This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/1qel5UJvF0Nw_b-bGu5_QNoqlRk.roa File: 1qel5UJvF0Nw_b-bGu5_QNoqlRk.roa (raw, json) Hash identifier: dYaVAlWLEdmSPPhA4+BPhKB1MJDLY30AwRM+D7oK3SI= Subject key identifier: D6:A7:A5:E5:42:6F:17:43:70:FD:BF:9B:1A:EE:7F:40:DA:2A:95:19 Certificate issuer: /CN=4edc689bb22d09475574f41c0e5d97c045930928 Certificate serial: 019B7DCA174AE26020D33B866050529BF566 Authority key identifier: 4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/1qel5UJvF0Nw_b-bGu5_QNoqlRk.roa Signing time: Fri 02 Jan 2026 08:19:14 +0000 ROA not before: Fri 02 Jan 2026 08:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39884 IP address blocks: 46.31.224.0/21 maxlen: 24 185.75.92.0/22 maxlen: 24 195.189.172.0/23 maxlen: 24 2a03:8e00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:17:4a:e2:60:20:d3:3b:86:60:50:52:9b:f5:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4edc689bb22d09475574f41c0e5d97c045930928 Validity Not Before: Jan 2 08:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6a7a5e5426f174370fdbf9b1aee7f40da2a9519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:42:be:8b:95:4e:76:89:05:77:17:2b:e5:69: f6:9e:2c:ec:5a:31:5c:8d:0a:5b:a4:71:7e:11:2e: 97:63:06:fd:8d:96:6c:00:16:03:6e:16:a6:64:2d: 77:33:db:e3:23:e5:47:78:b3:62:5f:e2:5b:d8:e7: ff:cd:b6:46:d0:4b:0c:8d:2a:1e:bd:5c:5e:bd:49: f6:6d:a4:16:21:40:fe:a0:61:ce:09:12:4d:3a:0f: 56:83:86:56:c5:29:a1:c1:2b:d9:6f:6e:c7:84:50: 2a:45:42:20:1a:72:f4:97:8f:2f:41:e2:9d:4e:94: 1e:12:50:e2:59:22:14:14:80:eb:ca:5b:d6:8e:46: eb:d9:9a:3a:f7:16:da:c0:f6:2d:66:c3:3c:33:f9: aa:0e:c6:3f:52:1a:0c:4c:ca:c5:25:dd:ff:db:ea: 6e:8d:f6:5c:a7:ee:ce:e0:3a:17:9f:f4:a5:a4:05: 9f:8d:cf:08:f3:d0:65:29:a9:60:10:87:e7:b3:64: fb:d3:88:84:80:02:6c:51:d2:95:3d:f0:a1:31:2f: 32:c7:b2:6b:44:8a:76:47:ff:21:d4:68:49:d0:d3: 36:fa:11:16:2d:de:4e:d0:2a:9c:77:39:3c:04:92: 64:cf:93:2d:d9:42:37:e5:d8:99:16:ca:51:ae:d1: b2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A7:A5:E5:42:6F:17:43:70:FD:BF:9B:1A:EE:7F:40:DA:2A:95:19 X509v3 Authority Key Identifier: keyid:4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/1qel5UJvF0Nw_b-bGu5_QNoqlRk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.224.0/21 185.75.92.0/22 195.189.172.0/23 IPv6: 2a03:8e00::/32 Signature Algorithm: sha256WithRSAEncryption 07:44:e8:33:6b:ac:ec:ea:d8:06:02:14:2b:2a:d8:b5:31:d0: d5:d6:bd:cb:0f:44:f8:bc:c6:41:c0:2d:e0:b7:b4:3e:40:81: 09:06:99:f6:a6:5b:16:1b:42:9b:2e:b4:c6:10:09:c4:5b:8b: 10:d2:50:31:eb:c5:f2:7c:65:d1:43:f3:28:3e:f0:5f:64:18: eb:4e:42:8a:76:6f:5f:32:3c:de:b3:12:dd:ce:f7:28:0a:fb: 14:c2:fd:8e:6b:e5:39:50:63:03:77:b1:3f:2c:13:ac:f5:97: a3:95:8a:aa:71:57:c7:bc:a7:24:19:c7:df:76:05:f9:5f:e6: 82:81:72:ef:f3:99:b9:4d:6a:9e:1f:50:0d:18:98:0d:24:1c: 70:31:ef:57:fd:4d:57:aa:cb:45:b5:14:1e:49:38:fe:8d:11: cb:e4:8e:b7:4a:45:61:b8:be:dc:e1:cd:05:17:35:ac:7a:25: e3:fd:84:f0:ce:91:11:1f:45:ee:54:38:2d:63:5b:aa:9e:94: 93:10:e8:be:7d:bb:09:cf:08:08:37:e5:f2:cd:78:48:2b:b8: dc:b7:9e:9c:dc:d6:ee:46:75:7a:25:11:1e:66:89:31:09:88: 41:c5:3e:31:a7:63:d6:34:d5:d7:59:93:b1:74:73:29:48:1c: 56:c7:c6:9c -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9yhdK4mAg0zuGYFBSm/VmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZGM2ODliYjIyZDA5NDc1NTc0ZjQxYzBlNWQ5N2MwNDU5 MzA5MjgwHhcNMjYwMTAyMDgxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmE3YTVlNTQyNmYxNzQzNzBmZGJmOWIxYWVlN2Y0MGRhMmE5NTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkK+i5VOdokFdxcr5Wn2nizsWjFc jQpbpHF+ES6XYwb9jZZsABYDbhamZC13M9vjI+VHeLNiX+Jb2Of/zbZG0EsMjSoe vVxevUn2baQWIUD+oGHOCRJNOg9Wg4ZWxSmhwSvZb27HhFAqRUIgGnL0l48vQeKd TpQeElDiWSIUFIDrylvWjkbr2Zo69xbawPYtZsM8M/mqDsY/UhoMTMrFJd3/2+pu jfZcp+7O4DoXn/SlpAWfjc8I89BlKalgEIfns2T704iEgAJsUdKVPfChMS8yx7Jr RIp2R/8h1GhJ0NM2+hEWLd5O0Cqcdzk8BJJkz5Mt2UI35diZFspRrtGydQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFNanpeVCbxdDcP2/mxruf0DaKpUZMB8GA1UdIwQY MBaAFE7caJuyLQlHVXT0HA5dl8BFkwkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHR4b203SXRDVWRWZFBRY0RsMlh3RVdUQ1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83YmJiOTEtYzViMC00ZDBiLTkyNWIt MDliZTU5ODlkMGFjLzEvMXFlbDVVSnZGME53X2ItYkd1NV9RTm9xbFJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi83YmJiOTEtYzViMC00ZDBiLTkyNWItMDliZTU5ODlkMGFj LzEvVHR4b203SXRDVWRWZFBRY0RsMlh3RVdUQ1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDLh/gAwQC uUtcAwQBw72sMA0EAgACMAcDBQAqA44AMA0GCSqGSIb3DQEBCwUAA4IBAQAHROgz a6zs6tgGAhQrKti1MdDV1r3LD0T4vMZBwC3gt7Q+QIEJBpn2plsWG0KbLrTGEAnE W4sQ0lAx68XyfGXRQ/MoPvBfZBjrTkKKdm9fMjzesxLdzvcoCvsUwv2Oa+U5UGMD d7E/LBOs9ZejlYqqcVfHvKckGcffdgX5X+aCgXLv85m5TWqeH1ANGJgNJBxwMe9X /U1XqstFtRQeSTj+jRHL5I63SkVhuL7c4c0FFzWseiXj/YTwzpERH0XuVDgtY1uq npSTEOi+fbsJzwgIN+XyzXhIK7jct56c3NbuRnV6JREeZokxCYhBxT4xp2PWNNXX WZOxdHMpSBxWx8ac -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:16 2026 by rpki-client