This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/pQ6OpLF--IiLA278NBvgvoHUl3M.roa File: pQ6OpLF--IiLA278NBvgvoHUl3M.roa (raw, json) Hash identifier: VkzfPnVTMik02z1Xq0NMpSlwyjKpDs0ddq2OYGEMu4o= Subject key identifier: A5:0E:8E:A4:B1:7E:F8:88:8B:03:6E:FC:34:1B:E0:BE:81:D4:97:73 Certificate issuer: /CN=f747ead1fa9a135c65057ca412d893bb82e91429 Certificate serial: 019B797F2FF628BC0260892E1E91649E0F96 Authority key identifier: F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/pQ6OpLF--IiLA278NBvgvoHUl3M.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 131.176.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2f:f6:28:bc:02:60:89:2e:1e:91:64:9e:0f:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f747ead1fa9a135c65057ca412d893bb82e91429 Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a50e8ea4b17ef8888b036efc341be0be81d49773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:21:cd:9a:df:7c:25:f5:5c:e2:b8:5c:56:93: 5c:fe:62:d4:fb:97:d7:35:e3:b2:6f:c7:9f:d3:ae: e8:d1:16:db:61:44:c3:70:c2:e1:a7:6b:2b:c8:c7: 76:96:c2:d5:fd:9e:68:52:94:4b:3e:22:dd:29:f5: 94:ec:e2:3a:0a:ae:3e:6d:61:f1:d2:57:1f:42:63: 6d:94:ff:42:15:2f:5c:8d:69:83:8c:b3:f2:32:20: c3:4a:a5:59:1f:04:a2:c6:d8:54:fc:75:93:f8:25: 0d:d2:63:b8:36:26:bd:31:8f:63:b2:34:18:77:b0: 18:1a:3c:03:ff:28:93:c7:7e:0d:1f:4f:b9:d8:c6: 7e:da:ee:a5:1b:a8:b2:b4:79:6a:58:44:e0:a5:3e: b9:8c:82:b4:e8:80:02:c9:fb:cf:95:7f:a7:e4:3f: 3b:66:24:f6:19:0f:59:ba:7c:e2:d8:e5:b8:42:46: 13:84:98:5c:9d:2d:39:ad:fa:bd:78:8a:e6:bc:73: 18:70:3e:26:04:48:87:50:bc:f5:c6:b8:31:9b:43: 48:56:c1:de:55:22:b7:75:88:f4:af:2b:04:d4:fa: a4:5d:b5:35:97:e3:5b:2a:e9:47:22:14:75:de:9d: da:6f:63:46:67:71:39:c2:3c:de:27:68:5c:04:fc: 69:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0E:8E:A4:B1:7E:F8:88:8B:03:6E:FC:34:1B:E0:BE:81:D4:97:73 X509v3 Authority Key Identifier: keyid:F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/pQ6OpLF--IiLA278NBvgvoHUl3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.176.228.0/22 Signature Algorithm: sha256WithRSAEncryption e2:09:4b:ce:22:d8:5a:3a:8f:ec:51:3f:d7:62:79:29:5e:89: 58:44:80:79:58:ff:c7:0c:85:5c:51:ed:ac:e7:31:1a:cb:e7: 03:7c:3f:cd:f1:f9:af:9b:3d:ed:ec:1d:71:50:50:19:bd:c8: 0e:97:73:77:44:c8:bd:0a:31:ed:24:7a:56:1a:93:d4:20:5b: 12:f7:70:3d:5f:44:87:01:eb:78:c8:d5:92:db:c0:1b:a9:9b: de:8e:33:2e:09:74:26:c3:2c:1a:fc:5f:0f:f0:84:70:12:70: 01:e5:11:1e:4f:7d:58:40:0f:a0:54:b8:72:b0:cc:bb:03:27: 3a:90:c2:1e:29:d2:a3:05:3e:64:05:00:bd:73:14:29:35:f7: ea:ad:11:f9:2f:68:38:51:71:d0:78:65:76:10:c4:5e:91:4f: 64:0a:cb:3c:df:61:62:e5:92:0f:02:cb:e5:71:af:78:7b:58: f8:d2:61:01:c2:eb:5c:89:d3:c7:07:a0:f3:e6:14:62:3e:f3: 5c:ae:7e:ed:aa:0c:85:17:bc:3b:63:e5:fa:b3:e1:c7:7e:6a: 79:c1:bb:9b:07:9a:e1:ef:76:27:2a:b1:0a:61:c8:a1:7f:ac: cc:ae:a2:51:f1:5e:ec:0a:78:b8:5a:86:f7:31:93:9f:90:fc: ae:e1:c2:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fy/2KLwCYIkuHpFkng+WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NDdlYWQxZmE5YTEzNWM2NTA1N2NhNDEyZDg5M2JiODJl OTE0MjkwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTBlOGVhNGIxN2VmODg4OGIwMzZlZmMzNDFiZTBiZTgxZDQ5NzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiHNmt98JfVc4rhcVpNc/mLU+5fX NeOyb8ef067o0RbbYUTDcMLhp2sryMd2lsLV/Z5oUpRLPiLdKfWU7OI6Cq4+bWHx 0lcfQmNtlP9CFS9cjWmDjLPyMiDDSqVZHwSixthU/HWT+CUN0mO4Nia9MY9jsjQY d7AYGjwD/yiTx34NH0+52MZ+2u6lG6iytHlqWETgpT65jIK06IACyfvPlX+n5D87 ZiT2GQ9Zunzi2OW4QkYThJhcnS05rfq9eIrmvHMYcD4mBEiHULz1xrgxm0NIVsHe VSK3dYj0rysE1PqkXbU1l+NbKulHIhR13p3ab2NGZ3E5wjzeJ2hcBPxpwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKUOjqSxfviIiwNu/DQb4L6B1JdzMB8GA1UdIwQY MBaAFPdH6tH6mhNcZQV8pBLYk7uC6RQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTBmcTBmcWFFMXhsQlh5a0V0aVR1NExwRkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wNDc4OWMtYWUwNC00Yjk4LTkwOWMt YjkxN2Y4M2YxZThjLzEvcFE2T3BMRi0tSWlMQTI3OE5Cdmd2b0hVbDNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wNDc4OWMtYWUwNC00Yjk4LTkwOWMtYjkxN2Y4M2YxZThj LzEvOTBmcTBmcWFFMXhsQlh5a0V0aVR1NExwRkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg7DkMA0G CSqGSIb3DQEBCwUAA4IBAQDiCUvOIthaOo/sUT/XYnkpXolYRIB5WP/HDIVcUe2s 5zEay+cDfD/N8fmvmz3t7B1xUFAZvcgOl3N3RMi9CjHtJHpWGpPUIFsS93A9X0SH Aet4yNWS28AbqZvejjMuCXQmwywa/F8P8IRwEnAB5REeT31YQA+gVLhysMy7Ayc6 kMIeKdKjBT5kBQC9cxQpNffqrRH5L2g4UXHQeGV2EMRekU9kCss832Fi5ZIPAsvl ca94e1j40mEBwutcidPHB6Dz5hRiPvNcrn7tqgyFF7w7Y+X6s+HHfmp5wbubB5rh 73YnKrEKYcihf6zMrqJR8V7sCni4Wob3MZOfkPyu4cLY -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:29 2026 by rpki-client