This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa File: qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa (raw, json) Hash identifier: w+bQOMrvhdWjYo96qmwB8eS7ozAg8IZHWE6OTWarCag= Subject key identifier: AA:A3:81:A2:E7:CA:F4:1B:FD:7C:1C:CA:11:93:B5:61:B6:F6:5E:6B Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019B76EB802B28A55E4709F0A012B03515C1 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa Signing time: Thu 01 Jan 2026 00:18:23 +0000 ROA not before: Thu 01 Jan 2026 00:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 185.213.22.0/24 maxlen: 24 2a11:840:1::/48 maxlen: 48 2a11:840:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:80:2b:28:a5:5e:47:09:f0:a0:12:b0:35:15:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Jan 1 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aaa381a2e7caf41bfd7c1cca1193b561b6f65e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:19:4d:4c:14:f9:60:2d:c6:e8:c1:be:c1:90: 67:33:aa:27:3f:20:11:74:85:29:6e:64:4f:4a:99: 4f:1d:84:62:c2:b0:ad:c9:14:d7:87:13:5f:ae:06: 27:d9:34:c5:3b:06:03:a9:77:3a:1f:c7:1f:de:ab: 73:01:c2:ab:35:32:9e:c8:0a:48:b7:5c:49:6f:b6: c6:d6:c6:4f:30:a7:ec:bf:ee:ef:1a:cd:df:b6:36: 5c:49:e6:5f:5c:31:a1:6e:10:b3:d3:ca:94:90:58: e0:94:31:53:f8:eb:89:82:23:db:82:26:13:a0:ab: 82:75:11:9a:c4:75:64:43:08:8e:4d:cb:25:02:31: e6:e0:04:e6:ec:3c:b2:47:41:ce:0b:e5:46:0c:9f: ae:df:d3:58:6f:f3:cb:9e:6f:cc:c9:ed:af:b3:da: 7c:73:05:99:11:0d:a7:22:90:b9:0f:d6:0d:18:c7: 08:dd:dd:b7:4c:a9:de:bf:f1:54:42:ec:e7:ff:de: 69:65:4b:70:48:50:8b:c2:04:9c:d9:5b:ff:66:a5: 42:76:e1:3a:ad:f6:6c:27:fe:8c:85:87:fc:a2:5e: e1:41:17:f3:a4:15:f0:62:89:be:fe:99:f4:00:09: 41:69:d4:5f:44:31:cd:94:84:40:97:3d:1e:45:de: 74:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A3:81:A2:E7:CA:F4:1B:FD:7C:1C:CA:11:93:B5:61:B6:F6:5E:6B X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.22.0/24 IPv6: 2a11:840:1::-2a11:840:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 86:b4:a1:2d:54:3b:9b:e6:20:99:1f:cf:7f:b3:f9:04:0f:84: 60:5c:fe:a8:13:01:5d:21:dc:82:c5:f2:13:9e:ee:2f:ac:ff: fc:10:a3:d1:c9:c7:4f:90:e1:6b:7f:60:9a:8b:2e:e3:63:e7: ab:c3:bb:f6:7d:04:d2:0d:b5:ee:10:4d:1b:c4:52:e8:16:e9: db:22:b2:61:a2:9e:7d:2a:59:9d:98:1c:01:93:92:06:c6:f8: 0e:13:e8:bb:76:df:a5:39:17:0f:35:8c:39:fc:66:ab:f4:74: e2:1d:1f:99:71:58:7f:84:86:c4:fb:b2:7d:3f:10:ae:01:cb: aa:93:e0:fd:9b:a7:a4:0e:3f:00:eb:60:02:a0:af:44:a6:a3: fa:7b:37:20:36:b4:55:f4:9b:c0:6e:9b:c7:51:2a:81:f0:9d: 8d:fd:d5:fa:a4:4e:0d:90:09:c4:18:2d:48:c5:fd:12:75:00: c3:80:16:18:5d:8b:2b:ce:47:44:af:cb:65:19:91:97:52:da: 5e:45:6f:96:ba:2e:4a:94:5b:c2:53:3d:88:61:b5:79:f3:ce: 8d:58:e9:7f:45:b8:61:48:3e:15:32:41:91:d4:f2:6e:7e:74: f4:b7:d4:44:c7:db:64:ee:a3:bd:6d:8c:50:16:dc:90:d0:37: 5f:a9:cd:73 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt264ArKKVeRwnwoBKwNRXBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwMTAxMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWEzODFhMmU3Y2FmNDFiZmQ3YzFjY2ExMTkzYjU2MWI2ZjY1ZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xlNTBT5YC3G6MG+wZBnM6onPyAR dIUpbmRPSplPHYRiwrCtyRTXhxNfrgYn2TTFOwYDqXc6H8cf3qtzAcKrNTKeyApI t1xJb7bG1sZPMKfsv+7vGs3ftjZcSeZfXDGhbhCz08qUkFjglDFT+OuJgiPbgiYT oKuCdRGaxHVkQwiOTcslAjHm4ATm7DyyR0HOC+VGDJ+u39NYb/PLnm/Mye2vs9p8 cwWZEQ2nIpC5D9YNGMcI3d23TKnev/FUQuzn/95pZUtwSFCLwgSc2Vv/ZqVCduE6 rfZsJ/6MhYf8ol7hQRfzpBXwYom+/pn0AAlBadRfRDHNlIRAlz0eRd50eQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKqjgaLnyvQb/XwcyhGTtWG29l5rMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvcXFPQm91Zks5QnY5ZkJ6S0VaTzFZYmIyWG1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAudUWMBoE AgACMBQwEgMHACoRCEAAAQMHACoRCEAAAjANBgkqhkiG9w0BAQsFAAOCAQEAhrSh LVQ7m+YgmR/Pf7P5BA+EYFz+qBMBXSHcgsXyE57uL6z//BCj0cnHT5Dha39gmosu 42Pnq8O79n0E0g217hBNG8RS6Bbp2yKyYaKefSpZnZgcAZOSBsb4DhPou3bfpTkX DzWMOfxmq/R04h0fmXFYf4SGxPuyfT8QrgHLqpPg/ZunpA4/AOtgAqCvRKaj+ns3 IDa0VfSbwG6bx1EqgfCdjf3V+qRODZAJxBgtSMX9EnUAw4AWGF2LK85HRK/LZRmR l1LaXkVvlrouSpRbwlM9iGG1efPOjVjpf0W4YUg+FTJBkdTybn509LfURMfbZO6j vW2MUBbckNA3X6nNcw== -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:44 2026 by rpki-client