This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/QQJWhed3rfbvr8DSkn4rG6p-5Co.roa File: QQJWhed3rfbvr8DSkn4rG6p-5Co.roa (raw, json) Hash identifier: JUa0kpGlxdjoqBVc/7DWrRkAYISE+s2XuClwXnSqTUk= Subject key identifier: 41:02:56:85:E7:77:AD:F6:EF:AF:C0:D2:92:7E:2B:1B:AA:7E:E4:2A Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724 Certificate serial: 019B7910A2655A369B6A53759CD608CB69ED Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/QQJWhed3rfbvr8DSkn4rG6p-5Co.roa Signing time: Thu 01 Jan 2026 10:18:11 +0000 ROA not before: Thu 01 Jan 2026 10:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197738 IP address blocks: 109.197.166.0/23 maxlen: 24 176.97.56.0/21 maxlen: 24 192.162.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a2:65:5a:36:9b:6a:53:75:9c:d6:08:cb:69:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724 Validity Not Before: Jan 1 10:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41025685e777adf6efafc0d2927e2b1baa7ee42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fe:31:73:45:23:79:ef:54:c5:af:55:1a:25: ef:61:98:39:5e:83:ba:fb:b5:16:2d:5f:aa:6a:a0: d0:46:f9:e8:4b:99:8f:6d:9e:bf:2a:37:e6:4d:70: 13:3c:92:0e:86:36:6e:53:5a:3c:6b:e6:5a:6f:e1: 9d:a6:e5:b3:2b:45:01:7e:8f:79:2b:57:0f:a1:52: 82:b7:1f:55:a6:5c:c0:8c:8f:02:96:f1:4a:c1:9b: 9b:c3:a1:95:59:dc:be:35:5f:16:56:ca:a3:e0:bc: f9:4e:4c:5a:9c:50:a2:85:2f:b7:a4:5d:98:e7:0e: 13:f0:37:68:38:7c:ab:d7:9a:9e:67:cb:5c:b0:ee: 39:0a:af:5a:bf:ba:b2:c6:36:f8:63:07:d8:6c:ee: 02:e7:71:cd:44:50:c1:9f:d0:fe:96:61:51:b2:79: 9a:a4:6b:8b:7e:80:43:02:ab:59:fe:b2:a1:89:40: 0f:37:72:09:26:34:61:7f:d5:36:60:53:e1:3a:07: 1e:fa:49:00:ca:52:ce:3b:9d:52:c8:ef:50:e7:08: e9:99:bf:6a:35:5e:4f:76:26:03:0e:5a:f4:f9:fa: 26:ba:e5:5c:fa:80:9e:10:45:33:61:5e:cb:fe:9c: d2:5d:8c:d0:85:c2:a6:e0:cc:0a:65:23:f6:e7:35: dd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:02:56:85:E7:77:AD:F6:EF:AF:C0:D2:92:7E:2B:1B:AA:7E:E4:2A X509v3 Authority Key Identifier: keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/QQJWhed3rfbvr8DSkn4rG6p-5Co.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.197.166.0/23 176.97.56.0/21 192.162.208.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:84:0d:fc:a3:0b:df:d2:01:14:f9:28:64:6a:a4:11:eb:ec: a2:5d:b7:37:27:84:cb:96:50:06:0e:83:6a:f1:00:ae:7b:23: 5f:6d:04:d4:10:2b:2a:64:0d:0d:f6:e5:c3:f6:01:62:19:2a: 99:d1:1a:ee:20:56:0c:1a:2c:a6:55:c3:80:e0:fa:38:59:80: 05:42:5e:5c:e4:58:7d:30:f6:05:00:40:b3:b7:76:c0:fd:49: 8a:68:ca:96:ed:52:6b:12:41:d6:94:3a:29:65:35:41:62:6c: 48:78:21:2a:80:e5:00:6a:94:e9:2e:7f:c3:11:7f:ad:91:08: 8d:b5:8d:42:89:e1:d9:6e:da:17:89:4a:f1:30:97:31:fc:2c: 66:74:7b:eb:f6:a6:b0:c7:a9:0a:78:2f:fb:df:ac:be:21:db: 0e:80:bb:75:a7:30:e2:b2:0c:1f:51:df:a9:61:5a:5e:e2:96: 96:ba:23:7b:85:75:93:1f:52:ac:b9:f4:4f:d3:2c:2d:04:fc: be:6d:50:75:9c:4e:1d:9c:dc:b5:0c:a5:d7:7f:ec:4b:c1:21: bf:0a:67:f8:66:56:77:fd:89:28:7f:e5:55:48:7d:09:0b:ee: bd:b6:39:89:02:b1:3b:c9:37:61:3c:9e:9c:9f:56:89:8f:14: d8:91:0c:06 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EKJlWjabalN1nNYIy2ntMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NDdjZjlmMjc3Njc0NzcxMjBiMWQzYjI2Y2M1N2E2MTA5 OWE3MjQwHhcNMjYwMTAxMTAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTAyNTY4NWU3NzdhZGY2ZWZhZmMwZDI5MjdlMmIxYmFhN2VlNDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP4xc0Ujee9Uxa9VGiXvYZg5XoO6 +7UWLV+qaqDQRvnoS5mPbZ6/KjfmTXATPJIOhjZuU1o8a+Zab+GdpuWzK0UBfo95 K1cPoVKCtx9VplzAjI8ClvFKwZubw6GVWdy+NV8WVsqj4Lz5TkxanFCihS+3pF2Y 5w4T8DdoOHyr15qeZ8tcsO45Cq9av7qyxjb4YwfYbO4C53HNRFDBn9D+lmFRsnma pGuLfoBDAqtZ/rKhiUAPN3IJJjRhf9U2YFPhOgce+kkAylLOO51SyO9Q5wjpmb9q NV5PdiYDDlr0+fomuuVc+oCeEEUzYV7L/pzSXYzQhcKm4MwKZSP25zXdrwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEECVoXnd63276/A0pJ+KxuqfuQqMB8GA1UdIwQY MBaAFNVHz58ndnR3EgsdOybMV6YQmackMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wNjNlNTktOWU5NC00ZTkxLThiN2Ut NmY0ZGUwMjBhYWU2LzEvUVFKV2hlZDNyZmJ2cjhEU2tuNHJHNnAtNUNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wNjNlNTktOWU5NC00ZTkxLThiN2UtNmY0ZGUwMjBhYWU2 LzEvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBbcWmAwQD sGE4AwQCwKLQMA0GCSqGSIb3DQEBCwUAA4IBAQBfhA38owvf0gEU+ShkaqQR6+yi Xbc3J4TLllAGDoNq8QCueyNfbQTUECsqZA0N9uXD9gFiGSqZ0RruIFYMGiymVcOA 4Po4WYAFQl5c5Fh9MPYFAECzt3bA/UmKaMqW7VJrEkHWlDopZTVBYmxIeCEqgOUA apTpLn/DEX+tkQiNtY1CieHZbtoXiUrxMJcx/CxmdHvr9qawx6kKeC/736y+IdsO gLt1pzDisgwfUd+pYVpe4paWuiN7hXWTH1KsufRP0ywtBPy+bVB1nE4dnNy1DKXX f+xLwSG/Cmf4ZlZ3/Ykof+VVSH0JC+69tjmJArE7yTdhPJ6cn1aJjxTYkQwG -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:17 2026 by rpki-client