVvudGJKISMrwV7fd3MpbTo27Tq+JvzrFlqH YSvHJUvAacafSLPpdPcPUlLFcD23ttwsTOBpQ/GvWJicLBvMCtxay4dNw2C3vTMI 4PBjvCMmt1UPiqyTCMKT9FCSJnYJJAlbJJ/E8bBBWQtD/3Tkpdcn0E+K3QCc0GHJ xdd3Aq1nilLuGdIexEIMeQDi2dfSomDqQ9Ez/KILPlXjoi2qi4Sq2khQhTKs4qs3 -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:02 2026 by rpki-client