This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/vqnq2rv-6PMsbDy5k3RKwL2xw98.roa File: vqnq2rv-6PMsbDy5k3RKwL2xw98.roa (raw, json) Hash identifier: 5AhTA+RnVsEo/k44da/diRTwbIz60x7AY2p3h1jDzvE= Subject key identifier: BE:A9:EA:DA:BB:FE:E8:F3:2C:6C:3C:B9:93:74:4A:C0:BD:B1:C3:DF Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019B7EA52E8D52FA487DAF9068B9DD21F0ED Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/vqnq2rv-6PMsbDy5k3RKwL2xw98.roa Signing time: Fri 02 Jan 2026 12:18:33 +0000 ROA not before: Fri 02 Jan 2026 12:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41280 IP address blocks: 83.222.163.0/24 maxlen: 24 83.222.164.0/24 maxlen: 24 83.222.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:2e:8d:52:fa:48:7d:af:90:68:b9:dd:21:f0:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Jan 2 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bea9eadabbfee8f32c6c3cb993744ac0bdb1c3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:41:41:76:1a:92:ec:8d:46:32:b6:9e:c8:fd: 3e:47:6a:4c:dd:a1:c8:33:66:44:84:9d:63:78:eb: 3d:47:d7:1f:7a:28:08:a6:c3:a8:9c:29:97:56:e8: f3:30:51:ae:fd:3f:0b:2e:1c:2c:61:9b:0c:3b:2f: d6:a5:68:de:b2:e5:e9:84:e2:61:a5:22:a2:15:ab: d2:26:b8:9d:b8:6b:af:34:d0:b9:ae:ef:35:9b:85: 02:cf:a8:f3:e8:e1:f9:45:fd:6e:3a:02:90:22:b1: b5:ea:26:70:6c:e9:1a:8b:0b:f1:51:3b:8b:10:44: 01:34:43:97:9d:06:e8:82:80:da:a9:07:bb:c0:67: cb:cf:39:84:9e:2f:f7:6b:40:9c:56:4f:52:10:fc: c3:a0:bb:34:bb:8c:27:b0:8e:c6:87:f7:54:cf:f4: 3b:12:7b:a4:15:88:d3:18:6e:f9:9f:0b:fd:04:d4: d1:37:29:a2:da:02:a8:2c:c0:31:ba:6a:d3:09:3a: 8d:5f:23:6a:cf:69:c4:2a:f0:00:c0:cd:cc:76:76: d7:7a:10:e9:9e:3c:79:83:bf:61:67:16:f6:d4:bd: ab:8b:49:bf:5e:bd:59:88:5d:1a:81:b2:00:1d:20: 30:dc:9a:2a:b5:15:e3:5e:e4:37:44:e3:51:5d:67: 62:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A9:EA:DA:BB:FE:E8:F3:2C:6C:3C:B9:93:74:4A:C0:BD:B1:C3:DF X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/vqnq2rv-6PMsbDy5k3RKwL2xw98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.222.163.0-83.222.165.255 Signature Algorithm: sha256WithRSAEncryption 59:ee:90:bf:cf:d6:a4:fe:b5:42:74:2f:8e:4e:c8:50:4d:78: 86:82:1a:a8:d1:81:88:3d:1a:2c:2f:3c:1d:5a:b4:e9:36:bf: b6:07:8e:f6:8d:02:51:4a:59:cf:90:dd:a7:66:aa:60:b0:e3: 40:fd:73:73:02:47:83:f7:ed:51:e6:84:9e:b1:60:57:d1:c8: f1:e9:84:0f:ca:d9:2e:fb:30:92:24:41:c7:85:69:f0:20:ac: 56:e2:9d:29:15:1b:0d:19:4c:b0:de:2a:92:d0:ad:a0:57:c3: 4f:7e:bc:61:10:a9:12:e0:52:44:81:69:b2:6f:51:98:9c:2e: f8:6a:ea:a3:7f:28:f8:ed:14:7f:55:23:5c:31:7a:97:8e:23: a1:bf:51:26:f1:b9:f3:44:27:bb:e7:7b:e2:b0:58:47:05:ba: 08:ff:fe:e3:c5:6d:e3:47:95:f3:42:48:9c:2a:a8:ba:17:d4: 3d:f6:a1:b4:32:2a:cd:4a:ba:d3:9e:55:98:1b:ea:7e:28:b8: 32:37:56:c7:05:70:d7:c5:07:3a:22:9c:2f:06:6e:1d:51:57: 50:d2:72:61:6b:af:a4:78:f7:86:50:8f:c5:b3:cb:2a:e7:f7: 22:64:f5:19:a8:be:31:01:61:93:99:74:32:83:f5:7e:81:a2: f5:13:02:a4 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+pS6NUvpIfa+QaLndIfDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwMTAyMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWE5ZWFkYWJiZmVlOGYzMmM2YzNjYjk5Mzc0NGFjMGJkYjFjM2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0FBdhqS7I1GMraeyP0+R2pM3aHI M2ZEhJ1jeOs9R9cfeigIpsOonCmXVujzMFGu/T8LLhwsYZsMOy/WpWjesuXphOJh pSKiFavSJriduGuvNNC5ru81m4UCz6jz6OH5Rf1uOgKQIrG16iZwbOkaiwvxUTuL EEQBNEOXnQbogoDaqQe7wGfLzzmEni/3a0CcVk9SEPzDoLs0u4wnsI7Gh/dUz/Q7 EnukFYjTGG75nwv9BNTRNymi2gKoLMAxumrTCTqNXyNqz2nEKvAAwM3MdnbXehDp njx5g79hZxb21L2ri0m/Xr1ZiF0agbIAHSAw3JoqtRXjXuQ3RONRXWdiJwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFL6p6tq7/ujzLGw8uZN0SsC9scPfMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvdnFucTJydi02UE1zYkR5NWszUkt3TDJ4dzk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABT3qMD BAFT3qQwDQYJKoZIhvcNAQELBQADggEBAFnukL/P1qT+tUJ0L45OyFBNeIaCGqjR gYg9GiwvPB1atOk2v7YHjvaNAlFKWc+Q3admqmCw40D9c3MCR4P37VHmhJ6xYFfR yPHphA/K2S77MJIkQceFafAgrFbinSkVGw0ZTLDeKpLQraBXw09+vGEQqRLgUkSB abJvUZicLvhq6qN/KPjtFH9VI1wxepeOI6G/USbxufNEJ7vne+KwWEcFugj//uPF beNHlfNCSJwqqLoX1D32obQyKs1KutOeVZgb6n4ouDI3VscFcNfFBzoinC8Gbh1R V1DScmFrr6R494ZQj8Wzyyrn9yJk9RmovjEBYZOZdDKD9X6BovUTAqQ= -----END CERTIFICATE-----Generated at Tue Jan 20 03:37:11 2026 by rpki-client