This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/Rq6n0wn8dyPV5_HTJugYhd-Dzo8.roa File: Rq6n0wn8dyPV5_HTJugYhd-Dzo8.roa (raw, json) Hash identifier: B1yLmIaEy7gzJ9ApWkF+cDfAuxmElB48nCkynuC20/c= Subject key identifier: 46:AE:A7:D3:09:FC:77:23:D5:E7:F1:D3:26:E8:18:85:DF:83:CE:8F Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a Certificate serial: 019B6A3FB14A43AF5490AAAEF39CCC6AF789 Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/Rq6n0wn8dyPV5_HTJugYhd-Dzo8.roa Signing time: Mon 29 Dec 2025 13:15:17 +0000 ROA not before: Mon 29 Dec 2025 13:15:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 397368 IP address blocks: 74.122.26.0/24 maxlen: 24 74.122.27.0/24 maxlen: 24 103.124.182.0/23 maxlen: 23 103.250.172.0/22 maxlen: 22 104.167.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 04:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:3f:b1:4a:43:af:54:90:aa:ae:f3:9c:cc:6a:f7:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a Validity Not Before: Dec 29 13:15:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=46aea7d309fc7723d5e7f1d326e81885df83ce8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:0d:14:bc:af:7e:51:6e:70:ab:be:64:b2: ca:46:dc:bb:cb:92:da:d8:f7:4d:5d:35:9a:ae:43: 05:e2:4e:ad:52:76:44:31:b6:01:04:49:c4:9b:cb: 14:10:7a:a4:3f:fc:13:ce:6c:01:88:fe:a7:8d:66: ca:90:58:4f:8c:3b:d3:58:f5:24:82:a7:25:c6:8b: 8f:d3:67:ee:d4:df:a8:37:61:58:f0:15:d3:c6:9c: 23:ce:ce:b5:89:e4:9b:0d:c0:94:f5:a2:52:7f:93: 5b:ad:f7:eb:ed:8c:43:81:c7:8a:36:1b:b8:f3:6f: f0:fc:c3:e2:cc:4e:93:06:0b:91:7b:0f:b2:4d:ba: 9e:a0:82:33:97:e1:b6:4d:70:85:12:41:4a:38:c9: 30:e2:54:22:00:52:54:1d:74:34:07:82:69:ac:23: 1a:01:b6:6c:1c:3d:72:bb:57:b3:3a:c1:a0:52:5f: 75:64:8a:a0:4b:c4:18:8e:6e:6a:f5:22:41:f0:60: 79:ce:69:63:65:f1:be:2f:ac:3d:2a:52:2e:5d:72: 41:62:d2:bf:33:b8:bf:e0:ca:af:36:3f:43:0b:0d: be:2d:01:ee:0c:2b:7c:85:44:36:88:d3:c7:13:4d: c9:13:14:d6:8a:aa:6c:b2:ee:02:09:77:3d:4e:f6: d6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AE:A7:D3:09:FC:77:23:D5:E7:F1:D3:26:E8:18:85:DF:83:CE:8F X509v3 Authority Key Identifier: keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/Rq6n0wn8dyPV5_HTJugYhd-Dzo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.122.26.0/23 103.124.182.0/23 103.250.172.0/22 104.167.17.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:7f:fc:5a:c9:32:27:db:d5:35:6b:e4:3a:a9:a6:0d:27:4b: 43:10:4d:75:84:7b:d3:31:9a:55:88:b8:2a:49:0f:4a:d6:90: ae:5f:0e:68:06:cd:e3:13:30:69:ce:57:91:8c:bd:80:de:64: 6b:3e:98:02:6a:99:93:3d:52:28:d7:4d:07:8b:0a:30:97:fd: ac:fb:2a:aa:15:9e:0c:f7:ad:eb:83:df:02:46:cb:ae:69:de: 3e:28:10:f7:f1:59:bd:d5:f1:d7:ea:23:8b:ed:c2:75:13:5e: 42:f5:1a:c8:0b:32:a7:65:42:41:92:71:43:8d:40:d3:47:88: e9:9f:b1:45:b1:d9:0f:6b:ef:bc:52:f5:57:eb:a1:63:5c:06: f2:25:a0:2b:79:09:d4:0f:0c:d2:d1:7e:32:8d:2c:64:14:8b: 60:3a:5e:78:0c:25:53:db:57:5e:f6:4c:0b:4b:3f:e1:20:44: 97:45:94:c5:12:39:f1:20:c1:91:85:95:33:44:c6:96:01:b7: 34:67:77:80:a1:2c:c8:37:97:64:6c:9e:3a:bd:3c:81:97:fa: 78:17:89:c6:97:d6:0c:7d:98:08:2f:8a:04:6c:83:b0:bf:17: 52:f1:43:be:ef:2c:42:34:1a:31:60:42:fe:3e:8e:cf:06:15: f8:77:0f:a5 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZtqP7FKQ69UkKqu85zMaveJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MDRjYzBlMDM4ZWIwZTY5N2VjNmU3YWU0OWQwMjg2MTQ2 ZTBjMWEwHhcNMjUxMjI5MTMxNTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmFlYTdkMzA5ZmM3NzIzZDVlN2YxZDMyNmU4MTg4NWRmODNjZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9INFLyvflFucKu+ZLLKRty7y5La 2PdNXTWarkMF4k6tUnZEMbYBBEnEm8sUEHqkP/wTzmwBiP6njWbKkFhPjDvTWPUk gqclxouP02fu1N+oN2FY8BXTxpwjzs61ieSbDcCU9aJSf5Nbrffr7YxDgceKNhu4 82/w/MPizE6TBguRew+yTbqeoIIzl+G2TXCFEkFKOMkw4lQiAFJUHXQ0B4JprCMa AbZsHD1yu1ezOsGgUl91ZIqgS8QYjm5q9SJB8GB5zmljZfG+L6w9KlIuXXJBYtK/ M7i/4MqvNj9DCw2+LQHuDCt8hUQ2iNPHE03JExTWiqpssu4CCXc9TvbW2QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEaup9MJ/Hcj1efx0yboGIXfg86PMB8GA1UdIwQY MBaAFLQEzA4DjrDml+xueuSdAoYUbgwaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEFUTURnT09zT2FYN0c1NjVKMENoaFJ1REJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hYmUxNmItOTJjYy00OGUzLWI1Yjkt ODZhMmYwNjdiNGU4LzEvUnE2bjB3bjhkeVBWNV9IVEp1Z1loZC1Eem84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9hYmUxNmItOTJjYy00OGUzLWI1YjktODZhMmYwNjdiNGU4 LzEvdEFUTURnT09zT2FYN0c1NjVKMENoaFJ1REJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBSnoaAwQB Z3y2AwQCZ/qsAwQAaKcRMA0GCSqGSIb3DQEBCwUAA4IBAQCPf/xayTIn29U1a+Q6 qaYNJ0tDEE11hHvTMZpViLgqSQ9K1pCuXw5oBs3jEzBpzleRjL2A3mRrPpgCapmT PVIo100Hiwowl/2s+yqqFZ4M963rg98CRsuuad4+KBD38Vm91fHX6iOL7cJ1E15C 9RrICzKnZUJBknFDjUDTR4jpn7FFsdkPa++8UvVX66FjXAbyJaAreQnUDwzS0X4y jSxkFItgOl54DCVT21de9kwLSz/hIESXRZTFEjnxIMGRhZUzRMaWAbc0Z3eAoSzI N5dkbJ46vTyBl/p4F4nGl9YMfZgIL4oEbIOwvxdS8UO+7yxCNBoxYEL+Po7PBhX4 dw+l -----END CERTIFICATE-----Generated at Thu Jan 1 12:16:42 2026 by rpki-client