This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/vqQIJ63USJ6tNbfIvkmeDNaWV-8.roa File: vqQIJ63USJ6tNbfIvkmeDNaWV-8.roa (raw, json) Hash identifier: OsN69G3y8PdNZsFJ8bznX8F2lLtEi2mXTwt/+VGM68k= Subject key identifier: BE:A4:08:27:AD:D4:48:9E:AD:35:B7:C8:BE:49:9E:0C:D6:96:57:EF Certificate issuer: /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d Certificate serial: 019B7F8003EF4493E4B5FA10A6D3A44D730A Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/vqQIJ63USJ6tNbfIvkmeDNaWV-8.roa Signing time: Fri 02 Jan 2026 16:17:34 +0000 ROA not before: Fri 02 Jan 2026 16:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.88.28.0/24 maxlen: 24 45.88.29.0/24 maxlen: 24 45.88.30.0/24 maxlen: 24 45.88.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 13:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:03:ef:44:93:e4:b5:fa:10:a6:d3:a4:4d:73:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d Validity Not Before: Jan 2 16:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bea40827add4489ead35b7c8be499e0cd69657ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ff:0e:5b:3e:d2:a6:af:79:1d:a6:48:14:67: 13:ef:17:c3:df:67:5b:d3:6b:ef:ae:96:4f:2f:30: 5d:13:f3:ce:60:00:6b:51:33:67:e0:d7:3b:ac:2c: fa:a8:8d:1b:25:3c:f5:a9:ef:40:40:af:ea:16:03: d9:2d:8c:86:c5:20:b0:1d:ee:ca:c3:c7:ca:c6:b4: 5b:97:9d:52:21:52:30:1b:40:28:c4:11:79:54:f0: 2a:9e:66:06:d7:cc:fe:99:1a:3a:c0:bc:fc:38:51: 63:cb:46:cc:8e:fb:36:ed:32:48:4e:1c:6e:b0:0e: 2c:6f:0b:1c:d7:ca:23:0a:c7:dd:c8:41:6f:ff:40: d5:72:99:ed:f7:47:a0:53:fc:86:8e:c7:3d:96:e4: 50:e5:4b:37:5c:fa:1b:43:30:2c:fc:52:56:dc:59: 78:f9:b2:d5:38:b3:56:14:de:27:ed:52:29:73:d0: 86:99:87:b1:92:69:99:d1:3f:6a:2e:d2:cc:56:22: f7:a1:72:a5:b9:80:bc:b1:4a:80:1f:7e:12:16:c4: 57:ef:91:5b:3d:44:fa:f9:1d:01:cc:4b:7b:8b:0a: 1f:cc:15:7a:89:46:69:f3:9e:c5:24:fd:b6:db:71: 2e:2c:1d:28:82:95:4d:29:e0:76:91:19:51:13:8d: 93:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A4:08:27:AD:D4:48:9E:AD:35:B7:C8:BE:49:9E:0C:D6:96:57:EF X509v3 Authority Key Identifier: keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/vqQIJ63USJ6tNbfIvkmeDNaWV-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.28.0/22 Signature Algorithm: sha256WithRSAEncryption 96:6f:cf:f9:21:9b:6b:68:3d:ca:34:71:ec:91:3e:d5:52:da: 9b:37:71:af:6a:6a:02:4a:cc:d9:d4:58:39:91:d7:4f:d0:ac: 8d:5b:4d:2b:02:e8:0f:39:f7:3c:37:7b:82:fa:d6:81:02:45: ea:03:b0:e7:db:3e:a7:e9:45:5c:58:f8:5c:5e:59:ad:6b:a0: 86:7f:e5:4b:ee:54:64:23:4a:60:66:7d:93:64:0a:61:91:27: e1:65:e8:76:3a:59:a5:bb:3c:86:60:37:3c:f0:5f:59:26:cb: e4:ad:29:fe:5f:32:53:22:45:4e:c5:13:42:cb:ea:64:4d:3a: a6:5c:86:6b:e0:ec:7f:fc:c6:ec:fb:45:9c:73:b2:15:fe:10: ac:98:f0:12:5f:a0:f3:35:17:14:e7:0c:66:04:5a:96:21:00: 31:a0:0c:28:8b:58:d8:bb:45:12:e8:38:6e:68:d8:e6:c8:7f: 70:83:d0:f9:2b:32:e9:45:db:05:53:1a:2d:d7:58:14:92:46: 35:da:74:7a:fd:73:09:9b:f1:b8:8a:eb:db:74:42:8a:df:df: 39:a6:52:35:e1:e3:09:7f:46:a3:63:88:dc:8c:c8:2b:5f:04: 96:4e:69:a0:bd:55:9e:47:15:12:61:34:e9:85:93:d3:d7:2f: f3:30:19:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gAPvRJPktfoQptOkTXMKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkM2ZmNzgzNjUzMGQxYzQ3NGY0ZDA4OGI2YjM2MjI0ZmJm Njk4MmQwHhcNMjYwMTAyMTYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWE0MDgyN2FkZDQ0ODllYWQzNWI3YzhiZTQ5OWUwY2Q2OTY1N2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P8OWz7Spq95HaZIFGcT7xfD32db 02vvrpZPLzBdE/POYABrUTNn4Nc7rCz6qI0bJTz1qe9AQK/qFgPZLYyGxSCwHe7K w8fKxrRbl51SIVIwG0AoxBF5VPAqnmYG18z+mRo6wLz8OFFjy0bMjvs27TJIThxu sA4sbwsc18ojCsfdyEFv/0DVcpnt90egU/yGjsc9luRQ5Us3XPobQzAs/FJW3Fl4 +bLVOLNWFN4n7VIpc9CGmYexkmmZ0T9qLtLMViL3oXKluYC8sUqAH34SFsRX75Fb PUT6+R0BzEt7iwofzBV6iUZp857FJP2223EuLB0ogpVNKeB2kRlRE42TQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL6kCCet1EierTW3yL5JngzWllfvMB8GA1UdIwQY MBaAFO0/94NlMNHEdPTQiLazYiT79pgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RfM2cyVXcwY1IwOU5DSXRyTmlKUHYybUMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YWRlOWItMzIxNi00ZmVmLTgwNDkt ZjNlMjRlMDc1ZTM1LzEvdnFRSUo2M1VTSjZ0TmJmSXZrbWVETmFXVi04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82YWRlOWItMzIxNi00ZmVmLTgwNDktZjNlMjRlMDc1ZTM1 LzEvN1RfM2cyVXcwY1IwOU5DSXRyTmlKUHYybUMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVgcMA0G CSqGSIb3DQEBCwUAA4IBAQCWb8/5IZtraD3KNHHskT7VUtqbN3GvamoCSszZ1Fg5 kddP0KyNW00rAugPOfc8N3uC+taBAkXqA7Dn2z6n6UVcWPhcXlmta6CGf+VL7lRk I0pgZn2TZAphkSfhZeh2OlmluzyGYDc88F9ZJsvkrSn+XzJTIkVOxRNCy+pkTTqm XIZr4Ox//Mbs+0Wcc7IV/hCsmPASX6DzNRcU5wxmBFqWIQAxoAwoi1jYu0US6Dhu aNjmyH9wg9D5KzLpRdsFUxot11gUkkY12nR6/XMJm/G4iuvbdEKK3985plI14eMJ f0ajY4jcjMgrXwSWTmmgvVWeRxUSYTTphZPT1y/zMBli -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:57 2026 by rpki-client