This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/qGL8RTzpNc9QMzJ4mB1cjE85xJ4.roa File: qGL8RTzpNc9QMzJ4mB1cjE85xJ4.roa (raw, json) Hash identifier: ABpLHA3uxkTxF69tefDioKBR4SIb/ghL74K+XaKX/Ag= Subject key identifier: A8:62:FC:45:3C:E9:35:CF:50:33:32:78:98:1D:5C:8C:4F:39:C4:9E Certificate issuer: /CN=5f0226a704cf620eb2000f27e7a919ce730991be Certificate serial: 019B7B36C425E734D8302E00149770231094 Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/qGL8RTzpNc9QMzJ4mB1cjE85xJ4.roa Signing time: Thu 01 Jan 2026 20:19:05 +0000 ROA not before: Thu 01 Jan 2026 20:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 31.25.10.0/24 maxlen: 24 109.70.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c4:25:e7:34:d8:30:2e:00:14:97:70:23:10:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be Validity Not Before: Jan 1 20:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a862fc453ce935cf50333278981d5c8c4f39c49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5a:27:60:bb:9e:19:a1:1e:9b:48:83:f6:b3: a9:f5:e4:7e:9c:7f:b5:c1:80:2f:3c:23:75:04:12: a1:ff:2a:47:1e:48:81:30:4f:30:9f:c9:a7:e0:87: cc:4c:40:ce:84:00:99:86:17:34:d8:6f:f2:4f:89: 2f:66:71:9d:a1:0e:51:50:d2:9c:2e:8e:a9:d4:15: 9d:06:e5:74:7e:ee:a8:c6:07:9b:9e:34:a7:ab:8a: 50:dd:94:b9:bc:aa:9d:01:6e:62:2b:39:96:1b:98: 96:0f:03:58:b0:9e:d0:e9:19:03:1f:79:9a:0c:f9: d8:65:40:1b:f8:64:d6:f2:1e:de:77:35:26:98:e9: e8:cb:7b:e3:c1:68:5b:1d:95:3e:5e:3c:f1:0c:ab: 45:a6:b6:3d:5e:c8:06:df:47:6d:6a:70:a2:bd:1f: d4:a1:46:76:a9:cb:8d:6c:75:0f:3b:89:5b:c1:45: 07:c2:c2:89:14:db:fd:d6:0c:83:44:3d:71:f4:02: 7d:a3:e8:14:46:d7:5a:c6:3c:fb:ca:06:c8:4e:e2: ae:6d:67:c6:da:b0:57:1b:ac:98:92:c5:6e:0f:08: 93:5b:a0:1e:9e:bd:ef:ec:61:1f:0e:c4:62:30:50: d2:13:91:f0:d0:ae:bc:e0:07:86:8a:6e:3a:72:b6: 21:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:62:FC:45:3C:E9:35:CF:50:33:32:78:98:1D:5C:8C:4F:39:C4:9E X509v3 Authority Key Identifier: keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/qGL8RTzpNc9QMzJ4mB1cjE85xJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.10.0/24 109.70.236.0/24 Signature Algorithm: sha256WithRSAEncryption ba:df:fc:79:bb:12:27:aa:c8:3d:7f:d4:7e:cb:db:32:da:69: 7a:5e:50:18:f1:f9:c7:e5:dc:92:8f:4e:c0:66:f5:e5:8c:3b: 3e:e6:39:dd:0f:4a:6c:b3:ae:68:7b:27:98:17:8a:e6:7a:23: 53:bb:b0:30:ba:67:c8:c1:59:17:f9:34:ca:69:6a:cc:f2:21: fb:bd:1d:33:9f:85:b0:78:07:b0:92:aa:b6:7f:0c:85:ee:b6: a5:c7:3f:5e:98:88:cd:77:9e:6c:2e:d7:8f:ea:28:72:22:27: f2:df:31:67:8c:10:1d:27:1b:9e:03:b3:c7:a1:8a:4d:11:6b: dd:b1:4a:7a:e0:5d:2f:86:50:c6:49:0b:db:28:27:0c:a3:0f: b6:d9:8f:14:a6:79:8f:5a:ea:ce:95:fc:c1:f3:f2:5d:50:9f: 0f:6b:ec:0a:40:d6:d2:88:63:8a:42:8b:45:62:0c:63:b7:8d: d5:37:71:c2:1a:24:01:0d:33:6d:0b:2e:ae:b1:e3:69:40:cb: ca:f8:c1:8e:7e:5f:71:72:77:74:75:a7:55:ca:4a:9b:e8:ed: 68:32:1e:22:5d:ae:73:0d:f9:6d:bd:b1:2e:f7:3d:2f:2e:97: 54:86:3b:56:8e:79:b2:2b:2a:08:30:4e:cc:df:22:a2:94:08: 58:2e:23:75 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NsQl5zTYMC4AFJdwIxCUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMDIyNmE3MDRjZjYyMGViMjAwMGYyN2U3YTkxOWNlNzMw OTkxYmUwHhcNMjYwMTAxMjAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODYyZmM0NTNjZTkzNWNmNTAzMzMyNzg5ODFkNWM4YzRmMzljNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlonYLueGaEem0iD9rOp9eR+nH+1 wYAvPCN1BBKh/ypHHkiBME8wn8mn4IfMTEDOhACZhhc02G/yT4kvZnGdoQ5RUNKc Lo6p1BWdBuV0fu6oxgebnjSnq4pQ3ZS5vKqdAW5iKzmWG5iWDwNYsJ7Q6RkDH3ma DPnYZUAb+GTW8h7edzUmmOnoy3vjwWhbHZU+XjzxDKtFprY9XsgG30dtanCivR/U oUZ2qcuNbHUPO4lbwUUHwsKJFNv91gyDRD1x9AJ9o+gURtdaxjz7ygbITuKubWfG 2rBXG6yYksVuDwiTW6Aenr3v7GEfDsRiMFDSE5Hw0K684AeGim46crYhtQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKhi/EU86TXPUDMyeJgdXIxPOcSeMB8GA1UdIwQY MBaAFF8CJqcEz2IOsgAPJ+epGc5zCZG+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdJbXB3VFBZZzZ5QUE4bjU2a1p6bk1Ka2I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82M2VmYjgtYmYyNC00OGMyLThjNTAt NzVkOWNlNWI4ZDljLzEvcUdMOFJUenBOYzlRTXpKNG1CMWNqRTg1eEo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC82M2VmYjgtYmYyNC00OGMyLThjNTAtNzVkOWNlNWI4ZDlj LzEvWHdJbXB3VFBZZzZ5QUE4bjU2a1p6bk1Ka2I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHxkKAwQA bUbsMA0GCSqGSIb3DQEBCwUAA4IBAQC63/x5uxInqsg9f9R+y9sy2ml6XlAY8fnH 5dySj07AZvXljDs+5jndD0pss65oeyeYF4rmeiNTu7AwumfIwVkX+TTKaWrM8iH7 vR0zn4WweAewkqq2fwyF7ralxz9emIjNd55sLteP6ihyIify3zFnjBAdJxueA7PH oYpNEWvdsUp64F0vhlDGSQvbKCcMow+22Y8UpnmPWurOlfzB8/JdUJ8Pa+wKQNbS iGOKQotFYgxjt43VN3HCGiQBDTNtCy6useNpQMvK+MGOfl9xcnd0dadVykqb6O1o Mh4iXa5zDfltvbEu9z0vLpdUhjtWjnmyKyoIME7M3yKilAhYLiN1 -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:39 2026 by rpki-client