This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/yRGQyOdHAyUvnCTeM-zwgIKX4Qw.roa File: yRGQyOdHAyUvnCTeM-zwgIKX4Qw.roa (raw, json) Hash identifier: bp0xhjE5IUPvG68ZkNNK1uC8wEizknIYbPwTcDbU+cE= Subject key identifier: C9:11:90:C8:E7:47:03:25:2F:9C:24:DE:33:EC:F0:80:82:97:E1:0C Certificate issuer: /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a Certificate serial: 019B7D5CF7B8861CA4CE5D82D05D3E9C2A70 Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/yRGQyOdHAyUvnCTeM-zwgIKX4Qw.roa Signing time: Fri 02 Jan 2026 06:20:03 +0000 ROA not before: Fri 02 Jan 2026 06:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202177 IP address blocks: 217.173.202.0/24 maxlen: 24 217.173.203.0/24 maxlen: 24 217.173.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f7:b8:86:1c:a4:ce:5d:82:d0:5d:3e:9c:2a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a Validity Not Before: Jan 2 06:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c91190c8e74703252f9c24de33ecf0808297e10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:80:97:28:13:0c:33:58:32:95:86:f2:49:b3: 30:13:82:c2:e7:b6:fd:1f:b6:f7:fa:fb:a3:df:34: 48:32:f6:49:a1:99:42:82:f8:a1:ea:a5:5a:76:17: a2:d9:cd:d1:70:4d:33:b8:64:4c:2f:6a:5e:7a:c1: 6b:ce:cb:7b:1e:24:a5:b2:20:57:9e:02:38:34:24: fa:0c:89:d9:20:d9:df:89:30:ee:89:4c:cd:60:69: 2f:23:46:a5:71:67:58:2b:77:9d:fb:68:a4:02:07: 33:6b:0a:07:70:94:1a:09:43:0d:f3:cf:96:73:a4: 0d:2f:d0:55:ee:3d:68:f4:13:f2:e8:dd:c6:91:62: c5:4b:f2:da:12:94:4c:96:1e:08:20:80:c5:14:54: 8d:2e:ce:9b:44:c4:32:ff:19:c9:57:c6:ca:69:00: 7e:e5:14:46:b4:ee:be:3b:2a:04:df:fb:f7:ac:23: ec:07:88:d2:c9:95:d7:8c:17:35:b3:c6:3f:b7:b4: e7:7e:31:be:f4:a2:b2:f3:e1:2b:af:2a:53:20:af: 27:6c:cf:74:2e:cf:9e:4f:ad:fc:cc:e4:ff:6e:4a: d3:fe:73:77:48:25:25:d8:32:12:ad:7c:6f:29:92: f6:f4:9a:db:55:e5:20:9c:1d:78:43:a0:ce:ab:17: 2f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:11:90:C8:E7:47:03:25:2F:9C:24:DE:33:EC:F0:80:82:97:E1:0C X509v3 Authority Key Identifier: keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/yRGQyOdHAyUvnCTeM-zwgIKX4Qw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.173.202.0-217.173.204.255 Signature Algorithm: sha256WithRSAEncryption ac:71:de:ff:34:ad:5c:14:41:36:91:e8:4a:50:ae:4e:15:2f: e5:45:93:7c:03:69:6c:8f:54:dd:0f:df:78:19:84:0d:06:69: 43:ca:f4:86:07:be:5e:b8:7e:85:18:25:0f:28:a8:86:8c:55: 96:dd:4f:cb:75:c1:61:72:26:19:61:df:2e:1f:5d:09:8c:0c: 82:a3:ac:4f:a6:7e:fc:2c:60:10:e4:f0:4e:1a:51:ff:7e:20: 8c:de:fa:4d:9a:a2:a5:bd:91:f6:f7:73:dc:02:2f:3c:7f:00: f1:8f:a4:44:5f:57:0b:79:ba:ad:8f:32:56:30:4c:15:b3:9d: 13:f6:eb:a5:01:b7:c2:70:58:2f:21:40:31:25:5a:b2:f2:28: 62:e0:f8:9c:f5:2c:99:6d:ea:3f:e7:f2:d3:41:6f:d4:bb:1b: 8b:4c:54:09:45:54:56:ef:5e:fc:20:7e:28:64:17:2d:14:a5: b8:72:06:6a:ed:31:51:2b:49:99:d5:d9:c9:76:ac:21:c9:db: cd:43:ea:81:5c:a7:cb:2b:58:9e:cd:a1:c9:a1:ab:ba:5e:78: 66:8f:fd:96:87:59:ed:a9:a2:6f:af:a3:42:16:82:64:0d:a4: ed:d6:42:e5:69:c7:36:1b:98:19:27:9e:99:0c:70:de:a9:72: 76:5d:62:d8 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9XPe4hhykzl2C0F0+nCpwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMWM4MDBhYTFiNzhhMTdhNDNlMTlmZDk5MzgzNTVkMDQx MWU5NGEwHhcNMjYwMTAyMDYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTExOTBjOGU3NDcwMzI1MmY5YzI0ZGUzM2VjZjA4MDgyOTdlMTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoCXKBMMM1gylYbySbMwE4LC57b9 H7b3+vuj3zRIMvZJoZlCgvih6qVadhei2c3RcE0zuGRML2peesFrzst7HiSlsiBX ngI4NCT6DInZINnfiTDuiUzNYGkvI0alcWdYK3ed+2ikAgczawoHcJQaCUMN88+W c6QNL9BV7j1o9BPy6N3GkWLFS/LaEpRMlh4IIIDFFFSNLs6bRMQy/xnJV8bKaQB+ 5RRGtO6+OyoE3/v3rCPsB4jSyZXXjBc1s8Y/t7TnfjG+9KKy8+ErrypTIK8nbM90 Ls+eT638zOT/bkrT/nN3SCUl2DISrXxvKZL29JrbVeUgnB14Q6DOqxcvCQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMkRkMjnRwMlL5wk3jPs8ICCl+EMMB8GA1UdIwQY MBaAFKscgAqht4oXpD4Z/Zk4NV0EEelKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYjFjYTAtYmJmMi00NDE5LThhMGMt NTBjYmNiNWIxOWMyLzEveVJHUXlPZEhBeVV2bkNUZU0tendnSUtYNFF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8xYjFjYTAtYmJmMi00NDE5LThhMGMtNTBjYmNiNWIxOWMy LzEvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHZrcoD BADZrcwwDQYJKoZIhvcNAQELBQADggEBAKxx3v80rVwUQTaR6EpQrk4VL+VFk3wD aWyPVN0P33gZhA0GaUPK9IYHvl64foUYJQ8oqIaMVZbdT8t1wWFyJhlh3y4fXQmM DIKjrE+mfvwsYBDk8E4aUf9+IIze+k2aoqW9kfb3c9wCLzx/APGPpERfVwt5uq2P MlYwTBWznRP266UBt8JwWC8hQDElWrLyKGLg+Jz1LJlt6j/n8tNBb9S7G4tMVAlF VFbvXvwgfihkFy0UpbhyBmrtMVErSZnV2cl2rCHJ281D6oFcp8srWJ7Nocmhq7pe eGaP/ZaHWe2pom+vo0IWgmQNpO3WQuVpxzYbmBknnpkMcN6pcnZdYtg= -----END CERTIFICATE-----Generated at Mon Jan 26 23:21:36 2026 by rpki-client