This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/qLXb67dE1EAchhK-STW3jwCdYVI.roa File: qLXb67dE1EAchhK-STW3jwCdYVI.roa (raw, json) Hash identifier: drU9BCSr2spJludNeni+Da0l+Sz7+7Ab8hUqNLHYgcU= Subject key identifier: A8:B5:DB:EB:B7:44:D4:40:1C:86:12:BE:49:35:B7:8F:00:9D:61:52 Certificate issuer: /CN=1a99c75fe5777e136573e1e51efba6781f3a5b16 Certificate serial: 019B79100B2B446B0A43D8FF755B0F02EDCC Authority key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/qLXb67dE1EAchhK-STW3jwCdYVI.roa Signing time: Thu 01 Jan 2026 10:17:33 +0000 ROA not before: Thu 01 Jan 2026 10:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42306 IP address blocks: 37.44.208.0/22 maxlen: 22 46.253.96.0/21 maxlen: 21 46.253.104.0/21 maxlen: 21 77.236.192.0/19 maxlen: 19 185.134.160.0/22 maxlen: 22 2a03:f280::/29 maxlen: 29 2a06:ed40::/29 maxlen: 29 2a0e:5340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0b:2b:44:6b:0a:43:d8:ff:75:5b:0f:02:ed:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16 Validity Not Before: Jan 1 10:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8b5dbebb744d4401c8612be4935b78f009d6152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:cf:4d:5b:a9:f9:da:9a:01:85:81:46:46: a9:4c:d3:0d:5a:2d:9b:26:7d:d8:51:c9:42:e1:6e: 5a:fc:44:c7:37:f9:38:f1:ac:f2:35:49:ab:15:57: bd:98:87:3b:35:9f:57:22:2d:6f:31:65:b9:61:eb: ce:d3:54:3e:2e:31:fd:32:70:c1:42:03:21:1a:0b: 58:4d:5b:ed:20:9a:b0:1c:31:45:09:97:d5:d0:e3: aa:27:d7:bf:c0:72:87:a9:a7:c0:f5:76:5a:fe:14: e8:94:f9:f2:cb:82:c0:98:7b:8e:a1:72:5d:93:2c: a5:76:2e:6d:a2:ca:d6:51:bf:38:ac:02:de:65:ee: 53:ef:c5:fa:e7:8a:fd:55:9e:00:fe:14:fd:b0:cc: 26:b5:57:c9:c4:30:2d:2a:72:d4:09:5e:04:fd:65: a1:a9:72:a3:47:7a:ec:ff:3f:b4:f6:2f:d4:e0:88: ce:d9:f5:13:8b:f0:c6:0d:f4:4c:40:95:03:43:52: fd:7b:36:0b:35:1d:3c:d4:a0:11:24:85:46:9e:b7: 2e:2c:bd:7d:0f:a1:3e:c7:a2:8f:5c:19:ac:73:26: 2e:f1:b5:fa:68:2a:a9:21:46:70:07:73:0f:c5:2a: 95:eb:38:ec:09:82:03:28:a0:ef:4a:f1:21:c9:44: f0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B5:DB:EB:B7:44:D4:40:1C:86:12:BE:49:35:B7:8F:00:9D:61:52 X509v3 Authority Key Identifier: keyid:1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/qLXb67dE1EAchhK-STW3jwCdYVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.208.0/22 46.253.96.0/20 77.236.192.0/19 185.134.160.0/22 IPv6: 2a03:f280::/29 2a06:ed40::/29 2a0e:5340::/29 Signature Algorithm: sha256WithRSAEncryption 7a:2b:27:f4:a6:23:a5:b7:bf:d6:ca:4a:2c:d3:c5:47:bc:58: 99:ac:12:29:57:05:e9:e5:1e:40:6c:15:f1:6b:db:27:87:d2: 7d:7a:09:d7:ac:ab:fb:d9:77:67:15:d5:41:ff:90:08:88:62: 3f:84:2a:1c:9f:ca:d8:f8:7e:d8:c0:31:b8:3a:05:6f:f2:87: 64:1d:78:3e:cd:7d:2a:9b:10:12:56:f7:74:35:eb:d2:3f:88: 90:fb:89:37:bb:33:35:38:56:7d:6b:6e:fa:10:5a:b7:6c:92: 8b:2d:2d:98:20:4b:bd:14:32:27:24:df:e1:c4:44:db:8e:40: 24:03:f6:7c:f2:1d:14:32:8f:49:90:a8:9e:98:27:a1:f9:1f: 11:65:ec:a1:e2:74:84:7c:49:a4:8f:db:74:49:26:14:b1:85: 21:c1:b0:09:05:7c:0b:71:aa:19:a8:c8:43:0d:b1:1d:b3:44: 83:58:c5:fb:d4:56:93:68:b3:9d:82:a8:97:4d:a2:e5:ea:90: fa:92:7f:d6:26:33:7b:a8:ba:3f:49:b8:f7:cd:dc:44:f4:1b: d7:0c:d0:f1:0d:a4:40:80:c0:f2:7f:97:57:9d:f0:1d:a5:52: f8:4c:74:af:a1:08:dc:3c:a7:b2:8b:7b:31:ca:4f:f3:64:fd: 52:da:3b:6b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt5EAsrRGsKQ9j/dVsPAu3MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhOTljNzVmZTU3NzdlMTM2NTczZTFlNTFlZmJhNjc4MWYz YTViMTYwHhcNMjYwMTAxMTAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGI1ZGJlYmI3NDRkNDQwMWM4NjEyYmU0OTM1Yjc4ZjAwOWQ2MTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzXPTVup+dqaAYWBRkapTNMNWi2b Jn3YUclC4W5a/ETHN/k48azyNUmrFVe9mIc7NZ9XIi1vMWW5YevO01Q+LjH9MnDB QgMhGgtYTVvtIJqwHDFFCZfV0OOqJ9e/wHKHqafA9XZa/hTolPnyy4LAmHuOoXJd kyyldi5tosrWUb84rALeZe5T78X654r9VZ4A/hT9sMwmtVfJxDAtKnLUCV4E/WWh qXKjR3rs/z+09i/U4IjO2fUTi/DGDfRMQJUDQ1L9ezYLNR081KARJIVGnrcuLL19 D6E+x6KPXBmscyYu8bX6aCqpIUZwB3MPxSqV6zjsCYIDKKDvSvEhyUTwDQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFKi12+u3RNRAHIYSvkk1t48AnWFSMB8GA1UdIwQY MBaAFBqZx1/ld34TZXPh5R77pngfOlsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3BuSFgtVjNmaE5sYy1IbEh2dW1lQjg2V3hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83MTE3M2ItMTkzOC00ODM1LWFmMDAt YTY5OWJjYjA4YWUzLzEvcUxYYjY3ZEUxRUFjaGhLLVNUVzNqd0NkWVZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi83MTE3M2ItMTkzOC00ODM1LWFmMDAtYTY5OWJjYjA4YWUz LzEvR3BuSFgtVjNmaE5sYy1IbEh2dW1lQjg2V3hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAeBAIAATAYAwQCJSzQAwQE Lv1gAwQFTezAAwQCuYagMBsEAgACMBUDBQMqA/KAAwUDKgbtQAMFAyoOU0AwDQYJ KoZIhvcNAQELBQADggEBAHorJ/SmI6W3v9bKSizTxUe8WJmsEilXBenlHkBsFfFr 2yeH0n16Cdesq/vZd2cV1UH/kAiIYj+EKhyfytj4ftjAMbg6BW/yh2QdeD7NfSqb EBJW93Q169I/iJD7iTe7MzU4Vn1rbvoQWrdskostLZggS70UMick3+HERNuOQCQD 9nzyHRQyj0mQqJ6YJ6H5HxFl7KHidIR8SaSP23RJJhSxhSHBsAkFfAtxqhmoyEMN sR2zRINYxfvUVpNos52CqJdNouXqkPqSf9YmM3uouj9JuPfN3ET0G9cM0PENpECA wPJ/l1ed8B2lUvhMdK+hCNw8p7KLezHKT/Nk/VLaO2s= -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:33 2026 by rpki-client