This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/qeRNwequx6fkaRtShfpIv0DEVAk.roa File: qeRNwequx6fkaRtShfpIv0DEVAk.roa (raw, json) Hash identifier: VvERCgKj1UI+wOXtm3kmNbAMChtzDtVHxUi7B9sUK74= Subject key identifier: A9:E4:4D:C1:EA:AE:C7:A7:E4:69:1B:52:85:FA:48:BF:40:C4:54:09 Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019B7F15C93027CD5BF986CE7DB20443F790 Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/qeRNwequx6fkaRtShfpIv0DEVAk.roa Signing time: Fri 02 Jan 2026 14:21:32 +0000 ROA not before: Fri 02 Jan 2026 14:21:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 45.87.44.0/22 maxlen: 24 91.227.184.0/24 maxlen: 24 91.234.192.0/24 maxlen: 24 147.78.198.0/24 maxlen: 24 147.78.199.0/24 maxlen: 24 178.239.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c9:30:27:cd:5b:f9:86:ce:7d:b2:04:43:f7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 2 14:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9e44dc1eaaec7a7e4691b5285fa48bf40c45409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:22:ca:1a:b0:be:f9:8c:a0:e8:e9:60:9a:d1: 53:a8:5f:ff:69:51:60:31:24:7e:d7:46:f1:a7:ca: 6c:78:b2:b6:a8:c6:74:c6:33:43:89:67:fd:57:9b: 10:01:21:4c:3a:e7:35:22:20:1b:3e:3f:b9:c9:ff: 5f:a2:31:b5:f8:9a:78:a0:b8:94:c7:c2:9c:c8:c6: 74:c4:9d:b6:78:2b:51:dd:10:bb:a1:cb:82:c9:b6: d6:62:e0:6a:fb:91:4b:52:78:eb:5e:55:9b:33:ba: d6:a1:56:51:90:6d:ce:57:7d:6a:e6:8f:56:49:74: c2:30:db:e3:db:75:07:ef:75:1c:1c:59:55:7d:60: 6e:cd:97:cb:c8:41:d5:78:8a:1e:ff:4f:be:2d:63: c3:22:ef:10:ad:18:1e:36:98:08:c8:19:cd:d4:b7: 70:24:a6:47:60:6f:67:9b:73:50:66:57:90:79:81: 4b:e8:e4:57:6d:8e:a6:56:0f:5d:47:f2:13:3c:14: 23:0e:cd:0f:2c:48:a2:de:e9:d4:b9:cc:35:06:48: ad:9a:c3:1f:f2:cb:48:c0:1a:32:7b:7b:60:83:23: f6:13:e0:67:13:cf:0f:bb:ff:9b:b9:f3:83:4e:6e: 8e:b4:d7:63:55:9b:c1:f1:cd:a8:90:aa:4c:61:08: 2f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E4:4D:C1:EA:AE:C7:A7:E4:69:1B:52:85:FA:48:BF:40:C4:54:09 X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/qeRNwequx6fkaRtShfpIv0DEVAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.44.0/22 91.227.184.0/24 91.234.192.0/24 147.78.198.0/23 178.239.28.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:a5:10:0f:0a:0e:e0:1b:dd:e4:b8:e5:bf:ae:02:d3:e1:35: f3:89:a1:46:74:c5:1c:53:d4:61:d1:22:f7:31:3f:59:81:28: 29:a6:7c:da:a1:bd:55:a6:a2:d9:ee:75:d5:f7:40:4a:b5:80: 64:b4:54:83:6e:20:4a:54:7d:05:4d:6e:f6:73:b8:33:57:22: 79:e2:17:34:93:e3:8b:92:e8:c3:f0:8e:b0:dd:be:a6:db:de: af:4d:ad:51:7f:15:6d:fe:99:9a:e3:55:b9:d8:ac:8f:05:e1: 20:91:33:86:19:aa:88:eb:59:a7:0f:14:9f:12:49:89:1e:23: 2a:e1:03:26:c6:be:fb:b3:2b:cf:ee:b3:ee:9b:ad:e5:21:dc: 0a:fe:16:63:7b:7b:82:30:da:26:6d:52:5d:da:a0:29:40:fa: 5c:79:51:6a:4a:4e:6f:03:52:d9:8f:56:7a:70:a3:49:97:52: 99:23:c2:f8:bd:9c:16:7b:fd:a7:18:00:41:70:f7:70:4b:e5: e4:db:58:2d:3e:d8:06:3e:08:c2:d9:89:03:82:ca:21:63:55: 8d:d3:c9:31:12:b9:0c:e5:8a:d3:12:9e:de:d6:8f:98:fa:5f: 40:4f:2e:0a:85:db:ab:db:66:da:2d:66:97:51:b5:2b:d1:72: 08:1e:9d:1f -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/FckwJ81b+YbOfbIEQ/eQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTAyMTQyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWU0NGRjMWVhYWVjN2E3ZTQ2OTFiNTI4NWZhNDhiZjQwYzQ1NDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+CLKGrC++Yyg6OlgmtFTqF//aVFg MSR+10bxp8pseLK2qMZ0xjNDiWf9V5sQASFMOuc1IiAbPj+5yf9fojG1+Jp4oLiU x8KcyMZ0xJ22eCtR3RC7ocuCybbWYuBq+5FLUnjrXlWbM7rWoVZRkG3OV31q5o9W SXTCMNvj23UH73UcHFlVfWBuzZfLyEHVeIoe/0++LWPDIu8QrRgeNpgIyBnN1Ldw JKZHYG9nm3NQZleQeYFL6ORXbY6mVg9dR/ITPBQjDs0PLEii3unUucw1BkitmsMf 8stIwBoye3tggyP2E+BnE88Pu/+bufODTm6OtNdjVZvB8c2okKpMYQgvrQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFKnkTcHqrsen5GkbUoX6SL9AxFQJMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvcWVSTndlcXV4NmZrYVJ0U2hmcEl2MERFVkFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLVcsAwQA W+O4AwQAW+rAAwQBk07GAwQBsu8cMA0GCSqGSIb3DQEBCwUAA4IBAQAapRAPCg7g G93kuOW/rgLT4TXziaFGdMUcU9Rh0SL3MT9ZgSgppnzaob1VpqLZ7nXV90BKtYBk tFSDbiBKVH0FTW72c7gzVyJ54hc0k+OLkujD8I6w3b6m296vTa1RfxVt/pma41W5 2KyPBeEgkTOGGaqI61mnDxSfEkmJHiMq4QMmxr77syvP7rPum63lIdwK/hZje3uC MNombVJd2qApQPpceVFqSk5vA1LZj1Z6cKNJl1KZI8L4vZwWe/2nGABBcPdwS+Xk 21gtPtgGPgjC2YkDgsohY1WN08kxErkM5YrTEp7e1o+Y+l9ATy4Khdur22baLWaX UbUr0XIIHp0f -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:58 2026 by rpki-client