This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qgFnMjWuhSVgzE3h7Fi8Ul2GHic.roa File: qgFnMjWuhSVgzE3h7Fi8Ul2GHic.roa (raw, json) Hash identifier: 7SRUeMkLQjZwMbKocBsflaTONoxPjlkUWOLxh451cTE= Subject key identifier: AA:01:67:32:35:AE:85:25:60:CC:4D:E1:EC:58:BC:52:5D:86:1E:27 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5AFD2187140550AFDAFB88768ED97F Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qgFnMjWuhSVgzE3h7Fi8Ul2GHic.roa Signing time: Fri 02 Jan 2026 06:17:53 +0000 ROA not before: Fri 02 Jan 2026 06:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47427 IP address blocks: 86.105.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:fd:21:87:14:05:50:af:da:fb:88:76:8e:d9:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa01673235ae852560cc4de1ec58bc525d861e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c8:93:8e:87:cc:17:25:65:f6:5c:28:16:ff: 78:1b:47:f0:43:0c:f7:e5:0f:73:3d:bf:6d:9f:e8: 24:24:02:38:64:1f:18:8d:9e:ed:83:e2:df:2e:49: 35:b2:3f:15:1b:63:f5:52:ff:21:47:c9:79:1e:6c: c9:4c:3e:e9:58:86:2f:2a:0a:1d:90:96:90:5a:50: b0:ba:94:2e:e3:1a:a2:4f:c3:e2:ef:c5:93:5b:50: 7b:cf:f6:34:17:25:0c:cd:2c:0d:b5:c4:64:c1:1c: a2:a1:c1:40:96:81:9a:13:06:73:2a:93:cc:4b:dd: 3b:3e:cc:4a:05:34:9c:a5:f5:ab:35:e9:b7:04:5a: d8:8b:49:39:34:9b:43:39:a7:21:cc:cd:8d:0d:43: 39:ea:1b:01:5b:f1:71:4b:d2:f5:e7:7e:d5:6e:8e: 27:46:59:9a:4e:47:ed:30:f7:47:90:5d:a7:e8:10: 11:7e:6e:9b:8c:14:f4:5d:b7:29:b7:14:90:6b:f7: 57:e7:e9:3d:38:cd:05:ce:06:ea:4d:79:e9:04:7c: 1e:85:48:a4:ec:8b:2b:76:f2:53:d0:0e:8d:36:ce: f7:51:42:a9:98:22:48:14:58:87:de:b8:58:07:73: c2:9d:80:79:17:c7:a8:db:22:2e:9f:88:4a:2c:f6: 2c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:01:67:32:35:AE:85:25:60:CC:4D:E1:EC:58:BC:52:5D:86:1E:27 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qgFnMjWuhSVgzE3h7Fi8Ul2GHic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.105.32.0/21 Signature Algorithm: sha256WithRSAEncryption 76:65:72:e5:0d:71:0f:02:15:0d:e8:5d:74:cf:2d:2e:2c:3a: 1d:6e:8e:e5:66:ef:df:4d:f7:fc:4f:fa:8b:9e:f1:f0:3c:f7: 70:fb:3d:58:58:50:c6:73:27:ce:dd:4d:a4:b8:59:99:ea:d4: 00:e9:b0:83:05:fc:d0:f6:46:5e:44:09:7b:99:be:6c:44:86: 40:22:6e:26:e6:39:44:7c:6a:d6:ca:66:70:f1:06:fe:4a:a7: dd:6f:ae:6e:a1:47:e0:e1:78:12:7f:b0:b4:6a:da:e4:5f:6d: 16:44:08:81:ca:75:70:ea:c8:9a:23:62:01:24:84:cf:a7:3c: e2:00:fb:b7:28:39:60:23:13:01:32:f6:ea:bf:ab:5e:4c:dd: 45:f7:fc:fc:20:33:3f:15:df:20:1e:b2:c6:c2:4c:fd:d1:59: a0:c9:57:87:69:a8:e9:57:4d:36:23:b9:ec:cd:3c:3f:7c:54: 88:6b:21:9a:1b:9f:7f:d4:83:35:3b:b4:d7:75:e4:e8:1c:98: 94:a2:95:f9:e8:93:f2:b6:22:e7:b5:ee:f3:89:be:8a:d1:3c: c1:e9:0b:b8:68:0d:6a:70:c8:53:52:45:9d:11:8e:ac:52:27: 03:45:b5:bf:25:38:25:df:20:77:c2:b4:f8:4b:2a:ac:41:cb: dc:04:bd:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wv0hhxQFUK/a+4h2jtl/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTAxNjczMjM1YWU4NTI1NjBjYzRkZTFlYzU4YmM1MjVkODYxZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosiTjofMFyVl9lwoFv94G0fwQwz3 5Q9zPb9tn+gkJAI4ZB8YjZ7tg+LfLkk1sj8VG2P1Uv8hR8l5HmzJTD7pWIYvKgod kJaQWlCwupQu4xqiT8Pi78WTW1B7z/Y0FyUMzSwNtcRkwRyiocFAloGaEwZzKpPM S907PsxKBTScpfWrNem3BFrYi0k5NJtDOachzM2NDUM56hsBW/FxS9L1537Vbo4n RlmaTkftMPdHkF2n6BARfm6bjBT0XbcptxSQa/dX5+k9OM0FzgbqTXnpBHwehUik 7IsrdvJT0A6NNs73UUKpmCJIFFiH3rhYB3PCnYB5F8eo2yIun4hKLPYsnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKoBZzI1roUlYMxN4exYvFJdhh4nMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvcWdGbk1qV3VoU1ZnekUzaDdGaThVbDJHSGljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDVmkgMA0G CSqGSIb3DQEBCwUAA4IBAQB2ZXLlDXEPAhUN6F10zy0uLDodbo7lZu/fTff8T/qL nvHwPPdw+z1YWFDGcyfO3U2kuFmZ6tQA6bCDBfzQ9kZeRAl7mb5sRIZAIm4m5jlE fGrWymZw8Qb+Sqfdb65uoUfg4XgSf7C0atrkX20WRAiBynVw6siaI2IBJITPpzzi APu3KDlgIxMBMvbqv6teTN1F9/z8IDM/Fd8gHrLGwkz90VmgyVeHaajpV002I7ns zTw/fFSIayGaG59/1IM1O7TXdeToHJiUopX56JPytiLnte7zib6K0TzB6Qu4aA1q cMhTUkWdEY6sUicDRbW/JTgl3yB3wrT4SyqsQcvcBL2t -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:16 2026 by rpki-client