This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Q6Yu0aXVErAsWkLwSAwsbIWuTm8.roa File: Q6Yu0aXVErAsWkLwSAwsbIWuTm8.roa (raw, json) Hash identifier: f6km1wbBN7g6SaA9H4M3i88KgZCDCH5ADKZbLTUlU28= Subject key identifier: 43:A6:2E:D1:A5:D5:12:B0:2C:5A:42:F0:48:0C:2C:6C:85:AE:4E:6F Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA76AC0090238E204F26CDF270709D1 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Q6Yu0aXVErAsWkLwSAwsbIWuTm8.roa Signing time: Fri 02 Jan 2026 12:20:59 +0000 ROA not before: Fri 02 Jan 2026 12:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33934 IP address blocks: 83.239.128.0/18 maxlen: 18 83.239.128.0/22 maxlen: 22 83.239.132.0/24 maxlen: 24 83.239.138.0/23 maxlen: 23 83.239.142.0/23 maxlen: 23 83.239.144.0/24 maxlen: 24 83.239.151.0/24 maxlen: 24 83.239.152.0/22 maxlen: 22 83.239.156.0/23 maxlen: 23 83.239.158.0/24 maxlen: 24 83.239.161.0/24 maxlen: 24 83.239.162.0/23 maxlen: 23 83.239.164.0/24 maxlen: 24 83.239.167.0/24 maxlen: 24 83.239.168.0/23 maxlen: 23 83.239.172.0/22 maxlen: 22 83.239.176.0/24 maxlen: 24 83.239.179.0/24 maxlen: 24 83.239.180.0/22 maxlen: 22 83.239.184.0/22 maxlen: 22 83.239.188.0/23 maxlen: 23 83.239.191.0/24 maxlen: 24 85.172.112.0/20 maxlen: 20 85.172.120.0/23 maxlen: 23 85.172.122.0/24 maxlen: 24 85.172.126.0/23 maxlen: 23 85.172.168.0/22 maxlen: 22 85.172.170.0/24 maxlen: 24 85.173.64.0/19 maxlen: 19 85.173.80.0/22 maxlen: 22 85.173.84.0/23 maxlen: 23 85.173.192.0/19 maxlen: 19 85.173.208.0/23 maxlen: 23 85.174.0.0/17 maxlen: 17 85.174.63.0/24 maxlen: 24 85.174.69.0/24 maxlen: 24 85.174.70.0/23 maxlen: 23 85.174.80.0/22 maxlen: 22 85.174.84.0/24 maxlen: 24 85.174.100.0/24 maxlen: 24 94.233.0.0/17 maxlen: 17 94.233.20.0/24 maxlen: 24 94.233.23.0/24 maxlen: 24 94.233.24.0/22 maxlen: 22 94.233.28.0/24 maxlen: 24 94.233.30.0/23 maxlen: 23 94.233.32.0/21 maxlen: 21 94.233.44.0/23 maxlen: 23 94.233.47.0/24 maxlen: 24 94.233.48.0/21 maxlen: 21 94.233.66.0/23 maxlen: 23 94.233.70.0/24 maxlen: 24 94.233.74.0/23 maxlen: 23 94.233.76.0/23 maxlen: 23 94.233.78.0/24 maxlen: 24 94.233.85.0/24 maxlen: 24 94.233.87.0/24 maxlen: 24 94.233.106.0/24 maxlen: 24 94.233.107.0/24 maxlen: 24 94.233.126.0/23 maxlen: 23 178.34.64.0/22 maxlen: 22 178.35.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:6a:c0:09:02:38:e2:04:f2:6c:df:27:07:09:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43a62ed1a5d512b02c5a42f0480c2c6c85ae4e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:72:12:7a:0c:44:c3:a9:e6:97:69:2a:f1:96: 89:be:e5:a7:f5:6e:e3:6f:ad:cc:c7:57:99:cc:ff: 18:f4:78:50:89:db:ae:86:b5:6a:7e:d8:e7:bc:fb: 52:e0:2d:7e:fa:15:25:9b:8f:9f:f6:b2:1b:48:49: 47:0a:7d:36:fe:cb:8f:ec:cb:78:95:53:c7:a6:f1: 3d:db:40:12:06:4d:35:8f:ba:69:08:16:0d:aa:d2: cc:b2:9b:4e:c0:e5:86:69:33:70:d1:4e:94:ff:f0: c6:4b:44:a7:4c:2e:09:19:ed:ad:e6:16:c8:e5:31: 84:e0:f1:02:fd:be:86:f3:b7:66:3e:17:be:d3:c2: fa:af:45:bd:65:96:c3:f3:a0:ef:52:03:1a:9e:ec: ec:07:27:ff:dc:8d:f9:49:6d:a0:b7:b2:3a:ce:76: d0:16:89:fb:e6:64:ff:85:eb:b7:0d:ad:a6:f3:0b: c1:b6:63:2d:56:e6:84:6e:db:94:a0:2f:99:db:e8: 0b:df:20:3b:98:c4:95:0e:df:a0:a9:e0:6b:1a:2c: e8:f3:6f:52:fd:d1:4c:0f:92:77:8c:aa:0a:d5:7a: b4:ac:ec:9d:92:28:ae:01:6f:59:f7:21:8f:2e:6f: 10:b2:de:91:24:81:09:60:bc:7a:b2:4d:9f:58:88: 7e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A6:2E:D1:A5:D5:12:B0:2C:5A:42:F0:48:0C:2C:6C:85:AE:4E:6F X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Q6Yu0aXVErAsWkLwSAwsbIWuTm8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.239.128.0/18 85.172.112.0/20 85.172.168.0/22 85.173.64.0/19 85.173.192.0/19 85.174.0.0/17 94.233.0.0/17 178.34.64.0/22 178.35.128.0/18 Signature Algorithm: sha256WithRSAEncryption 5a:eb:6b:d3:5b:4e:f2:b6:cf:65:69:2f:8d:c2:a3:65:c1:7e: 41:66:8f:e0:06:32:dd:f9:7c:3b:7e:13:85:d6:88:6e:77:ac: 45:68:00:56:44:40:c4:7f:b8:26:03:bd:55:47:2d:72:8d:91: a8:ad:e9:fd:4b:f8:29:95:99:20:cb:8c:ac:ba:32:84:fc:1d: 01:7f:8c:dc:2b:de:58:76:a9:93:cc:eb:d2:a3:d0:e7:79:94: 21:7c:8c:d2:47:eb:bc:cb:12:2d:ec:bc:07:c7:72:d8:20:fe: 8f:7e:34:0a:e6:02:43:80:db:fc:a9:d0:86:1d:bf:74:b9:cc: ba:41:a2:cf:b5:35:8b:2e:73:86:d4:b9:1f:ab:01:5f:b7:7e: ec:be:fc:c2:52:a3:0a:d7:e4:62:18:b9:4c:66:43:b4:1c:6d: 88:c9:6f:3c:5f:bd:fc:b8:d1:b5:32:f9:45:fd:a9:4e:9c:c0: d6:b9:67:24:8b:2e:33:aa:98:13:4c:18:03:22:46:ec:2d:95: 44:29:0e:eb:ca:9a:82:c0:7d:f6:c2:c2:33:e1:71:ac:26:73: 2b:42:e9:b0:5e:12:46:3d:23:b0:96:25:d1:33:7d:3a:fa:12: 13:47:18:d4:a2:e6:c9:8d:f6:b5:cf:58:23:fe:0d:49:f2:4e: e2:b6:97:90 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt+p2rACQI44gTybN8nBwnRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2E2MmVkMWE1ZDUxMmIwMmM1YTQyZjA0ODBjMmM2Yzg1YWU0ZTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3ISegxEw6nml2kq8ZaJvuWn9W7j b63Mx1eZzP8Y9HhQiduuhrVqftjnvPtS4C1++hUlm4+f9rIbSElHCn02/suP7Mt4 lVPHpvE920ASBk01j7ppCBYNqtLMsptOwOWGaTNw0U6U//DGS0SnTC4JGe2t5hbI 5TGE4PEC/b6G87dmPhe+08L6r0W9ZZbD86DvUgManuzsByf/3I35SW2gt7I6znbQ Fon75mT/heu3Da2m8wvBtmMtVuaEbtuUoC+Z2+gL3yA7mMSVDt+gqeBrGizo829S /dFMD5J3jKoK1Xq0rOydkiiuAW9Z9yGPLm8Qst6RJIEJYLx6sk2fWIh+zQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFEOmLtGl1RKwLFpC8EgMLGyFrk5vMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvUTZZdTBhWFZFckFzV2tMd1NBd3NiSVd1VG04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQGU++AAwQE VaxwAwQCVayoAwQFVa1AAwQFVa3AAwQHVa4AAwQHXukAAwQCsiJAAwQGsiOAMA0G CSqGSIb3DQEBCwUAA4IBAQBa62vTW07yts9laS+NwqNlwX5BZo/gBjLd+Xw7fhOF 1ohud6xFaABWREDEf7gmA71VRy1yjZGoren9S/gplZkgy4ysujKE/B0Bf4zcK95Y dqmTzOvSo9DneZQhfIzSR+u8yxIt7LwHx3LYIP6PfjQK5gJDgNv8qdCGHb90ucy6 QaLPtTWLLnOG1LkfqwFft37svvzCUqMK1+RiGLlMZkO0HG2IyW88X738uNG1MvlF /alOnMDWuWckiy4zqpgTTBgDIkbsLZVEKQ7rypqCwH32wsIz4XGsJnMrQumwXhJG PSOwliXRM306+hITRxjUoubJjfa1z1gj/g1J8k7itpeQ -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:38 2026 by rpki-client