This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/q972d8O9k3VoveNJLj2g4alNC1w.roa File: q972d8O9k3VoveNJLj2g4alNC1w.roa (raw, json) Hash identifier: 1+lleoHY4U9gA6ACD7pWpnuGVnGOKN+s9CCNPvKBX+o= Subject key identifier: AB:DE:F6:77:C3:BD:93:75:68:BD:E3:49:2E:3D:A0:E1:A9:4D:0B:5C Certificate issuer: /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc Certificate serial: 019B7D5CD444C33C88E6965116B4C6A7B5D2 Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/q972d8O9k3VoveNJLj2g4alNC1w.roa Signing time: Fri 02 Jan 2026 06:19:54 +0000 ROA not before: Fri 02 Jan 2026 06:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205345 IP address blocks: 185.221.124.0/22 maxlen: 22 2a0d:c000::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d4:44:c3:3c:88:e6:96:51:16:b4:c6:a7:b5:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc Validity Not Before: Jan 2 06:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abdef677c3bd937568bde3492e3da0e1a94d0b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:aa:76:a7:1e:36:60:8a:ec:cc:e7:c8:53:7e: 7c:df:91:ac:26:3c:64:00:8b:0b:1f:a6:ef:8b:3c: f1:43:47:37:a8:7e:53:56:a8:d1:96:18:73:3a:cc: d4:71:1b:60:13:67:8d:de:44:f3:bb:a2:f3:2f:ca: b3:69:fa:70:5e:86:6f:23:53:52:1d:f5:4d:5e:3a: 8d:f2:35:75:e9:24:3c:a1:06:a8:09:33:ff:fa:b0: cc:2e:a3:e0:c7:2d:da:38:24:f1:77:29:ab:8b:0d: 80:9a:59:1b:12:9a:0a:4a:55:73:aa:52:52:bf:3c: 4d:a9:b4:9f:cd:94:05:b1:af:cb:0c:b4:c5:4a:46: b3:69:67:3b:92:56:80:ad:df:ce:48:16:a0:02:e1: 1b:30:9b:1a:a6:78:78:69:f6:ff:c2:55:d0:59:d4: 6d:7d:3e:27:3c:d0:ec:22:e4:68:31:c9:20:9b:a2: 8b:06:29:49:3d:ad:cf:14:cf:59:95:fc:7a:c6:5f: a8:38:fb:27:d2:88:2c:af:8c:79:cf:81:7f:bb:df: 75:4f:2d:51:83:a3:9c:d3:91:d9:20:f0:e9:f8:d0: 30:cf:eb:18:44:26:a8:e4:82:42:03:ac:21:39:4a: 00:d0:14:48:4d:8d:25:22:65:23:33:8f:57:7a:7a: 0e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:DE:F6:77:C3:BD:93:75:68:BD:E3:49:2E:3D:A0:E1:A9:4D:0B:5C X509v3 Authority Key Identifier: keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/q972d8O9k3VoveNJLj2g4alNC1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.221.124.0/22 IPv6: 2a0d:c000::/29 Signature Algorithm: sha256WithRSAEncryption d8:06:66:57:9f:4a:f0:fb:3a:ca:6d:77:f8:a8:e4:1e:eb:b1: fd:7f:e2:15:f1:a2:3f:51:ce:48:6d:40:de:de:ad:e1:94:2f: f5:f5:b1:dd:66:49:5b:59:3b:ea:f2:cc:aa:74:f6:0e:93:07: fb:18:b6:5d:0a:a8:5c:96:26:7d:a5:c1:4d:5d:b8:95:61:b9: 72:8c:b2:59:ca:38:82:9c:7a:a2:5f:0a:55:93:5c:37:45:8a: 45:82:77:48:27:14:37:6e:b5:4d:63:1f:73:a1:fd:ae:11:15: 70:23:79:bf:67:e7:ac:b0:ab:5d:00:0f:4e:a0:e0:f2:56:64: c1:66:26:65:76:f4:56:76:eb:bd:a1:e3:24:f6:bf:9e:fb:5a: 2c:ed:2d:8f:d5:22:3e:44:ff:51:a1:d0:5c:fc:cb:dd:3c:d9: 9a:ab:3a:a9:3c:07:19:e5:86:64:d1:fe:2a:8d:a8:15:69:c6: 9e:41:fa:94:6e:ac:89:b1:c5:25:0f:08:46:12:c6:4e:10:87: 41:90:6c:f5:3d:ad:f0:8e:b2:6e:e0:10:96:74:e8:a0:84:98: 5e:99:83:99:62:a2:4d:59:8f:45:fb:bd:02:f8:a3:6d:6e:79: b2:97:42:d4:79:2b:b3:03:66:22:74:4e:4f:93:a0:1e:4d:79: 44:2a:cb:0f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XNREwzyI5pZRFrTGp7XSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZGZlNTM4ODRiOTVhMDlmNjZhNDE2ZTE0ZjU2YzZiMGY3 ODlhZmMwHhcNMjYwMTAyMDYxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmRlZjY3N2MzYmQ5Mzc1NjhiZGUzNDkyZTNkYTBlMWE5NGQwYjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKp2px42YIrszOfIU35835GsJjxk AIsLH6bvizzxQ0c3qH5TVqjRlhhzOszUcRtgE2eN3kTzu6LzL8qzafpwXoZvI1NS HfVNXjqN8jV16SQ8oQaoCTP/+rDMLqPgxy3aOCTxdymriw2AmlkbEpoKSlVzqlJS vzxNqbSfzZQFsa/LDLTFSkazaWc7klaArd/OSBagAuEbMJsapnh4afb/wlXQWdRt fT4nPNDsIuRoMckgm6KLBilJPa3PFM9Zlfx6xl+oOPsn0ogsr4x5z4F/u991Ty1R g6Oc05HZIPDp+NAwz+sYRCao5IJCA6whOUoA0BRITY0lImUjM49XenoOKQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKve9nfDvZN1aL3jSS49oOGpTQtcMB8GA1UdIwQY MBaAFGLf5TiEuVoJ9mpBbhT1bGsPeJr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRfbE9JUzVXZ24yYWtGdUZQVnNhdzk0bXZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mYjAwMzItYmM0NS00NThmLWFiMmIt MjkzNmFhMjI3NzY1LzEvcTk3MmQ4TzlrM1ZvdmVOSkxqMmc0YWxOQzF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mYjAwMzItYmM0NS00NThmLWFiMmItMjkzNmFhMjI3NzY1 LzEvWXRfbE9JUzVXZ24yYWtGdUZQVnNhdzk0bXZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCud18MA0E AgACMAcDBQMqDcAAMA0GCSqGSIb3DQEBCwUAA4IBAQDYBmZXn0rw+zrKbXf4qOQe 67H9f+IV8aI/Uc5IbUDe3q3hlC/19bHdZklbWTvq8syqdPYOkwf7GLZdCqhcliZ9 pcFNXbiVYblyjLJZyjiCnHqiXwpVk1w3RYpFgndIJxQ3brVNYx9zof2uERVwI3m/ Z+essKtdAA9OoODyVmTBZiZldvRWduu9oeMk9r+e+1os7S2P1SI+RP9RodBc/Mvd PNmaqzqpPAcZ5YZk0f4qjagVacaeQfqUbqyJscUlDwhGEsZOEIdBkGz1Pa3wjrJu 4BCWdOighJhemYOZYqJNWY9F+70C+KNtbnmyl0LUeSuzA2YidE5Pk6AeTXlEKssP -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:25 2026 by rpki-client