This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/q07ydXKNCfhsxkbz0OLUwwXQNww.roa File: q07ydXKNCfhsxkbz0OLUwwXQNww.roa (raw, json) Hash identifier: WGl6n1WY5g82kxAJzk5G8tAK5EnNCEBo+zn2QvwiGL8= Subject key identifier: AB:4E:F2:75:72:8D:09:F8:6C:C6:46:F3:D0:E2:D4:C3:05:D0:37:0C Certificate issuer: /CN=6496ae38aedacbbeeee1e093956db3287ae7b53d Certificate serial: 019B7F820360C0EFAA8C2CB602970D06D561 Authority key identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/q07ydXKNCfhsxkbz0OLUwwXQNww.roa Signing time: Fri 02 Jan 2026 16:19:45 +0000 ROA not before: Fri 02 Jan 2026 16:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28682 IP address blocks: 185.49.0.0/22 maxlen: 22 193.243.140.0/23 maxlen: 23 2a01:9ce0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:03:60:c0:ef:aa:8c:2c:b6:02:97:0d:06:d5:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6496ae38aedacbbeeee1e093956db3287ae7b53d Validity Not Before: Jan 2 16:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab4ef275728d09f86cc646f3d0e2d4c305d0370c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:10:a6:1f:31:3b:b6:60:de:8f:36:ec:de:e0: 90:c0:63:ed:28:06:96:32:15:c3:6a:5c:a5:4b:d5: 93:9c:6e:96:20:2c:b2:1e:34:76:fd:3f:45:3f:87: bb:7d:4f:d8:82:dc:41:85:9f:74:44:78:2b:c8:6a: 11:c5:35:06:28:79:7b:a6:d6:d7:a5:85:b5:ec:7b: a4:f4:76:a6:aa:cc:3d:22:13:3d:57:65:ea:80:26: 7e:52:66:17:d1:1d:6d:ca:51:97:fb:ce:53:34:19: 63:88:58:6c:22:00:a5:53:5e:d2:71:d1:e2:db:5c: 51:c4:ed:b3:1a:4b:84:89:b2:a5:40:5f:0d:c8:5f: 8f:4c:b7:1e:98:36:bb:6a:87:7c:7b:7b:8a:05:00: fb:7f:29:64:19:99:65:b6:26:92:9d:23:8d:15:b1: ca:e3:30:50:7f:7e:e4:7b:cf:88:d2:6c:18:d2:14: a6:5f:cf:24:27:0f:03:13:e1:b6:84:e9:b6:b4:89: a7:ac:df:db:d8:7f:82:13:c8:42:8c:c5:73:3e:98: 05:3e:a6:e2:85:bc:23:55:ff:26:d1:eb:7f:94:0e: eb:c7:a6:a9:20:4f:b2:e6:1b:8c:34:61:a7:25:07: e3:d4:d2:ea:92:aa:de:95:be:97:b7:36:81:80:86: 8f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4E:F2:75:72:8D:09:F8:6C:C6:46:F3:D0:E2:D4:C3:05:D0:37:0C X509v3 Authority Key Identifier: keyid:64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/q07ydXKNCfhsxkbz0OLUwwXQNww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.0.0/22 193.243.140.0/23 IPv6: 2a01:9ce0::/32 Signature Algorithm: sha256WithRSAEncryption 3e:5a:d2:b6:31:c5:ed:74:ab:43:28:03:ec:d9:fb:80:92:62: 53:52:ed:22:f5:19:61:98:8a:0d:69:fc:c3:80:67:aa:74:47: c1:98:3c:a6:2b:e3:87:0a:4e:f5:8d:41:38:25:ce:7d:b4:c7: 9a:da:94:7c:a1:9c:2e:aa:1b:db:3b:e7:96:9c:3c:41:93:76: a7:e9:51:e9:55:03:ec:99:71:05:9a:c6:09:8a:14:c2:c5:3d: 68:bc:0e:a1:ca:fc:da:df:74:6a:7a:f2:92:f6:7f:45:33:d8: bd:e0:f1:e4:dd:16:07:cc:32:26:6f:94:3f:5d:27:a6:22:36: be:7c:5f:bc:01:54:17:bc:d2:b1:3b:b2:44:1d:29:dd:dd:05: 21:4c:be:e1:8b:29:30:4f:dc:d4:aa:ac:a3:af:97:d4:ff:8c: 56:db:40:f6:41:17:b2:83:00:d3:5f:51:76:90:0b:66:51:0c: 75:9a:f9:b3:75:e0:5d:2f:4c:96:31:3d:79:85:d8:7a:e0:4c: a9:b4:96:cd:05:c2:d3:42:96:fd:a0:0e:35:4c:ec:54:b7:2e: 25:ad:98:34:13:92:9d:83:f9:c0:bd:2c:c6:02:b8:ee:1d:8a: 29:5c:99:83:51:4c:20:64:2c:d1:93:f7:f8:c5:8c:3c:6c:c0: f2:63:96:9e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/ggNgwO+qjCy2ApcNBtVhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0OTZhZTM4YWVkYWNiYmVlZWUxZTA5Mzk1NmRiMzI4N2Fl N2I1M2QwHhcNMjYwMTAyMTYxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjRlZjI3NTcyOGQwOWY4NmNjNjQ2ZjNkMGUyZDRjMzA1ZDAzNzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBCmHzE7tmDejzbs3uCQwGPtKAaW MhXDalylS9WTnG6WICyyHjR2/T9FP4e7fU/YgtxBhZ90RHgryGoRxTUGKHl7ptbX pYW17Huk9Hamqsw9IhM9V2XqgCZ+UmYX0R1tylGX+85TNBljiFhsIgClU17ScdHi 21xRxO2zGkuEibKlQF8NyF+PTLcemDa7aod8e3uKBQD7fylkGZlltiaSnSONFbHK 4zBQf37ke8+I0mwY0hSmX88kJw8DE+G2hOm2tImnrN/b2H+CE8hCjMVzPpgFPqbi hbwjVf8m0et/lA7rx6apIE+y5huMNGGnJQfj1NLqkqrelb6XtzaBgIaPYQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKtO8nVyjQn4bMZG89Di1MMF0DcMMB8GA1UdIwQY MBaAFGSWrjiu2su+7uHgk5Vtsyh657U9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkphdU9LN2F5Nzd1NGVDVGxXMnpLSHJudFQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82YzMxMjUtZmZmMS00ZGEwLThhMzIt NzY2NGU4YTIxZmM3LzEvcTA3eWRYS05DZmhzeGtiejBPTFV3d1hRTnd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82YzMxMjUtZmZmMS00ZGEwLThhMzItNzY2NGU4YTIxZmM3 LzEvWkphdU9LN2F5Nzd1NGVDVGxXMnpLSHJudFQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuTEAAwQB wfOMMA0EAgACMAcDBQAqAZzgMA0GCSqGSIb3DQEBCwUAA4IBAQA+WtK2McXtdKtD KAPs2fuAkmJTUu0i9RlhmIoNafzDgGeqdEfBmDymK+OHCk71jUE4Jc59tMea2pR8 oZwuqhvbO+eWnDxBk3an6VHpVQPsmXEFmsYJihTCxT1ovA6hyvza33RqevKS9n9F M9i94PHk3RYHzDImb5Q/XSemIja+fF+8AVQXvNKxO7JEHSnd3QUhTL7hiykwT9zU qqyjr5fU/4xW20D2QReygwDTX1F2kAtmUQx1mvmzdeBdL0yWMT15hdh64EyptJbN BcLTQpb9oA41TOxUty4lrZg0E5Kdg/nAvSzGArjuHYopXJmDUUwgZCzRk/f4xYw8 bMDyY5ae -----END CERTIFICATE-----Generated at Tue Feb 10 01:03:13 2026 by rpki-client