This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Qra6RLm0zr9mltqcV1wT_KzqnLc.roa File: Qra6RLm0zr9mltqcV1wT_KzqnLc.roa (raw, json) Hash identifier: KGRR/vKz3JlCwQP5xMFp7PyVHP8kjt7y02DZM47tQ/U= Subject key identifier: 42:B6:BA:44:B9:B4:CE:BF:66:96:DA:9C:57:5C:13:FC:AC:EA:9C:B7 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8BD53B8DC2A571E7A703EAD906A9E Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Qra6RLm0zr9mltqcV1wT_KzqnLc.roa Signing time: Thu 01 Jan 2026 18:18:54 +0000 ROA not before: Thu 01 Jan 2026 18:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6747 IP address blocks: 62.63.159.0/24 maxlen: 24 78.28.197.0/24 maxlen: 24 80.232.180.0/24 maxlen: 24 80.232.181.0/24 maxlen: 24 80.233.136.0/24 maxlen: 24 81.198.93.0/24 maxlen: 24 195.13.180.0/24 maxlen: 24 2a02:16d8:105:9::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:bd:53:b8:dc:2a:57:1e:7a:70:3e:ad:90:6a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42b6ba44b9b4cebf6696da9c575c13fcacea9cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c8:f2:bd:44:e4:d8:1b:ae:3b:9a:dc:7c:e5: 14:d2:19:d9:72:e4:e4:76:32:a6:4f:f2:71:10:0d: d9:19:c5:df:b8:36:fe:5b:2c:8c:77:3e:fc:8d:f1: f0:56:ac:30:f6:df:90:d8:6b:16:fa:e3:55:a0:49: 56:c1:88:75:c0:29:aa:b8:ff:ab:1e:22:f2:52:be: ac:f5:46:b3:50:15:d9:66:ca:04:98:c2:9a:09:9a: aa:52:96:14:9b:49:e8:ea:aa:d4:bd:da:6a:79:0d: 2a:cd:71:a9:9a:79:f3:9b:b6:35:a2:b7:bd:96:c0: 45:7b:12:43:cd:29:d8:07:97:52:12:ed:15:e8:8e: 34:7a:6c:d4:9b:a6:f3:d5:16:40:50:10:de:be:1f: 1d:9e:03:8c:b1:f1:26:82:65:78:a2:0c:a9:58:05: 7d:4f:31:1d:cd:d7:03:20:29:1b:82:7c:64:d6:bc: ab:e4:8b:63:31:10:e6:2c:72:1b:73:04:91:b6:31: a3:93:5d:3f:d3:0d:25:f9:61:3d:59:e8:9a:20:f9: 2a:62:96:b7:e7:92:8d:ab:e1:9c:28:58:fd:17:08: 95:b8:4c:8c:da:e5:7f:67:03:0e:1f:c6:0d:41:41: 90:7a:54:ab:0d:8c:ae:54:5a:9d:6b:42:1c:cd:6b: d1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B6:BA:44:B9:B4:CE:BF:66:96:DA:9C:57:5C:13:FC:AC:EA:9C:B7 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Qra6RLm0zr9mltqcV1wT_KzqnLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.63.159.0/24 78.28.197.0/24 80.232.180.0/23 80.233.136.0/24 81.198.93.0/24 195.13.180.0/24 IPv6: 2a02:16d8:105:9::/64 Signature Algorithm: sha256WithRSAEncryption 15:7f:db:fa:e3:34:cc:c1:18:33:f5:86:b6:6c:26:98:b3:00: 70:b3:66:c6:1c:09:55:b9:8c:7e:27:88:d4:bf:d9:64:ea:dc: a0:de:c9:6c:7b:9d:98:71:e5:92:21:b0:61:de:cd:83:34:14: ad:85:e1:3e:ec:7e:53:e4:56:ad:c9:61:cf:ed:cb:30:13:16: fb:d8:aa:5f:ef:d3:86:b2:70:bf:88:ac:f0:3f:64:cc:c6:0a: 0b:01:f4:a3:6e:36:91:cb:17:43:5c:fb:12:24:2d:06:61:45: 36:27:5b:54:ba:68:54:b1:d0:b0:16:9b:5b:65:b0:3c:70:01: 02:3e:4a:8d:a2:a0:da:64:4d:01:d7:49:38:39:24:8c:10:90: 00:e1:98:b0:c2:67:ba:16:58:b9:44:01:2f:71:6e:7a:78:dc: 5e:46:ca:92:9d:55:82:85:38:7c:fa:22:38:6d:6a:1d:d2:a3: 12:eb:31:53:2b:25:e6:e3:b4:02:c1:dd:ab:7b:ed:16:e4:38: ee:53:6f:e0:96:d9:24:6c:76:7f:75:27:01:73:f1:4b:52:2b: 42:51:d0:c5:5f:a4:4d:07:37:58:52:10:c2:41:c8:41:7b:63: b2:69:3b:b9:46:e8:69:31:d5:9c:dc:b5:be:d0:b4:8d:3d:39: be:a3:93:51 -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgISAZt6yL1TuNwqVx56cD6tkGqeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmI2YmE0NGI5YjRjZWJmNjY5NmRhOWM1NzVjMTNmY2FjZWE5Y2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMjyvUTk2BuuO5rcfOUU0hnZcuTk djKmT/JxEA3ZGcXfuDb+WyyMdz78jfHwVqww9t+Q2GsW+uNVoElWwYh1wCmquP+r HiLyUr6s9UazUBXZZsoEmMKaCZqqUpYUm0no6qrUvdpqeQ0qzXGpmnnzm7Y1ore9 lsBFexJDzSnYB5dSEu0V6I40emzUm6bz1RZAUBDevh8dngOMsfEmgmV4ogypWAV9 TzEdzdcDICkbgnxk1ryr5ItjMRDmLHIbcwSRtjGjk10/0w0l+WE9WeiaIPkqYpa3 55KNq+GcKFj9FwiVuEyM2uV/ZwMOH8YNQUGQelSrDYyuVFqda0IczWvR9QIDAQAB o4ICOjCCAjYwHQYDVR0OBBYEFEK2ukS5tM6/ZpbanFdcE/ys6py3MB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvUXJhNlJMbTB6cjltbHRxY1Yxd1RfS3pxbkxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAqBAIAATAkAwQAPj+fAwQA ThzFAwQBUOi0AwQAUOmIAwQAUcZdAwQAww20MBEEAgACMAsDCQAqAhbYAQUACTAN BgkqhkiG9w0BAQsFAAOCAQEAFX/b+uM0zMEYM/WGtmwmmLMAcLNmxhwJVbmMfieI 1L/ZZOrcoN7JbHudmHHlkiGwYd7NgzQUrYXhPux+U+RWrclhz+3LMBMW+9iqX+/T hrJwv4is8D9kzMYKCwH0o242kcsXQ1z7EiQtBmFFNidbVLpoVLHQsBabW2WwPHAB Aj5KjaKg2mRNAddJODkkjBCQAOGYsMJnuhZYuUQBL3FuenjcXkbKkp1VgoU4fPoi OG1qHdKjEusxUysl5uO0AsHdq3vtFuQ47lNv4JbZJGx2f3UnAXPxS1IrQlHQxV+k TQc3WFIQwkHIQXtjsmk7uUboaTHVnNy1vtC0jT05vqOTUQ== -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:07 2026 by rpki-client