This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/qLCQ3Ct45rnoh-Ut3YGet6k2Wjk.roa File: qLCQ3Ct45rnoh-Ut3YGet6k2Wjk.roa (raw, json) Hash identifier: 6mPl2bYO1bNZ0hcW8bH4O7WXM2FUHmibXdR9Fj10SmA= Subject key identifier: A8:B0:90:DC:2B:78:E6:B9:E8:87:E5:2D:DD:81:9E:B7:A9:36:5A:39 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B2C1435D535632C40CD73B818AA58 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/qLCQ3Ct45rnoh-Ut3YGet6k2Wjk.roa Signing time: Fri 02 Jan 2026 06:18:05 +0000 ROA not before: Fri 02 Jan 2026 06:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216151 IP address blocks: 77.76.9.0/24 maxlen: 24 82.118.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:2c:14:35:d5:35:63:2c:40:cd:73:b8:18:aa:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8b090dc2b78e6b9e887e52ddd819eb7a9365a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b9:06:b0:d4:44:2f:be:41:9a:62:f4:10:a7: 44:f7:82:ed:9a:00:d8:7b:78:a2:80:38:e6:da:99: 98:8e:46:d6:f7:56:d2:0a:89:b9:fe:87:26:eb:b4: be:1c:01:06:8c:35:3e:f7:92:60:0b:b8:ac:cb:d8: f8:81:bc:6a:3b:15:d6:64:2b:f9:f8:5b:d0:df:51: e3:01:fb:9e:77:f4:ed:1c:05:e9:42:d8:9f:b0:13: 29:fc:1d:27:90:c0:00:82:d1:be:3e:58:10:2e:a2: 05:69:64:02:0d:0b:44:d9:77:fa:98:7f:c3:bd:02: 99:a0:d5:f7:79:d8:e6:ca:d0:f3:fc:a1:9a:a2:a5: f3:12:79:28:7e:63:27:34:db:ad:ef:fb:0d:c0:c2: 0b:f0:02:f7:ba:11:07:c7:58:6d:db:23:8d:69:f3: a8:3b:89:28:de:b7:bd:4e:ec:8e:f7:79:cc:0e:4f: f9:ab:9e:ac:97:ad:6e:b3:8f:90:99:49:bd:0f:65: eb:5d:37:38:87:c5:14:3f:cd:6b:d6:59:38:be:9c: 21:63:a5:b0:24:2e:1b:74:0a:b8:95:8a:26:c7:76: 9e:d1:80:db:d1:78:52:fb:57:39:62:4e:f4:03:0f: 05:89:b4:74:e0:7d:8b:78:19:38:f8:1b:97:43:3c: 83:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B0:90:DC:2B:78:E6:B9:E8:87:E5:2D:DD:81:9E:B7:A9:36:5A:39 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/qLCQ3Ct45rnoh-Ut3YGet6k2Wjk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.76.9.0/24 82.118.228.0/24 Signature Algorithm: sha256WithRSAEncryption 02:23:27:42:e6:29:1f:68:1a:91:d6:77:95:a0:9f:6f:77:43: 4a:5c:4d:20:04:0b:1c:41:4d:00:9d:87:75:89:12:39:1b:8c: 81:c6:d0:9c:09:86:47:49:b4:2c:55:b9:e8:d7:07:c4:97:ef: 8d:02:be:4e:f5:25:3b:5c:fd:fc:c9:7e:6b:d6:eb:88:51:97: 27:51:03:c4:80:40:22:af:a9:70:6d:cb:42:8a:90:76:61:b6: df:6b:a3:82:5e:a2:2c:b6:f6:d3:75:b3:50:47:b4:44:16:ba: 0e:86:d1:31:fa:e2:57:29:dc:c4:64:4b:1a:c7:79:f1:40:7f: 2d:bd:16:f4:0b:e2:8e:4c:b1:77:91:06:9a:26:9b:1c:b8:4a: f8:8a:dd:81:e5:90:d8:b4:e8:2d:06:39:c3:83:d8:76:31:c1: 45:0e:8c:57:9f:1b:61:25:f5:0a:44:c3:d4:1b:da:22:44:ba: 4d:6b:1c:6b:75:e1:ab:1e:f3:8f:58:80:88:f7:04:9f:f7:9b: ba:8b:df:f4:97:44:64:04:b2:5b:23:4b:60:79:ac:c9:67:ba: 91:2f:21:59:2a:f5:fe:90:25:e1:4c:67:0e:96:cf:64:16:57: 2d:85:2f:d1:f7:91:42:e6:08:2b:be:e7:01:2c:95:9a:57:8e: ad:c2:80:ee -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9WywUNdU1YyxAzXO4GKpYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGIwOTBkYzJiNzhlNmI5ZTg4N2U1MmRkZDgxOWViN2E5MzY1YTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLkGsNREL75BmmL0EKdE94LtmgDY e3iigDjm2pmYjkbW91bSCom5/ocm67S+HAEGjDU+95JgC7isy9j4gbxqOxXWZCv5 +FvQ31HjAfued/TtHAXpQtifsBMp/B0nkMAAgtG+PlgQLqIFaWQCDQtE2Xf6mH/D vQKZoNX3edjmytDz/KGaoqXzEnkofmMnNNut7/sNwMIL8AL3uhEHx1ht2yONafOo O4ko3re9TuyO93nMDk/5q56sl61us4+QmUm9D2XrXTc4h8UUP81r1lk4vpwhY6Ww JC4bdAq4lYomx3ae0YDb0XhS+1c5Yk70Aw8FibR04H2LeBk4+BuXQzyDJwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKiwkNwreOa56IflLd2BnrepNlo5MB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvcUxDUTNDdDQ1cm5vaC1VdDNZR2V0NmsyV2prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATUwJAwQA UnbkMA0GCSqGSIb3DQEBCwUAA4IBAQACIydC5ikfaBqR1neVoJ9vd0NKXE0gBAsc QU0AnYd1iRI5G4yBxtCcCYZHSbQsVbno1wfEl++NAr5O9SU7XP38yX5r1uuIUZcn UQPEgEAir6lwbctCipB2Ybbfa6OCXqIstvbTdbNQR7REFroOhtEx+uJXKdzEZEsa x3nxQH8tvRb0C+KOTLF3kQaaJpscuEr4it2B5ZDYtOgtBjnDg9h2McFFDoxXnxth JfUKRMPUG9oiRLpNaxxrdeGrHvOPWICI9wSf95u6i9/0l0RkBLJbI0tgeazJZ7qR LyFZKvX+kCXhTGcOls9kFlcthS/R95FC5ggrvucBLJWaV46twoDu -----END CERTIFICATE-----Generated at Fri Jan 23 18:47:54 2026 by rpki-client