This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/qCLfYy9JBgFgFSSq8yRUbSOCgFc.roa File: qCLfYy9JBgFgFSSq8yRUbSOCgFc.roa (raw, json) Hash identifier: zzKgWSmqTeB6vLaDeIRl5kq11hfufm95gcJLtu5yY3M= Subject key identifier: A8:22:DF:63:2F:49:06:01:60:15:24:AA:F3:24:54:6D:23:82:80:57 Certificate issuer: /CN=5b06f746e549ec9763e07cd766fea14e2866d341 Certificate serial: 019B7BA47167B51D5CC61867B3F9A5FE0D23 Authority key identifier: 5B:06:F7:46:E5:49:EC:97:63:E0:7C:D7:66:FE:A1:4E:28:66:D3:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/qCLfYy9JBgFgFSSq8yRUbSOCgFc.roa Signing time: Thu 01 Jan 2026 22:18:53 +0000 ROA not before: Thu 01 Jan 2026 22:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211909 IP address blocks: 77.83.58.0/24 maxlen: 24 138.124.148.0/23 maxlen: 23 178.212.89.0/24 maxlen: 24 185.252.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.crl rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.mft rsync://rpki.ripe.net/repository/DEFAULT/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:71:67:b5:1d:5c:c6:18:67:b3:f9:a5:fe:0d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b06f746e549ec9763e07cd766fea14e2866d341 Validity Not Before: Jan 1 22:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a822df632f490601601524aaf324546d23828057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:60:06:e9:e1:8b:1c:95:99:c5:7a:06:11:67: 73:ed:bc:6d:ee:13:18:1a:00:d0:56:df:d4:33:7e: 1e:6e:e2:a5:da:23:52:3c:04:82:1a:df:e7:34:15: 11:c8:d7:44:db:15:80:5c:7e:0a:09:01:01:08:86: b4:9b:dc:9e:36:c4:73:56:e8:ea:2f:d9:d2:42:9a: 5e:c4:95:9e:9a:52:6b:dd:62:55:a9:86:61:89:80: 34:08:c2:72:31:4f:6a:76:6a:74:ca:11:4c:df:34: 1a:58:b1:00:c4:6a:41:22:5f:5a:86:2a:ec:9f:76: 8e:3b:c7:59:5d:b8:14:22:40:cf:0d:86:fa:a1:15: 46:81:31:cd:1b:81:41:68:53:91:2f:02:a0:d7:20: 5c:92:92:af:9d:c8:09:bd:a7:28:16:da:eb:78:74: 64:48:f2:0c:63:79:d3:44:2f:ec:4b:d7:0f:91:4d: 9f:0f:b0:62:95:1a:0d:f7:58:25:21:d4:05:21:41: eb:c1:1e:f7:6b:00:b2:30:f8:10:82:26:fd:cd:fc: 44:48:9d:7f:cd:c8:d0:02:26:d8:ae:d9:c1:c9:eb: 28:b1:fb:cd:ba:50:d8:13:3c:65:b5:2e:0d:fe:38: 9d:aa:7b:f1:b3:73:7f:84:4a:33:73:38:a4:78:d5: 49:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:22:DF:63:2F:49:06:01:60:15:24:AA:F3:24:54:6D:23:82:80:57 X509v3 Authority Key Identifier: keyid:5B:06:F7:46:E5:49:EC:97:63:E0:7C:D7:66:FE:A1:4E:28:66:D3:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/qCLfYy9JBgFgFSSq8yRUbSOCgFc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.58.0/24 138.124.148.0/23 178.212.89.0/24 185.252.202.0/24 Signature Algorithm: sha256WithRSAEncryption 47:9c:65:02:5e:42:29:97:b5:a6:3b:2e:35:49:96:af:69:1e: d7:b1:4a:ac:d3:30:e6:13:6e:b5:cf:d9:60:89:54:4d:85:27: 33:5e:1d:71:bf:2c:ce:05:db:21:77:de:5a:5c:fc:15:e7:c6: 72:bb:37:c6:30:43:23:f3:2e:e3:7f:d7:6b:96:7d:55:9f:07: 15:0e:d3:9c:d6:4b:52:0e:3f:6a:02:1a:94:75:c0:97:b2:d3: 4e:38:94:ad:cc:9d:a6:bb:dd:9c:00:78:0a:72:94:f0:2a:ad: fe:3d:03:33:ed:1a:15:1f:19:ab:e5:a8:00:cc:af:a2:68:07: 14:48:d7:04:dc:46:08:b4:b8:c7:80:8a:a3:10:bb:60:51:78: 5a:e1:7d:21:98:d8:76:02:b6:d9:b0:13:98:b8:87:b9:5f:25: 14:7e:21:78:f7:6f:e1:a6:5f:c2:1c:42:7d:d0:e3:db:5b:d3: 03:23:fb:ff:5f:48:3a:db:18:4d:59:d4:1b:eb:5e:c9:86:7b: bc:89:a8:01:05:9c:7c:60:27:9f:fb:1d:36:0c:eb:48:75:87: fd:4e:7f:e8:0d:b5:04:ae:fb:0f:e7:d3:5b:1e:73:82:9e:cb: 3b:fe:5d:db:90:17:85:8e:8c:7e:6f:7f:da:d3:11:cd:69:75: b3:6d:73:ff -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7pHFntR1cxhhns/ml/g0jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMDZmNzQ2ZTU0OWVjOTc2M2UwN2NkNzY2ZmVhMTRlMjg2 NmQzNDEwHhcNMjYwMTAxMjIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODIyZGY2MzJmNDkwNjAxNjAxNTI0YWFmMzI0NTQ2ZDIzODI4MDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWAG6eGLHJWZxXoGEWdz7bxt7hMY GgDQVt/UM34ebuKl2iNSPASCGt/nNBURyNdE2xWAXH4KCQEBCIa0m9yeNsRzVujq L9nSQppexJWemlJr3WJVqYZhiYA0CMJyMU9qdmp0yhFM3zQaWLEAxGpBIl9ahirs n3aOO8dZXbgUIkDPDYb6oRVGgTHNG4FBaFORLwKg1yBckpKvncgJvacoFtrreHRk SPIMY3nTRC/sS9cPkU2fD7BilRoN91glIdQFIUHrwR73awCyMPgQgib9zfxESJ1/ zcjQAibYrtnByesosfvNulDYEzxltS4N/jidqnvxs3N/hEozczikeNVJlwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKgi32MvSQYBYBUkqvMkVG0jgoBXMB8GA1UdIwQY MBaAFFsG90blSeyXY+B812b+oU4oZtNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3diM1J1Vko3SmRqNEh6WFp2NmhUaWhtMDBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hYzlkYWItZTkxYi00NTQxLWI1OTUt YmU0MTE3ZTIzMTljLzEvcUNMZll5OUpCZ0ZnRlNTcTh5UlViU09DZ0ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9hYzlkYWItZTkxYi00NTQxLWI1OTUtYmU0MTE3ZTIzMTlj LzEvV3diM1J1Vko3SmRqNEh6WFp2NmhUaWhtMDBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATVM6AwQB inyUAwQAstRZAwQAufzKMA0GCSqGSIb3DQEBCwUAA4IBAQBHnGUCXkIpl7WmOy41 SZavaR7XsUqs0zDmE261z9lgiVRNhSczXh1xvyzOBdshd95aXPwV58ZyuzfGMEMj 8y7jf9drln1VnwcVDtOc1ktSDj9qAhqUdcCXstNOOJStzJ2mu92cAHgKcpTwKq3+ PQMz7RoVHxmr5agAzK+iaAcUSNcE3EYItLjHgIqjELtgUXha4X0hmNh2ArbZsBOY uIe5XyUUfiF492/hpl/CHEJ90OPbW9MDI/v/X0g62xhNWdQb617Jhnu8iagBBZx8 YCef+x02DOtIdYf9Tn/oDbUErvsP59NbHnOCnss7/l3bkBeFjox+b3/a0xHNaXWz bXP/ -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:35 2026 by rpki-client