This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/qnOb5pGA59FaoC8yGV_JY8LunGs.roa File: qnOb5pGA59FaoC8yGV_JY8LunGs.roa (raw, json) Hash identifier: DnZVzU4ETWBI+2kprcYta/siIei4GQWZlz6MlZzEFsE= Subject key identifier: AA:73:9B:E6:91:80:E7:D1:5A:A0:2F:32:19:5F:C9:63:C2:EE:9C:6B Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37A4F5D28699DCBB9D34CBA1B3F25A Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/qnOb5pGA59FaoC8yGV_JY8LunGs.roa Signing time: Fri 02 Jan 2026 10:18:54 +0000 ROA not before: Fri 02 Jan 2026 10:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 124.198.136.0/22 maxlen: 24 158.173.130.0/23 maxlen: 24 170.62.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a4:f5:d2:86:99:dc:bb:9d:34:cb:a1:b3:f2:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa739be69180e7d15aa02f32195fc963c2ee9c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ab:5b:b5:66:c3:6c:6c:0c:21:9a:5a:9c:90: 1a:03:06:6e:47:ec:1a:d7:53:af:39:c9:54:e0:07: e2:69:c3:88:46:aa:53:e2:17:fe:81:53:b2:eb:d7: 31:3f:66:47:d3:fe:6b:76:be:96:be:12:c6:ae:f4: f3:a8:f2:a3:e8:4b:0a:e1:cc:08:7c:55:a4:eb:93: 19:2c:27:3f:8a:8e:29:70:bb:35:44:fd:f4:fa:ba: 81:62:94:15:ee:79:d4:fc:2a:b9:9b:2d:93:4a:23: 4f:c4:0e:02:f3:a5:27:23:a2:8d:38:9a:c7:99:23: 14:c5:22:8e:df:2e:56:04:1a:c8:91:ae:59:42:9f: 52:a7:66:e4:95:df:28:04:37:a0:4c:69:0c:f1:3a: b8:6a:3c:ff:35:f3:80:0a:85:13:18:c9:a7:cf:4c: 8c:e1:ed:06:09:85:6a:ec:75:5a:f3:57:4e:38:96: 15:37:c4:a4:40:ed:41:17:fa:c1:6e:da:b6:5b:0c: 36:d2:56:93:8a:39:b7:d0:4e:9b:12:f9:8c:e2:ac: 9c:77:b0:48:e9:26:e4:2a:71:11:e0:bc:ce:ed:88: fc:2e:4d:eb:da:14:02:a8:5e:53:0e:fe:13:d5:46: 6f:05:33:79:a8:91:0a:68:ac:32:16:01:86:61:0f: a3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:73:9B:E6:91:80:E7:D1:5A:A0:2F:32:19:5F:C9:63:C2:EE:9C:6B X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/qnOb5pGA59FaoC8yGV_JY8LunGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.198.136.0/22 158.173.130.0/23 170.62.240.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:aa:e4:0e:f1:b2:7f:23:8c:a0:f8:82:f2:94:4e:5c:1d:84: 49:ec:b5:88:27:c1:55:a6:cc:e5:72:14:76:2a:a9:8a:99:12: 7d:06:da:06:93:d0:68:0b:d7:ff:96:42:76:b5:31:88:70:66: 25:dc:a5:4a:d8:d8:06:c3:ae:9c:46:62:9b:5a:1a:fc:d6:9e: e4:f6:e9:86:c7:39:de:b0:e3:e3:78:f6:98:5c:8a:81:cb:4c: c2:92:89:f7:d2:d1:07:f1:c2:8a:7d:01:d2:76:43:55:d3:16: ab:ee:b8:31:1c:db:9d:61:ec:02:65:15:62:35:b8:c6:80:9b: 18:48:43:85:1e:2d:29:5e:9a:18:0d:04:7e:af:40:d2:33:82: 84:56:9c:5e:8e:a2:48:8f:fa:95:89:d8:f5:5f:f3:3c:51:94: 2a:3d:15:13:3a:a7:f6:d9:21:a6:5f:1b:30:a4:af:ea:ce:b9: 22:78:41:34:36:8b:11:ec:19:c7:b0:20:54:df:08:c5:fd:8a: 39:2b:0b:6c:9b:55:e4:6f:c3:46:89:85:74:41:e4:22:d6:8b: d3:5c:c5:0c:81:7f:76:76:4e:bc:4d:33:a5:13:e7:19:be:b0: 9a:2c:b9:8a:e2:e8:60:66:f1:3b:1c:a9:06:6d:3d:38:ff:eb: 20:b5:c0:95 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+N6T10oaZ3LudNMuhs/JaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTczOWJlNjkxODBlN2QxNWFhMDJmMzIxOTVmYzk2M2MyZWU5YzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAratbtWbDbGwMIZpanJAaAwZuR+wa 11OvOclU4AfiacOIRqpT4hf+gVOy69cxP2ZH0/5rdr6WvhLGrvTzqPKj6EsK4cwI fFWk65MZLCc/io4pcLs1RP30+rqBYpQV7nnU/Cq5my2TSiNPxA4C86UnI6KNOJrH mSMUxSKO3y5WBBrIka5ZQp9Sp2bkld8oBDegTGkM8Tq4ajz/NfOACoUTGMmnz0yM 4e0GCYVq7HVa81dOOJYVN8SkQO1BF/rBbtq2Www20laTijm30E6bEvmM4qycd7BI 6SbkKnER4LzO7Yj8Lk3r2hQCqF5TDv4T1UZvBTN5qJEKaKwyFgGGYQ+j7QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKpzm+aRgOfRWqAvMhlfyWPC7pxrMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvcW5PYjVwR0E1OUZhb0M4eUdWX0pZOEx1bkdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCfMaIAwQB nq2CAwQCqj7wMA0GCSqGSIb3DQEBCwUAA4IBAQBOquQO8bJ/I4yg+ILylE5cHYRJ 7LWIJ8FVpszlchR2KqmKmRJ9BtoGk9BoC9f/lkJ2tTGIcGYl3KVK2NgGw66cRmKb Whr81p7k9umGxznesOPjePaYXIqBy0zCkon30tEH8cKKfQHSdkNV0xar7rgxHNud YewCZRViNbjGgJsYSEOFHi0pXpoYDQR+r0DSM4KEVpxejqJIj/qVidj1X/M8UZQq PRUTOqf22SGmXxswpK/qzrkieEE0NosR7BnHsCBU3wjF/Yo5Kwtsm1Xkb8NGiYV0 QeQi1ovTXMUMgX92dk68TTOlE+cZvrCaLLmK4uhgZvE7HKkGbT04/+sgtcCV -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:14 2026 by rpki-client