This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/q2qThfV9Ai5wiIn0c08uJZv3KrE.roa File: q2qThfV9Ai5wiIn0c08uJZv3KrE.roa (raw, json) Hash identifier: jiHXB6EKqhlURIcUG7IJCYAsgSe6xZGy7VNpUltYFZ8= Subject key identifier: AB:6A:93:85:F5:7D:02:2E:70:88:89:F4:73:4F:2E:25:9B:F7:2A:B1 Certificate issuer: /CN=72c293760a734018cdd2a07f1d8bd54f27df680a Certificate serial: 019B7BA52B28EF4367A9ED1AEF476B7769C6 Authority key identifier: 72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/q2qThfV9Ai5wiIn0c08uJZv3KrE.roa Signing time: Thu 01 Jan 2026 22:19:40 +0000 ROA not before: Thu 01 Jan 2026 22:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49014 IP address blocks: 194.107.232.0/21 maxlen: 21 194.107.240.0/21 maxlen: 21 2001:67c:2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:2b:28:ef:43:67:a9:ed:1a:ef:47:6b:77:69:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72c293760a734018cdd2a07f1d8bd54f27df680a Validity Not Before: Jan 1 22:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab6a9385f57d022e708889f4734f2e259bf72ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e2:08:f5:52:7e:21:90:b9:7d:9c:da:08:14: 99:57:a8:4f:2f:d0:34:32:0d:ec:f8:f5:ba:8e:ac: 23:df:6b:1e:b9:38:0e:d8:e3:b5:b7:57:6a:39:a3: 3e:2a:71:06:6b:cf:49:a1:d5:f0:2f:ff:7c:95:52: 36:56:1f:87:f6:4b:fe:ee:60:12:45:06:c2:0a:7e: ae:24:26:9f:01:85:d1:1e:88:c9:76:b0:e4:d5:77: 73:60:4e:46:9c:40:b9:df:41:ad:f9:11:14:45:21: ad:14:1d:ed:34:76:de:1b:f8:44:46:60:b2:77:37: ae:cd:4b:ae:8c:34:c6:d4:95:af:21:fc:ff:33:1c: 03:2f:44:1d:6d:45:e0:de:47:9d:0b:7c:2b:15:7d: da:8e:ee:90:4d:8c:8f:59:cc:15:ea:ab:17:c9:c8: d8:38:2a:cb:ff:90:62:3f:be:b5:18:e9:d0:d1:11: 91:dd:94:94:be:ed:e7:dd:58:21:70:74:ae:51:e1: cc:c7:67:7e:fd:f3:43:ed:2a:cd:dc:7a:f5:6c:a4: 66:fa:1f:5b:c6:2e:5a:03:c5:20:3f:b1:27:c9:97: 8e:05:57:8d:f9:5e:58:ea:59:05:a2:c9:b5:ef:74: e6:8c:ff:11:50:aa:64:87:5a:9e:3c:fe:ea:e8:66: bb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6A:93:85:F5:7D:02:2E:70:88:89:F4:73:4F:2E:25:9B:F7:2A:B1 X509v3 Authority Key Identifier: keyid:72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/q2qThfV9Ai5wiIn0c08uJZv3KrE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.107.232.0-194.107.247.255 IPv6: 2001:67c:2c0::/48 Signature Algorithm: sha256WithRSAEncryption 3f:9c:f1:03:9a:50:a1:ab:c7:b6:9f:94:ce:96:ff:dc:6e:03: 3b:e0:95:07:25:73:06:29:62:f4:93:48:e6:43:1e:f3:d8:26: ef:cd:16:8a:44:9a:5c:28:b5:a3:ef:2e:c1:52:18:ea:54:ab: 0f:cd:e3:3b:b0:c2:55:ee:ef:91:6c:51:10:97:74:00:80:6e: ef:51:e8:3b:5c:26:cc:15:fa:46:e8:41:63:32:09:3e:40:f3: 21:b9:6d:06:96:87:97:0f:14:d9:1e:e5:d3:95:ad:50:99:2d: 0d:3a:29:45:47:5a:58:3c:9a:8d:a7:4c:e4:d1:fc:4a:0f:21: 77:b4:da:af:01:5c:8a:a8:17:0f:0d:b1:3c:21:69:3b:9a:4a: 55:f0:f8:e5:4c:56:63:0b:b5:11:71:66:93:b5:2b:b7:ea:5a: cf:14:67:08:06:8b:25:dc:32:a3:e5:aa:d3:5c:8b:23:1b:e7: 71:1e:f7:1e:c2:36:3a:52:72:c0:35:d9:d4:cc:ab:7a:1f:1b: ec:f7:73:0f:65:ad:89:ad:03:c8:fb:c5:58:f1:8b:a4:ec:a2: 53:2e:82:6b:1e:af:64:91:09:b2:e3:8c:75:9c:b0:61:67:b5: 16:25:e3:c5:29:71:2b:e8:0e:de:ed:86:66:6f:74:b9:23:3e: eb:7b:f9:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt7pSso70Nnqe0a70drd2nGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYzI5Mzc2MGE3MzQwMThjZGQyYTA3ZjFkOGJkNTRmMjdk ZjY4MGEwHhcNMjYwMTAxMjIxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjZhOTM4NWY1N2QwMjJlNzA4ODg5ZjQ3MzRmMmUyNTliZjcyYWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+II9VJ+IZC5fZzaCBSZV6hPL9A0 Mg3s+PW6jqwj32seuTgO2OO1t1dqOaM+KnEGa89JodXwL/98lVI2Vh+H9kv+7mAS RQbCCn6uJCafAYXRHojJdrDk1XdzYE5GnEC530Gt+REURSGtFB3tNHbeG/hERmCy dzeuzUuujDTG1JWvIfz/MxwDL0QdbUXg3kedC3wrFX3aju6QTYyPWcwV6qsXycjY OCrL/5BiP761GOnQ0RGR3ZSUvu3n3VghcHSuUeHMx2d+/fND7SrN3Hr1bKRm+h9b xi5aA8UgP7EnyZeOBVeN+V5Y6lkFosm173TmjP8RUKpkh1qePP7q6Ga7BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtqk4X1fQIucIiJ9HNPLiWb9yqxMB8GA1UdIwQY MBaAFHLCk3YKc0AYzdKgfx2L1U8n32gKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NLVGRncHpRQmpOMHFCX0hZdlZUeWZmYUFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80NGFhYzQtNDVmNC00ZDE5LThjMTUt MzYyM2I5YjUwZjk2LzEvcTJxVGhmVjlBaTV3aUluMGMwOHVKWnYzS3JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS80NGFhYzQtNDVmNC00ZDE5LThjMTUtMzYyM2I5YjUwZjk2 LzEvY3NLVGRncHpRQmpOMHFCX0hZdlZUeWZmYUFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAPCa+gD BAPCa/AwDwQCAAIwCQMHACABBnwCwDANBgkqhkiG9w0BAQsFAAOCAQEAP5zxA5pQ oavHtp+Uzpb/3G4DO+CVByVzBili9JNI5kMe89gm780WikSaXCi1o+8uwVIY6lSr D83jO7DCVe7vkWxREJd0AIBu71HoO1wmzBX6RuhBYzIJPkDzIbltBpaHlw8U2R7l 05WtUJktDTopRUdaWDyajadM5NH8Sg8hd7TarwFciqgXDw2xPCFpO5pKVfD45UxW Ywu1EXFmk7Urt+pazxRnCAaLJdwyo+Wq01yLIxvncR73HsI2OlJywDXZ1Myreh8b 7PdzD2Wtia0DyPvFWPGLpOyiUy6Cax6vZJEJsuOMdZywYWe1FiXjxSlxK+gO3u2G Zm90uSM+63v5wg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:50 2026 by rpki-client