This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/qfnbY9JngbTP144k13tCg-IRl3w.roa File: qfnbY9JngbTP144k13tCg-IRl3w.roa (raw, json) Hash identifier: 9MKZ2wZQrvJYgyQxGjaYnWmRu2eM+70F1EApasiltnA= Subject key identifier: A9:F9:DB:63:D2:67:81:B4:CF:D7:8E:24:D7:7B:42:83:E2:11:97:7C Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1 Certificate serial: 019B7F15E3DD25B9524F0E6074CA62829604 Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/qfnbY9JngbTP144k13tCg-IRl3w.roa Signing time: Fri 02 Jan 2026 14:21:39 +0000 ROA not before: Fri 02 Jan 2026 14:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20902 IP address blocks: 46.229.0.0/20 maxlen: 24 80.73.96.0/19 maxlen: 24 80.73.96.0/20 maxlen: 24 80.73.112.0/21 maxlen: 24 80.88.64.0/20 maxlen: 24 109.239.160.0/20 maxlen: 24 194.0.184.0/24 maxlen: 24 2001:67c:2088::/48 maxlen: 48 2a00:1230::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e3:dd:25:b9:52:4f:0e:60:74:ca:62:82:96:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1 Validity Not Before: Jan 2 14:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9f9db63d26781b4cfd78e24d77b4283e211977c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4e:6a:f0:0d:fe:45:5c:d6:45:4e:38:26:43: 0d:c6:d8:ca:35:0b:fe:ba:eb:72:f3:83:1f:ce:ed: 96:40:c6:3e:0c:f8:0b:ce:cc:aa:dc:97:7f:7c:6f: 36:72:57:f3:da:f3:84:c4:2e:9e:9f:4f:1c:26:e1: b5:b1:3e:82:d2:e0:10:06:c3:6b:1a:71:68:b8:3a: 4e:1a:df:24:d0:bb:75:37:ce:c6:57:84:1a:63:31: f5:e6:7d:1a:f0:e2:3f:4a:47:9c:1f:26:0a:d6:4f: 5a:49:0d:11:91:e6:a2:53:a0:40:81:67:ed:52:d4: 7b:bf:5e:9f:56:f1:c7:12:d8:7a:02:b0:9d:4b:13: 75:ed:07:26:ed:4f:d3:c5:b0:59:22:a6:08:ca:12: 57:5c:06:0c:d5:4b:13:93:1e:19:8f:af:42:a6:7d: f9:91:5f:5c:d9:42:ad:4e:80:d2:a1:be:50:96:98: d5:b8:33:2f:ee:1b:02:4c:b7:8b:7b:c2:ad:ef:72: 72:7d:c4:5b:bb:52:74:09:6a:86:65:f0:37:64:93: 09:1d:af:c6:51:42:b8:a2:c7:7b:05:b2:e8:0d:18: e2:76:2e:38:7e:65:71:27:5d:b0:1f:ae:9c:54:f5: ab:31:98:bb:4a:0f:25:db:0d:ab:3d:7d:01:30:a9: 36:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F9:DB:63:D2:67:81:B4:CF:D7:8E:24:D7:7B:42:83:E2:11:97:7C X509v3 Authority Key Identifier: keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/qfnbY9JngbTP144k13tCg-IRl3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.229.0.0/20 80.73.96.0/19 80.88.64.0/20 109.239.160.0/20 194.0.184.0/24 IPv6: 2001:67c:2088::/48 2a00:1230::/29 Signature Algorithm: sha256WithRSAEncryption 52:05:71:35:17:87:45:0b:75:a9:86:75:06:2f:c3:65:3f:ca: f6:75:1e:3d:05:98:42:66:c4:42:d2:0e:fc:84:ac:9a:39:9e: a6:96:88:8f:33:e2:c9:af:e6:b6:bb:d1:87:08:14:2a:e8:16: 6a:37:11:83:5b:79:fa:ec:91:90:8f:29:7a:9f:65:ba:65:4d: 21:0c:df:ba:93:1a:6d:b7:fc:f3:ff:00:07:18:e7:27:b8:d3: 11:47:eb:29:bb:7e:e2:35:35:cb:86:87:03:6e:33:75:ea:e3: 40:34:2e:05:6f:95:30:02:81:f2:ce:28:83:b5:85:07:3a:7c: 1c:ed:2b:c2:7b:0b:26:35:72:23:98:a6:01:50:28:65:de:e3: 23:90:aa:d3:b8:9b:8e:b8:0d:68:79:e7:9f:bd:9e:44:40:c7: 71:14:5e:62:b9:cf:ac:27:02:2c:f3:48:c2:68:40:a9:b4:5d: df:b0:96:df:30:6a:d0:48:5a:40:b7:18:34:9c:59:2b:98:fc: a9:30:2c:b6:5b:57:03:ff:94:d0:0a:c4:a7:e3:d5:ef:9a:08: 62:28:1b:55:17:84:2b:8b:13:f4:13:83:96:4c:ff:46:ca:74: ea:ac:d0:93:27:61:01:e6:5d:de:5e:d4:95:45:bb:f8:ec:2d: e8:9a:fa:1b -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt/FePdJblSTw5gdMpigpYEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYTVjOTBjYTkyODMxM2JjNzBkMjY4M2JiMGY2NGQ2MzJi MjczYTEwHhcNMjYwMTAyMTQyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWY5ZGI2M2QyNjc4MWI0Y2ZkNzhlMjRkNzdiNDI4M2UyMTE5NzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk5q8A3+RVzWRU44JkMNxtjKNQv+ uuty84Mfzu2WQMY+DPgLzsyq3Jd/fG82clfz2vOExC6en08cJuG1sT6C0uAQBsNr GnFouDpOGt8k0Lt1N87GV4QaYzH15n0a8OI/SkecHyYK1k9aSQ0RkeaiU6BAgWft UtR7v16fVvHHEth6ArCdSxN17Qcm7U/TxbBZIqYIyhJXXAYM1UsTkx4Zj69Cpn35 kV9c2UKtToDSob5QlpjVuDMv7hsCTLeLe8Kt73JyfcRbu1J0CWqGZfA3ZJMJHa/G UUK4osd7BbLoDRjidi44fmVxJ12wH66cVPWrMZi7Sg8l2w2rPX0BMKk22wIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFKn522PSZ4G0z9eOJNd7QoPiEZd8MB8GA1UdIwQY MBaAFFKlyQypKDE7xw0mg7sPZNYysnOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUt MTNlZDYzM2Y5MjJhLzEvcWZuYlk5Sm5nYlRQMTQ0azEzdENnLUlSbDN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUtMTNlZDYzM2Y5MjJh LzEvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAkBAIAATAeAwQELuUAAwQF UElgAwQEUFhAAwQEbe+gAwQAwgC4MBYEAgACMBADBwAgAQZ8IIgDBQMqABIwMA0G CSqGSIb3DQEBCwUAA4IBAQBSBXE1F4dFC3WphnUGL8NlP8r2dR49BZhCZsRC0g78 hKyaOZ6mloiPM+LJr+a2u9GHCBQq6BZqNxGDW3n67JGQjyl6n2W6ZU0hDN+6kxpt t/zz/wAHGOcnuNMRR+spu37iNTXLhocDbjN16uNANC4Fb5UwAoHyziiDtYUHOnwc 7SvCewsmNXIjmKYBUChl3uMjkKrTuJuOuA1oeeefvZ5EQMdxFF5iuc+sJwIs80jC aECptF3fsJbfMGrQSFpAtxg0nFkrmPypMCy2W1cD/5TQCsSn49XvmghiKBtVF4Qr ixP0E4OWTP9GynTqrNCTJ2EB5l3eXtSVRbv47C3omvob -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:38 2026 by rpki-client