This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/QQ4KxBaAki9JFj3Vc4-C08V1ydM.roa File: QQ4KxBaAki9JFj3Vc4-C08V1ydM.roa (raw, json) Hash identifier: sU9ncWykONAWb2tj0sti+vKUahUUlRIsV/AFQ67WkR4= Subject key identifier: 41:0E:0A:C4:16:80:92:2F:49:16:3D:D5:73:8F:82:D3:C5:75:C9:D3 Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda Certificate serial: 019B7BA356CA1EF4FA39C102E3B2A3EDF230 Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/QQ4KxBaAki9JFj3Vc4-C08V1ydM.roa Signing time: Thu 01 Jan 2026 22:17:40 +0000 ROA not before: Thu 01 Jan 2026 22:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 5.63.24.0/21 maxlen: 21 91.190.168.0/21 maxlen: 21 185.85.76.0/22 maxlen: 22 2a02:798::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:56:ca:1e:f4:fa:39:c1:02:e3:b2:a3:ed:f2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda Validity Not Before: Jan 1 22:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=410e0ac41680922f49163dd5738f82d3c575c9d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:42:b8:23:09:f5:28:68:4f:ff:88:28:0b:c8: 46:77:a2:1f:f0:0b:26:e1:77:f4:45:56:00:c1:75: 34:db:ae:a9:d0:e7:5c:94:49:c0:d5:18:b7:18:81: 3f:9e:ca:35:63:cc:6e:a7:63:f2:77:dd:b2:84:8a: b6:44:72:b4:0e:68:e8:bd:cf:1b:29:bc:0f:dd:d6: df:ae:00:52:00:63:74:9f:2f:54:d3:ed:9c:33:e8: 36:66:00:a3:f6:7d:34:2f:d5:8e:ee:03:92:41:e7: fc:4d:e9:3c:8e:9a:ac:1a:1d:df:c0:00:3b:70:0c: 06:4a:09:8a:c6:96:78:af:7e:b0:e2:3f:f3:23:76: dc:4c:95:ac:48:68:7f:4b:cb:ea:85:5c:d3:86:bf: 80:44:07:64:40:af:e9:8d:0b:0a:98:3e:3a:59:df: 5a:47:2a:cd:c6:bd:72:97:77:7a:cc:a1:79:b3:54: 46:d7:67:93:fc:0e:a8:54:d1:bf:6a:56:75:bc:41: 74:19:89:31:8f:4e:90:4d:8d:4a:94:60:af:01:f5: 01:3f:7d:1c:6a:5c:82:e8:af:99:db:fc:74:52:8a: 0c:2c:90:92:99:9b:76:70:eb:27:fe:ff:49:8d:ec: 6a:ba:39:cc:dc:26:c7:4c:08:92:ee:f9:b0:1b:f4: 68:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0E:0A:C4:16:80:92:2F:49:16:3D:D5:73:8F:82:D3:C5:75:C9:D3 X509v3 Authority Key Identifier: keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/QQ4KxBaAki9JFj3Vc4-C08V1ydM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.24.0/21 91.190.168.0/21 185.85.76.0/22 IPv6: 2a02:798::/32 Signature Algorithm: sha256WithRSAEncryption be:0d:1a:a9:92:99:b7:b5:c7:b8:ed:a9:7f:05:d3:ad:ee:c2: 16:15:25:5b:2e:ee:d6:57:ea:4b:ce:8f:37:e7:41:49:a0:4f: 61:f4:e5:1a:31:8b:dd:22:a5:4c:a4:48:ad:aa:ec:14:72:4a: 5a:e2:5e:01:60:78:c6:de:f8:bd:1a:23:25:e3:62:21:0b:a2: 61:09:bd:19:70:62:37:99:f7:62:17:c0:90:a1:51:e3:d5:70: 48:ef:7c:6d:99:2e:de:13:a2:f9:5b:62:d7:69:2e:6a:19:a2: d4:5a:5b:d7:6f:fa:7a:38:03:31:6e:27:91:74:ee:e8:b5:cd: 17:47:bb:5a:c4:f1:01:fb:e3:a2:8c:a6:e1:8c:ae:07:0d:06: 03:7e:e0:ea:f9:be:f4:e8:5d:98:9b:e4:65:99:45:23:5f:eb: ca:a9:3d:25:69:18:47:03:1b:03:0e:3f:5f:4e:38:1c:e2:9a: b3:29:0a:63:2b:4f:43:d9:3c:bc:15:68:aa:df:20:38:7d:20: 8b:29:be:77:04:af:90:25:ab:14:3f:36:47:de:d9:bb:bd:8a: 82:2e:4f:68:d6:e9:9c:16:03:05:61:33:05:b5:e8:c9:3c:c3: 39:3c:12:85:64:85:56:32:a2:3b:dd:a4:60:f6:0b:f5:6e:90: f4:97:7a:0f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7o1bKHvT6OcEC47Kj7fIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMTQxYzUwOTA4MjRkMGExN2MyOWVjNDA1MGUyMTAwNzEx M2ZiZGEwHhcNMjYwMTAxMjIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTBlMGFjNDE2ODA5MjJmNDkxNjNkZDU3MzhmODJkM2M1NzVjOWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkK4Iwn1KGhP/4goC8hGd6If8Asm 4Xf0RVYAwXU0266p0OdclEnA1Ri3GIE/nso1Y8xup2Pyd92yhIq2RHK0Dmjovc8b KbwP3dbfrgBSAGN0ny9U0+2cM+g2ZgCj9n00L9WO7gOSQef8Tek8jpqsGh3fwAA7 cAwGSgmKxpZ4r36w4j/zI3bcTJWsSGh/S8vqhVzThr+ARAdkQK/pjQsKmD46Wd9a RyrNxr1yl3d6zKF5s1RG12eT/A6oVNG/alZ1vEF0GYkxj06QTY1KlGCvAfUBP30c alyC6K+Z2/x0UooMLJCSmZt2cOsn/v9JjexqujnM3CbHTAiS7vmwG/RoPwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFEEOCsQWgJIvSRY91XOPgtPFdcnTMB8GA1UdIwQY MBaAFFoUHFCQgk0KF8KexAUOIQBxE/vaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUt ZWNlZWZmOGU4NGUwLzEvUVE0S3hCYUFraTlKRmozVmM0LUMwOFYxeWRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUtZWNlZWZmOGU4NGUw LzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDBT8YAwQD W76oAwQCuVVMMA0EAgACMAcDBQAqAgeYMA0GCSqGSIb3DQEBCwUAA4IBAQC+DRqp kpm3tce47al/BdOt7sIWFSVbLu7WV+pLzo8350FJoE9h9OUaMYvdIqVMpEitquwU ckpa4l4BYHjG3vi9GiMl42IhC6JhCb0ZcGI3mfdiF8CQoVHj1XBI73xtmS7eE6L5 W2LXaS5qGaLUWlvXb/p6OAMxbieRdO7otc0XR7taxPEB++OijKbhjK4HDQYDfuDq +b706F2Ym+RlmUUjX+vKqT0laRhHAxsDDj9fTjgc4pqzKQpjK09D2Ty8FWiq3yA4 fSCLKb53BK+QJasUPzZH3tm7vYqCLk9o1umcFgMFYTMFtejJPMM5PBKFZIVWMqI7 3aRg9gv1bpD0l3oP -----END CERTIFICATE-----Generated at Fri Jan 2 13:02:07 2026 by rpki-client