This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/Qy5yKoxjLWJA1uRpC0vjfkx5IHQ.roa File: Qy5yKoxjLWJA1uRpC0vjfkx5IHQ.roa (raw, json) Hash identifier: y7SNkohtjGeeXJKm5Co5EsY36dtQ+/7kfkwvtYcQU4g= Subject key identifier: 43:2E:72:2A:8C:63:2D:62:40:D6:E4:69:0B:4B:E3:7E:4C:79:20:74 Certificate issuer: /CN=83124d0411a20fd2bb546970ea80116ef276dbab Certificate serial: 019B77C665E772FCD0EFA4DC884C792249D1 Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/Qy5yKoxjLWJA1uRpC0vjfkx5IHQ.roa Signing time: Thu 01 Jan 2026 04:17:29 +0000 ROA not before: Thu 01 Jan 2026 04:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8839 IP address blocks: 212.95.64.0/19 maxlen: 19 213.225.160.0/19 maxlen: 19 2001:810::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:65:e7:72:fc:d0:ef:a4:dc:88:4c:79:22:49:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab Validity Not Before: Jan 1 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=432e722a8c632d6240d6e4690b4be37e4c792074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5d:18:9f:b1:2c:c3:f6:24:66:43:5f:7b:cb: af:fb:36:e9:90:8c:38:bf:00:06:0a:0f:8a:bb:f6: 63:20:68:4a:d1:3b:58:5e:81:cd:0e:21:6c:dc:97: 4e:e0:e1:3b:64:df:fe:41:ce:ed:4c:b1:0f:24:3b: 98:74:0a:df:d5:c4:0b:35:b5:60:39:32:be:da:1a: f2:f3:14:52:8f:d8:e6:09:bb:d9:69:fc:a6:61:fe: 76:eb:7a:f1:ad:60:96:5d:b1:a5:36:aa:a2:d9:8e: 28:c5:cc:e9:91:0e:25:51:e1:1f:4d:ba:d8:26:78: 34:70:05:8f:96:d0:38:f3:ac:cc:ca:06:2b:67:1a: ee:85:8b:08:e0:48:2d:ee:e4:44:9e:55:80:6c:bf: 16:ab:32:70:7e:43:fd:cc:43:94:0d:56:af:e3:b1: 51:61:ea:34:7c:78:a8:29:4b:06:6f:ab:a5:4b:7f: d7:93:14:8c:5e:1a:d7:e9:87:fe:55:d9:3d:eb:09: cf:61:f5:8a:13:90:37:73:73:fe:a0:d6:a9:b1:77: 2d:8f:88:64:75:5a:42:80:f8:eb:ca:4d:bf:bd:da: be:59:a0:44:63:1b:c1:87:e4:78:6e:48:c3:f2:16: 76:5b:60:d3:1a:c4:9b:e7:9c:3d:01:0a:2d:f5:85: 92:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2E:72:2A:8C:63:2D:62:40:D6:E4:69:0B:4B:E3:7E:4C:79:20:74 X509v3 Authority Key Identifier: keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/Qy5yKoxjLWJA1uRpC0vjfkx5IHQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.95.64.0/19 213.225.160.0/19 IPv6: 2001:810::/32 Signature Algorithm: sha256WithRSAEncryption 40:b8:a5:c8:21:11:da:c8:4a:ee:70:f8:5e:55:75:30:c2:5c: af:f8:4d:23:df:e9:17:85:5b:ae:20:74:ad:39:f7:dc:cf:48: 5e:32:60:00:ca:37:e0:06:2d:4b:cc:b6:43:c2:e9:2f:0d:25: 13:5b:5e:6d:a6:dd:b3:7c:b3:95:ff:31:e4:bc:a0:c9:96:3b: ed:82:c4:a7:c9:eb:bd:1a:bf:df:c9:92:21:12:c3:1d:b0:3b: 1e:b3:7c:52:fd:b2:87:27:96:22:a4:d3:8e:fe:06:1e:21:15: 41:a6:c9:c2:86:7a:55:ed:d6:06:03:0d:2b:60:d5:8d:d7:ae: 48:66:15:d2:3d:38:76:de:61:5b:d2:7c:04:8c:25:72:f1:57: 11:e4:c6:d9:9c:58:cc:a6:cb:27:b3:31:af:30:b5:01:6b:a2: df:29:a0:15:dc:e9:88:fb:f4:09:3d:a6:4b:39:0e:bc:ef:18: 0d:90:cf:43:ad:6d:5a:16:1e:fb:af:3f:1b:23:d4:81:88:1a: 6e:07:98:5a:5f:03:26:ab:cf:a6:de:e7:8b:d5:45:37:76:8a: fc:37:3e:ec:37:d4:a6:cb:68:da:ba:7e:3c:3a:a1:52:9a:67: 1e:ed:96:73:7d:1a:73:bf:e1:35:8e:a9:97:ef:1f:08:85:9e: 2f:0b:22:33 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3xmXncvzQ76TciEx5IknRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMTI0ZDA0MTFhMjBmZDJiYjU0Njk3MGVhODAxMTZlZjI3 NmRiYWIwHhcNMjYwMTAxMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzJlNzIyYThjNjMyZDYyNDBkNmU0NjkwYjRiZTM3ZTRjNzkyMDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV0Yn7Esw/YkZkNfe8uv+zbpkIw4 vwAGCg+Ku/ZjIGhK0TtYXoHNDiFs3JdO4OE7ZN/+Qc7tTLEPJDuYdArf1cQLNbVg OTK+2hry8xRSj9jmCbvZafymYf5263rxrWCWXbGlNqqi2Y4oxczpkQ4lUeEfTbrY Jng0cAWPltA486zMygYrZxruhYsI4Egt7uREnlWAbL8WqzJwfkP9zEOUDVav47FR Yeo0fHioKUsGb6ulS3/XkxSMXhrX6Yf+Vdk96wnPYfWKE5A3c3P+oNapsXctj4hk dVpCgPjryk2/vdq+WaBEYxvBh+R4bkjD8hZ2W2DTGsSb55w9AQot9YWSdwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEMuciqMYy1iQNbkaQtL435MeSB0MB8GA1UdIwQY MBaAFIMSTQQRog/Su1RpcOqAEW7ydturMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYzdiMmUtMjQyYS00MzM2LWIwZmIt ZmNmMGYxNTk0ZDJmLzEvUXk1eUtveGpMV0pBMXVScEMwdmpma3g1SUhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yYzdiMmUtMjQyYS00MzM2LWIwZmItZmNmMGYxNTk0ZDJm LzEvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQF1F9AAwQF 1eGgMA0EAgACMAcDBQAgAQgQMA0GCSqGSIb3DQEBCwUAA4IBAQBAuKXIIRHayEru cPheVXUwwlyv+E0j3+kXhVuuIHStOffcz0heMmAAyjfgBi1LzLZDwukvDSUTW15t pt2zfLOV/zHkvKDJljvtgsSnyeu9Gr/fyZIhEsMdsDses3xS/bKHJ5YipNOO/gYe IRVBpsnChnpV7dYGAw0rYNWN165IZhXSPTh23mFb0nwEjCVy8VcR5MbZnFjMpssn szGvMLUBa6LfKaAV3OmI+/QJPaZLOQ687xgNkM9DrW1aFh77rz8bI9SBiBpuB5ha XwMmq8+m3ueL1UU3dor8Nz7sN9Smy2jaun48OqFSmmce7ZZzfRpzv+E1jqmX7x8I hZ4vCyIz -----END CERTIFICATE-----Generated at Mon Jan 26 21:06:09 2026 by rpki-client