This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/bqMY88hrLST-OoKyOzpz89FjW1Q.roa File: bqMY88hrLST-OoKyOzpz89FjW1Q.roa (raw, json) Hash identifier: xtHnYzTF08Tb1QaoTYMhm3yMKBqwOq7HjIHSD5b+8eo= Subject key identifier: 6E:A3:18:F3:C8:6B:2D:24:FE:3A:82:B2:3B:3A:73:F3:D1:63:5B:54 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019B7DC8AC843D2440BF61E37C67F9EBC4ED Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/bqMY88hrLST-OoKyOzpz89FjW1Q.roa Signing time: Fri 02 Jan 2026 08:17:41 +0000 ROA not before: Fri 02 Jan 2026 08:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216138 IP address blocks: 141.226.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:ac:84:3d:24:40:bf:61:e3:7c:67:f9:eb:c4:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jan 2 08:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ea318f3c86b2d24fe3a82b23b3a73f3d1635b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9d:ad:d9:92:b8:9b:c6:76:ae:56:72:44:fa: 3f:db:af:5f:64:74:a4:27:db:8e:61:7f:f5:36:b6: 15:17:c6:4d:8f:e7:e4:d2:64:a2:4c:d7:bb:65:08: 66:f1:5c:22:24:80:95:22:aa:2f:9a:3a:03:4d:f7: af:05:e2:19:67:8a:f1:fc:ec:5c:de:15:da:84:a3: 5d:71:3e:3d:39:3e:f5:b7:42:af:ae:7a:cb:17:77: d4:d6:d5:96:3a:b2:8c:6e:b8:e4:30:22:e4:c2:84: f5:8d:fb:a2:7f:d9:92:2e:66:ba:a5:77:3c:bc:21: 56:14:26:09:89:52:ec:a5:67:bb:50:34:f2:48:52: cb:81:73:2c:47:8c:61:3d:88:65:ec:79:5e:94:b1: fe:7f:75:0f:05:90:8f:ba:cd:ec:43:75:14:4b:0f: 15:8f:39:33:82:c8:a0:11:21:94:19:3f:1b:cb:0c: 56:31:6d:76:11:19:09:5d:40:20:99:d9:82:82:86: 4e:08:b2:98:4d:94:c4:71:a7:f1:49:39:15:e9:68: c4:d9:48:05:af:5d:7c:38:ef:6d:ec:bd:86:3e:e2: c3:8f:41:65:24:93:a0:51:73:db:3e:29:54:49:cf: 7d:7f:23:b3:29:67:b1:2a:2b:19:92:a2:c5:c8:29: d6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A3:18:F3:C8:6B:2D:24:FE:3A:82:B2:3B:3A:73:F3:D1:63:5B:54 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/bqMY88hrLST-OoKyOzpz89FjW1Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.226.245.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:92:b2:a3:bf:47:a3:d0:ab:85:55:45:4a:4c:c9:92:87:75: 01:36:67:4c:1a:0b:57:13:2a:51:51:e2:54:ef:3a:03:f6:61: c9:0e:9a:de:0e:99:82:45:d5:05:2d:9a:c1:94:86:99:87:2f: ab:03:40:09:b0:b8:e3:7a:1e:5d:5a:f4:a3:04:e7:79:6c:c4: b5:d8:e1:57:03:b3:aa:f6:1c:cf:cc:4e:ec:74:f8:bd:51:82: dc:44:07:25:33:fb:1c:7a:7d:91:28:20:e0:f2:2e:a0:d3:90: ae:eb:b3:9a:c0:c7:f4:80:fa:ac:fd:7f:84:9b:a1:35:8d:5e: 72:ab:4d:04:45:e2:3f:71:f5:8b:1d:f2:89:42:96:96:ae:4f: 7c:a1:a9:db:64:61:08:9b:d7:1e:43:19:c9:81:80:bb:2b:5e: 25:4e:ce:07:cc:0a:c6:4a:66:3a:08:93:d8:0e:dd:2c:1e:ef: b4:74:22:fc:ca:9b:e7:2d:47:77:74:b1:f8:7e:28:ae:1a:ff: 20:34:36:8e:cf:87:e1:4e:c6:89:8e:93:62:04:19:91:b0:7a: 49:0a:be:5c:19:78:83:06:92:52:9c:74:17:de:27:e4:2e:ae: 39:7e:ff:52:af:90:fa:25:f9:14:12:e9:a8:32:ae:96:d1:b2: 93:2b:f8:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yKyEPSRAv2HjfGf568TtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwMTAyMDgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWEzMThmM2M4NmIyZDI0ZmUzYTgyYjIzYjNhNzNmM2QxNjM1YjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ2t2ZK4m8Z2rlZyRPo/269fZHSk J9uOYX/1NrYVF8ZNj+fk0mSiTNe7ZQhm8VwiJICVIqovmjoDTfevBeIZZ4rx/Oxc 3hXahKNdcT49OT71t0KvrnrLF3fU1tWWOrKMbrjkMCLkwoT1jfuif9mSLma6pXc8 vCFWFCYJiVLspWe7UDTySFLLgXMsR4xhPYhl7HlelLH+f3UPBZCPus3sQ3UUSw8V jzkzgsigESGUGT8bywxWMW12ERkJXUAgmdmCgoZOCLKYTZTEcafxSTkV6WjE2UgF r118OO9t7L2GPuLDj0FlJJOgUXPbPilUSc99fyOzKWexKisZkqLFyCnWeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG6jGPPIay0k/jqCsjs6c/PRY1tUMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvYnFNWTg4aHJMU1QtT29LeU96cHo4OUZqVzFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjeL1MA0G CSqGSIb3DQEBCwUAA4IBAQCfkrKjv0ej0KuFVUVKTMmSh3UBNmdMGgtXEypRUeJU 7zoD9mHJDpreDpmCRdUFLZrBlIaZhy+rA0AJsLjjeh5dWvSjBOd5bMS12OFXA7Oq 9hzPzE7sdPi9UYLcRAclM/scen2RKCDg8i6g05Cu67OawMf0gPqs/X+Em6E1jV5y q00EReI/cfWLHfKJQpaWrk98oanbZGEIm9ceQxnJgYC7K14lTs4HzArGSmY6CJPY Dt0sHu+0dCL8ypvnLUd3dLH4fiiuGv8gNDaOz4fhTsaJjpNiBBmRsHpJCr5cGXiD BpJSnHQX3ifkLq45fv9Sr5D6JfkUEumoMq6W0bKTK/ix -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:50 2026 by rpki-client