This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/QIgCYdB_z_ZiF1SQJ1aaffA4B7A.roa File: QIgCYdB_z_ZiF1SQJ1aaffA4B7A.roa (raw, json) Hash identifier: hDHYC6czXrhhaw2FpFCpVAh77EZNqNtPtvjEfNs88aY= Subject key identifier: 40:88:02:61:D0:7F:CF:F6:62:17:54:90:27:56:9A:7D:F0:38:07:B0 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA48941DB9699ADA4B0AFF1369DA7FA Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/QIgCYdB_z_ZiF1SQJ1aaffA4B7A.roa Signing time: Thu 01 Jan 2026 22:18:59 +0000 ROA not before: Thu 01 Jan 2026 22:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12722 IP address blocks: 45.10.109.0/24 maxlen: 24 45.11.212.0/24 maxlen: 24 45.88.208.0/24 maxlen: 24 45.88.211.0/24 maxlen: 24 176.53.187.0/24 maxlen: 24 193.56.185.0/24 maxlen: 24 193.160.211.0/24 maxlen: 24 194.32.124.0/24 maxlen: 24 194.32.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:89:41:db:96:99:ad:a4:b0:af:f1:36:9d:a7:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40880261d07fcff66217549027569a7df03807b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:53:c0:c0:0f:4a:ee:9d:72:ee:5e:0c:2e:82: 65:01:c3:9b:33:e8:b2:9d:e1:62:ad:3f:d5:7b:86: 3a:4a:09:9f:64:2d:b1:fb:80:e2:57:ba:7d:99:75: 39:88:25:02:05:dc:39:4f:83:fd:62:0a:69:2e:44: ed:c1:87:4c:51:01:6d:f5:ff:96:6a:3e:4a:38:fd: 70:8b:56:6b:54:e6:aa:05:3c:38:7f:46:be:0a:1d: e0:8d:a8:5e:e6:db:37:d8:ac:76:31:b9:08:12:3f: 1c:dd:6b:84:ae:0c:14:ed:b0:9e:ab:8b:f8:b6:5c: 3d:df:79:95:20:88:40:3d:8f:8b:91:9e:5e:09:0a: 69:3a:d0:7e:69:fb:44:17:da:b4:e3:22:2e:8d:6a: 09:d8:22:0f:43:a4:e3:c3:1c:26:9e:03:4a:1f:67: 04:83:d2:0c:90:1f:5d:36:0b:c8:46:7d:df:7c:11: 9e:a6:4f:2a:13:ca:74:ef:24:12:d7:82:4a:b2:76: 27:de:12:2b:74:20:ba:6c:a4:dc:3f:ff:b8:05:d9: 60:99:a4:ea:c1:6c:62:4b:ec:5d:31:8b:c5:50:b2: 04:a4:cc:7f:16:71:eb:49:fa:de:05:f8:a9:17:9f: 07:77:5f:0e:ac:e5:74:6d:14:aa:f7:e4:da:26:4d: 5b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:88:02:61:D0:7F:CF:F6:62:17:54:90:27:56:9A:7D:F0:38:07:B0 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/QIgCYdB_z_ZiF1SQJ1aaffA4B7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.109.0/24 45.11.212.0/24 45.88.208.0/24 45.88.211.0/24 176.53.187.0/24 193.56.185.0/24 193.160.211.0/24 194.32.124.0/24 194.32.126.0/24 Signature Algorithm: sha256WithRSAEncryption 72:81:91:7e:f0:a1:68:1b:53:52:2d:84:04:1a:cd:c7:0b:52: b6:54:99:99:22:91:87:a2:8e:ad:b4:ec:33:8f:9a:50:f7:91: 6a:81:c0:0f:69:13:84:14:e3:37:38:57:39:45:1b:f9:6e:cd: 63:a2:7b:84:70:a4:5a:a2:5d:9a:af:d2:d4:1e:04:67:52:06: bb:b0:b7:f2:83:ba:43:96:19:de:f2:66:be:7c:34:1f:8a:12: e2:a8:37:4e:bd:f3:5a:e0:bc:19:2c:27:5b:30:97:5b:b9:3e: 60:f5:95:18:9a:5e:b6:e5:7d:ef:fc:ef:2c:53:2b:03:4f:03: b4:12:2c:45:f5:d8:0f:2c:53:76:c9:1b:d8:94:a3:76:16:17: d2:b2:bb:78:31:14:a5:ed:32:5a:38:39:16:1b:92:29:d7:65: d1:6a:f5:c0:ce:18:c0:8f:bd:62:9f:74:5c:e9:77:76:58:a1: 46:e8:10:e3:dd:e2:4c:fc:5b:c1:2b:da:7e:a6:da:41:c3:8f: d4:1b:0f:3e:b7:47:57:c1:fc:8a:de:fc:05:17:c7:f6:4e:4e: 2f:2d:87:33:05:d8:23:e6:9f:0f:34:71:73:52:71:5e:7e:da: 14:5c:9d:e6:fe:59:67:bc:94:21:8e:41:8f:72:e0:81:d6:de: f0:47:99:6d -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt7pIlB25aZraSwr/E2naf6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDg4MDI2MWQwN2ZjZmY2NjIxNzU0OTAyNzU2OWE3ZGYwMzgwN2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lPAwA9K7p1y7l4MLoJlAcObM+iy neFirT/Ve4Y6SgmfZC2x+4DiV7p9mXU5iCUCBdw5T4P9YgppLkTtwYdMUQFt9f+W aj5KOP1wi1ZrVOaqBTw4f0a+Ch3gjahe5ts32Kx2MbkIEj8c3WuErgwU7bCeq4v4 tlw933mVIIhAPY+LkZ5eCQppOtB+aftEF9q04yIujWoJ2CIPQ6TjwxwmngNKH2cE g9IMkB9dNgvIRn3ffBGepk8qE8p07yQS14JKsnYn3hIrdCC6bKTcP/+4BdlgmaTq wWxiS+xdMYvFULIEpMx/FnHrSfreBfipF58Hd18OrOV0bRSq9+TaJk1bTQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFECIAmHQf8/2YhdUkCdWmn3wOAewMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvUUlnQ1lkQl96X1ppRjFTUUoxYWFmZkE0QjdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALQptAwQA LQvUAwQALVjQAwQALVjTAwQAsDW7AwQAwTi5AwQAwaDTAwQAwiB8AwQAwiB+MA0G CSqGSIb3DQEBCwUAA4IBAQBygZF+8KFoG1NSLYQEGs3HC1K2VJmZIpGHoo6ttOwz j5pQ95FqgcAPaROEFOM3OFc5RRv5bs1jonuEcKRaol2ar9LUHgRnUga7sLfyg7pD lhne8ma+fDQfihLiqDdOvfNa4LwZLCdbMJdbuT5g9ZUYml625X3v/O8sUysDTwO0 EixF9dgPLFN2yRvYlKN2FhfSsrt4MRSl7TJaODkWG5Ip12XRavXAzhjAj71in3Rc 6Xd2WKFG6BDj3eJM/FvBK9p+ptpBw4/UGw8+t0dXwfyK3vwFF8f2Tk4vLYczBdgj 5p8PNHFzUnFeftoUXJ3m/llnvJQhjkGPcuCB1t7wR5lt -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:33 2026 by rpki-client