This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/eYVzKhVxRl0S4NV-8z3jnKXYp7g.roa File: eYVzKhVxRl0S4NV-8z3jnKXYp7g.roa (raw, json) Hash identifier: FCmQv16BfxP+owog0Mj/PEYM7uRcKJlUX18aeU4hB40= Subject key identifier: 79:85:73:2A:15:71:46:5D:12:E0:D5:7E:F3:3D:E3:9C:A5:D8:A7:B8 Certificate issuer: /CN=ab7ba43576667664ad6f29a666270e3357836f1a Certificate serial: 019B7C80C209A4E25ED24685CBD13E7275FA Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/eYVzKhVxRl0S4NV-8z3jnKXYp7g.roa Signing time: Fri 02 Jan 2026 02:19:31 +0000 ROA not before: Fri 02 Jan 2026 02:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199472 IP address blocks: 176.121.16.0/22 maxlen: 24 176.121.16.0/24 maxlen: 24 176.121.17.0/24 maxlen: 24 176.121.18.0/24 maxlen: 24 176.121.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c2:09:a4:e2:5e:d2:46:85:cb:d1:3e:72:75:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a Validity Not Before: Jan 2 02:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7985732a1571465d12e0d57ef33de39ca5d8a7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ef:52:ba:dc:5c:53:32:a7:b9:fa:07:74:c2: 4a:11:fb:fc:b4:d3:9f:e0:96:0d:13:af:f9:31:31: b6:bf:3e:ee:06:46:3e:6d:70:62:6a:e0:af:c6:b0: e3:0d:2f:74:ea:2f:9e:7a:cb:d8:94:31:9a:02:b1: 38:d6:19:f6:1c:c5:0a:47:7c:f8:82:12:68:48:eb: de:1b:76:5c:01:78:89:24:de:84:b8:dd:c7:c1:f0: 68:37:ce:8b:ee:7d:74:e2:18:e0:ae:4b:7d:5f:e4: 31:cf:61:6a:e5:2f:23:54:9b:c7:d3:f8:46:0f:7b: f4:48:97:bc:e1:43:b4:17:7c:d1:31:cc:46:23:d1: 48:9f:8b:be:f8:b1:43:53:3c:a0:33:b1:b7:08:32: 05:e6:4b:28:cd:b2:c1:f8:fd:5c:cf:79:30:3f:a8: e7:47:e0:47:6c:78:42:4c:1a:a0:2f:e1:90:a4:21: 9e:40:d8:bd:90:17:31:2a:e8:a2:78:f8:0c:d0:2a: f1:79:83:fd:55:32:4c:b9:87:f1:66:7b:07:41:93: 37:64:da:67:99:f9:68:b0:77:38:a0:12:c6:f4:55: 81:4d:86:50:5b:a4:cc:10:71:1a:df:bd:f1:e1:43: 11:31:f5:e1:d8:86:9c:9f:a9:13:60:7a:62:7a:d8: f8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:85:73:2A:15:71:46:5D:12:E0:D5:7E:F3:3D:E3:9C:A5:D8:A7:B8 X509v3 Authority Key Identifier: keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/eYVzKhVxRl0S4NV-8z3jnKXYp7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.121.16.0/22 Signature Algorithm: sha256WithRSAEncryption 58:be:84:4f:35:01:6d:23:38:52:93:a6:42:fb:a3:09:15:e8: 1d:8c:65:99:26:55:6b:40:d6:d1:ba:b2:9d:f2:b7:1a:18:2d: fb:23:25:74:b0:34:76:c3:6c:d7:df:6e:53:92:5b:c9:30:39: d9:55:a7:4a:2f:a2:07:8d:2a:59:b4:6d:08:1c:dd:53:00:ed: d2:6f:b1:8c:ef:cb:b8:fd:53:1f:f6:d6:d4:8f:d2:6e:88:f9: 36:83:32:fe:e4:2e:1e:5a:6a:49:5a:99:0c:f4:c6:bb:d2:e9: e7:0b:8b:8b:49:00:71:14:e1:d6:91:6c:f7:13:74:4c:90:00: c3:da:66:bf:22:66:4c:c1:7b:0c:50:ae:2a:80:dc:ed:3f:73: 72:0c:95:6a:86:d9:21:70:cb:0e:27:ef:82:dd:b4:52:c3:44: 5b:d2:f3:36:20:2f:55:ee:ee:fd:82:b0:19:19:1e:64:d6:34: 99:92:31:62:2b:a3:b2:7b:dc:4c:19:e1:11:e2:f7:98:15:ad: cd:67:24:88:69:53:77:59:35:42:62:49:99:09:ac:a1:22:ab: 81:0c:f7:f8:d5:86:23:6b:22:d8:37:b6:cd:d0:37:4d:52:73: 99:72:ef:18:ab:13:b7:5f:4c:89:ca:26:87:b8:9c:53:56:13: c5:3f:98:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gMIJpOJe0kaFy9E+cnX6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiN2JhNDM1NzY2Njc2NjRhZDZmMjlhNjY2MjcwZTMzNTc4 MzZmMWEwHhcNMjYwMTAyMDIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTg1NzMyYTE1NzE0NjVkMTJlMGQ1N2VmMzNkZTM5Y2E1ZDhhN2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu9SutxcUzKnufoHdMJKEfv8tNOf 4JYNE6/5MTG2vz7uBkY+bXBiauCvxrDjDS906i+eesvYlDGaArE41hn2HMUKR3z4 ghJoSOveG3ZcAXiJJN6EuN3HwfBoN86L7n104hjgrkt9X+Qxz2Fq5S8jVJvH0/hG D3v0SJe84UO0F3zRMcxGI9FIn4u++LFDUzygM7G3CDIF5ksozbLB+P1cz3kwP6jn R+BHbHhCTBqgL+GQpCGeQNi9kBcxKuiiePgM0CrxeYP9VTJMuYfxZnsHQZM3ZNpn mflosHc4oBLG9FWBTYZQW6TMEHEa373x4UMRMfXh2Iacn6kTYHpietj49QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHmFcyoVcUZdEuDVfvM945yl2Ke4MB8GA1UdIwQY MBaAFKt7pDV2ZnZkrW8ppmYnDjNXg28aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wZTFmOTEtYzNlZC00MzVkLWE0NWYt MjNhYzc1ODA0OGVjLzEvZVlWektoVnhSbDBTNE5WLTh6M2puS1hZcDdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8wZTFmOTEtYzNlZC00MzVkLWE0NWYtMjNhYzc1ODA0OGVj LzEvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsHkQMA0G CSqGSIb3DQEBCwUAA4IBAQBYvoRPNQFtIzhSk6ZC+6MJFegdjGWZJlVrQNbRurKd 8rcaGC37IyV0sDR2w2zX325TklvJMDnZVadKL6IHjSpZtG0IHN1TAO3Sb7GM78u4 /VMf9tbUj9JuiPk2gzL+5C4eWmpJWpkM9Ma70unnC4uLSQBxFOHWkWz3E3RMkADD 2ma/ImZMwXsMUK4qgNztP3NyDJVqhtkhcMsOJ++C3bRSw0Rb0vM2IC9V7u79grAZ GR5k1jSZkjFiK6Oye9xMGeER4veYFa3NZySIaVN3WTVCYkmZCayhIquBDPf41YYj ayLYN7bN0DdNUnOZcu8YqxO3X0yJyiaHuJxTVhPFP5gU -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:53 2026 by rpki-client