This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/q4UgrQAVyW0x1aD88hqsFhV_wUI.roa File: q4UgrQAVyW0x1aD88hqsFhV_wUI.roa (raw, json) Hash identifier: eSY9jL/pH81KCGAN1VxUMHqZ6zrWnojD0F2MTA9mf94= Subject key identifier: AB:85:20:AD:00:15:C9:6D:31:D5:A0:FC:F2:1A:AC:16:15:7F:C1:42 Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55 Certificate serial: 019B7A5AE21AB8AC9289A11CC9552ADF9CB5 Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/q4UgrQAVyW0x1aD88hqsFhV_wUI.roa Signing time: Thu 01 Jan 2026 16:18:55 +0000 ROA not before: Thu 01 Jan 2026 16:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43358 IP address blocks: 62.102.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e2:1a:b8:ac:92:89:a1:1c:c9:55:2a:df:9c:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55 Validity Not Before: Jan 1 16:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab8520ad0015c96d31d5a0fcf21aac16157fc142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:52:da:a3:fc:e2:84:c7:b4:10:ed:8f:f9:5a: 79:32:f2:51:bd:0e:52:de:1d:be:a6:b0:65:e6:d9: 5e:0b:0e:fe:c3:7a:b4:78:7c:5f:74:af:17:a5:0c: 2c:f2:6e:92:98:17:04:b0:35:1e:f9:d8:9f:5e:df: 3e:6a:9c:f3:fd:98:69:59:4f:bd:65:e3:a2:29:c8: 6c:fb:d5:a1:60:36:eb:66:2f:3e:6c:51:30:e9:25: 0d:41:86:91:4f:41:91:63:b4:47:6c:2c:ef:e3:cb: 56:b9:85:eb:e5:3b:96:fe:7b:3f:22:ad:51:65:9b: 3e:d5:05:4f:2f:9c:4b:60:92:87:b0:bf:a6:18:43: b3:08:86:e2:b0:89:c6:6a:51:9d:a3:7e:55:92:7d: 8f:ae:fb:af:d2:c7:36:7e:d9:1a:d8:83:55:7a:cb: 95:97:30:02:ed:51:4b:a6:e7:a7:fa:d6:a2:77:e2: 23:6c:ed:21:31:ff:46:1c:9e:33:d4:47:55:ad:b4: 72:05:5a:54:8b:70:96:4c:55:2d:8a:be:2e:d4:da: b2:fb:17:ec:70:5b:7d:c5:6b:1e:eb:c1:06:f8:12: d5:df:a8:5f:73:27:83:c3:df:de:36:70:a5:9b:a1: 95:dc:56:09:34:69:ef:a9:8f:e7:4b:00:1e:78:f0: 24:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:85:20:AD:00:15:C9:6D:31:D5:A0:FC:F2:1A:AC:16:15:7F:C1:42 X509v3 Authority Key Identifier: keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/q4UgrQAVyW0x1aD88hqsFhV_wUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.102.140.0/22 Signature Algorithm: sha256WithRSAEncryption 00:be:02:ee:58:a5:40:78:51:d5:07:cd:a2:aa:86:c0:41:29: 84:74:a5:ce:8f:34:43:78:ec:35:84:ec:6c:fa:46:03:77:d4: 75:1a:6f:01:f0:8e:73:b0:8b:b5:53:ae:1c:ef:bf:13:b3:57: 49:69:ac:a6:2c:01:5b:7d:ef:a1:16:8e:6e:5e:be:69:d5:cf: 7f:23:ce:38:c0:a0:88:d0:31:10:cc:c5:c0:84:53:f9:74:fa: 75:ae:d1:08:5a:4a:4d:3d:4c:f9:f9:b4:2e:2f:84:b3:40:6a: ad:da:7a:45:be:53:ee:33:ec:a7:15:97:d4:d5:83:7b:e7:66: fa:86:f3:aa:88:5c:cd:86:26:ef:ad:9c:e1:61:05:cd:4b:4a: 0b:64:04:7f:ec:4f:3b:f0:97:5a:35:20:8b:d2:b4:56:bb:a5: ec:db:e2:97:5d:7c:b4:54:6d:5c:04:de:0f:67:88:6f:9e:0d: 94:95:cf:01:1d:8a:ff:0f:8b:2d:f4:79:c6:88:9f:50:aa:be: e8:bb:12:d8:a0:8c:f7:6a:ba:39:a7:87:02:f9:69:be:0b:8c: 5d:57:c9:a7:20:27:30:21:5e:74:c9:b9:4b:74:c9:5c:7a:65: e3:cb:41:97:64:98:42:37:13:8e:45:bd:5d:6c:3a:c0:9f:5b: 63:36:5d:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WuIauKySiaEcyVUq35y1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NDdhYTkxYjA2ZDhjNmI4NzI4NGYzZjQ1YTIxZGMyODFm N2JhNTUwHhcNMjYwMTAxMTYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjg1MjBhZDAwMTVjOTZkMzFkNWEwZmNmMjFhYWMxNjE1N2ZjMTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFLao/zihMe0EO2P+Vp5MvJRvQ5S 3h2+prBl5tleCw7+w3q0eHxfdK8XpQws8m6SmBcEsDUe+difXt8+apzz/ZhpWU+9 ZeOiKchs+9WhYDbrZi8+bFEw6SUNQYaRT0GRY7RHbCzv48tWuYXr5TuW/ns/Iq1R ZZs+1QVPL5xLYJKHsL+mGEOzCIbisInGalGdo35Vkn2Prvuv0sc2ftka2INVesuV lzAC7VFLpuen+taid+IjbO0hMf9GHJ4z1EdVrbRyBVpUi3CWTFUtir4u1Nqy+xfs cFt9xWse68EG+BLV36hfcyeDw9/eNnClm6GV3FYJNGnvqY/nSwAeePAkywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKuFIK0AFcltMdWg/PIarBYVf8FCMB8GA1UdIwQY MBaAFIhHqpGwbYxrhyhPP0WiHcKB97pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYt Y2VhNzVkMGNkNjcxLzEvcTRVZ3JRQVZ5VzB4MWFEODhocXNGaFZfd1VJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYtY2VhNzVkMGNkNjcx LzEvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPmaMMA0G CSqGSIb3DQEBCwUAA4IBAQAAvgLuWKVAeFHVB82iqobAQSmEdKXOjzRDeOw1hOxs +kYDd9R1Gm8B8I5zsIu1U64c778Ts1dJaaymLAFbfe+hFo5uXr5p1c9/I844wKCI 0DEQzMXAhFP5dPp1rtEIWkpNPUz5+bQuL4SzQGqt2npFvlPuM+ynFZfU1YN752b6 hvOqiFzNhibvrZzhYQXNS0oLZAR/7E878JdaNSCL0rRWu6Xs2+KXXXy0VG1cBN4P Z4hvng2Ulc8BHYr/D4st9HnGiJ9Qqr7ouxLYoIz3aro5p4cC+Wm+C4xdV8mnICcw IV50yblLdMlcemXjy0GXZJhCNxOORb1dbDrAn1tjNl36 -----END CERTIFICATE-----Generated at Tue Feb 10 00:28:50 2026 by rpki-client