This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/QSS55y_l3Gt0c8stWJWOK_nOGJE.roa File: QSS55y_l3Gt0c8stWJWOK_nOGJE.roa (raw, json) Hash identifier: sZpfsqBsL2z+jJ162ImPEwneGDPeOqBNZft5KqaSHfU= Subject key identifier: 41:24:B9:E7:2F:E5:DC:6B:74:73:CB:2D:58:95:8E:2B:F9:CE:18:91 Certificate issuer: /CN=0c7887582d83d3f087682af8780a324a353ce782 Certificate serial: 019BFF90FD5EDD11B32F7AAE4806F1F2FE9A Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/QSS55y_l3Gt0c8stWJWOK_nOGJE.roa Signing time: Tue 27 Jan 2026 13:07:30 +0000 ROA not before: Tue 27 Jan 2026 13:07:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22427 IP address blocks: 213.179.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:90:fd:5e:dd:11:b3:2f:7a:ae:48:06:f1:f2:fe:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782 Validity Not Before: Jan 27 13:07:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4124b9e72fe5dc6b7473cb2d58958e2bf9ce1891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:16:8f:8c:f6:d7:b4:bc:be:b9:f1:37:26:87: e8:4f:72:c7:1c:41:89:7c:d3:27:ac:10:a9:c6:e6: fc:dd:6b:84:f1:fa:d8:48:c8:f2:c9:57:dc:de:07: dc:02:08:8f:a7:ea:14:f5:b6:3e:58:d2:65:ae:60: 3f:39:af:f3:ac:5d:c2:ff:6a:8f:74:27:99:93:1d: 10:4f:df:81:03:f0:ca:1b:b3:e2:80:8c:20:18:e1: 06:50:4d:bc:b4:62:39:d4:3c:cf:9b:b1:fe:04:21: af:72:9d:68:65:78:a1:e0:8e:20:19:94:48:c6:44: ba:bd:49:b3:90:0e:8c:ec:c2:b1:63:52:12:99:49: e3:cd:93:2c:fd:74:7e:95:da:d7:77:b9:fc:03:48: b4:81:4f:bc:2a:a1:d5:ac:f9:62:a9:54:e2:cb:36: 37:78:b1:47:ff:05:f1:68:b9:9a:56:69:03:1c:4f: f2:e2:09:85:43:50:4d:ca:db:0b:d4:63:ae:97:d1: 06:b6:d2:a5:c0:9c:3b:20:02:6e:79:7b:a9:05:f8: e9:6d:52:0d:e3:d1:6b:91:6e:33:56:1e:9b:e1:5d: 1b:6a:5d:e3:71:dd:08:22:0a:67:20:ba:df:f4:51: 00:a8:f4:1f:96:40:ee:a9:e0:41:bc:f2:21:46:08: 65:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:24:B9:E7:2F:E5:DC:6B:74:73:CB:2D:58:95:8E:2B:F9:CE:18:91 X509v3 Authority Key Identifier: keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/QSS55y_l3Gt0c8stWJWOK_nOGJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.179.70.0/24 Signature Algorithm: sha256WithRSAEncryption 59:fe:be:c5:28:f7:b5:e8:17:dd:73:22:64:e3:a6:34:e5:92: 60:75:0c:53:bb:c8:1c:d6:9c:42:2d:22:fd:c0:33:61:a2:da: c8:d6:46:29:d4:d8:4f:7e:53:15:c2:02:9f:1f:32:20:81:b4: 5e:78:94:9f:8c:88:e0:ae:23:aa:91:ea:cd:75:a5:ff:90:85: 0a:31:fe:bf:94:e2:53:e1:14:6e:97:be:e3:c7:9b:8c:7e:88: dd:91:1c:ce:25:9a:99:aa:d2:07:4b:cb:c8:de:90:36:54:d8: c2:8e:4a:e2:b7:50:ba:29:3f:4f:71:65:22:2b:d7:cd:e6:a5: fc:6d:fa:b4:16:1b:96:a7:29:a2:36:9f:eb:61:d4:9d:4b:d0: 56:7c:fa:4a:47:95:82:3d:d9:7f:5b:a4:f8:19:8e:47:b6:fa: 58:7d:6e:7d:63:1f:d1:d1:fb:ce:48:c0:e0:d6:3a:e6:4a:f0: 45:d8:ff:09:13:72:96:42:06:ca:79:6f:46:34:42:fb:65:9f: 95:a6:4b:50:e4:91:20:d9:5a:d4:84:39:04:de:5b:37:7e:88: df:10:9a:1b:4e:52:14:20:7e:c1:27:3f:3b:1b:24:63:7b:24: 0e:bc:05:9a:84:57:2f:23:aa:85:a7:33:07:e4:f0:95:8c:3d: 1c:e9:b4:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv/kP1e3RGzL3quSAbx8v6aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNzg4NzU4MmQ4M2QzZjA4NzY4MmFmODc4MGEzMjRhMzUz Y2U3ODIwHhcNMjYwMTI3MTMwNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTI0YjllNzJmZTVkYzZiNzQ3M2NiMmQ1ODk1OGUyYmY5Y2UxODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohaPjPbXtLy+ufE3JofoT3LHHEGJ fNMnrBCpxub83WuE8frYSMjyyVfc3gfcAgiPp+oU9bY+WNJlrmA/Oa/zrF3C/2qP dCeZkx0QT9+BA/DKG7PigIwgGOEGUE28tGI51DzPm7H+BCGvcp1oZXih4I4gGZRI xkS6vUmzkA6M7MKxY1ISmUnjzZMs/XR+ldrXd7n8A0i0gU+8KqHVrPliqVTiyzY3 eLFH/wXxaLmaVmkDHE/y4gmFQ1BNytsL1GOul9EGttKlwJw7IAJueXupBfjpbVIN 49FrkW4zVh6b4V0bal3jcd0IIgpnILrf9FEAqPQflkDuqeBBvPIhRghlZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEEkuecv5dxrdHPLLViVjiv5zhiRMB8GA1UdIwQY MBaAFAx4h1gtg9Pwh2gq+HgKMko1POeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iZmY0OGYtMGEzMC00NzhkLWIyZGIt YWQ0YTFkYTM5M2ExLzEvUVNTNTV5X2wzR3QwYzhzdFdKV09LX25PR0pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9iZmY0OGYtMGEzMC00NzhkLWIyZGItYWQ0YTFkYTM5M2Ex LzEvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bNGMA0G CSqGSIb3DQEBCwUAA4IBAQBZ/r7FKPe16BfdcyJk46Y05ZJgdQxTu8gc1pxCLSL9 wDNhotrI1kYp1NhPflMVwgKfHzIggbReeJSfjIjgriOqkerNdaX/kIUKMf6/lOJT 4RRul77jx5uMfojdkRzOJZqZqtIHS8vI3pA2VNjCjkrit1C6KT9PcWUiK9fN5qX8 bfq0FhuWpymiNp/rYdSdS9BWfPpKR5WCPdl/W6T4GY5HtvpYfW59Yx/R0fvOSMDg 1jrmSvBF2P8JE3KWQgbKeW9GNEL7ZZ+VpktQ5JEg2VrUhDkE3ls3fojfEJobTlIU IH7BJz87GyRjeyQOvAWahFcvI6qFpzMH5PCVjD0c6bSq -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:14 2026 by rpki-client