This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/qBE40uvjM3KhFoCteBLo6azxKqs.roa File: qBE40uvjM3KhFoCteBLo6azxKqs.roa (raw, json) Hash identifier: C60d4ehA+DJZSNtWiIvd1yDVO2n8d2kan5kGi6wEoXs= Subject key identifier: A8:11:38:D2:EB:E3:33:72:A1:16:80:AD:78:12:E8:E9:AC:F1:2A:AB Certificate issuer: /CN=e07e008d6ed2388ad31b7422423152a92a54de71 Certificate serial: 019B7759166DE18CCAED3905091ECE4421EF Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/qBE40uvjM3KhFoCteBLo6azxKqs.roa Signing time: Thu 01 Jan 2026 02:18:05 +0000 ROA not before: Thu 01 Jan 2026 02:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197227 IP address blocks: 5.133.248.0/21 maxlen: 24 37.247.56.0/21 maxlen: 24 46.175.40.0/21 maxlen: 24 46.243.156.0/22 maxlen: 24 85.234.248.0/21 maxlen: 24 145.14.240.0/21 maxlen: 24 185.81.56.0/22 maxlen: 24 185.131.160.0/22 maxlen: 24 188.211.16.0/21 maxlen: 24 195.80.128.0/21 maxlen: 24 213.5.208.0/21 maxlen: 24 2a03:1280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:16:6d:e1:8c:ca:ed:39:05:09:1e:ce:44:21:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71 Validity Not Before: Jan 1 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a81138d2ebe33372a11680ad7812e8e9acf12aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:08:d1:3d:1d:35:e4:b6:5a:9f:7b:ff:7c:06: 67:ea:e0:af:7e:e9:0d:96:cc:86:91:d5:6b:8a:1c: 76:0a:2e:8c:96:b9:36:af:ab:49:b7:61:13:e1:08: 1b:88:2c:8b:1f:4c:25:4c:cd:1c:a9:43:38:07:55: cc:f0:fe:cb:5b:3e:b5:3e:24:b2:ca:92:8e:69:ce: 7c:de:a3:34:da:b1:86:57:94:08:3a:60:c3:32:33: 80:23:3e:bf:a1:9d:c7:4d:b3:09:2c:89:a1:df:c8: bc:ee:81:b8:0d:e6:d8:87:ee:d6:b1:38:af:b9:77: e7:ca:46:19:06:9e:3c:c2:71:05:ee:80:a2:a3:ff: 39:ac:82:e0:18:8b:39:6c:aa:8c:21:e3:1f:c2:63: 72:56:4e:ee:75:09:2f:8a:62:f9:0f:b1:4f:ab:03: f1:7d:bb:85:27:e2:a4:9a:88:59:0c:f7:59:66:78: 1b:f9:46:c7:cc:03:46:5c:e5:94:cc:46:12:9e:4a: 32:aa:ce:d5:18:89:6c:1e:5b:d5:ab:5e:02:0e:9c: 8c:ad:23:aa:e6:d3:56:65:32:c5:8c:b3:4a:c2:71: db:5f:f5:22:ca:dd:33:91:37:55:26:48:e7:c4:ec: 91:18:8a:59:62:d5:aa:e3:83:34:38:70:98:59:3e: c1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:11:38:D2:EB:E3:33:72:A1:16:80:AD:78:12:E8:E9:AC:F1:2A:AB X509v3 Authority Key Identifier: keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/qBE40uvjM3KhFoCteBLo6azxKqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.248.0/21 37.247.56.0/21 46.175.40.0/21 46.243.156.0/22 85.234.248.0/21 145.14.240.0/21 185.81.56.0/22 185.131.160.0/22 188.211.16.0/21 195.80.128.0/21 213.5.208.0/21 IPv6: 2a03:1280::/32 Signature Algorithm: sha256WithRSAEncryption a7:49:d6:7e:e8:61:61:02:43:77:4c:33:3a:30:5f:e8:f7:55: bd:12:9a:9f:da:01:57:35:73:36:ba:67:4d:cd:5c:68:f1:e5: f5:cf:cd:20:59:b4:43:ad:3c:7c:d8:d4:bc:fa:fd:b0:77:38: eb:9d:c4:58:86:4f:68:64:37:85:d2:41:52:0a:c7:62:a1:18: 1e:53:47:ec:27:1d:5c:9f:ac:6f:01:d4:d4:09:3f:bd:42:da: 28:f2:00:be:73:7a:cb:a7:a6:44:b6:3e:a1:2a:19:ef:f8:70: 29:20:48:f5:fa:a5:e7:39:4c:06:39:09:71:23:36:23:f7:3b: 3f:bc:04:b8:e1:6d:f4:ce:b8:87:0a:83:f4:cb:b4:94:c8:0c: e5:05:cc:56:a7:6c:c6:fb:c6:3d:a7:39:e6:ea:c7:8d:b8:7a: 23:5e:ca:e0:9c:4d:c5:50:d3:aa:9c:de:8f:dc:99:ba:c4:a0: 1d:81:e9:a6:c9:d8:73:8b:c0:8e:c2:33:69:80:d6:cc:a4:3a: 7d:a1:57:29:c8:d6:8e:a6:93:b5:a0:50:84:37:5a:35:aa:e8: 69:2f:f6:33:08:58:fd:9d:d5:2c:92:2a:cd:f7:64:9b:74:e5: e9:7c:76:de:bf:eb:d7:a6:16:d9:f9:e5:d0:d2:5f:05:81:05: 25:d2:4d:fd -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt3WRZt4YzK7TkFCR7ORCHvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwN2UwMDhkNmVkMjM4OGFkMzFiNzQyMjQyMzE1MmE5MmE1 NGRlNzEwHhcNMjYwMTAxMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODExMzhkMmViZTMzMzcyYTExNjgwYWQ3ODEyZThlOWFjZjEyYWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QjRPR015LZan3v/fAZn6uCvfukN lsyGkdVrihx2Ci6Mlrk2r6tJt2ET4QgbiCyLH0wlTM0cqUM4B1XM8P7LWz61PiSy ypKOac583qM02rGGV5QIOmDDMjOAIz6/oZ3HTbMJLImh38i87oG4DebYh+7WsTiv uXfnykYZBp48wnEF7oCio/85rILgGIs5bKqMIeMfwmNyVk7udQkvimL5D7FPqwPx fbuFJ+KkmohZDPdZZngb+UbHzANGXOWUzEYSnkoyqs7VGIlsHlvVq14CDpyMrSOq 5tNWZTLFjLNKwnHbX/Uiyt0zkTdVJkjnxOyRGIpZYtWq44M0OHCYWT7BGwIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFKgRONLr4zNyoRaArXgS6Oms8SqrMB8GA1UdIwQY MBaAFOB+AI1u0jiK0xt0IkIxUqkqVN5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kNDc5Y2MtYTcxMi00YmMzLTgzMmQt MjcyNzI0N2FmMjEwLzEvcUJFNDB1dmpNM0toRm9DdGVCTG82YXp4S3FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9kNDc5Y2MtYTcxMi00YmMzLTgzMmQtMjcyNzI0N2FmMjEw LzEvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQDBYX4AwQD Jfc4AwQDLq8oAwQCLvOcAwQDVer4AwQDkQ7wAwQCuVE4AwQCuYOgAwQDvNMQAwQD w1CAAwQD1QXQMA0EAgACMAcDBQAqAxKAMA0GCSqGSIb3DQEBCwUAA4IBAQCnSdZ+ 6GFhAkN3TDM6MF/o91W9Epqf2gFXNXM2umdNzVxo8eX1z80gWbRDrTx82NS8+v2w dzjrncRYhk9oZDeF0kFSCsdioRgeU0fsJx1cn6xvAdTUCT+9Qtoo8gC+c3rLp6ZE tj6hKhnv+HApIEj1+qXnOUwGOQlxIzYj9zs/vAS44W30zriHCoP0y7SUyAzlBcxW p2zG+8Y9pznm6seNuHojXsrgnE3FUNOqnN6P3Jm6xKAdgemmydhzi8COwjNpgNbM pDp9oVcpyNaOppO1oFCEN1o1quhpL/YzCFj9ndUskirN92SbdOXpfHbev+vXphbZ +eXQ0l8FgQUl0k39 -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:34 2026 by rpki-client