This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/aSQK_Cn7Rj_Qk5VH_2zX0Del1xI.roa File: aSQK_Cn7Rj_Qk5VH_2zX0Del1xI.roa (raw, json) Hash identifier: AJLz8V9DTfSj8uSOdLs4ccNuem/rratwpuZJ7Nlu/rU= Subject key identifier: 69:24:0A:FC:29:FB:46:3F:D0:93:95:47:FF:6C:D7:D0:37:A5:D7:12 Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec Certificate serial: 019B791073790B792A70CD723F64CAE78DEB Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/aSQK_Cn7Rj_Qk5VH_2zX0Del1xI.roa Signing time: Thu 01 Jan 2026 10:17:59 +0000 ROA not before: Thu 01 Jan 2026 10:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24953 IP address blocks: 80.64.140.0/22 maxlen: 22 83.216.192.0/20 maxlen: 20 89.185.96.0/19 maxlen: 19 89.185.104.0/24 maxlen: 24 89.185.105.0/24 maxlen: 24 91.220.239.0/24 maxlen: 24 185.34.196.0/22 maxlen: 22 185.167.240.0/22 maxlen: 24 185.213.124.0/22 maxlen: 22 185.224.120.0/22 maxlen: 22 195.95.163.0/24 maxlen: 24 2001:1ad0::/32 maxlen: 32 2001:1ad0:c4fc::/46 maxlen: 48 2a0b:c200::/29 maxlen: 32 2a0b:c200:cafe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:73:79:0b:79:2a:70:cd:72:3f:64:ca:e7:8d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69240afc29fb463fd0939547ff6cd7d037a5d712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ab:31:eb:1e:aa:1f:3f:e2:ff:b5:b5:00:dd: 93:63:e8:d9:73:71:00:4b:56:9b:35:d8:1f:be:81: e5:4c:8a:91:df:b8:7e:d8:b4:ef:a7:b0:20:87:f0: 8e:1a:7e:81:c8:44:b3:74:5c:cc:e7:2a:6e:b2:23: 5b:3c:39:18:cc:72:1a:cd:cd:00:25:c0:89:0e:7d: 7a:b9:8c:30:6d:56:20:83:14:71:e5:cb:54:fa:7c: da:80:38:73:cd:48:f5:5b:83:32:31:11:d1:b7:c5: 7a:e2:9b:5f:c2:85:9c:bc:d9:bc:53:88:d1:36:09: d3:ab:7e:bf:a7:af:a5:32:39:b2:0f:0b:4a:fb:7b: ab:1d:9e:7b:b2:a9:98:2e:96:40:6a:5e:1a:3e:ce: 13:19:8c:d6:a8:89:16:ac:f7:b3:a6:87:bd:5f:87: d2:b0:71:9e:34:8b:84:5f:bb:0a:c2:8a:78:8b:81: 0d:30:00:53:94:50:1f:67:0a:6b:f7:ce:c1:6d:38: 93:b5:fc:a3:3b:b7:ee:e2:7f:50:b8:08:02:78:a3: 2e:75:72:8f:57:89:ce:7c:f2:9e:f1:98:0e:fd:a6: 7d:9b:ee:1c:d1:71:dc:98:2f:77:83:27:11:7b:88: 0b:f7:a6:ac:ee:38:db:52:8b:e1:b5:3b:0b:0a:38: 3e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:24:0A:FC:29:FB:46:3F:D0:93:95:47:FF:6C:D7:D0:37:A5:D7:12 X509v3 Authority Key Identifier: keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/aSQK_Cn7Rj_Qk5VH_2zX0Del1xI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.64.140.0/22 83.216.192.0/20 89.185.96.0/19 91.220.239.0/24 185.34.196.0/22 185.167.240.0/22 185.213.124.0/22 185.224.120.0/22 195.95.163.0/24 IPv6: 2001:1ad0::/32 2a0b:c200::/29 Signature Algorithm: sha256WithRSAEncryption c9:7e:66:cb:ae:88:89:36:5c:a9:cf:9e:fe:be:c4:c8:8a:b3: e4:aa:71:a9:67:71:c3:c6:c1:44:50:58:42:21:38:15:90:ec: f4:65:e0:43:1f:f9:9e:88:e4:6d:6a:9d:bd:7b:7d:04:03:05: 61:18:36:1f:06:d8:07:5c:bf:4e:27:8f:9b:8e:42:8e:b5:41: c4:1c:38:31:9e:10:97:67:d7:52:f5:12:d0:81:4f:29:32:23: 40:7e:e0:6a:7b:a9:64:2c:63:e5:42:f5:0e:f8:d8:54:a1:1d: 73:b1:41:8b:fe:10:4b:3a:f0:72:02:9b:7c:85:6c:a3:26:b3: f0:8b:eb:c5:56:73:75:b8:7c:48:4c:dd:2b:7b:8a:59:52:9b: cd:7a:bf:79:a3:97:e0:92:06:df:28:df:29:c8:25:11:05:63: 4f:6b:1f:68:4b:14:f5:fa:c6:4b:f2:4b:0f:c3:9c:11:d1:48: da:19:49:ba:d0:bd:30:e1:72:58:6c:c7:de:65:3e:c7:3f:87: e7:d0:1f:60:bf:79:d4:db:ed:d2:79:46:43:7c:47:2e:5b:be: c9:a1:32:ab:6a:d8:41:a3:ec:cc:94:d5:30:7e:1d:f4:5e:80: f4:ce:31:ad:c1:c3:4e:13:77:80:9d:d9:3b:a6:aa:82:96:40: 11:6f:f1:aa -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZt5EHN5C3kqcM1yP2TK543rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZDRhYzMyMDk2NWFiNDk5MTEwODUwMWEwNjAyYTY4OTNl NjNmZWMwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTI0MGFmYzI5ZmI0NjNmZDA5Mzk1NDdmZjZjZDdkMDM3YTVkNzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6sx6x6qHz/i/7W1AN2TY+jZc3EA S1abNdgfvoHlTIqR37h+2LTvp7Agh/COGn6ByESzdFzM5ypusiNbPDkYzHIazc0A JcCJDn16uYwwbVYggxRx5ctU+nzagDhzzUj1W4MyMRHRt8V64ptfwoWcvNm8U4jR NgnTq36/p6+lMjmyDwtK+3urHZ57sqmYLpZAal4aPs4TGYzWqIkWrPezpoe9X4fS sHGeNIuEX7sKwop4i4ENMABTlFAfZwpr987BbTiTtfyjO7fu4n9QuAgCeKMudXKP V4nOfPKe8ZgO/aZ9m+4c0XHcmC93gycRe4gL96as7jjbUovhtTsLCjg+LwIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFGkkCvwp+0Y/0JOVR/9s19A3pdcSMB8GA1UdIwQY MBaAFFDUrDIJZatJkRCFAaBgKmiT5j/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80MDM1MjgtOWU3Yy00YjY0LTk1OTkt YmEwMzIzMjM3NDRjLzEvYVNRS19DbjdSal9RazVWSF8yelgwRGVsMXhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80MDM1MjgtOWU3Yy00YjY0LTk1OTktYmEwMzIzMjM3NDRj LzEvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDA8BAIAATA2AwQCUECMAwQE U9jAAwQFWblgAwQAW9zvAwQCuSLEAwQCuafwAwQCudV8AwQCueB4AwQAw1+jMBQE AgACMA4DBQAgARrQAwUDKgvCADANBgkqhkiG9w0BAQsFAAOCAQEAyX5my66IiTZc qc+e/r7EyIqz5KpxqWdxw8bBRFBYQiE4FZDs9GXgQx/5nojkbWqdvXt9BAMFYRg2 HwbYB1y/TiePm45CjrVBxBw4MZ4Ql2fXUvUS0IFPKTIjQH7ganupZCxj5UL1DvjY VKEdc7FBi/4QSzrwcgKbfIVsoyaz8IvrxVZzdbh8SEzdK3uKWVKbzXq/eaOX4JIG 3yjfKcglEQVjT2sfaEsU9frGS/JLD8OcEdFI2hlJutC9MOFyWGzH3mU+xz+H59Af YL951Nvt0nlGQ3xHLlu+yaEyq2rYQaPszJTVMH4d9F6A9M4xrcHDThN3gJ3ZO6aq gpZAEW/xqg== -----END CERTIFICATE-----Generated at Mon Jan 26 18:43:39 2026 by rpki-client