This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/Qu1Mc8WQ6eeAPH9uUS6S5I-qTeo.roa File: Qu1Mc8WQ6eeAPH9uUS6S5I-qTeo.roa (raw, json) Hash identifier: VfijZBef7xJk1wzgvIwnq71YHQKXU+yJECoJTQRx0kE= Subject key identifier: 42:ED:4C:73:C5:90:E9:E7:80:3C:7F:6E:51:2E:92:E4:8F:AA:4D:EA Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019B76EB822AC3EC8C8C90B2C7203075A63D Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/Qu1Mc8WQ6eeAPH9uUS6S5I-qTeo.roa Signing time: Thu 01 Jan 2026 00:18:24 +0000 ROA not before: Thu 01 Jan 2026 00:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35758 IP address blocks: 147.78.2.0/24 maxlen: 24 2a11:840:30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:82:2a:c3:ec:8c:8c:90:b2:c7:20:30:75:a6:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Jan 1 00:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42ed4c73c590e9e7803c7f6e512e92e48faa4dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1a:e5:e9:41:41:95:97:73:64:4f:82:53:94: e6:f7:37:ac:01:1f:43:87:6d:e0:4f:74:98:65:be: 50:7c:f1:a4:bd:bc:0c:d9:51:c4:f2:f7:d5:49:4e: 2a:c7:f2:05:a0:6e:94:f0:4d:6a:cd:85:64:12:2a: 14:c2:e9:b0:33:75:9c:35:01:51:ff:af:04:52:3a: 22:5f:70:56:dc:c9:90:86:3b:d3:c5:e9:55:06:3d: 74:fa:3b:4a:15:54:89:d3:89:74:59:d0:f5:11:3f: 0e:31:2d:c7:99:0e:d2:17:21:68:0e:47:16:63:6e: e9:10:bc:d6:63:a3:9c:35:86:8f:fc:ca:21:44:b4: 30:f4:77:0f:df:82:76:c4:d4:f2:2d:7d:6d:2f:c6: a8:cb:99:9d:f3:1b:a7:c6:a6:fc:85:54:76:25:a0: 2e:98:df:77:dc:bb:39:04:0f:c9:d8:f2:87:98:a9: 61:41:5c:9d:f9:18:9c:1c:89:f9:4f:ba:f0:5d:db: 22:f7:12:12:ce:5b:e2:a1:3a:fc:0b:6e:0c:0d:03: ab:f8:d9:b0:82:2a:6a:3a:72:46:0c:73:79:21:7b: b3:89:cf:e1:66:e9:b6:07:ac:e1:bd:16:01:ca:2b: 8f:50:4c:be:a8:e0:24:f0:51:29:d5:54:96:f2:9f: a0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:ED:4C:73:C5:90:E9:E7:80:3C:7F:6E:51:2E:92:E4:8F:AA:4D:EA X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/Qu1Mc8WQ6eeAPH9uUS6S5I-qTeo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.2.0/24 IPv6: 2a11:840:30::/48 Signature Algorithm: sha256WithRSAEncryption 91:dc:da:69:37:6f:9f:11:e4:78:1a:7e:40:69:96:f3:da:34: 7f:ca:96:57:c7:4a:a0:36:5f:8a:42:76:23:a3:f4:69:01:4d: 07:c5:19:db:7f:74:94:be:c4:b5:dd:9e:dd:fa:b3:03:78:a7: 12:69:f9:66:e5:a1:fc:c8:4b:b8:ad:8d:89:e2:87:5e:72:e2: e7:ba:93:96:92:a6:bb:4a:31:48:d5:9d:44:38:7f:aa:44:66: 0b:37:02:c8:06:a7:e1:0e:a4:4b:9b:0e:74:bc:0f:4e:36:28: 06:ee:20:10:ee:89:7b:2a:d9:84:7b:f1:17:15:ad:14:f9:e6: ea:b9:34:8e:46:88:8d:3e:8f:24:b6:c1:20:1f:fc:2d:1b:f9: 54:a6:b3:91:51:7c:fc:9b:ab:7d:0b:ad:aa:74:1f:86:3f:7a: 07:fb:c3:a8:b2:ab:0e:dd:c4:8f:e8:4e:a7:75:0e:29:3e:23: 48:10:dd:79:f5:ca:82:df:ad:2a:ac:9a:e5:aa:ba:70:04:6f: a2:1a:61:09:8b:27:4a:10:6c:42:13:3d:5b:0c:30:45:4d:5a: b7:ba:1e:06:57:ce:d7:a3:92:ec:7a:51:c7:35:68:d7:8c:16: 98:ff:5e:de:ea:54:b0:bc:f7:29:b2:34:62:47:a3:40:a9:29: 33:13:92:f9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt264Iqw+yMjJCyxyAwdaY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwMTAxMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmVkNGM3M2M1OTBlOWU3ODAzYzdmNmU1MTJlOTJlNDhmYWE0ZGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRrl6UFBlZdzZE+CU5Tm9zesAR9D h23gT3SYZb5QfPGkvbwM2VHE8vfVSU4qx/IFoG6U8E1qzYVkEioUwumwM3WcNQFR /68EUjoiX3BW3MmQhjvTxelVBj10+jtKFVSJ04l0WdD1ET8OMS3HmQ7SFyFoDkcW Y27pELzWY6OcNYaP/MohRLQw9HcP34J2xNTyLX1tL8aoy5md8xunxqb8hVR2JaAu mN933Ls5BA/J2PKHmKlhQVyd+RicHIn5T7rwXdsi9xISzlvioTr8C24MDQOr+Nmw gipqOnJGDHN5IXuzic/hZum2B6zhvRYByiuPUEy+qOAk8FEp1VSW8p+gmwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFELtTHPFkOnngDx/blEukuSPqk3qMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvUXUxTWM4V1E2ZWVBUEg5dVVTNlM1SS1xVGVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAk04CMA8E AgACMAkDBwAqEQhAADAwDQYJKoZIhvcNAQELBQADggEBAJHc2mk3b58R5HgafkBp lvPaNH/KllfHSqA2X4pCdiOj9GkBTQfFGdt/dJS+xLXdnt36swN4pxJp+WblofzI S7itjYnih15y4ue6k5aSprtKMUjVnUQ4f6pEZgs3AsgGp+EOpEubDnS8D042KAbu IBDuiXsq2YR78RcVrRT55uq5NI5GiI0+jyS2wSAf/C0b+VSms5FRfPybq30Lrap0 H4Y/egf7w6iyqw7dxI/oTqd1Dik+I0gQ3Xn1yoLfrSqsmuWqunAEb6IaYQmLJ0oQ bEITPVsMMEVNWre6HgZXztejkux6Ucc1aNeMFpj/Xt7qVLC89ymyNGJHo0CpKTMT kvk= -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:13 2026 by rpki-client