This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/qGBCQCZlL1yzOajHzIypwWxNeWA.roa File: qGBCQCZlL1yzOajHzIypwWxNeWA.roa (raw, json) Hash identifier: p7Sjt3xmkXcVS2g8oPh7NRV5OpfFVXtU6JCEbaI2Bsk= Subject key identifier: A8:60:42:40:26:65:2F:5C:B3:39:A8:C7:CC:8C:A9:C1:6C:4D:79:60 Certificate issuer: /CN=464d8d80ab37a757b9d3748295fe669f4e093b23 Certificate serial: 019B7C12ED50482573BCC5CEC6395D230A12 Authority key identifier: 46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/qGBCQCZlL1yzOajHzIypwWxNeWA.roa Signing time: Fri 02 Jan 2026 00:19:33 +0000 ROA not before: Fri 02 Jan 2026 00:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203328 IP address blocks: 185.138.44.0/22 maxlen: 22 2a07:9c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ed:50:48:25:73:bc:c5:ce:c6:39:5d:23:0a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464d8d80ab37a757b9d3748295fe669f4e093b23 Validity Not Before: Jan 2 00:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a860424026652f5cb339a8c7cc8ca9c16c4d7960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:de:c9:a7:fc:a3:5e:6d:57:a6:3c:e1:54:80: b2:71:35:58:01:94:ca:05:0b:d7:ba:8c:2d:33:db: e7:30:0d:74:91:ac:c4:0d:5c:d8:dd:21:d5:15:84: e7:0e:8f:64:42:3b:7a:60:17:d2:87:08:34:e4:e3: 9f:90:38:e8:a5:df:18:54:26:e2:34:67:0d:8f:24: d1:4a:2b:9c:06:0f:f1:67:a1:2c:5f:ba:5d:b2:cf: 09:20:18:29:20:c6:a9:75:4d:49:fc:54:f3:3d:cb: f4:07:8c:4c:28:47:c2:24:c0:0d:9a:32:d3:72:6b: 9d:84:d4:43:3f:71:c8:b7:56:31:58:05:97:81:60: b2:36:9c:58:99:02:7e:61:1f:91:d9:20:dd:fa:a6: c4:b2:4b:0d:6a:67:92:20:cd:9f:50:5b:56:eb:4c: 51:9c:92:35:56:a0:66:41:86:77:82:c6:e4:be:1d: e9:24:c5:6c:8f:b4:2a:85:bb:71:2e:ed:9d:6c:96: 16:00:52:d1:e9:c8:ac:cc:19:0f:0a:42:0e:90:3f: f5:07:32:2c:15:74:e5:d9:26:dc:ce:45:24:8b:23: de:ce:70:d6:b0:71:0c:9e:55:75:86:b4:5d:d1:86: 9f:63:78:d9:62:a4:27:0e:05:a3:19:df:7e:a7:aa: 06:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:60:42:40:26:65:2F:5C:B3:39:A8:C7:CC:8C:A9:C1:6C:4D:79:60 X509v3 Authority Key Identifier: keyid:46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/qGBCQCZlL1yzOajHzIypwWxNeWA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.138.44.0/22 IPv6: 2a07:9c0::/29 Signature Algorithm: sha256WithRSAEncryption b0:9f:f0:21:01:bc:18:3e:23:d0:d6:be:b3:eb:86:e2:c3:38: 03:7c:a3:91:a4:fa:70:4c:ce:d6:93:81:c1:19:46:ab:08:57: 7e:ef:a8:ce:68:d6:df:cf:84:ea:e9:c4:ac:a4:0c:00:65:d5: c2:5e:a8:9d:31:22:3e:0f:3e:fd:ae:fa:ef:16:f5:4d:ec:b1: 22:8c:7d:ef:09:5c:3c:bc:70:ed:e6:12:ff:f6:4e:90:fb:14: bf:5f:77:4c:2a:df:39:e6:06:62:f5:5a:43:e5:eb:cf:ef:5f: 85:aa:0d:17:56:f4:12:55:41:b5:b3:fc:60:52:27:3b:f1:45: cd:0e:8b:2d:a1:5c:d3:13:7c:12:93:33:1e:f4:0d:59:91:f8: de:34:58:fa:e0:b3:04:26:6c:2a:42:76:a1:4c:a3:6f:20:f4: 36:c0:47:a1:20:09:bb:62:5d:81:10:86:8b:d5:2f:13:db:58: 2c:52:40:ee:63:57:dc:93:76:37:1f:3c:01:83:7e:c2:43:a6: 87:15:b2:1c:4b:3d:2f:0d:9d:75:80:a2:67:f2:85:9f:35:6a: 5b:0c:d3:30:b4:18:ab:35:b0:7d:2c:95:f2:8d:38:3f:c3:02: 3c:13:4a:d8:37:58:df:48:1c:85:9c:29:ed:d6:94:19:73:2d: f1:58:28:7b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8Eu1QSCVzvMXOxjldIwoSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NGQ4ZDgwYWIzN2E3NTdiOWQzNzQ4Mjk1ZmU2NjlmNGUw OTNiMjMwHhcNMjYwMTAyMDAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODYwNDI0MDI2NjUyZjVjYjMzOWE4YzdjYzhjYTljMTZjNGQ3OTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp97Jp/yjXm1XpjzhVICycTVYAZTK BQvXuowtM9vnMA10kazEDVzY3SHVFYTnDo9kQjt6YBfShwg05OOfkDjopd8YVCbi NGcNjyTRSiucBg/xZ6EsX7pdss8JIBgpIMapdU1J/FTzPcv0B4xMKEfCJMANmjLT cmudhNRDP3HIt1YxWAWXgWCyNpxYmQJ+YR+R2SDd+qbEsksNameSIM2fUFtW60xR nJI1VqBmQYZ3gsbkvh3pJMVsj7QqhbtxLu2dbJYWAFLR6ciszBkPCkIOkD/1BzIs FXTl2SbczkUkiyPeznDWsHEMnlV1hrRd0YafY3jZYqQnDgWjGd9+p6oGowIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKhgQkAmZS9cszmox8yMqcFsTXlgMB8GA1UdIwQY MBaAFEZNjYCrN6dXudN0gpX+Zp9OCTsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmsyTmdLczNwMWU1MDNTQ2xmNW1uMDRKT3lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jZTQ3ZDItN2U3MS00NWRlLThmMTgt OTExYmIzZGNmMGQ3LzEvcUdCQ1FDWmxMMXl6T2FqSHpJeXB3V3hOZVdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9jZTQ3ZDItN2U3MS00NWRlLThmMTgtOTExYmIzZGNmMGQ3 LzEvUmsyTmdLczNwMWU1MDNTQ2xmNW1uMDRKT3lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYosMA0E AgACMAcDBQMqBwnAMA0GCSqGSIb3DQEBCwUAA4IBAQCwn/AhAbwYPiPQ1r6z64bi wzgDfKORpPpwTM7Wk4HBGUarCFd+76jOaNbfz4Tq6cSspAwAZdXCXqidMSI+Dz79 rvrvFvVN7LEijH3vCVw8vHDt5hL/9k6Q+xS/X3dMKt855gZi9VpD5evP71+Fqg0X VvQSVUG1s/xgUic78UXNDostoVzTE3wSkzMe9A1ZkfjeNFj64LMEJmwqQnahTKNv IPQ2wEehIAm7Yl2BEIaL1S8T21gsUkDuY1fck3Y3HzwBg37CQ6aHFbIcSz0vDZ11 gKJn8oWfNWpbDNMwtBirNbB9LJXyjTg/wwI8E0rYN1jfSByFnCnt1pQZcy3xWCh7 -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:48 2026 by rpki-client