This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/QEgwkx9Ur8A5VR_93wi_klKRt8Y.roa File: QEgwkx9Ur8A5VR_93wi_klKRt8Y.roa (raw, json) Hash identifier: ssjKWk2CSRckUU4ehrXwTTcqwzG96OC4TW9gtKY/NhQ= Subject key identifier: 40:48:30:93:1F:54:AF:C0:39:55:1F:FD:DF:08:BF:92:52:91:B7:C6 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8CA571B85F60FFEE5AFEE4BF076B7 Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/QEgwkx9Ur8A5VR_93wi_klKRt8Y.roa Signing time: Thu 01 Jan 2026 18:18:57 +0000 ROA not before: Thu 01 Jan 2026 18:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58269 IP address blocks: 87.246.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ca:57:1b:85:f6:0f:fe:e5:af:ee:4b:f0:76:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=404830931f54afc039551ffddf08bf925291b7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6f:12:0c:a8:31:96:98:c2:d6:98:78:50:6c: 05:62:1a:09:b6:48:5e:a2:43:46:f5:a4:88:9e:dc: e9:9d:7e:05:d8:eb:6e:a9:cd:cf:4d:01:c8:b1:89: 5b:7d:5c:b8:cf:0d:0c:74:aa:e5:2f:0e:f2:79:88: 08:47:2a:5e:9d:8f:4d:ee:55:a0:65:a6:db:1c:75: 62:69:e5:96:cf:cd:9f:b7:a5:cc:da:3f:64:71:ff: fb:e1:90:0e:43:d0:5e:a6:fa:dd:48:e0:53:e6:f7: e8:40:87:62:dd:c3:bb:34:51:7a:40:24:d7:a5:bc: 6a:9d:66:9d:94:17:11:ae:15:2f:ec:e8:e1:f7:94: bb:3e:f0:8d:1c:79:46:78:3c:16:f1:6c:87:f4:f7: 56:5a:08:6d:fb:41:82:92:34:6c:2f:ba:b3:8e:3d: c0:23:9b:3d:ba:19:81:b6:75:6b:d8:45:f4:32:34: bf:45:16:6b:59:05:fd:d8:29:bf:31:e0:a0:c4:bc: de:6f:cc:2d:27:ea:54:b9:13:39:ba:8d:ed:70:ff: 11:cb:cd:b2:69:d5:9b:08:35:af:6a:37:75:a9:49: a8:9c:6f:1b:0e:f3:31:2f:00:55:87:0d:91:b4:09: c1:35:46:ff:47:76:b6:96:44:10:25:17:6c:28:5e: 6c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:48:30:93:1F:54:AF:C0:39:55:1F:FD:DF:08:BF:92:52:91:B7:C6 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/QEgwkx9Ur8A5VR_93wi_klKRt8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.246.183.0/24 Signature Algorithm: sha256WithRSAEncryption b0:1e:cf:22:71:d0:25:72:fc:51:36:c6:d5:c1:b3:69:94:1e: 14:79:40:9b:d0:b5:d6:e9:38:b0:bf:c8:fa:31:7e:ac:a5:e7: f0:35:12:3e:55:e0:94:58:10:90:f5:7b:dc:cc:8e:01:05:33: 1d:85:98:41:d0:44:93:de:1f:03:74:96:cf:43:af:44:56:0d: 81:77:9e:b3:50:50:c1:b0:c9:c4:6c:3a:62:c0:ba:32:3b:d1: 08:bc:a1:89:76:b6:53:a5:dd:a3:48:0c:88:16:ff:84:f9:d9: 7b:ca:5e:d6:66:ce:8e:ef:f6:32:80:19:56:9f:f8:55:9e:be: 1f:5a:2f:65:1d:0d:4b:2b:4c:98:7d:bb:4f:ba:a4:af:43:4c: 77:76:ae:d9:60:00:f5:d2:c8:86:3e:70:c9:8d:c7:ed:86:6a: 31:92:90:8c:b7:83:ca:8e:79:8a:f0:8e:43:ef:d4:39:7a:44: 70:c1:59:98:93:7e:ce:02:c4:fb:7d:90:60:0a:92:2c:a7:60: b1:7d:cd:1c:eb:e4:fa:95:27:07:03:05:41:33:91:19:68:f1: 97:22:19:11:2a:5d:70:6e:45:f5:54:37:97:7f:b4:68:9e:bb: d9:78:7a:43:06:86:56:5c:b0:ec:22:16:a3:81:53:56:28:16: 1f:19:c4:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yMpXG4X2D/7lr+5L8Ha3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDQ4MzA5MzFmNTRhZmMwMzk1NTFmZmRkZjA4YmY5MjUyOTFiN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG8SDKgxlpjC1ph4UGwFYhoJtkhe okNG9aSIntzpnX4F2Otuqc3PTQHIsYlbfVy4zw0MdKrlLw7yeYgIRypenY9N7lWg ZabbHHViaeWWz82ft6XM2j9kcf/74ZAOQ9BepvrdSOBT5vfoQIdi3cO7NFF6QCTX pbxqnWadlBcRrhUv7Ojh95S7PvCNHHlGeDwW8WyH9PdWWght+0GCkjRsL7qzjj3A I5s9uhmBtnVr2EX0MjS/RRZrWQX92Cm/MeCgxLzeb8wtJ+pUuRM5uo3tcP8Ry82y adWbCDWvajd1qUmonG8bDvMxLwBVhw2RtAnBNUb/R3a2lkQQJRdsKF5sKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEBIMJMfVK/AOVUf/d8Iv5JSkbfGMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvUUVnd2t4OVVyOEE1VlJfOTN3aV9rbEtSdDhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/a3MA0G CSqGSIb3DQEBCwUAA4IBAQCwHs8icdAlcvxRNsbVwbNplB4UeUCb0LXW6Tiwv8j6 MX6spefwNRI+VeCUWBCQ9XvczI4BBTMdhZhB0EST3h8DdJbPQ69EVg2Bd56zUFDB sMnEbDpiwLoyO9EIvKGJdrZTpd2jSAyIFv+E+dl7yl7WZs6O7/YygBlWn/hVnr4f Wi9lHQ1LK0yYfbtPuqSvQ0x3dq7ZYAD10siGPnDJjcfthmoxkpCMt4PKjnmK8I5D 79Q5ekRwwVmYk37OAsT7fZBgCpIsp2Cxfc0c6+T6lScHAwVBM5EZaPGXIhkRKl1w bkX1VDeXf7RonrvZeHpDBoZWXLDsIhajgVNWKBYfGcRt -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:04 2026 by rpki-client