This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa File: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (raw, json) Hash identifier: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c= Subject key identifier: 42:1E:B0:E5:1E:0E:63:72:D1:14:99:66:C7:0D:C6:11:42:28:AD:61 Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 019B7EA7078B4B32C36C5F6B9336CF226F3D Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa Signing time: Fri 02 Jan 2026 12:20:34 +0000 ROA not before: Fri 02 Jan 2026 12:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200239 IP address blocks: 2.59.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 23:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:07:8b:4b:32:c3:6c:5f:6b:93:36:cf:22:6f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Jan 2 12:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=421eb0e51e0e6372d1149966c70dc6114228ad61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f3:09:89:4a:b5:39:46:17:57:0c:9c:44:74: 38:1b:87:3f:91:26:4c:94:9e:5f:8e:15:a8:55:1d: 63:68:d9:d1:72:fa:ab:cd:d6:06:5f:19:93:79:e6: 06:75:6b:01:a4:bb:f8:c2:78:09:e5:85:b4:b7:11: dc:87:6b:18:b7:b7:5a:bc:86:06:0c:30:86:45:7c: b8:71:88:ca:11:ea:ed:23:b6:28:74:96:ec:73:a3: 1a:9f:b3:a0:94:bb:68:db:b2:ba:4e:a0:ce:03:ef: bc:f1:9e:fe:9a:ae:9e:e9:80:db:47:bc:04:51:a7: c8:93:a5:91:1d:49:25:0f:2b:af:1b:bf:85:fb:4a: 94:62:e8:69:d4:11:0b:35:1b:b1:6a:8f:97:77:8c: d7:08:b9:08:6c:b4:3f:ab:82:88:b2:27:ab:3d:85: 80:4b:3f:00:f4:e0:ba:1a:a0:de:ef:72:92:cd:b6: 37:d1:8d:1f:e1:3b:d5:e0:11:c4:85:30:2c:4f:61: 5b:b7:d3:fd:5c:a5:ef:12:c4:b5:58:73:6a:38:74: a3:98:1f:f8:95:69:73:c0:83:41:1a:1e:32:17:4f: 24:cc:cf:48:9a:50:ee:39:a0:53:44:3c:9a:b6:c1: 80:d6:a6:98:67:31:6d:7c:d9:dc:98:15:34:8a:7c: bc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1E:B0:E5:1E:0E:63:72:D1:14:99:66:C7:0D:C6:11:42:28:AD:61 X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.181.0/24 Signature Algorithm: sha256WithRSAEncryption ad:1e:00:89:36:ab:b9:bd:66:dd:e4:db:53:72:d1:d8:75:2d: 91:ef:7e:36:b6:71:9e:68:d2:20:6b:7a:d8:c7:4a:8e:2a:d1: c6:2e:c2:aa:c9:0f:fa:e7:e0:4d:c6:74:e5:ad:93:57:b4:c4: bb:c1:ad:be:7a:2e:99:04:2d:e9:e2:70:88:28:fc:1c:4a:7c: a4:a2:a8:0b:d2:47:8d:4d:95:72:74:e8:61:12:8c:fa:d2:99: 82:41:63:eb:92:2b:a6:2c:38:c5:c3:8a:c7:ab:f9:ea:87:cd: 61:f7:4d:5c:2b:08:ed:a5:79:27:dd:c7:3e:db:7b:b9:48:a3: d1:0a:b5:9c:d9:98:30:01:4e:41:31:27:e2:92:32:bb:64:43: 59:9f:55:12:2b:5f:d1:f5:0a:c0:cf:20:35:58:64:a1:e4:66: 0c:6f:07:3e:86:de:4c:74:f1:fb:cf:55:56:63:c3:9b:dc:56: 0f:21:31:96:1c:db:cf:e7:5f:19:38:c7:ad:7f:87:16:ba:58: d7:21:2d:09:71:4d:b8:82:c0:5d:cf:07:2c:6c:53:db:02:76: 2f:58:45:64:4c:8a:9f:d3:f2:57:5f:96:b7:5b:4e:0f:e1:d1: 35:79:41:c5:37:15:9e:a1:48:b2:66:24:96:e1:6f:92:c4:62: 78:27:88:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pweLSzLDbF9rkzbPIm89MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYwMTAyMTIyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjFlYjBlNTFlMGU2MzcyZDExNDk5NjZjNzBkYzYxMTQyMjhhZDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PMJiUq1OUYXVwycRHQ4G4c/kSZM lJ5fjhWoVR1jaNnRcvqrzdYGXxmTeeYGdWsBpLv4wngJ5YW0txHch2sYt7davIYG DDCGRXy4cYjKEertI7YodJbsc6Man7OglLto27K6TqDOA++88Z7+mq6e6YDbR7wE UafIk6WRHUklDyuvG7+F+0qUYuhp1BELNRuxao+Xd4zXCLkIbLQ/q4KIsierPYWA Sz8A9OC6GqDe73KSzbY30Y0f4TvV4BHEhTAsT2Fbt9P9XKXvEsS1WHNqOHSjmB/4 lWlzwINBGh4yF08kzM9ImlDuOaBTRDyatsGA1qaYZzFtfNncmBU0iny8AwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEIesOUeDmNy0RSZZscNxhFCKK1hMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvUWg2dzVSNE9ZM0xSRkpsbXh3M0dFVUlvcldFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAju1MA0G CSqGSIb3DQEBCwUAA4IBAQCtHgCJNqu5vWbd5NtTctHYdS2R7342tnGeaNIga3rY x0qOKtHGLsKqyQ/65+BNxnTlrZNXtMS7wa2+ei6ZBC3p4nCIKPwcSnykoqgL0keN TZVydOhhEoz60pmCQWPrkiumLDjFw4rHq/nqh81h901cKwjtpXkn3cc+23u5SKPR CrWc2ZgwAU5BMSfikjK7ZENZn1USK1/R9QrAzyA1WGSh5GYMbwc+ht5MdPH7z1VW Y8Ob3FYPITGWHNvP518ZOMetf4cWuljXIS0JcU24gsBdzwcsbFPbAnYvWEVkTIqf 0/JXX5a3W04P4dE1eUHFNxWeoUiyZiSW4W+SxGJ4J4hM -----END CERTIFICATE-----Generated at Mon Jan 5 05:00:14 2026 by rpki-client