This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/Q_ee8py1cZcXFZRaXUkP3TowZDc.roa File: Q_ee8py1cZcXFZRaXUkP3TowZDc.roa (raw, json) Hash identifier: w/aCOcSaWrdKUscNCfCU/09gr8uTxVVmhx8jtZuT2dI= Subject key identifier: 43:F7:9E:F2:9C:B5:71:97:17:15:94:5A:5D:49:0F:DD:3A:30:64:37 Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657 Certificate serial: 019B7D5D04F245ACE77DF7FDEDBB25DC2A1F Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/Q_ee8py1cZcXFZRaXUkP3TowZDc.roa Signing time: Fri 02 Jan 2026 06:20:06 +0000 ROA not before: Fri 02 Jan 2026 06:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 185.181.12.0/24 maxlen: 24 2a0a:bb80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 12:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:04:f2:45:ac:e7:7d:f7:fd:ed:bb:25:dc:2a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657 Validity Not Before: Jan 2 06:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43f79ef29cb571971715945a5d490fdd3a306437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:9c:31:9b:07:f0:62:8c:d7:59:1c:7f:8d: 64:a0:52:61:2f:6d:df:30:da:96:11:7f:d1:b6:70: 4d:09:34:3d:2e:2c:2f:d1:87:31:d6:7f:35:b0:54: 51:03:57:8b:13:89:bc:5a:8c:dc:6c:31:74:89:86: 46:4c:50:a0:ff:07:b2:6b:a3:ad:4c:30:61:35:98: da:e9:a1:f3:93:af:75:92:70:66:fe:6d:fe:94:88: 51:e9:94:c9:24:71:32:98:e9:ce:01:77:cf:6c:57: 34:97:80:53:9a:a6:a1:29:54:29:8a:bc:06:05:b2: ad:ed:d3:18:1e:94:c5:d8:8c:f4:82:f8:f8:84:f7: 33:5b:e7:f3:e3:f4:4a:85:06:90:dc:73:c1:4a:3a: 93:75:51:eb:28:e8:b8:4b:d7:3f:c0:19:ae:4f:55: 3d:8e:64:83:ce:c9:06:f7:79:da:99:1d:02:3e:c6: 0e:48:33:06:0d:17:7a:47:d9:6c:3d:46:43:d1:d1: 75:93:72:97:16:28:71:ef:54:4f:f6:e2:5b:a3:56: 87:89:f3:b5:09:f1:16:52:28:7c:08:4e:13:88:bf: 42:60:c7:10:74:70:d8:8c:af:53:69:be:c4:5d:61: 14:18:18:01:98:21:bd:3f:9c:00:e6:d3:8c:6e:84: 73:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F7:9E:F2:9C:B5:71:97:17:15:94:5A:5D:49:0F:DD:3A:30:64:37 X509v3 Authority Key Identifier: keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/Q_ee8py1cZcXFZRaXUkP3TowZDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.181.12.0/24 IPv6: 2a0a:bb80::/48 Signature Algorithm: sha256WithRSAEncryption 0d:ba:26:ad:a4:08:a3:23:05:d2:e2:c0:ae:67:0c:2b:12:83: f9:cb:2a:0b:8d:2f:62:f6:0b:99:a1:72:c2:04:4e:5b:5b:47: d1:d9:39:4c:82:3f:0b:3b:b8:f8:95:e1:c4:aa:9b:cb:b7:ce: c6:cf:72:b7:a0:ae:c0:33:d9:55:6e:59:9a:61:0d:a9:ec:cd: 53:2f:83:9a:1d:64:38:41:f4:48:08:8a:9b:1b:8b:bc:0e:07: 35:e3:bc:21:56:cb:39:fc:b4:77:48:55:39:ae:2f:bb:92:32: a4:1d:44:9c:e2:b7:ec:75:58:14:d5:68:fb:66:02:3b:ba:27: bf:14:ec:3a:55:27:f1:2c:5d:72:34:75:f9:fe:27:ec:c3:03: 87:57:e8:d6:08:94:15:56:d1:cc:d8:5c:f4:d7:16:b3:c7:82: 6a:ef:15:aa:f5:98:2a:fc:97:84:51:e3:b3:2e:8a:c6:1b:d3: 7b:ad:d5:cb:72:e1:8c:d8:bd:52:02:e9:d3:d0:36:50:cd:02: be:db:0c:79:0e:6d:6e:25:ea:7d:aa:c0:94:17:61:ba:59:71: 60:0d:0c:ef:9b:c1:6b:a2:11:b9:4c:1d:11:b4:97:69:45:eb: ac:72:58:ae:89:1d:b4:8e:ab:4a:5a:e3:e3:3c:c3:68:ea:c0: 2a:4a:0b:e8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XQTyRaznfff97bsl3CofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzOGVlOTUxY2RhYmMzY2U4MDVlYzhkZjBiZjM0MDNiZGZh OWM2NTcwHhcNMjYwMTAyMDYyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2Y3OWVmMjljYjU3MTk3MTcxNTk0NWE1ZDQ5MGZkZDNhMzA2NDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIWcMZsH8GKM11kcf41koFJhL23f MNqWEX/RtnBNCTQ9Liwv0Ycx1n81sFRRA1eLE4m8WozcbDF0iYZGTFCg/weya6Ot TDBhNZja6aHzk691knBm/m3+lIhR6ZTJJHEymOnOAXfPbFc0l4BTmqahKVQpirwG BbKt7dMYHpTF2Iz0gvj4hPczW+fz4/RKhQaQ3HPBSjqTdVHrKOi4S9c/wBmuT1U9 jmSDzskG93namR0CPsYOSDMGDRd6R9lsPUZD0dF1k3KXFihx71RP9uJbo1aHifO1 CfEWUih8CE4TiL9CYMcQdHDYjK9Tab7EXWEUGBgBmCG9P5wA5tOMboRz1wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEP3nvKctXGXFxWUWl1JD906MGQ3MB8GA1UdIwQY MBaAFJOO6VHNq8POgF7I3wvzQDvfqcZXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazQ3cFVjMnJ3ODZBWHNqZkNfTkFPOS1weGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hOGZlNWItNmFjZS00MjM2LThhOTAt ZTBmNWQ4NmUzN2EzLzEvUV9lZThweTFjWmNYRlpSYVhVa1AzVG93WkRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hOGZlNWItNmFjZS00MjM2LThhOTAtZTBmNWQ4NmUzN2Ez LzEvazQ3cFVjMnJ3ODZBWHNqZkNfTkFPOS1weGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAubUMMA8E AgACMAkDBwAqCruAAAAwDQYJKoZIhvcNAQELBQADggEBAA26Jq2kCKMjBdLiwK5n DCsSg/nLKguNL2L2C5mhcsIETltbR9HZOUyCPws7uPiV4cSqm8u3zsbPcregrsAz 2VVuWZphDanszVMvg5odZDhB9EgIipsbi7wOBzXjvCFWyzn8tHdIVTmuL7uSMqQd RJzit+x1WBTVaPtmAju6J78U7DpVJ/EsXXI0dfn+J+zDA4dX6NYIlBVW0czYXPTX FrPHgmrvFar1mCr8l4RR47MuisYb03ut1cty4YzYvVIC6dPQNlDNAr7bDHkObW4l 6n2qwJQXYbpZcWANDO+bwWuiEblMHRG0l2lF66xyWK6JHbSOq0pa4+M8w2jqwCpK C+g= -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:56 2026 by rpki-client