This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/qGguuT9Ru0OfORRSKp-reBQ-KRE.roa File: qGguuT9Ru0OfORRSKp-reBQ-KRE.roa (raw, json) Hash identifier: OTU77wowFQko6pFhiDvLMQKWLsSMn8KIv1XwXHLkEb8= Subject key identifier: A8:68:2E:B9:3F:51:BB:43:9F:39:14:52:2A:9F:AB:78:14:3E:29:11 Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232 Certificate serial: 019B77592A61108527BF3B1D666715CA0AA2 Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/qGguuT9Ru0OfORRSKp-reBQ-KRE.roa Signing time: Thu 01 Jan 2026 02:18:10 +0000 ROA not before: Thu 01 Jan 2026 02:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16074 IP address blocks: 62.112.160.0/19 maxlen: 20 62.145.32.0/19 maxlen: 24 62.145.62.0/24 maxlen: 24 62.145.63.0/24 maxlen: 24 192.113.0.0/16 maxlen: 24 217.115.224.0/20 maxlen: 21 2a01:67c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2a:61:10:85:27:bf:3b:1d:66:67:15:ca:0a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232 Validity Not Before: Jan 1 02:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8682eb93f51bb439f3914522a9fab78143e2911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e3:8c:38:d5:3a:30:d8:03:6f:aa:be:3c:5f: 41:82:5f:a2:5b:2c:f7:b7:7f:43:b0:2e:96:ef:46: 73:17:83:fb:93:b8:af:6f:4e:e8:ee:7c:78:0a:43: c2:3e:18:fa:20:f1:dd:03:8f:37:b0:94:db:80:66: 66:95:7d:a5:97:68:22:f7:59:38:f3:cf:a7:fe:0d: b8:9d:ef:a3:d6:56:d0:ac:2c:d3:c8:82:9c:da:0f: 10:36:9b:8b:90:24:f5:42:f9:52:e1:84:23:20:71: 60:9f:00:95:a6:e7:90:18:78:c5:c6:c6:ed:8d:ef: 9c:f5:7e:32:df:37:b7:8f:a0:ca:dc:8b:bf:00:4a: df:0b:6b:aa:b5:fe:ae:1e:81:b5:48:03:12:be:1c: c5:0c:bf:91:54:0a:a0:c6:8c:9e:51:f9:13:fc:49: f8:c0:48:c9:0c:8e:06:17:93:b9:e8:a5:66:e1:90: 69:42:b7:5c:71:52:13:4d:99:9d:e0:85:a3:f9:43: 53:01:33:bf:68:7a:0c:4d:73:76:e4:de:ef:fe:2f: 50:5d:ae:0a:82:d1:eb:70:ce:b9:26:41:bf:36:7b: cd:90:38:0b:8b:0d:b7:c9:ba:f1:e6:56:29:3c:d7: 27:8f:4e:ce:7d:50:99:2b:d8:35:41:8f:99:1a:27: d1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:68:2E:B9:3F:51:BB:43:9F:39:14:52:2A:9F:AB:78:14:3E:29:11 X509v3 Authority Key Identifier: keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/qGguuT9Ru0OfORRSKp-reBQ-KRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.112.160.0/19 62.145.32.0/19 192.113.0.0/16 217.115.224.0/20 IPv6: 2a01:67c0::/32 Signature Algorithm: sha256WithRSAEncryption a8:71:4e:05:b5:70:31:27:4c:d5:ed:ae:6e:6c:42:96:38:0c: 02:40:75:2d:b2:b0:7c:1f:a1:26:e9:16:5d:42:6b:8d:01:32: 05:fa:18:53:07:90:2c:72:68:a4:94:07:d1:22:e0:25:6e:93: be:92:61:fe:3a:4f:ee:e7:ed:f1:d3:01:a1:d8:3d:f6:0c:bc: 6f:cc:f5:f7:68:45:a4:d2:34:82:6d:39:81:30:0f:04:cb:f6: 93:57:c1:e4:8d:54:de:ab:df:fe:7a:30:d5:cb:f7:3a:98:2a: 7f:4c:fa:da:af:9c:f7:13:20:65:1c:16:86:29:8d:a8:ef:86: 7a:db:a5:46:4c:33:d1:2b:eb:4b:f4:69:3e:7b:9a:37:6f:71: af:7b:9a:dc:98:b0:64:ce:3c:0c:b0:ed:95:e4:a1:95:7b:d5: 9c:17:a0:3d:c6:c6:0a:32:e0:c3:60:b1:65:88:81:18:36:81: c8:ee:5e:45:25:ab:e0:d5:67:23:e1:ca:95:d8:a8:61:e0:e6: 3a:5e:25:ef:ab:33:33:ba:60:ca:b7:2f:df:cc:2b:47:48:cf: 8c:13:3b:bd:6c:3d:bf:06:be:0d:b7:30:d5:ec:55:79:9a:12: 9a:66:5a:eb:45:ff:f5:cc:55:bc:0d:b8:7d:9d:cf:13:fd:a8: a5:90:0e:4f -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt3WSphEIUnvzsdZmcVygqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YmRlYzk5ZDg5NTY1YTYzNGE3YjJjNTQwMWZlZDdhYzQ3 YmYyMzIwHhcNMjYwMTAxMDIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODY4MmViOTNmNTFiYjQzOWYzOTE0NTIyYTlmYWI3ODE0M2UyOTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uOMONU6MNgDb6q+PF9Bgl+iWyz3 t39DsC6W70ZzF4P7k7ivb07o7nx4CkPCPhj6IPHdA483sJTbgGZmlX2ll2gi91k4 88+n/g24ne+j1lbQrCzTyIKc2g8QNpuLkCT1QvlS4YQjIHFgnwCVpueQGHjFxsbt je+c9X4y3ze3j6DK3Iu/AErfC2uqtf6uHoG1SAMSvhzFDL+RVAqgxoyeUfkT/En4 wEjJDI4GF5O56KVm4ZBpQrdccVITTZmd4IWj+UNTATO/aHoMTXN25N7v/i9QXa4K gtHrcM65JkG/NnvNkDgLiw23ybrx5lYpPNcnj07OfVCZK9g1QY+ZGifRtQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFKhoLrk/UbtDnzkUUiqfq3gUPikRMB8GA1UdIwQY MBaAFCa97JnYlWWmNKeyxUAf7XrEe/IyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnIzc21kaVZaYVkwcDdMRlFCX3Rlc1I3OGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jNTdkYzItY2ZhOS00MmI5LWI5Yzct N2YyMDEyMTJkODgzLzEvcUdndXVUOVJ1ME9mT1JSU0twLXJlQlEtS1JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9jNTdkYzItY2ZhOS00MmI5LWI5YzctN2YyMDEyMTJkODgz LzEvSnIzc21kaVZaYVkwcDdMRlFCX3Rlc1I3OGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwQFPnCgAwQF PpEgAwMAwHEDBATZc+AwDQQCAAIwBwMFACoBZ8AwDQYJKoZIhvcNAQELBQADggEB AKhxTgW1cDEnTNXtrm5sQpY4DAJAdS2ysHwfoSbpFl1Ca40BMgX6GFMHkCxyaKSU B9Ei4CVuk76SYf46T+7n7fHTAaHYPfYMvG/M9fdoRaTSNIJtOYEwDwTL9pNXweSN VN6r3/56MNXL9zqYKn9M+tqvnPcTIGUcFoYpjajvhnrbpUZMM9Er60v0aT57mjdv ca97mtyYsGTOPAyw7ZXkoZV71ZwXoD3Gxgoy4MNgsWWIgRg2gcjuXkUlq+DVZyPh ypXYqGHg5jpeJe+rMzO6YMq3L9/MK0dIz4wTO71sPb8Gvg23MNXsVXmaEppmWutF //XMVbwNuH2dzxP9qKWQDk8= -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:09 2026 by rpki-client