This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/q2EEPg27aJ7MKxd4_2saW4PtwNs.roa File: q2EEPg27aJ7MKxd4_2saW4PtwNs.roa (raw, json) Hash identifier: TkB4YWmzDIPvVNQNni4Vn80uheBzxSDgJIan4fevymo= Subject key identifier: AB:61:04:3E:0D:BB:68:9E:CC:2B:17:78:FF:6B:1A:5B:83:ED:C0:DB Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb Certificate serial: 019B78A308D65CC9701CCAEF9F420AA880B7 Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/q2EEPg27aJ7MKxd4_2saW4PtwNs.roa Signing time: Thu 01 Jan 2026 08:18:29 +0000 ROA not before: Thu 01 Jan 2026 08:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62031 IP address blocks: 185.50.48.0/22 maxlen: 22 2a04:bb40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:08:d6:5c:c9:70:1c:ca:ef:9f:42:0a:a8:80:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb Validity Not Before: Jan 1 08:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab61043e0dbb689ecc2b1778ff6b1a5b83edc0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:10:e9:38:73:96:a9:90:9b:71:95:69:e4:8e: 7d:04:23:f7:ce:8e:cb:d6:15:8a:e7:94:7d:b0:b8: bc:82:ca:4a:3b:4a:9c:e6:d6:d5:a8:34:70:94:21: 03:a1:8c:c0:19:d2:65:89:5e:68:7d:36:b6:5f:10: 48:12:db:ed:5b:f4:b4:38:61:ea:f2:e1:3d:96:5c: 79:0f:e9:42:16:65:67:ae:1f:87:5b:67:87:71:3a: cd:37:be:79:f3:a4:95:40:75:04:e8:09:48:6d:d1: 05:f7:cf:a8:f2:55:54:31:e3:38:08:0b:d4:4c:8b: fd:c2:db:53:16:2b:64:9b:91:82:f2:63:17:fa:a4: fc:31:9e:53:70:68:cb:4a:e5:db:51:d3:4c:f1:bb: 2e:db:43:27:a1:55:25:c0:5c:5a:5b:a1:7f:31:a9: 56:26:ac:94:c8:90:8c:72:66:f7:3d:e9:c4:20:d2: 2f:0d:21:f7:36:d8:60:08:14:85:2a:83:cc:5e:f4: 3b:71:0a:5d:5e:12:fc:a3:f4:5e:b8:77:1d:07:1f: 81:2e:54:b4:d2:88:38:22:82:2f:12:0c:99:4c:d1: 8d:d3:17:a7:2f:1d:39:28:66:cd:2c:12:bc:e0:92: 1e:fe:4b:85:3b:7e:70:e0:6e:13:a4:49:c3:8a:e1: e7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:61:04:3E:0D:BB:68:9E:CC:2B:17:78:FF:6B:1A:5B:83:ED:C0:DB X509v3 Authority Key Identifier: keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/q2EEPg27aJ7MKxd4_2saW4PtwNs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.50.48.0/22 IPv6: 2a04:bb40::/29 Signature Algorithm: sha256WithRSAEncryption 9a:5c:05:2f:e6:a8:7b:38:13:18:5e:4b:5e:fa:ed:1d:90:e1: 53:9e:8f:c7:0f:70:ce:3d:c3:71:40:03:b4:9d:de:32:9d:ec: a8:54:6b:4c:57:e8:30:25:5f:eb:1a:88:11:a1:6f:6c:58:c4: e0:14:38:e8:69:45:6e:56:82:57:e9:4e:e7:1d:20:0b:af:7c: af:16:05:d2:29:f2:f8:0e:68:14:09:24:bc:a5:ba:50:2c:a0: 77:4e:4a:73:1a:34:f8:25:35:b6:86:da:a3:c0:72:45:ed:b9: 42:ec:c0:b7:5a:ae:30:b2:3f:1a:0c:f3:7a:27:10:cc:e6:96: 11:16:95:16:16:83:7c:83:10:78:ac:0b:b4:d8:d8:41:52:5d: a5:e3:a6:8b:89:cb:c9:2e:43:1a:b0:7b:6c:b2:4f:f7:49:4e: 0b:ed:7b:6a:91:81:a8:4c:d8:c2:a9:98:d2:ae:70:ee:d5:89: 3a:be:9e:35:1c:65:15:d9:7f:a5:75:c9:04:df:70:67:9a:20: c9:08:32:b5:97:5c:64:f2:86:7b:14:bc:80:d7:59:bf:73:61: 04:8a:9b:0d:62:89:92:d0:65:55:b1:69:31:a8:3d:bc:9e:75: 2b:a2:ad:78:8c:b8:16:94:ba:19:c9:8e:a7:6c:3c:c3:15:9a: e2:76:06:ee -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4owjWXMlwHMrvn0IKqIC3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNmYyNjIyZTY1YzJlZTg2MzUwMWQ3NzIxNDc1YTA1ZWY1 MzQzZmIwHhcNMjYwMTAxMDgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjYxMDQzZTBkYmI2ODllY2MyYjE3NzhmZjZiMWE1YjgzZWRjMGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxDpOHOWqZCbcZVp5I59BCP3zo7L 1hWK55R9sLi8gspKO0qc5tbVqDRwlCEDoYzAGdJliV5ofTa2XxBIEtvtW/S0OGHq 8uE9llx5D+lCFmVnrh+HW2eHcTrNN75586SVQHUE6AlIbdEF98+o8lVUMeM4CAvU TIv9wttTFitkm5GC8mMX+qT8MZ5TcGjLSuXbUdNM8bsu20MnoVUlwFxaW6F/MalW JqyUyJCMcmb3PenEINIvDSH3NthgCBSFKoPMXvQ7cQpdXhL8o/ReuHcdBx+BLlS0 0og4IoIvEgyZTNGN0xenLx05KGbNLBK84JIe/kuFO35w4G4TpEnDiuHnWwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKthBD4Nu2iezCsXeP9rGluD7cDbMB8GA1UdIwQY MBaAFJ5vJiLmXC7oY1AddyFHWgXvU0P7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81OTNkZDUtYjkwNy00ZGU4LTgwY2Qt YjFkYjcwMDcxZGRlLzEvcTJFRVBnMjdhSjdNS3hkNF8yc2FXNFB0d05zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS81OTNkZDUtYjkwNy00ZGU4LTgwY2QtYjFkYjcwMDcxZGRl LzEvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTIwMA0E AgACMAcDBQMqBLtAMA0GCSqGSIb3DQEBCwUAA4IBAQCaXAUv5qh7OBMYXkte+u0d kOFTno/HD3DOPcNxQAO0nd4yneyoVGtMV+gwJV/rGogRoW9sWMTgFDjoaUVuVoJX 6U7nHSALr3yvFgXSKfL4DmgUCSS8pbpQLKB3TkpzGjT4JTW2htqjwHJF7blC7MC3 Wq4wsj8aDPN6JxDM5pYRFpUWFoN8gxB4rAu02NhBUl2l46aLicvJLkMasHtssk/3 SU4L7XtqkYGoTNjCqZjSrnDu1Yk6vp41HGUV2X+ldckE33BnmiDJCDK1l1xk8oZ7 FLyA11m/c2EEipsNYomS0GVVsWkxqD28nnUroq14jLgWlLoZyY6nbDzDFZridgbu -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:37 2026 by rpki-client