This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/QxCjxkjtj8M1Cw8s1SanJKG1uKw.roa File: QxCjxkjtj8M1Cw8s1SanJKG1uKw.roa (raw, json) Hash identifier: yUeAAf/exzaMVpONZcSdDF3y2oSzL/ioLlZZZr6Czjg= Subject key identifier: 43:10:A3:C6:48:ED:8F:C3:35:0B:0F:2C:D5:26:A7:24:A1:B5:B8:AC Certificate issuer: /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5 Certificate serial: 019B7CEE2EAA38C7900B260DAF861BBB7F9B Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/QxCjxkjtj8M1Cw8s1SanJKG1uKw.roa Signing time: Fri 02 Jan 2026 04:19:02 +0000 ROA not before: Fri 02 Jan 2026 04:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39505 IP address blocks: 78.40.136.0/24 maxlen: 24 78.40.137.0/24 maxlen: 24 78.40.138.0/24 maxlen: 24 87.247.248.0/24 maxlen: 24 87.247.249.0/24 maxlen: 24 87.247.250.0/24 maxlen: 24 87.247.252.0/24 maxlen: 24 87.247.254.0/24 maxlen: 24 87.247.255.0/24 maxlen: 24 93.93.8.0/24 maxlen: 24 93.93.9.0/24 maxlen: 24 93.93.12.0/24 maxlen: 24 93.93.13.0/24 maxlen: 24 178.249.170.0/24 maxlen: 24 2a00:6580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2e:aa:38:c7:90:0b:26:0d:af:86:1b:bb:7f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5 Validity Not Before: Jan 2 04:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4310a3c648ed8fc3350b0f2cd526a724a1b5b8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:4a:64:f8:a7:1b:60:c1:d3:93:36:5a:40: b1:f1:6e:e2:8d:ea:5a:5e:f2:64:99:f8:04:2c:02: 51:03:53:1d:a3:06:86:c5:37:af:5c:f2:d1:50:10: 79:5e:da:31:f8:35:17:90:34:34:51:03:8a:d7:fe: fb:de:5b:fe:a9:4b:b1:23:6c:6f:6d:60:d4:e6:5a: 2b:60:65:c5:38:97:ac:72:4c:f0:0d:2e:3d:8c:42: f1:0d:95:4a:7a:15:6c:bb:6f:b1:bc:62:64:4e:3a: 61:52:a5:0c:6d:16:13:69:95:93:d2:8a:60:47:b2: 5e:3f:e0:7d:f4:7d:7c:4d:36:1c:02:4c:a9:21:45: d5:b2:b7:a3:cd:1f:f0:eb:9e:6f:7b:9b:6e:d2:3b: ec:fe:69:84:93:6a:08:c6:40:0f:77:67:e7:7e:45: bd:5d:df:da:eb:81:1e:f7:48:82:54:ba:21:6b:68: 78:18:89:85:93:75:13:d6:c4:db:8d:8b:bb:78:ac: fa:87:c2:72:27:24:39:a5:73:f6:84:3a:36:43:b8: f5:63:98:af:a5:56:73:49:89:81:35:4e:d8:a0:30: b7:12:83:ec:31:75:15:28:10:77:f0:d7:cf:c0:96: fe:71:66:6d:ee:49:6a:22:9f:13:bc:39:a6:12:8b: ad:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:10:A3:C6:48:ED:8F:C3:35:0B:0F:2C:D5:26:A7:24:A1:B5:B8:AC X509v3 Authority Key Identifier: keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/QxCjxkjtj8M1Cw8s1SanJKG1uKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.136.0-78.40.138.255 87.247.248.0-87.247.250.255 87.247.252.0/24 87.247.254.0/23 93.93.8.0/23 93.93.12.0/23 178.249.170.0/24 IPv6: 2a00:6580::/32 Signature Algorithm: sha256WithRSAEncryption a5:69:74:cf:d4:96:a4:1a:7c:1d:74:35:08:5a:1d:89:54:da: 89:a9:7b:b0:75:68:ca:01:72:e5:57:84:37:8b:f3:75:7f:66: a3:6b:33:0c:4e:b3:db:54:ec:73:55:9d:c7:1a:9e:4d:ce:0a: eb:95:47:23:76:e0:b3:07:ba:66:85:c8:b1:4a:fe:5f:bc:fb: 09:86:48:6a:82:c0:9d:07:38:2d:4e:18:69:f2:9a:6c:17:ef: 0e:a7:ad:90:12:e3:a6:47:96:0b:d2:86:1f:c2:c3:54:2c:f1: 90:78:82:a1:51:11:09:9a:8a:7d:32:ef:2e:2b:4b:1c:f2:be: c3:53:78:7b:f5:cf:5d:71:6b:da:32:19:ca:b3:1f:de:2f:4e: d7:16:06:eb:fa:76:6b:37:d1:b0:cc:81:46:84:27:61:ef:18: a3:97:fc:55:83:fa:63:76:e5:83:68:74:d9:5a:9a:d7:a0:fe: 57:45:b3:63:3b:24:8a:bb:5b:59:99:75:c1:37:df:d1:bf:88: 0f:a4:ab:c7:e0:db:36:38:bc:3a:bd:07:b2:56:69:dc:31:02: c5:9e:bf:88:96:5b:db:f1:c0:5a:10:c9:d5:5a:28:f0:2b:b7: cc:2a:18:4c:d0:c0:ea:86:c2:9e:37:9b:a7:07:12:f5:07:75: 16:e3:f8:05 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgISAZt87i6qOMeQCyYNr4Ybu3+bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlY2M0Y2YzNzI0MWNlZDE0NjdjOTE4YWEyNzZkMzg4YjBh ODJlZDUwHhcNMjYwMTAyMDQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzEwYTNjNjQ4ZWQ4ZmMzMzUwYjBmMmNkNTI2YTcyNGExYjViOGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDtKZPinG2DB05M2WkCx8W7ijepa XvJkmfgELAJRA1MdowaGxTevXPLRUBB5Xtox+DUXkDQ0UQOK1/773lv+qUuxI2xv bWDU5lorYGXFOJesckzwDS49jELxDZVKehVsu2+xvGJkTjphUqUMbRYTaZWT0opg R7JeP+B99H18TTYcAkypIUXVsrejzR/w655ve5tu0jvs/mmEk2oIxkAPd2fnfkW9 Xd/a64Ee90iCVLoha2h4GImFk3UT1sTbjYu7eKz6h8JyJyQ5pXP2hDo2Q7j1Y5iv pVZzSYmBNU7YoDC3EoPsMXUVKBB38NfPwJb+cWZt7klqIp8TvDmmEouthQIDAQAB o4ICTDCCAkgwHQYDVR0OBBYEFEMQo8ZI7Y/DNQsPLNUmpyShtbisMB8GA1UdIwQY MBaAFO7MTPNyQc7RRnyRiqJ204iwqC7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3N4TTgzSkJ6dEZHZkpHS29uYlRpTENvTHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jZjdkOTMtYTA3Ni00OWZmLTliYWYt NWEzN2FmNDM5MDRjLzEvUXhDanhranRqOE0xQ3c4czFTYW5KS0cxdUt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9jZjdkOTMtYTA3Ni00OWZmLTliYWYtNWEzN2FmNDM5MDRj LzEvN3N4TTgzSkJ6dEZHZkpHS29uYlRpTENvTHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTBABAIAATA6MAwDBANOKIgD BABOKIowDAMEA1f3+AMEAFf3+gMEAFf3/AMEAVf3/gMEAV1dCAMEAV1dDAMEALL5 qjANBAIAAjAHAwUAKgBlgDANBgkqhkiG9w0BAQsFAAOCAQEApWl0z9SWpBp8HXQ1 CFodiVTaial7sHVoygFy5VeEN4vzdX9mo2szDE6z21Tsc1WdxxqeTc4K65VHI3bg swe6ZoXIsUr+X7z7CYZIaoLAnQc4LU4YafKabBfvDqetkBLjpkeWC9KGH8LDVCzx kHiCoVERCZqKfTLvLitLHPK+w1N4e/XPXXFr2jIZyrMf3i9O1xYG6/p2azfRsMyB RoQnYe8Yo5f8VYP6Y3blg2h02Vqa16D+V0WzYzskirtbWZl1wTff0b+ID6Srx+Db Nji8Or0HslZp3DECxZ6/iJZb2/HAWhDJ1Voo8Cu3zCoYTNDA6obCnjebpwcS9Qd1 FuP4BQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:16 2026 by rpki-client