This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/q6FxLnurKw8o0dF4R7AspI8XfrE.roa File: q6FxLnurKw8o0dF4R7AspI8XfrE.roa (raw, json) Hash identifier: BFRIXGeoKum8HjwvK7gdC7ShDl3qGZt03vlhFIi2aSg= Subject key identifier: AB:A1:71:2E:7B:AB:2B:0F:28:D1:D1:78:47:B0:2C:A4:8F:17:7E:B1 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA78014BB996784FF0D1375261D287C Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/q6FxLnurKw8o0dF4R7AspI8XfrE.roa Signing time: Fri 02 Jan 2026 12:21:05 +0000 ROA not before: Fri 02 Jan 2026 12:21:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61992 IP address blocks: 84.42.118.0/24 maxlen: 24 84.42.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:80:14:bb:99:67:84:ff:0d:13:75:26:1d:28:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aba1712e7bab2b0f28d1d17847b02ca48f177eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ec:cb:49:f4:1d:45:27:08:16:c2:78:bb:1c: 55:11:6e:7f:17:c1:b4:dd:36:e4:12:fa:77:02:bb: 79:f8:e4:17:69:99:79:f3:a6:bd:b2:ae:dd:b9:e3: f5:87:dc:cf:de:5c:8f:63:e2:ff:f9:ad:e1:0c:7b: 1b:c6:92:0f:bb:91:2b:04:3a:9b:3d:bd:08:e8:77: a7:a6:38:59:4b:e3:8d:b5:2f:43:49:36:9a:22:3f: be:a1:1e:f8:92:06:96:af:5b:1f:be:04:4e:99:fb: 97:42:f1:ae:b0:89:72:8b:70:cb:96:63:7d:a4:b0: 71:7e:9d:49:12:4b:28:bf:29:6d:8a:28:b6:98:69: 34:7c:9f:49:98:2f:a6:7d:3d:31:38:db:64:20:22: cc:a7:8c:9e:96:27:66:ce:45:f4:de:d8:7c:2a:fe: cf:c2:1a:e5:d6:f6:f9:a9:68:ef:3e:21:34:39:d5: 83:19:11:89:ae:76:41:34:12:d4:9b:a2:36:88:f5: 4b:43:ad:dd:c2:0f:e3:f4:d8:9a:2a:86:02:0e:79: 78:8a:96:73:40:6f:11:f9:53:13:65:78:c7:53:b5: 0c:c7:c2:0e:08:23:bf:18:94:19:ca:da:e3:4f:07: 4a:a4:78:64:88:77:7b:b1:b8:07:9e:e8:3f:7c:29: 01:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A1:71:2E:7B:AB:2B:0F:28:D1:D1:78:47:B0:2C:A4:8F:17:7E:B1 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/q6FxLnurKw8o0dF4R7AspI8XfrE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.42.118.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:57:ba:4a:96:6c:e9:74:8a:d0:9f:dd:af:03:75:3a:63:52: 22:c5:97:62:8f:69:1e:43:52:d3:6a:9b:43:ba:1b:74:f3:fc: 1f:50:75:5f:d6:60:9f:1e:c2:83:2b:0d:76:4b:8f:52:67:45: d0:1e:ed:df:16:da:77:a0:09:fc:8c:cd:29:00:02:94:e7:9e: 73:3c:05:88:6c:a0:46:fb:68:5e:e6:91:b9:c5:4b:a9:84:4c: e2:fc:15:b1:67:61:55:65:1e:c0:3a:cc:2a:fa:0a:0e:6e:fd: bc:47:62:5d:75:1f:88:64:10:52:53:8b:94:6b:a2:d1:3a:b2: 35:ef:d8:07:b4:9e:40:86:ba:01:78:63:b2:13:a9:b7:94:79: d8:cf:7a:86:03:78:3e:b0:ff:a1:6e:70:9b:78:07:1e:4b:08: 6d:30:a0:78:d7:70:e6:15:6f:d3:58:22:a2:79:79:d9:d0:91: 76:7f:b7:c5:32:95:d8:c4:33:8e:50:bf:c8:bf:bc:40:5f:9e: 7f:99:22:87:f3:ba:70:fb:22:66:22:af:10:70:f8:37:2d:41: 4b:27:ca:9b:cd:9b:cc:d4:e6:bd:63:ae:ad:c2:39:99:34:77: 1c:a0:a8:40:a0:16:f8:8f:24:2b:21:1b:bf:54:5a:e4:7a:61: f1:88:04:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p4AUu5lnhP8NE3UmHSh8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmExNzEyZTdiYWIyYjBmMjhkMWQxNzg0N2IwMmNhNDhmMTc3ZWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlezLSfQdRScIFsJ4uxxVEW5/F8G0 3TbkEvp3Art5+OQXaZl586a9sq7dueP1h9zP3lyPY+L/+a3hDHsbxpIPu5ErBDqb Pb0I6HenpjhZS+ONtS9DSTaaIj++oR74kgaWr1sfvgROmfuXQvGusIlyi3DLlmN9 pLBxfp1JEksovyltiii2mGk0fJ9JmC+mfT0xONtkICLMp4yelidmzkX03th8Kv7P whrl1vb5qWjvPiE0OdWDGRGJrnZBNBLUm6I2iPVLQ63dwg/j9NiaKoYCDnl4ipZz QG8R+VMTZXjHU7UMx8IOCCO/GJQZytrjTwdKpHhkiHd7sbgHnug/fCkBlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKuhcS57qysPKNHReEewLKSPF36xMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvcTZGeExudXJLdzhvMGRGNFI3QXNwSThYZnJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVCp2MA0G CSqGSIb3DQEBCwUAA4IBAQCNV7pKlmzpdIrQn92vA3U6Y1IixZdij2keQ1LTaptD uht08/wfUHVf1mCfHsKDKw12S49SZ0XQHu3fFtp3oAn8jM0pAAKU555zPAWIbKBG +2he5pG5xUuphEzi/BWxZ2FVZR7AOswq+goObv28R2JddR+IZBBSU4uUa6LROrI1 79gHtJ5AhroBeGOyE6m3lHnYz3qGA3g+sP+hbnCbeAceSwhtMKB413DmFW/TWCKi eXnZ0JF2f7fFMpXYxDOOUL/Iv7xAX55/mSKH87pw+yJmIq8QcPg3LUFLJ8qbzZvM 1Oa9Y66twjmZNHccoKhAoBb4jyQrIRu/VFrkemHxiAQv -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:11 2026 by rpki-client