This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/qI-tc_wn9NR2TJtTi_-UZ3Db4dk.roa File: qI-tc_wn9NR2TJtTi_-UZ3Db4dk.roa (raw, json) Hash identifier: Hna1rX01DaNLfA/1719u7etsundy10hoCtZZnTaQpt4= Subject key identifier: A8:8F:AD:73:FC:27:F4:D4:76:4C:9B:53:8B:FF:94:67:70:DB:E1:D9 Certificate issuer: /CN=79d69dd98333558401edd1a60168265dd1a0d958 Certificate serial: 019B7F82EEF15FBECE320270A95F254BD3ED Authority key identifier: 79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/qI-tc_wn9NR2TJtTi_-UZ3Db4dk.roa Signing time: Fri 02 Jan 2026 16:20:45 +0000 ROA not before: Fri 02 Jan 2026 16:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 513 IP address blocks: 128.141.0.0/16 maxlen: 16 128.142.0.0/16 maxlen: 16 137.138.0.0/16 maxlen: 16 185.249.56.0/22 maxlen: 22 188.184.0.0/16 maxlen: 16 188.185.0.0/16 maxlen: 16 192.16.155.0/24 maxlen: 24 192.16.156.0/22 maxlen: 22 192.16.160.0/22 maxlen: 22 192.16.164.0/23 maxlen: 23 192.16.166.0/24 maxlen: 24 192.65.183.0/24 maxlen: 24 192.65.184.0/21 maxlen: 21 192.65.192.0/22 maxlen: 22 192.65.196.0/23 maxlen: 23 192.91.236.0/22 maxlen: 22 192.91.240.0/22 maxlen: 22 192.91.244.0/23 maxlen: 23 192.91.246.0/24 maxlen: 24 194.12.128.0/18 maxlen: 18 2001:1458::/32 maxlen: 32 2001:1459::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:ee:f1:5f:be:ce:32:02:70:a9:5f:25:4b:d3:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79d69dd98333558401edd1a60168265dd1a0d958 Validity Not Before: Jan 2 16:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a88fad73fc27f4d4764c9b538bff946770dbe1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7a:5a:99:73:88:d7:b2:55:1b:b4:2e:f8:74: 1b:ac:62:54:32:61:ca:a4:26:20:33:30:ef:3a:7b: 79:f5:b8:53:d9:07:85:db:35:9e:27:79:8f:6a:77: d8:ea:86:b2:b8:a2:b1:6e:b2:49:f4:11:01:4f:94: 88:9b:ff:77:ac:5d:96:6c:25:24:71:9e:9e:e4:fc: aa:ca:d5:42:88:22:48:20:2b:4c:2d:1b:73:b8:7d: 04:dc:93:43:42:22:b6:1d:9f:7d:84:8c:92:df:12: 7c:cf:8c:15:56:8d:ff:95:97:c2:58:12:38:b3:ea: 7f:6c:99:51:65:e7:08:d0:af:a0:cd:d6:85:33:82: a7:62:e1:be:1a:6e:40:4e:17:57:f6:8b:20:02:ad: 53:52:7a:68:be:47:85:9f:61:7e:26:7d:6d:6c:d0: 91:61:65:1b:fc:07:cd:8e:b4:4e:8e:25:fb:10:48: 25:98:e0:71:f5:93:2a:a0:11:40:7e:1b:a8:ba:b6: 6d:41:b2:0f:97:5a:40:0a:c6:42:cf:de:19:aa:1f: 14:df:2a:4e:77:ea:0d:1d:09:f2:4e:43:5a:e2:6b: 1d:0f:5c:dc:14:59:f4:d2:62:5d:a4:93:62:bc:e0: af:dd:82:68:c0:2e:92:5e:6e:12:b7:3d:72:37:c0: 92:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8F:AD:73:FC:27:F4:D4:76:4C:9B:53:8B:FF:94:67:70:DB:E1:D9 X509v3 Authority Key Identifier: keyid:79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/qI-tc_wn9NR2TJtTi_-UZ3Db4dk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.141.0.0-128.142.255.255 137.138.0.0/16 185.249.56.0/22 188.184.0.0/15 192.16.155.0-192.16.166.255 192.65.183.0-192.65.197.255 192.91.236.0-192.91.246.255 194.12.128.0/18 IPv6: 2001:1458::/31 Signature Algorithm: sha256WithRSAEncryption 1e:4b:46:37:f7:c5:0e:f3:f7:76:49:45:7f:65:c9:24:c4:87: 34:4b:23:c0:e7:76:46:3f:c5:23:4f:cf:94:94:03:78:24:d5: 1d:9b:f3:2d:56:ee:fd:89:1b:61:f6:e1:37:38:29:ae:3b:49: aa:a2:d3:c0:a5:0e:a9:dc:c1:7b:75:75:3f:36:48:e9:e5:ad: fa:5d:72:70:6d:c1:93:41:e2:05:73:13:6f:ff:e2:cd:5c:63: 5c:0c:08:5f:47:0b:68:d2:35:01:79:5e:93:f2:0f:97:fd:4a: 64:d2:b6:1c:79:08:e7:2d:02:1e:44:d6:b1:2f:f7:f4:0f:fe: 7c:84:98:97:c6:90:34:38:b8:12:46:d9:84:c0:e6:9e:e4:47: 77:65:26:d2:ee:eb:d6:fa:30:51:5d:30:08:35:30:cc:5d:20: af:36:90:7d:07:14:b4:56:33:06:a0:f8:40:c7:75:d0:21:10: 90:ff:dd:72:6f:5c:7e:c7:a5:88:df:0e:4c:ea:da:72:ff:d7: ad:c9:6b:0b:b5:96:36:9c:ec:c5:aa:de:4d:31:d0:da:77:5c: 1f:6b:2a:3b:2d:d7:01:5f:dc:1b:3e:66:35:64:d7:47:bf:76: 91:26:2c:87:1d:37:6c:b0:de:3e:3f:7a:0c:60:0e:7c:b3:90: 26:6b:ea:30 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgISAZt/gu7xX77OMgJwqV8lS9PtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ZDY5ZGQ5ODMzMzU1ODQwMWVkZDFhNjAxNjgyNjVkZDFh MGQ5NTgwHhcNMjYwMTAyMTYyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODhmYWQ3M2ZjMjdmNGQ0NzY0YzliNTM4YmZmOTQ2NzcwZGJlMWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnpamXOI17JVG7Qu+HQbrGJUMmHK pCYgMzDvOnt59bhT2QeF2zWeJ3mPanfY6oayuKKxbrJJ9BEBT5SIm/93rF2WbCUk cZ6e5PyqytVCiCJIICtMLRtzuH0E3JNDQiK2HZ99hIyS3xJ8z4wVVo3/lZfCWBI4 s+p/bJlRZecI0K+gzdaFM4KnYuG+Gm5AThdX9osgAq1TUnpovkeFn2F+Jn1tbNCR YWUb/AfNjrROjiX7EEglmOBx9ZMqoBFAfhuourZtQbIPl1pACsZCz94Zqh8U3ypO d+oNHQnyTkNa4msdD1zcFFn00mJdpJNivOCv3YJowC6SXm4Stz1yN8CSVQIDAQAB o4ICXjCCAlowHQYDVR0OBBYEFKiPrXP8J/TUdkybU4v/lGdw2+HZMB8GA1UdIwQY MBaAFHnWndmDM1WEAe3RpgFoJl3RoNlYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWRhZDJZTXpWWVFCN2RHbUFXZ21YZEdnMlZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hNDZiZTctMzE3ZS00NzA4LWEwMTYt NGZkNmI3ZDc2YTJmLzEvcUktdGNfd245TlIyVEp0VGlfLVVaM0RiNGRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9hNDZiZTctMzE3ZS00NzA4LWEwMTYtNGZkNmI3ZDc2YTJm LzEvZWRhZDJZTXpWWVFCN2RHbUFXZ21YZEdnMlZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzBSBAIAATBMMAoDAwCAjQMD AICOAwMAiYoDBAK5+TgDAwG8uDAMAwQAwBCbAwQAwBCmMAwDBADAQbcDBAHAQcQw DAMEAsBb7AMEAMBb9gMEBsIMgDANBAIAAjAHAwUBIAEUWDANBgkqhkiG9w0BAQsF AAOCAQEAHktGN/fFDvP3dklFf2XJJMSHNEsjwOd2Rj/FI0/PlJQDeCTVHZvzLVbu /YkbYfbhNzgprjtJqqLTwKUOqdzBe3V1PzZI6eWt+l1ycG3Bk0HiBXMTb//izVxj XAwIX0cLaNI1AXlek/IPl/1KZNK2HHkI5y0CHkTWsS/39A/+fISYl8aQNDi4EkbZ hMDmnuRHd2Um0u7r1vowUV0wCDUwzF0grzaQfQcUtFYzBqD4QMd10CEQkP/dcm9c fseliN8OTOracv/XrclrC7WWNpzsxareTTHQ2ndcH2sqOy3XAV/cGz5mNWTXR792 kSYshx03bLDePj96DGAOfLOQJmvqMA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:33 2026 by rpki-client