This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/qpReQJ4ra9EFepoIvfI-wRbEIOI.roa File: qpReQJ4ra9EFepoIvfI-wRbEIOI.roa (raw, json) Hash identifier: rfltCZyFcGQYfJJgi8SKKMqLHfq7fdrz+C8KH3BEHFA= Subject key identifier: AA:94:5E:40:9E:2B:6B:D1:05:7A:9A:08:BD:F2:3E:C1:16:C4:20:E2 Certificate issuer: /CN=0b84ea549f88211058b34bfcab0640c3030393c3 Certificate serial: 019B7DCAC5B8208A335C5C1CCCFFD5271DFC Authority key identifier: 0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/qpReQJ4ra9EFepoIvfI-wRbEIOI.roa Signing time: Fri 02 Jan 2026 08:19:59 +0000 ROA not before: Fri 02 Jan 2026 08:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52195 IP address blocks: 46.149.208.0/20 maxlen: 23 185.12.20.0/22 maxlen: 23 185.237.162.0/23 maxlen: 23 2a02:ea80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c5:b8:20:8a:33:5c:5c:1c:cc:ff:d5:27:1d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b84ea549f88211058b34bfcab0640c3030393c3 Validity Not Before: Jan 2 08:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa945e409e2b6bd1057a9a08bdf23ec116c420e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:2c:62:f0:18:2d:52:12:6c:fd:77:f6:44: 93:f4:9a:ef:b3:90:c9:fd:f9:1b:1b:fe:7b:bb:74: 9f:43:01:78:2d:5c:ea:47:a6:1b:de:ed:8c:21:58: aa:c2:94:13:96:c1:bf:90:3c:fd:80:f1:9b:c2:2d: d4:86:51:25:78:a5:2e:79:c8:18:e1:98:00:5c:c1: eb:ae:f2:51:30:36:b7:58:22:20:07:cd:ec:7c:40: e4:88:40:5a:e7:fb:38:0b:26:6e:12:d1:9c:7e:f1: 3a:ed:e4:91:74:5d:0a:a3:08:79:f2:00:c7:eb:be: 37:c1:8a:23:a2:fb:f0:15:cc:db:74:00:c6:1c:74: a1:66:3b:bd:ec:d7:21:08:5c:b1:c0:77:69:c3:4f: f1:91:90:de:e9:cd:af:7c:47:b2:a5:0b:8a:dc:f8: 4d:5e:f3:17:18:9d:4c:74:d2:90:20:e8:ad:c0:12: 40:4b:17:b9:d6:24:09:48:30:cd:a1:79:12:b9:ed: 01:16:8a:65:b9:ba:e2:fa:17:75:be:bd:13:73:88: 1c:b5:19:de:da:62:fa:af:a3:3a:2a:05:58:b5:08: 2a:4d:05:e3:26:59:34:73:f6:b8:b0:e2:8b:be:3a: 28:0c:eb:67:47:e8:1f:5c:c4:8d:c1:e0:b8:e0:3a: 08:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:94:5E:40:9E:2B:6B:D1:05:7A:9A:08:BD:F2:3E:C1:16:C4:20:E2 X509v3 Authority Key Identifier: keyid:0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/qpReQJ4ra9EFepoIvfI-wRbEIOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.149.208.0/20 185.12.20.0/22 185.237.162.0/23 IPv6: 2a02:ea80::/32 Signature Algorithm: sha256WithRSAEncryption ad:90:e1:f4:f6:59:90:f7:64:d3:36:78:49:ec:7a:d7:02:8f: 8c:de:90:78:0f:c4:7b:ea:b2:13:b0:61:2a:d9:c8:23:95:e0: 37:c7:df:75:db:91:3e:d4:1b:26:c3:85:f9:9e:ad:89:b3:49: 72:57:26:f8:d4:f8:02:46:85:21:88:6c:6f:8e:39:60:d8:8e: 9f:9c:39:ac:a6:c0:52:57:d2:6f:3f:0e:b7:cf:0c:35:f6:05: 9e:ee:5c:6c:cd:1a:28:40:6c:43:b6:ee:c8:aa:4a:14:d2:8c: a7:70:4d:25:02:53:bc:d4:df:bd:fc:33:da:95:45:de:ab:b7: 08:8c:e2:b6:5b:ec:c9:2b:d2:d8:00:46:76:f7:98:95:8b:4a: 22:ec:29:eb:02:2f:80:92:dc:05:46:cc:8d:a3:4b:54:23:59: 84:15:14:d9:56:e3:f2:dc:a4:a1:fa:f1:1c:e2:f7:15:19:b7: c6:7e:58:78:f4:f3:a9:54:0e:27:60:2d:e3:29:fe:b0:05:f1: c2:b8:fc:82:f6:5a:c0:95:71:5f:13:1b:f9:c7:ee:62:e1:e7: 82:41:28:e8:57:89:32:c7:ac:99:17:ee:86:35:fe:c0:d7:10: a6:fa:30:57:ae:73:1f:69:70:9d:0d:d9:b1:f3:c5:73:70:a7: 5f:72:e3:7e -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9ysW4IIozXFwczP/VJx38MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiODRlYTU0OWY4ODIxMTA1OGIzNGJmY2FiMDY0MGMzMDMw MzkzYzMwHhcNMjYwMTAyMDgxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTk0NWU0MDllMmI2YmQxMDU3YTlhMDhiZGYyM2VjMTE2YzQyMGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3wsYvAYLVISbP139kST9Jrvs5DJ /fkbG/57u3SfQwF4LVzqR6Yb3u2MIViqwpQTlsG/kDz9gPGbwi3UhlEleKUuecgY 4ZgAXMHrrvJRMDa3WCIgB83sfEDkiEBa5/s4CyZuEtGcfvE67eSRdF0Kowh58gDH 6743wYojovvwFczbdADGHHShZju97NchCFyxwHdpw0/xkZDe6c2vfEeypQuK3PhN XvMXGJ1MdNKQIOitwBJASxe51iQJSDDNoXkSue0BFoplubri+hd1vr0Tc4gctRne 2mL6r6M6KgVYtQgqTQXjJlk0c/a4sOKLvjooDOtnR+gfXMSNweC44DoIRwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKqUXkCeK2vRBXqaCL3yPsEWxCDiMB8GA1UdIwQY MBaAFAuE6lSfiCEQWLNL/KsGQMMDA5PDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzRUcVZKLUlJUkJZczB2OHF3WkF3d01EazhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yZmMxNjctYjM1Ny00Mzk0LWI0ZTgt YzgyNWJlMjgxM2JjLzEvcXBSZVFKNHJhOUVGZXBvSXZmSS13UmJFSU9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8yZmMxNjctYjM1Ny00Mzk0LWI0ZTgtYzgyNWJlMjgxM2Jj LzEvQzRUcVZKLUlJUkJZczB2OHF3WkF3d01EazhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQELpXQAwQC uQwUAwQBue2iMA0EAgACMAcDBQAqAuqAMA0GCSqGSIb3DQEBCwUAA4IBAQCtkOH0 9lmQ92TTNnhJ7HrXAo+M3pB4D8R76rITsGEq2cgjleA3x99125E+1Bsmw4X5nq2J s0lyVyb41PgCRoUhiGxvjjlg2I6fnDmspsBSV9JvPw63zww19gWe7lxszRooQGxD tu7IqkoU0oyncE0lAlO81N+9/DPalUXeq7cIjOK2W+zJK9LYAEZ295iVi0oi7Cnr Ai+AktwFRsyNo0tUI1mEFRTZVuPy3KSh+vEc4vcVGbfGflh49POpVA4nYC3jKf6w BfHCuPyC9lrAlXFfExv5x+5i4eeCQSjoV4kyx6yZF+6GNf7A1xCm+jBXrnMfaXCd Ddmx88VzcKdfcuN+ -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:52 2026 by rpki-client