This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/dq4DH4ehjd_s30puz5wrDwFkAKs.roa File: dq4DH4ehjd_s30puz5wrDwFkAKs.roa (raw, json) Hash identifier: TMIQQ+KiriAq6Ko2rrLQIsSTmlAljTTcsIRFquuVlnI= Subject key identifier: 76:AE:03:1F:87:A1:8D:DF:EC:DF:4A:6E:CF:9C:2B:0F:01:64:00:AB Certificate issuer: /CN=5b9b05a93d5f3fcc5a0b0104c1b0f6d24c2cd1f6 Certificate serial: 019B7834C75EA98AAF6187573E394272A517 Authority key identifier: 5B:9B:05:A9:3D:5F:3F:CC:5A:0B:01:04:C1:B0:F6:D2:4C:2C:D1:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/dq4DH4ehjd_s30puz5wrDwFkAKs.roa Signing time: Thu 01 Jan 2026 06:18:03 +0000 ROA not before: Thu 01 Jan 2026 06:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9036 IP address blocks: 185.140.128.0/22 maxlen: 24 212.85.128.0/20 maxlen: 24 2001:4b30::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.crl rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c7:5e:a9:8a:af:61:87:57:3e:39:42:72:a5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b9b05a93d5f3fcc5a0b0104c1b0f6d24c2cd1f6 Validity Not Before: Jan 1 06:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76ae031f87a18ddfecdf4a6ecf9c2b0f016400ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ba:b1:57:f2:48:04:c6:02:c8:ae:58:6c:6e: 3a:10:82:96:43:4e:4a:7b:ba:4f:f2:83:dd:d1:1f: 50:52:1e:5b:99:f1:6a:98:aa:64:4d:e3:94:88:60: 96:14:a0:31:a0:5e:d3:96:f2:10:83:ad:83:9a:cd: 5f:47:1b:a1:58:f1:ff:d1:2f:a4:c7:5c:f5:4c:42: 1c:34:ba:cb:77:c2:37:d3:5f:81:c3:73:41:4d:7c: ab:1d:2f:c8:e4:0b:38:18:24:08:70:83:18:46:86: a6:42:41:4c:f9:95:ba:3f:ea:9e:41:bf:5c:df:66: 82:e3:fa:5f:85:cb:0f:71:f2:48:4f:65:d2:79:78: f4:0d:82:18:62:1e:f3:5b:ab:94:9a:7e:eb:99:67: 1d:bf:33:a4:2a:f7:a9:aa:87:9c:16:e8:6a:8d:8c: 00:a6:90:af:ce:4e:ad:77:e0:87:e6:8a:03:fa:30: ed:a6:37:38:d9:ed:75:e1:f2:0c:bc:d4:bd:12:4f: b6:95:4e:7e:46:a0:d7:33:f2:5e:49:e0:79:bf:5a: 3c:f3:eb:cb:b1:97:21:76:01:aa:c7:31:2b:83:91: cb:1f:04:68:99:97:42:db:20:d0:87:9f:79:c4:29: d8:50:6c:84:4f:9d:4e:cc:36:62:0f:4d:75:fb:8e: d0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AE:03:1F:87:A1:8D:DF:EC:DF:4A:6E:CF:9C:2B:0F:01:64:00:AB X509v3 Authority Key Identifier: keyid:5B:9B:05:A9:3D:5F:3F:CC:5A:0B:01:04:C1:B0:F6:D2:4C:2C:D1:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/dq4DH4ehjd_s30puz5wrDwFkAKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.128.0/22 212.85.128.0/20 IPv6: 2001:4b30::/29 Signature Algorithm: sha256WithRSAEncryption 51:8b:69:c9:64:32:c5:e7:4e:2b:14:65:78:b4:b9:8b:98:e6: 9b:c9:70:19:69:5d:86:e8:05:85:8a:8a:bd:49:48:df:36:a1: d3:99:11:f8:90:b8:03:13:63:e9:19:34:17:36:c4:36:e8:e9: 60:94:77:68:44:38:aa:40:c5:21:83:e6:f7:da:a3:87:1b:7a: c5:d3:d8:0e:b9:e7:83:a8:82:22:3d:5d:7b:a5:63:4f:c5:ad: 7e:8d:2c:79:18:d9:cd:88:80:31:11:e3:c8:c0:d1:ce:3a:14: 39:d0:69:aa:7c:dc:d6:43:db:65:0d:0a:cf:3e:c7:94:31:21: 78:08:50:e2:08:df:18:87:36:5f:1f:21:8d:53:2c:87:d7:f5: d8:0a:61:9a:e8:1a:fd:94:67:61:d5:e1:92:f0:ae:40:90:c1: 22:93:1a:3b:7f:bb:0b:70:90:92:4f:ea:84:8f:69:bb:27:24: 31:ae:06:ea:81:82:5c:c7:8f:92:25:89:e8:b2:f4:2e:a4:4b: ff:37:86:50:5f:4a:04:14:11:f9:9f:77:85:b4:97:47:28:61: 78:13:ae:fc:e7:b1:44:fd:0a:10:0a:1c:ff:ca:45:c6:03:6f: d5:c6:92:85:4d:a8:db:38:27:1b:30:ee:b9:74:16:69:be:1d: 7f:e9:b7:17 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NMdeqYqvYYdXPjlCcqUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViOWIwNWE5M2Q1ZjNmY2M1YTBiMDEwNGMxYjBmNmQyNGMy Y2QxZjYwHhcNMjYwMTAxMDYxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmFlMDMxZjg3YTE4ZGRmZWNkZjRhNmVjZjljMmIwZjAxNjQwMGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbqxV/JIBMYCyK5YbG46EIKWQ05K e7pP8oPd0R9QUh5bmfFqmKpkTeOUiGCWFKAxoF7TlvIQg62Dms1fRxuhWPH/0S+k x1z1TEIcNLrLd8I301+Bw3NBTXyrHS/I5As4GCQIcIMYRoamQkFM+ZW6P+qeQb9c 32aC4/pfhcsPcfJIT2XSeXj0DYIYYh7zW6uUmn7rmWcdvzOkKvepqoecFuhqjYwA ppCvzk6td+CH5ooD+jDtpjc42e114fIMvNS9Ek+2lU5+RqDXM/JeSeB5v1o88+vL sZchdgGqxzErg5HLHwRomZdC2yDQh595xCnYUGyET51OzDZiD011+47QZQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHauAx+HoY3f7N9Kbs+cKw8BZACrMB8GA1UdIwQY MBaAFFubBak9Xz/MWgsBBMGw9tJMLNH2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzVzRnFUMWZQOHhhQ3dFRXdiRDIwa3dzMGZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi82MWUxNmEtZGI3OS00ZTA3LWExOWIt YWU3NjJjYTJhYmQwLzEvZHE0REg0ZWhqZF9zMzBwdXo1d3JEd0ZrQUtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi82MWUxNmEtZGI3OS00ZTA3LWExOWItYWU3NjJjYTJhYmQw LzEvVzVzRnFUMWZQOHhhQ3dFRXdiRDIwa3dzMGZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuYyAAwQE 1FWAMA0EAgACMAcDBQMgAUswMA0GCSqGSIb3DQEBCwUAA4IBAQBRi2nJZDLF504r FGV4tLmLmOabyXAZaV2G6AWFioq9SUjfNqHTmRH4kLgDE2PpGTQXNsQ26OlglHdo RDiqQMUhg+b32qOHG3rF09gOueeDqIIiPV17pWNPxa1+jSx5GNnNiIAxEePIwNHO OhQ50GmqfNzWQ9tlDQrPPseUMSF4CFDiCN8YhzZfHyGNUyyH1/XYCmGa6Br9lGdh 1eGS8K5AkMEikxo7f7sLcJCST+qEj2m7JyQxrgbqgYJcx4+SJYnosvQupEv/N4ZQ X0oEFBH5n3eFtJdHKGF4E67857FE/QoQChz/ykXGA2/VxpKFTajbOCcbMO65dBZp vh1/6bcX -----END CERTIFICATE-----Generated at Fri Jan 2 16:26:02 2026 by rpki-client