This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/pqUBqyEmVVML0BM_ewsCtfyonSk.roa File: pqUBqyEmVVML0BM_ewsCtfyonSk.roa (raw, json) Hash identifier: uEBUHJ7oFcA5jlrDagyVhwCyviNbnVl0AKqwX5P3CdI= Subject key identifier: A6:A5:01:AB:21:26:55:53:0B:D0:13:3F:7B:0B:02:B5:FC:A8:9D:29 Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B7F810809944AF18855D46C672BB6A86B Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/pqUBqyEmVVML0BM_ewsCtfyonSk.roa Signing time: Fri 02 Jan 2026 16:18:41 +0000 ROA not before: Fri 02 Jan 2026 16:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 45.145.17.0/24 maxlen: 24 62.68.93.0/24 maxlen: 24 80.91.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:08:09:94:4a:f1:88:55:d4:6c:67:2b:b6:a8:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Jan 2 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6a501ab212655530bd0133f7b0b02b5fca89d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:12:c4:d2:2c:fe:e8:3a:df:f6:c7:93:6d:dc: b4:f4:3f:4b:29:76:0b:2b:bd:d6:9a:76:9c:18:66: 83:11:e0:b6:f3:46:f7:76:62:26:48:16:bc:06:1c: 5b:82:93:26:a1:09:37:c0:29:fa:b7:85:90:39:55: a3:4e:62:0c:88:d3:08:48:72:97:3c:f7:e8:dc:a5: a4:f3:47:70:39:97:c2:76:72:82:1e:68:7a:42:83: df:93:c3:97:7e:f0:f7:4b:56:7f:30:b0:9f:8b:93: 33:49:0a:be:5b:40:e3:dc:f8:3e:40:b2:d5:78:86: 93:ac:15:f4:2f:6e:89:c6:30:f9:a7:67:8c:76:92: e0:20:bf:48:69:17:b4:a9:cb:ab:84:ff:b6:ba:32: b6:e7:08:3b:b7:67:62:eb:04:b7:4a:1d:20:b4:e4: a9:37:9f:26:2a:30:12:d6:52:f1:64:27:c6:d2:5e: 9e:ef:72:a9:cf:b1:5b:2e:dd:f3:7a:fe:79:f2:38: 63:62:e7:b7:51:c7:2b:d4:77:bb:2d:af:ef:ab:bf: 92:5b:7e:1a:c0:ca:d4:ac:72:00:17:63:3a:01:ea: 1e:02:75:97:76:b0:12:88:2a:c5:53:1a:b9:12:46: 13:4e:21:22:73:cf:33:4e:b7:30:9e:2c:d2:87:1c: 68:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A5:01:AB:21:26:55:53:0B:D0:13:3F:7B:0B:02:B5:FC:A8:9D:29 X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/pqUBqyEmVVML0BM_ewsCtfyonSk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.17.0/24 62.68.93.0/24 80.91.221.0/24 Signature Algorithm: sha256WithRSAEncryption e1:d2:79:66:c9:d7:e2:e8:07:c5:82:d1:b4:b5:31:21:2c:8f: 67:61:2e:93:bd:47:db:ac:9c:2e:d5:74:43:cf:be:89:98:c7: ad:ce:b7:63:b6:cc:6e:11:c8:b2:9e:d3:0a:a8:8f:2f:6b:e8: b1:95:96:a0:6e:89:fb:12:3a:10:bc:5e:84:f3:ad:23:14:bd: 12:84:7b:16:f3:50:67:f7:93:1a:67:0e:a2:96:5c:40:e1:cb: 26:e8:c0:88:98:5e:ce:7b:67:ee:34:df:05:6b:3d:a6:48:9c: 84:61:02:fc:98:e6:39:88:2e:ab:cc:16:17:68:1c:a8:c1:aa: 71:b7:a9:d5:0d:04:6e:89:37:ba:d7:d4:f4:df:fa:79:cb:f4: 23:9b:79:b8:ad:e3:f6:d1:74:1b:27:c0:f7:08:a1:f2:74:1d: 83:b5:3f:10:8b:ba:86:d1:1d:4f:11:8d:d5:a8:11:72:d3:f8: 28:c5:6b:d1:88:4f:50:f4:78:27:8f:70:9f:42:cb:7a:1f:68: 04:e3:cd:85:fe:da:98:3f:71:46:0d:bd:ec:8d:3c:d4:9d:22: 0b:9e:39:6e:4a:dc:5b:72:69:e1:02:1c:de:d4:8e:0b:b0:b6: b2:55:1f:8f:28:c1:7a:ef:6f:6f:f8:1e:d0:0c:73:51:dd:61: 53:68:0c:46 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/gQgJlErxiFXUbGcrtqhrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjYwMTAyMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmE1MDFhYjIxMjY1NTUzMGJkMDEzM2Y3YjBiMDJiNWZjYTg5ZDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRLE0iz+6Drf9seTbdy09D9LKXYL K73WmnacGGaDEeC280b3dmImSBa8BhxbgpMmoQk3wCn6t4WQOVWjTmIMiNMISHKX PPfo3KWk80dwOZfCdnKCHmh6QoPfk8OXfvD3S1Z/MLCfi5MzSQq+W0Dj3Pg+QLLV eIaTrBX0L26JxjD5p2eMdpLgIL9IaRe0qcurhP+2ujK25wg7t2di6wS3Sh0gtOSp N58mKjAS1lLxZCfG0l6e73Kpz7FbLt3zev558jhjYue3Uccr1He7La/vq7+SW34a wMrUrHIAF2M6AeoeAnWXdrASiCrFUxq5EkYTTiEic88zTrcwnizShxxoYwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKalAashJlVTC9ATP3sLArX8qJ0pMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvcHFVQnF5RW1WVk1MMEJNX2V3c0N0ZnlvblNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZERAwQA PkRdAwQAUFvdMA0GCSqGSIb3DQEBCwUAA4IBAQDh0nlmydfi6AfFgtG0tTEhLI9n YS6TvUfbrJwu1XRDz76JmMetzrdjtsxuEciyntMKqI8va+ixlZagbon7EjoQvF6E 860jFL0ShHsW81Bn95MaZw6illxA4csm6MCImF7Oe2fuNN8Faz2mSJyEYQL8mOY5 iC6rzBYXaByowapxt6nVDQRuiTe619T03/p5y/Qjm3m4reP20XQbJ8D3CKHydB2D tT8Qi7qG0R1PEY3VqBFy0/goxWvRiE9Q9Hgnj3CfQst6H2gE482F/tqYP3FGDb3s jTzUnSILnjluStxbcmnhAhze1I4LsLayVR+PKMF6729v+B7QDHNR3WFTaAxG -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:16 2026 by rpki-client