This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/qXa05Pm4susE6h1kgPXqtx4ui2U.roa File: qXa05Pm4susE6h1kgPXqtx4ui2U.roa (raw, json) Hash identifier: bVr1M0Wzu14ImKwiIYB0nxHAmPqsQWuDaJyg7tqZvAk= Subject key identifier: A9:76:B4:E4:F9:B8:B2:EB:04:EA:1D:64:80:F5:EA:B7:1E:2E:8B:65 Certificate issuer: /CN=5c8084db19f113d81b6448393fad1c132c584fcd Certificate serial: 019B7B36A71F4F32B8FE8361911F86FD444C Authority key identifier: 5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/qXa05Pm4susE6h1kgPXqtx4ui2U.roa Signing time: Thu 01 Jan 2026 20:18:57 +0000 ROA not before: Thu 01 Jan 2026 20:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210583 IP address blocks: 176.116.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a7:1f:4f:32:b8:fe:83:61:91:1f:86:fd:44:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8084db19f113d81b6448393fad1c132c584fcd Validity Not Before: Jan 1 20:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a976b4e4f9b8b2eb04ea1d6480f5eab71e2e8b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8a:89:7d:b0:0c:5e:cf:30:e2:57:c6:d9:e1: c6:fb:6c:34:4e:3b:33:6f:53:c1:c0:a6:ed:5a:88: ee:7f:dc:a8:ac:4d:3f:f5:c8:c4:50:49:90:b9:b4: 4a:6f:f5:03:79:e5:cb:54:bd:07:ed:80:9d:84:18: 5e:d2:26:9c:36:2a:ca:c9:38:ad:fc:f2:62:0d:68: 3d:da:10:2c:36:cf:58:33:63:b8:10:c9:77:ee:6a: 41:40:e0:2d:ad:31:a5:d8:39:29:41:a6:f1:79:a8: fa:4f:0e:ce:8d:4d:d3:2f:50:0b:a1:86:3e:61:e8: 00:7a:fe:e2:dd:2d:e6:bb:4a:79:0f:62:c5:c8:df: 3d:37:0f:39:d9:a0:17:20:86:9c:c5:82:84:90:b8: 9f:f6:05:d9:d6:51:0f:b3:38:f2:38:c4:5c:6d:ed: 3c:e0:93:ee:fb:71:69:bf:11:d6:d4:dc:23:06:56: dd:a3:13:f7:cd:88:8c:c6:f7:ca:02:c1:10:eb:2e: f5:89:6a:db:ee:fd:35:60:29:eb:c6:6c:34:42:0a: 06:10:f9:6c:b3:46:c8:8a:04:3b:df:62:19:32:d0: 57:9f:71:1a:25:c2:76:a5:ad:5c:7f:8a:18:9e:de: 73:f0:ab:b4:0b:39:b5:ee:1d:8c:6e:38:9c:e2:3a: 5f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:76:B4:E4:F9:B8:B2:EB:04:EA:1D:64:80:F5:EA:B7:1E:2E:8B:65 X509v3 Authority Key Identifier: keyid:5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/qXa05Pm4susE6h1kgPXqtx4ui2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.116.7.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:72:bf:eb:d8:8a:4c:80:2b:11:f1:c4:8b:a1:05:9c:c1:33: 40:d4:01:92:00:97:0b:8d:44:48:0f:6a:e6:19:79:49:65:1d: 05:be:3d:6b:ac:fd:cd:1e:12:01:de:1d:53:96:2e:8d:0e:63: eb:f7:07:42:c5:fc:6e:84:91:25:87:98:54:31:99:5c:e9:7b: 27:09:f5:1a:48:27:1c:cd:56:ed:10:6f:26:9d:cf:83:51:6d: b3:42:70:6f:f2:11:95:48:6c:76:40:6f:83:86:f6:5e:18:32: 76:29:ae:9a:3d:ac:09:f3:90:1c:d9:38:03:d1:8a:9b:8c:da: e7:8c:58:41:53:b3:b6:f7:63:a6:f1:4e:61:05:23:75:65:3a: f5:a2:fd:4c:08:ac:ac:06:0c:49:ea:cb:fc:c2:ce:04:05:f1: 7b:bf:77:db:84:07:48:2c:2a:e1:1a:06:6b:e3:5a:79:2f:86: 38:31:43:c7:a2:41:b9:f2:af:c2:a6:8b:68:bb:5c:f9:f5:8f: fa:c0:79:7f:ae:b9:2f:34:15:73:43:0a:fb:ea:d3:7c:af:55: d3:19:7c:34:38:13:f4:07:3d:bb:4b:49:29:e3:ef:d2:94:b7: 0a:c1:64:24:fb:a8:e8:53:a8:a3:08:bd:fe:12:01:ae:7c:fc: 36:0c:7f:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NqcfTzK4/oNhkR+G/URMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjODA4NGRiMTlmMTEzZDgxYjY0NDgzOTNmYWQxYzEzMmM1 ODRmY2QwHhcNMjYwMTAxMjAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTc2YjRlNGY5YjhiMmViMDRlYTFkNjQ4MGY1ZWFiNzFlMmU4YjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYqJfbAMXs8w4lfG2eHG+2w0Tjsz b1PBwKbtWojuf9yorE0/9cjEUEmQubRKb/UDeeXLVL0H7YCdhBhe0iacNirKyTit /PJiDWg92hAsNs9YM2O4EMl37mpBQOAtrTGl2DkpQabxeaj6Tw7OjU3TL1ALoYY+ YegAev7i3S3mu0p5D2LFyN89Nw852aAXIIacxYKEkLif9gXZ1lEPszjyOMRcbe08 4JPu+3FpvxHW1NwjBlbdoxP3zYiMxvfKAsEQ6y71iWrb7v01YCnrxmw0QgoGEPls s0bIigQ732IZMtBXn3EaJcJ2pa1cf4oYnt5z8Ku0Czm17h2Mbjic4jpfRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKl2tOT5uLLrBOodZID16rceLotlMB8GA1UdIwQY MBaAFFyAhNsZ8RPYG2RIOT+tHBMsWE/NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82N2M3ZTgtYzA3NS00MGExLWEzZmYt ODE5MDYyYTEyZjNkLzEvcVhhMDVQbTRzdXNFNmgxa2dQWHF0eDR1aTJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82N2M3ZTgtYzA3NS00MGExLWEzZmYtODE5MDYyYTEyZjNk LzEvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHQHMA0G CSqGSIb3DQEBCwUAA4IBAQCOcr/r2IpMgCsR8cSLoQWcwTNA1AGSAJcLjURID2rm GXlJZR0Fvj1rrP3NHhIB3h1Tli6NDmPr9wdCxfxuhJElh5hUMZlc6XsnCfUaSCcc zVbtEG8mnc+DUW2zQnBv8hGVSGx2QG+DhvZeGDJ2Ka6aPawJ85Ac2TgD0YqbjNrn jFhBU7O292Om8U5hBSN1ZTr1ov1MCKysBgxJ6sv8ws4EBfF7v3fbhAdILCrhGgZr 41p5L4Y4MUPHokG58q/Cpotou1z59Y/6wHl/rrkvNBVzQwr76tN8r1XTGXw0OBP0 Bz27S0kp4+/SlLcKwWQk+6joU6ijCL3+EgGufPw2DH+L -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:21 2026 by rpki-client