This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/72qqOl08Ng_75PrEX39wChvsHq8.roa File: 72qqOl08Ng_75PrEX39wChvsHq8.roa (raw, json) Hash identifier: wdAGiwDNclYEAAkLFN5CEwmjhcr+4EBdtbN76kXOOjo= Subject key identifier: EF:6A:AA:3A:5D:3C:36:0F:FB:E4:FA:C4:5F:7F:70:0A:1B:EC:1E:AF Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df Certificate serial: 019B7E37F55E641B9476A1188C46A1B299BF Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/72qqOl08Ng_75PrEX39wChvsHq8.roa Signing time: Fri 02 Jan 2026 10:19:15 +0000 ROA not before: Fri 02 Jan 2026 10:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 192.44.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f5:5e:64:1b:94:76:a1:18:8c:46:a1:b2:99:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df Validity Not Before: Jan 2 10:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef6aaa3a5d3c360ffbe4fac45f7f700a1bec1eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:22:21:d5:81:41:f4:00:b6:9c:04:53:45:c0: f8:f5:96:36:5b:8a:10:c0:48:81:bd:a8:bf:cc:ba: 3b:cd:a8:ef:95:78:32:01:c6:ef:12:82:fc:a4:bd: 17:29:16:48:94:25:3b:b1:c8:88:27:a5:00:ba:af: 03:cb:ed:14:66:ca:43:91:2e:1f:7e:35:35:aa:81: cc:48:43:e2:93:42:0b:17:dd:c2:4e:25:75:91:fb: 40:96:17:74:29:82:c6:85:b5:44:96:b8:26:ca:0f: 1c:56:20:74:7e:0a:00:24:ff:dd:0a:f7:d7:90:58: 90:94:ec:e8:fe:3e:77:12:13:f8:1c:81:02:ed:38: 0a:ff:1a:fc:1c:45:9a:ff:55:47:2f:af:ca:aa:c7: 80:03:7b:22:d2:1f:5e:e7:3d:82:df:9c:2b:a2:17: c6:6b:0c:4b:b5:b7:f2:9b:70:b4:ed:02:1a:ca:19: ee:99:9a:cb:5a:d1:99:bc:db:92:cd:17:e5:06:67: ff:72:1c:cc:f6:f6:e4:33:47:a5:1e:fc:22:4b:8a: e4:56:2e:10:e9:c2:4d:4a:18:c9:72:d4:de:8b:7a: a0:f6:70:66:71:59:33:f6:26:6e:d0:94:8c:d4:1e: b1:5c:b7:b3:d6:14:89:9c:77:22:70:17:d8:49:76: 2a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6A:AA:3A:5D:3C:36:0F:FB:E4:FA:C4:5F:7F:70:0A:1B:EC:1E:AF X509v3 Authority Key Identifier: keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/72qqOl08Ng_75PrEX39wChvsHq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.44.26.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:ff:8f:fe:6c:15:2e:1b:5c:89:39:8f:cb:53:f4:f8:b1:49: 58:9a:45:e5:31:9f:ed:81:3b:3f:64:57:37:09:fb:74:2c:bd: 43:23:f8:c1:3f:29:b1:04:37:04:d7:01:40:8b:fa:e8:c4:62: 15:b4:b5:ca:f8:26:dc:88:f3:88:e9:24:6f:2d:60:c4:6b:42: 3d:60:80:b3:2d:21:10:e1:d2:69:12:5d:08:e5:1c:e4:52:0f: c4:f3:ba:3c:af:2e:98:fa:e4:0e:9b:b0:aa:0b:44:25:b1:ed: 8a:82:54:e1:8a:64:74:b0:2c:2a:a2:0e:ec:9e:de:22:8f:41: 5f:86:91:b4:61:90:30:24:f7:75:77:57:52:e3:ac:c5:64:c0: 71:aa:0e:f9:e8:66:89:9a:51:9e:06:13:e8:21:fc:e0:bb:42: 5b:ef:74:3e:81:4e:81:20:0f:fd:e0:43:26:3a:18:24:e7:ce: 19:b5:04:b0:aa:fe:03:0c:70:6b:a2:68:2a:7d:02:26:9a:47: ea:3f:e7:ed:7e:8b:f0:18:45:db:0e:27:03:5b:6b:0f:46:c1: 48:d4:21:44:37:ba:a2:75:b0:b8:27:e3:53:7a:c6:ad:47:23: 09:47:a5:cd:bb:71:07:22:1a:cf:f9:08:26:88:2f:7f:d1:7e: 3a:7b:e6:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N/VeZBuUdqEYjEahspm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YTc1ODI2ZTk5MTIyNWE0MjlmZjhhMWU3ZmZkYzgwNDY2 NDIwZGYwHhcNMjYwMTAyMTAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjZhYWEzYTVkM2MzNjBmZmJlNGZhYzQ1ZjdmNzAwYTFiZWMxZWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iIh1YFB9AC2nARTRcD49ZY2W4oQ wEiBvai/zLo7zajvlXgyAcbvEoL8pL0XKRZIlCU7sciIJ6UAuq8Dy+0UZspDkS4f fjU1qoHMSEPik0ILF93CTiV1kftAlhd0KYLGhbVElrgmyg8cViB0fgoAJP/dCvfX kFiQlOzo/j53EhP4HIEC7TgK/xr8HEWa/1VHL6/KqseAA3si0h9e5z2C35wrohfG awxLtbfym3C07QIayhnumZrLWtGZvNuSzRflBmf/chzM9vbkM0elHvwiS4rkVi4Q 6cJNShjJctTei3qg9nBmcVkz9iZu0JSM1B6xXLez1hSJnHcicBfYSXYqgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO9qqjpdPDYP++T6xF9/cAob7B6vMB8GA1UdIwQY MBaAFHanWCbpkSJaQp/4oef/3IBGZCDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTct YWQ4ZmJlYWE4ZGQ5LzEvNzJxcU9sMDhOZ183NVByRVgzOXdDaHZzSHE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTctYWQ4ZmJlYWE4ZGQ5 LzEvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCwaMA0G CSqGSIb3DQEBCwUAA4IBAQBv/4/+bBUuG1yJOY/LU/T4sUlYmkXlMZ/tgTs/ZFc3 Cft0LL1DI/jBPymxBDcE1wFAi/roxGIVtLXK+CbciPOI6SRvLWDEa0I9YICzLSEQ 4dJpEl0I5RzkUg/E87o8ry6Y+uQOm7CqC0Qlse2KglThimR0sCwqog7snt4ij0Ff hpG0YZAwJPd1d1dS46zFZMBxqg756GaJmlGeBhPoIfzgu0Jb73Q+gU6BIA/94EMm Ohgk584ZtQSwqv4DDHBromgqfQImmkfqP+ftfovwGEXbDicDW2sPRsFI1CFEN7qi dbC4J+NTesatRyMJR6XNu3EHIhrP+QgmiC9/0X46e+bJ -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:29 2026 by rpki-client