This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/QP9CNlQFuVB9wS0BW21smKX3lBU.roa File: QP9CNlQFuVB9wS0BW21smKX3lBU.roa (raw, json) Hash identifier: dwNtwT/3EY1R/q2zrzRe6Xma12Bkc4BEFlUrU3pbm+Q= Subject key identifier: 40:FF:42:36:54:05:B9:50:7D:C1:2D:01:5B:6D:6C:98:A5:F7:94:15 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019B7C135E454A00F661AB6A0BC17F67A7DA Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/QP9CNlQFuVB9wS0BW21smKX3lBU.roa Signing time: Fri 02 Jan 2026 00:20:02 +0000 ROA not before: Fri 02 Jan 2026 00:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48955 IP address blocks: 89.45.66.0/24 maxlen: 24 93.113.205.0/24 maxlen: 24 188.212.5.0/24 maxlen: 24 188.213.1.0/24 maxlen: 24 188.214.150.0/24 maxlen: 24 188.214.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5e:45:4a:00:f6:61:ab:6a:0b:c1:7f:67:a7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Jan 2 00:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40ff42365405b9507dc12d015b6d6c98a5f79415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e7:6f:85:00:e1:ea:b2:e1:e2:65:84:b2:c2: fc:2f:93:5b:78:03:27:41:19:4c:66:b0:2c:0e:01: e0:28:c1:85:da:dc:e0:50:21:37:11:f5:32:2b:70: fa:dc:b1:fe:b5:50:25:5c:3c:cf:95:94:88:08:a4: 0c:c7:9f:4f:46:8f:a0:f7:f0:9f:86:65:c1:54:2b: 40:f5:93:a8:87:0f:33:36:d2:2f:32:50:f4:9d:58: 96:51:cc:7a:0e:c2:c0:b5:04:59:a9:65:d9:85:58: 42:6c:8c:26:18:3b:e1:4a:97:95:76:b1:6f:cc:49: 93:12:ca:18:88:b0:93:25:74:66:d9:ea:66:78:b4: ff:2d:c7:15:d6:e3:cc:66:0a:cb:f7:d8:e7:7b:4a: 4b:5f:16:94:09:88:6e:e5:e8:9b:53:f6:2f:da:ac: 73:66:12:70:6f:58:10:c2:da:fa:18:64:9f:7f:97: 30:fb:a5:6f:d7:16:40:2b:bf:11:df:dd:6a:0b:d8: a5:a4:ef:dc:b6:23:77:b7:3c:06:cb:a5:88:d7:fd: a9:a9:07:71:25:c1:82:ed:b4:c5:4f:b7:72:6c:50: 22:55:a5:82:7f:19:26:dd:30:62:64:6c:12:4a:ef: 3b:9f:1c:95:7e:70:c3:f8:31:e4:a1:77:7d:8a:05: ba:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FF:42:36:54:05:B9:50:7D:C1:2D:01:5B:6D:6C:98:A5:F7:94:15 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/QP9CNlQFuVB9wS0BW21smKX3lBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.45.66.0/24 93.113.205.0/24 188.212.5.0/24 188.213.1.0/24 188.214.150.0/24 188.214.227.0/24 Signature Algorithm: sha256WithRSAEncryption b7:5e:5a:0e:e5:68:75:c0:74:a6:3c:8c:f2:ea:1f:cb:be:bc: d9:00:cb:97:96:87:6e:81:21:46:07:66:a0:78:93:ca:8f:53: ef:e0:81:cd:c6:63:fc:bb:3d:5e:1a:62:c5:e3:23:c8:e7:a8: ca:c1:d0:24:ea:9c:f6:af:7a:12:32:d5:51:9f:65:fa:7b:0d: 26:86:56:6d:02:fb:c0:51:e4:31:5e:83:11:11:7a:a0:2b:d9: d7:57:2d:89:a6:35:49:98:45:95:f0:5a:e5:d3:6c:09:95:80: e9:2b:a7:84:c5:24:ec:aa:d8:e7:15:e4:7e:91:07:eb:13:d1: 40:09:c8:53:3c:ed:18:38:19:96:fe:5a:6c:e6:f5:b3:85:63: f0:c5:c9:a0:1b:46:1c:01:51:5e:c9:21:0e:94:70:2b:63:24: bc:7d:c4:7d:d6:1c:cf:38:21:54:f1:c4:55:a2:90:98:55:ef: 6d:a6:25:22:47:0a:bf:c4:35:dd:c4:dd:1e:d9:d3:4c:bb:cf: 3a:88:07:25:93:d1:8d:2d:24:a3:a5:e5:1d:8c:34:c7:2c:b6: 62:52:c8:af:11:99:d7:65:e6:4d:b0:36:73:d3:d8:83:3b:7f: 80:93:37:63:df:70:a9:6f:c2:95:a7:9a:58:98:dc:5a:fd:0b: 4e:a2:af:12 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt8E15FSgD2YatqC8F/Z6faMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwMTAyMDAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGZmNDIzNjU0MDViOTUwN2RjMTJkMDE1YjZkNmM5OGE1Zjc5NDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtudvhQDh6rLh4mWEssL8L5NbeAMn QRlMZrAsDgHgKMGF2tzgUCE3EfUyK3D63LH+tVAlXDzPlZSICKQMx59PRo+g9/Cf hmXBVCtA9ZOohw8zNtIvMlD0nViWUcx6DsLAtQRZqWXZhVhCbIwmGDvhSpeVdrFv zEmTEsoYiLCTJXRm2epmeLT/LccV1uPMZgrL99jne0pLXxaUCYhu5eibU/Yv2qxz ZhJwb1gQwtr6GGSff5cw+6Vv1xZAK78R391qC9ilpO/ctiN3tzwGy6WI1/2pqQdx JcGC7bTFT7dybFAiVaWCfxkm3TBiZGwSSu87nxyVfnDD+DHkoXd9igW6LwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFED/QjZUBblQfcEtAVttbJil95QVMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUVA5Q05sUUZ1VkI5d1MwQlcyMXNtS1gzbEJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAWS1CAwQA XXHNAwQAvNQFAwQAvNUBAwQAvNaWAwQAvNbjMA0GCSqGSIb3DQEBCwUAA4IBAQC3 XloO5Wh1wHSmPIzy6h/LvrzZAMuXlodugSFGB2ageJPKj1Pv4IHNxmP8uz1eGmLF 4yPI56jKwdAk6pz2r3oSMtVRn2X6ew0mhlZtAvvAUeQxXoMREXqgK9nXVy2JpjVJ mEWV8Frl02wJlYDpK6eExSTsqtjnFeR+kQfrE9FACchTPO0YOBmW/lps5vWzhWPw xcmgG0YcAVFeySEOlHArYyS8fcR91hzPOCFU8cRVopCYVe9tpiUiRwq/xDXdxN0e 2dNMu886iAclk9GNLSSjpeUdjDTHLLZiUsivEZnXZeZNsDZz09iDO3+Akzdj33Cp b8KVp5pYmNxa/QtOoq8S -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:40 2026 by rpki-client