This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/QE8bcggi0VZyHRPBfYdhoFDqJM8.roa File: QE8bcggi0VZyHRPBfYdhoFDqJM8.roa (raw, json) Hash identifier: wboN+pw+KvvkFtiFgOQIE2+tkc1MrMcN64l5TflOk5g= Subject key identifier: 40:4F:1B:72:08:22:D1:56:72:1D:13:C1:7D:87:61:A0:50:EA:24:CF Certificate issuer: /CN=4e72ac71eb4507ac0a652a54598dae451fe33f47 Certificate serial: 019B7EA72FCC216BF16E531E131A4019FA1F Authority key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/QE8bcggi0VZyHRPBfYdhoFDqJM8.roa Signing time: Fri 02 Jan 2026 12:20:44 +0000 ROA not before: Fri 02 Jan 2026 12:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48431 IP address blocks: 95.80.128.0/18 maxlen: 18 95.80.128.0/20 maxlen: 20 95.80.144.0/20 maxlen: 20 95.80.190.0/24 maxlen: 24 185.57.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:2f:cc:21:6b:f1:6e:53:1e:13:1a:40:19:fa:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47 Validity Not Before: Jan 2 12:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=404f1b720822d156721d13c17d8761a050ea24cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a5:6b:e6:7e:b0:fa:e3:a5:71:a6:a3:a0:0e: 71:23:47:1f:53:31:07:9f:e3:13:53:ba:c7:79:c5: 86:36:d8:03:ec:87:24:04:fd:6f:5e:01:ad:ab:07: 90:a9:9e:09:6c:cf:e8:e4:65:8a:7f:7f:ac:61:d3: 40:d7:b9:bf:82:28:3f:09:16:88:41:6f:91:a3:d1: b5:59:f5:04:42:e7:65:df:1b:fa:c5:8d:be:ca:f4: c2:62:89:f3:4a:36:3e:7c:e4:ee:39:58:0f:de:56: 80:01:22:e8:bc:eb:3a:63:e6:69:9d:07:ae:4e:53: 5a:1a:54:2f:c0:52:87:d7:c7:2d:bb:0b:dc:47:e6: 4b:66:19:05:1e:95:c6:81:61:fe:7d:24:29:50:d7: 83:99:2a:74:ea:42:7f:dc:9f:69:85:9f:d4:b7:8e: 77:5c:71:17:26:3b:93:a4:85:c5:5e:b4:a5:1a:bf: 95:28:8d:b6:08:8f:ff:52:02:93:c8:e3:f0:68:05: 0a:a8:78:4c:01:ea:fb:ba:cb:71:4a:6e:b4:36:6c: a9:f2:4a:0b:32:22:28:07:46:a8:b3:12:48:8c:1e: c7:64:b0:ec:75:23:eb:bd:a4:60:b7:0b:83:a6:aa: 7d:95:eb:a6:4e:6a:fc:cb:12:48:3a:6f:89:52:f8: aa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4F:1B:72:08:22:D1:56:72:1D:13:C1:7D:87:61:A0:50:EA:24:CF X509v3 Authority Key Identifier: keyid:4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/QE8bcggi0VZyHRPBfYdhoFDqJM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.80.128.0/18 185.57.132.0/22 Signature Algorithm: sha256WithRSAEncryption 63:c6:f1:21:f6:b2:6a:aa:a3:83:65:b7:eb:fd:6d:29:e3:58: de:e6:6d:49:4f:11:1a:a2:df:f5:53:4a:e3:a3:a7:52:b0:ea: 57:f0:3a:5b:62:8c:1b:54:7e:43:d0:66:e0:7f:9a:e6:50:53: 8f:84:47:5f:e4:33:cf:41:a9:a1:6a:5b:f8:9c:ea:b5:03:98: d3:ca:3f:a8:e1:bf:89:db:dd:2a:90:f4:a2:6f:4a:64:9d:b2: 4d:7b:85:92:ea:63:6c:ed:b4:53:17:d6:f5:3a:7b:fb:f0:4f: 8d:aa:d4:1d:22:90:7e:2d:51:80:69:39:8e:91:ab:9d:a0:d0: 9a:10:8d:7e:81:d5:f3:31:32:c9:20:bb:38:4f:9e:41:d3:b9: 14:c7:f0:a4:23:27:4e:8e:cf:28:b8:fc:cc:4b:12:db:16:fc: 76:f7:7d:f4:24:9b:90:58:04:29:d0:18:05:0f:cb:a0:41:f2: 71:65:8a:d8:08:92:22:da:5c:26:29:61:4c:13:fe:7a:aa:11: 29:4d:8e:c7:ab:ce:22:5c:8f:4c:ee:43:fb:2d:9e:20:6d:96: 14:7a:55:3e:1c:9c:d4:10:17:86:6d:97:4e:8a:be:51:5e:c0: e3:aa:96:f7:c7:41:89:8b:60:71:11:c6:89:d2:e1:7d:8a:18: 8e:6b:a1:c6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+py/MIWvxblMeExpAGfofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNzJhYzcxZWI0NTA3YWMwYTY1MmE1NDU5OGRhZTQ1MWZl MzNmNDcwHhcNMjYwMTAyMTIyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDRmMWI3MjA4MjJkMTU2NzIxZDEzYzE3ZDg3NjFhMDUwZWEyNGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqVr5n6w+uOlcaajoA5xI0cfUzEH n+MTU7rHecWGNtgD7IckBP1vXgGtqweQqZ4JbM/o5GWKf3+sYdNA17m/gig/CRaI QW+Ro9G1WfUEQudl3xv6xY2+yvTCYonzSjY+fOTuOVgP3laAASLovOs6Y+ZpnQeu TlNaGlQvwFKH18ctuwvcR+ZLZhkFHpXGgWH+fSQpUNeDmSp06kJ/3J9phZ/Ut453 XHEXJjuTpIXFXrSlGr+VKI22CI//UgKTyOPwaAUKqHhMAer7ustxSm60Nmyp8koL MiIoB0aosxJIjB7HZLDsdSPrvaRgtwuDpqp9leumTmr8yxJIOm+JUviqeQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEBPG3IIItFWch0TwX2HYaBQ6iTPMB8GA1UdIwQY MBaAFE5yrHHrRQesCmUqVFmNrkUf4z9HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG5Lc2NldEZCNndLWlNwVVdZMnVSUl9qUDBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMDc1MjMtODM5Mi00N2Y1LTgyYjMt MzBjNDMwYTM5OGU2LzEvUUU4YmNnZ2kwVlp5SFJQQmZZZGhvRkRxSk04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hMDc1MjMtODM5Mi00N2Y1LTgyYjMtMzBjNDMwYTM5OGU2 LzEvVG5Lc2NldEZCNndLWlNwVVdZMnVSUl9qUDBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGX1CAAwQC uTmEMA0GCSqGSIb3DQEBCwUAA4IBAQBjxvEh9rJqqqODZbfr/W0p41je5m1JTxEa ot/1U0rjo6dSsOpX8DpbYowbVH5D0Gbgf5rmUFOPhEdf5DPPQamhalv4nOq1A5jT yj+o4b+J290qkPSib0pknbJNe4WS6mNs7bRTF9b1Onv78E+NqtQdIpB+LVGAaTmO kaudoNCaEI1+gdXzMTLJILs4T55B07kUx/CkIydOjs8ouPzMSxLbFvx29330JJuQ WAQp0BgFD8ugQfJxZYrYCJIi2lwmKWFME/56qhEpTY7Hq84iXI9M7kP7LZ4gbZYU elU+HJzUEBeGbZdOir5RXsDjqpb3x0GJi2BxEcaJ0uF9ihiOa6HG -----END CERTIFICATE-----Generated at Mon Feb 9 18:21:43 2026 by rpki-client