This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/zq7GSsBTb4iCu4BsJeZ1X5mLg0g.roa File: zq7GSsBTb4iCu4BsJeZ1X5mLg0g.roa (raw, json) Hash identifier: wAonBOQHcI2HVnsLhr53pN++Gv5Cyj0r6V/3M0lZCdA= Subject key identifier: CE:AE:C6:4A:C0:53:6F:88:82:BB:80:6C:25:E6:75:5F:99:8B:83:48 Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d Certificate serial: 019B7F84A6C49D82846D1A1CDCDFC78D3CF6 Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/zq7GSsBTb4iCu4BsJeZ1X5mLg0g.roa Signing time: Fri 02 Jan 2026 16:22:38 +0000 ROA not before: Fri 02 Jan 2026 16:22:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 188.172.137.0/24 maxlen: 24 188.172.138.0/24 maxlen: 24 2a03:7d40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a6:c4:9d:82:84:6d:1a:1c:dc:df:c7:8d:3c:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d Validity Not Before: Jan 2 16:22:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ceaec64ac0536f8882bb806c25e6755f998b8348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:44:d9:66:b7:86:40:90:28:a8:c0:2d:93:8b: 36:0d:47:c7:2c:6d:13:68:02:09:33:82:4e:4d:e7: 58:0e:89:fc:aa:91:3a:97:7a:2a:50:75:9d:9d:66: 6b:bd:c8:ce:e6:7c:31:3b:5d:1c:aa:04:ed:62:bf: 87:82:c1:d1:b4:1b:b5:02:31:08:3f:8f:d2:32:87: a9:0c:92:d8:d1:34:49:31:2d:05:ef:10:cd:f7:bc: 12:b5:a2:ba:1d:d5:7d:23:2f:ad:1e:a4:66:8e:c3: 55:74:c2:83:26:d8:24:6c:a4:cd:95:f4:f7:be:02: 9e:34:22:01:f1:d8:dc:d1:9a:da:ac:37:10:3d:a6: 91:8a:d0:3d:30:79:75:7d:82:51:a8:f5:82:e3:01: 94:6b:45:9b:b5:f9:3f:8f:ff:61:e7:d9:e9:8b:cc: 5d:97:2e:b8:5d:ad:82:86:ff:5f:8c:0a:1a:1f:f0: 1c:b2:bd:b9:b3:21:00:d3:41:62:9b:d3:19:d4:61: a5:7e:05:a5:59:00:5f:69:97:2e:57:07:23:e8:8b: b6:68:5b:39:40:dc:f7:4e:1e:28:bd:73:09:ea:66: d4:56:0a:1d:83:44:ce:c4:c0:28:80:da:d8:56:35: 06:bf:c4:76:cb:b3:73:07:d7:b1:05:a7:13:99:70: 37:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AE:C6:4A:C0:53:6F:88:82:BB:80:6C:25:E6:75:5F:99:8B:83:48 X509v3 Authority Key Identifier: keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/zq7GSsBTb4iCu4BsJeZ1X5mLg0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.172.137.0-188.172.138.255 IPv6: 2a03:7d40::/32 Signature Algorithm: sha256WithRSAEncryption 8a:74:65:f0:6d:7f:75:15:2f:51:ce:d7:95:3c:4b:20:2e:49: 4a:67:87:10:47:96:d5:d9:94:5f:3c:bc:75:04:19:80:a0:1c: 98:d1:d0:ab:c6:31:39:da:1c:f8:5a:69:4f:7f:3c:a5:3e:58: e1:b9:ef:b2:ee:6b:c6:15:bd:e3:c7:c6:16:9b:ea:a8:b6:39: 06:ff:a6:5d:c1:40:62:86:5b:be:94:25:20:c8:39:e7:8f:32: b6:37:21:9c:63:43:6f:68:6e:76:11:d5:75:d0:be:78:46:15: d8:4b:d4:00:16:a1:82:76:e8:13:ec:07:c8:ef:1c:4d:28:85: 86:ad:7b:ed:01:0d:0e:89:ae:ab:88:5f:66:ed:31:a1:51:41: 03:d8:17:6e:f9:40:6d:1f:1b:5b:d8:e0:66:d7:33:de:76:d5: 69:d0:b8:e0:dd:50:d0:4f:52:bb:5d:c7:1f:fa:db:3a:46:77: eb:c9:2e:78:00:8f:67:bb:8b:5e:e0:16:33:c9:db:fb:79:15: c6:c6:c1:d5:dd:eb:c7:16:7b:97:bd:a3:a9:eb:0d:0a:64:30: 0e:a2:b5:51:17:9f:f6:0e:42:a6:7e:ce:86:de:b0:c7:10:18: 84:e1:24:e1:d0:8b:43:54:8c:3b:c4:0e:1a:94:88:fc:3b:80: 48:ca:a0:f8 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt/hKbEnYKEbRoc3N/HjTz2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYjk1Y2ZjMmQxODdmNDA1MzBlZjA4M2JiZDEwYzg4YzQ5 NTZjMWQwHhcNMjYwMTAyMTYyMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWFlYzY0YWMwNTM2Zjg4ODJiYjgwNmMyNWU2NzU1Zjk5OGI4MzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0TZZreGQJAoqMAtk4s2DUfHLG0T aAIJM4JOTedYDon8qpE6l3oqUHWdnWZrvcjO5nwxO10cqgTtYr+HgsHRtBu1AjEI P4/SMoepDJLY0TRJMS0F7xDN97wStaK6HdV9Iy+tHqRmjsNVdMKDJtgkbKTNlfT3 vgKeNCIB8djc0ZrarDcQPaaRitA9MHl1fYJRqPWC4wGUa0Wbtfk/j/9h59npi8xd ly64Xa2Chv9fjAoaH/Acsr25syEA00Fim9MZ1GGlfgWlWQBfaZcuVwcj6Iu2aFs5 QNz3Th4ovXMJ6mbUVgodg0TOxMAogNrYVjUGv8R2y7NzB9exBacTmXA3LwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFM6uxkrAU2+IgruAbCXmdV+Zi4NIMB8GA1UdIwQY MBaAFGu5XPwtGH9AUw7wg7vRDIjElWwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NDdhN2YtNGJhZi00YjdlLWFmYjgt NDY2MDEzNDM1MDc5LzEvenE3R1NzQlRiNGlDdTRCc0plWjFYNW1MZzBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81NDdhN2YtNGJhZi00YjdlLWFmYjgtNDY2MDEzNDM1MDc5 LzEvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAC8rIkD BAC8rIowDQQCAAIwBwMFACoDfUAwDQYJKoZIhvcNAQELBQADggEBAIp0ZfBtf3UV L1HO15U8SyAuSUpnhxBHltXZlF88vHUEGYCgHJjR0KvGMTnaHPhaaU9/PKU+WOG5 77Lua8YVvePHxhab6qi2OQb/pl3BQGKGW76UJSDIOeePMrY3IZxjQ29obnYR1XXQ vnhGFdhL1AAWoYJ26BPsB8jvHE0ohYate+0BDQ6JrquIX2btMaFRQQPYF275QG0f G1vY4GbXM9521WnQuODdUNBPUrtdxx/62zpGd+vJLngAj2e7i17gFjPJ2/t5FcbG wdXd68cWe5e9o6nrDQpkMA6itVEXn/YOQqZ+zobesMcQGIThJOHQi0NUjDvEDhqU iPw7gEjKoPg= -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:23 2026 by rpki-client