This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/Q9m-lfpl94RgCrGyXlKa0BCxzmU.roa File: Q9m-lfpl94RgCrGyXlKa0BCxzmU.roa (raw, json) Hash identifier: OrRe/AhPIl5+vGgEIK4ZmFPH1fmm0hGO63YBADXAmg8= Subject key identifier: 43:D9:BE:95:FA:65:F7:84:60:0A:B1:B2:5E:52:9A:D0:10:B1:CE:65 Certificate issuer: /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6 Certificate serial: 019B797F168EDB447E39FA603BB12F703E56 Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/Q9m-lfpl94RgCrGyXlKa0BCxzmU.roa Signing time: Thu 01 Jan 2026 12:18:50 +0000 ROA not before: Thu 01 Jan 2026 12:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203465 IP address blocks: 93.174.248.0/21 maxlen: 24 2a03:8ac0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:16:8e:db:44:7e:39:fa:60:3b:b1:2f:70:3e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6 Validity Not Before: Jan 1 12:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43d9be95fa65f784600ab1b25e529ad010b1ce65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:02:49:42:4d:35:67:da:80:b1:69:9e:51:d4: fd:3a:d5:76:b0:65:4f:24:1c:b4:c9:57:37:f1:97: dd:6a:12:8c:fd:e7:e3:a5:dd:ed:32:3e:63:b8:b0: 9f:b6:96:b5:ab:d2:d3:5d:db:24:78:fb:70:38:68: d5:91:42:84:48:e7:49:9a:88:7f:5a:ec:e1:c9:1b: ee:cf:29:4c:38:1f:88:94:f3:4a:5e:52:d5:45:ad: bc:b5:f7:b1:d5:b2:71:a5:5e:38:d8:b2:6f:e1:cf: ad:95:41:af:a6:6e:89:4f:06:65:f8:1b:6f:5a:50: 8b:59:47:05:dd:f6:08:c3:89:a5:76:5e:2d:91:63: a3:3a:9a:d8:2e:65:e9:1e:a2:56:a2:4f:6a:0f:f7: a8:cc:89:ce:72:ba:8c:64:b5:87:b8:f9:bd:ea:77: 3e:75:87:6b:08:6d:63:87:63:1f:8d:bc:06:10:24: 61:a9:75:96:fe:d9:ab:0d:89:e0:81:87:b1:52:82: 61:0e:72:55:98:e4:9b:c2:fb:fe:7b:61:3c:87:b0: 1b:ba:b6:cd:17:77:f5:68:b4:38:d9:8c:37:0e:d0: 0d:1c:98:1b:96:06:ba:c9:80:04:24:7c:9b:6c:59: dc:87:c0:66:1d:e0:c2:7d:94:c5:78:3b:22:99:91: c0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D9:BE:95:FA:65:F7:84:60:0A:B1:B2:5E:52:9A:D0:10:B1:CE:65 X509v3 Authority Key Identifier: keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/Q9m-lfpl94RgCrGyXlKa0BCxzmU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.174.248.0/21 IPv6: 2a03:8ac0::/32 Signature Algorithm: sha256WithRSAEncryption 07:18:8d:7a:a7:d9:0a:c3:8d:23:62:ea:e2:e8:4e:48:61:32: 3b:5c:1b:df:90:42:a6:94:12:32:32:6f:76:f4:b2:6c:3c:0f: ff:d9:94:e0:eb:65:dc:63:26:9b:69:3e:25:1c:d9:b2:8c:4f: 14:ed:27:92:43:73:88:7d:2a:bd:b9:35:77:9e:51:68:2e:49: 2c:f6:f7:be:cd:5f:e2:18:68:ae:63:5a:3c:6b:a6:52:a3:29: db:fa:24:e6:21:44:14:0a:a6:3a:56:84:62:ac:30:26:9e:81: d2:32:a4:c3:b4:90:e2:b1:0e:62:7d:e0:86:dc:39:25:c0:b6: 31:48:d8:00:fa:a8:ba:82:d9:98:c9:23:17:b5:8a:dc:83:24: 47:fb:05:7f:a5:a3:7e:da:0d:d9:9d:16:1d:d9:c1:e3:20:9f: eb:66:79:eb:0f:1f:0e:9d:92:c0:1b:8c:88:ca:f4:6b:28:c6: 05:1b:db:13:30:ab:95:ea:b1:bb:fc:97:7a:3f:e1:53:3d:00: d1:7b:15:e4:44:3d:8a:67:f3:7b:3f:6b:fa:ad:0e:00:f7:07: 4b:c0:ae:6f:70:43:03:63:6e:49:96:07:63:c7:7c:fb:af:9e: 6c:cd:2d:11:36:84:70:2f:3d:07:65:08:7c:02:d0:fb:78:69: 9b:da:64:86 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fxaO20R+OfpgO7EvcD5WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjODQ0YmQ2MmNiZmI1YWRjY2ZiNGRjMTZlY2EyM2NiNWM5 ZGRlYjYwHhcNMjYwMTAxMTIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2Q5YmU5NWZhNjVmNzg0NjAwYWIxYjI1ZTUyOWFkMDEwYjFjZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAJJQk01Z9qAsWmeUdT9OtV2sGVP JBy0yVc38ZfdahKM/efjpd3tMj5juLCftpa1q9LTXdskePtwOGjVkUKESOdJmoh/ WuzhyRvuzylMOB+IlPNKXlLVRa28tfex1bJxpV442LJv4c+tlUGvpm6JTwZl+Btv WlCLWUcF3fYIw4mldl4tkWOjOprYLmXpHqJWok9qD/eozInOcrqMZLWHuPm96nc+ dYdrCG1jh2MfjbwGECRhqXWW/tmrDYnggYexUoJhDnJVmOSbwvv+e2E8h7AburbN F3f1aLQ42Yw3DtANHJgblga6yYAEJHybbFnch8BmHeDCfZTFeDsimZHAdwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEPZvpX6ZfeEYAqxsl5SmtAQsc5lMB8GA1UdIwQY MBaAFGyES9Ysv7WtzPtNwW7KI8tcnd62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklSTDFpeV90YTNNLTAzQmJzb2p5MXlkM3JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jYjFiYzUtMmMxNS00MmY3LTllZjIt NWM5OWI2ODNkYjBkLzEvUTltLWxmcGw5NFJnQ3JHeVhsS2EwQkN4em1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9jYjFiYzUtMmMxNS00MmY3LTllZjItNWM5OWI2ODNkYjBk LzEvYklSTDFpeV90YTNNLTAzQmJzb2p5MXlkM3JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDXa74MA0E AgACMAcDBQAqA4rAMA0GCSqGSIb3DQEBCwUAA4IBAQAHGI16p9kKw40jYuri6E5I YTI7XBvfkEKmlBIyMm929LJsPA//2ZTg62XcYyabaT4lHNmyjE8U7SeSQ3OIfSq9 uTV3nlFoLkks9ve+zV/iGGiuY1o8a6ZSoynb+iTmIUQUCqY6VoRirDAmnoHSMqTD tJDisQ5ifeCG3DklwLYxSNgA+qi6gtmYySMXtYrcgyRH+wV/paN+2g3ZnRYd2cHj IJ/rZnnrDx8OnZLAG4yIyvRrKMYFG9sTMKuV6rG7/Jd6P+FTPQDRexXkRD2KZ/N7 P2v6rQ4A9wdLwK5vcEMDY25Jlgdjx3z7r55szS0RNoRwLz0HZQh8AtD7eGmb2mSG -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:26 2026 by rpki-client