This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/qivEJ1m8OXaZrLdVa5B-D4Lq4Tc.roa File: qivEJ1m8OXaZrLdVa5B-D4Lq4Tc.roa (raw, json) Hash identifier: ohCD8OmMg+2pYrzqMLQR/f066MDBc9Qpw07iNGnx7cY= Subject key identifier: AA:2B:C4:27:59:BC:39:76:99:AC:B7:55:6B:90:7E:0F:82:EA:E1:37 Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a Certificate serial: 019B7A5B2E75DF4915ECF56C13557A1A9F09 Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/qivEJ1m8OXaZrLdVa5B-D4Lq4Tc.roa Signing time: Thu 01 Jan 2026 16:19:14 +0000 ROA not before: Thu 01 Jan 2026 16:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4775 IP address blocks: 163.171.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:2e:75:df:49:15:ec:f5:6c:13:55:7a:1a:9f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a Validity Not Before: Jan 1 16:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa2bc42759bc397699acb7556b907e0f82eae137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:34:67:89:00:e5:2e:87:83:cd:d8:cc:cc:f5: bf:69:99:9e:cd:b9:90:39:2d:ba:ea:02:be:26:01: 80:ae:c1:75:9b:b1:fd:f3:b9:95:6a:27:3e:8f:8f: 32:e1:1b:25:7e:78:77:93:0f:a9:3b:68:b0:30:dd: 05:2f:5f:62:48:b2:3d:e5:d0:96:66:bc:c4:9d:9f: ce:b2:8f:fd:16:da:08:ef:b4:f5:c2:ba:00:b6:5f: 04:39:9c:01:c4:07:b1:b7:f7:2b:db:8a:4c:84:d7: 53:7d:c4:e6:bf:cf:b9:a9:9c:6b:b1:a5:e4:1b:6f: 44:cc:39:70:6a:da:e2:45:27:52:78:2e:46:23:74: 4e:f6:6f:d0:45:0e:3d:d6:78:ab:fa:2d:2d:5f:6b: 56:3d:1a:0b:36:75:85:85:45:61:96:3a:f1:56:77: a9:b7:4e:a7:35:f4:b9:6f:a3:74:ff:a0:d5:f5:23: ac:37:19:28:8a:f8:59:74:a2:69:b8:e4:bf:78:1c: 2c:23:a9:84:c9:16:d6:13:f2:9b:1b:59:2a:f3:9c: 25:f1:aa:e8:00:18:fa:56:00:6d:65:84:c5:b5:91: 04:80:8c:5c:b8:99:ce:8b:1b:8c:c0:12:9c:42:3c: e7:d6:40:88:93:8e:98:33:16:29:49:97:a6:d6:a4: 6f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2B:C4:27:59:BC:39:76:99:AC:B7:55:6B:90:7E:0F:82:EA:E1:37 X509v3 Authority Key Identifier: keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/qivEJ1m8OXaZrLdVa5B-D4Lq4Tc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.171.65.0/24 Signature Algorithm: sha256WithRSAEncryption b7:93:c8:d9:60:3c:42:53:7e:1e:62:38:c2:74:87:bb:81:9f: 81:a7:cb:31:3f:8c:28:d8:58:37:63:da:e9:98:5b:87:74:b8: 7a:d5:6c:8b:0c:b6:87:7f:f8:12:8e:3b:70:76:ad:e9:56:11: a7:a5:44:c0:f2:34:87:a7:6b:a9:18:33:94:e7:45:fd:1f:f7: de:02:b6:52:d0:d7:20:95:a3:bc:6a:f2:8a:ad:b9:d0:17:a3: 46:8d:e3:85:46:de:1f:1a:80:5a:80:35:61:6f:5b:d7:66:4e: 88:12:f1:0b:97:6d:59:b7:a3:b4:1d:44:70:76:35:f2:d1:1d: 75:56:ba:b7:3a:4a:a7:a2:a9:7b:97:cc:31:ca:51:73:56:82: 8e:3f:fa:6d:b7:37:65:7b:ab:39:37:13:ba:14:30:12:1f:1f: 11:a4:41:be:0c:a9:6f:b3:d2:b2:e2:89:e2:5d:db:82:e6:35: 86:88:28:ae:ee:2c:bf:17:85:ce:8f:86:56:12:57:9a:e2:bf: 74:c6:66:7d:d2:e3:34:1b:a8:7d:90:dd:d7:8d:c3:d4:a9:07: 8a:46:38:6e:7a:14:5b:48:11:a6:a3:cc:b0:86:b8:7d:4d:20: 99:ee:48:ae:00:6f:5e:04:ce:92:6b:b2:3e:31:6b:ea:cb:a4: 94:29:2f:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wy5130kV7PVsE1V6Gp8JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5 ZDcwNmEwHhcNMjYwMTAxMTYxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTJiYzQyNzU5YmMzOTc2OTlhY2I3NTU2YjkwN2UwZjgyZWFlMTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jRniQDlLoeDzdjMzPW/aZmezbmQ OS266gK+JgGArsF1m7H987mVaic+j48y4Rslfnh3kw+pO2iwMN0FL19iSLI95dCW ZrzEnZ/Oso/9FtoI77T1wroAtl8EOZwBxAext/cr24pMhNdTfcTmv8+5qZxrsaXk G29EzDlwatriRSdSeC5GI3RO9m/QRQ491nir+i0tX2tWPRoLNnWFhUVhljrxVnep t06nNfS5b6N0/6DV9SOsNxkoivhZdKJpuOS/eBwsI6mEyRbWE/KbG1kq85wl8aro ABj6VgBtZYTFtZEEgIxcuJnOixuMwBKcQjzn1kCIk46YMxYpSZem1qRvGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKorxCdZvDl2may3VWuQfg+C6uE3MB8GA1UdIwQY MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt YjVkODg4YWRmZDM3LzEvcWl2RUoxbThPWGFackxkVmE1Qi1ENExxNFRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3 LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo6tBMA0G CSqGSIb3DQEBCwUAA4IBAQC3k8jZYDxCU34eYjjCdIe7gZ+Bp8sxP4wo2Fg3Y9rp mFuHdLh61WyLDLaHf/gSjjtwdq3pVhGnpUTA8jSHp2upGDOU50X9H/feArZS0Ncg laO8avKKrbnQF6NGjeOFRt4fGoBagDVhb1vXZk6IEvELl21Zt6O0HURwdjXy0R11 Vrq3Okqnoql7l8wxylFzVoKOP/pttzdle6s5NxO6FDASHx8RpEG+DKlvs9Ky4oni XduC5jWGiCiu7iy/F4XOj4ZWElea4r90xmZ90uM0G6h9kN3XjcPUqQeKRjhuehRb SBGmo8ywhrh9TSCZ7kiuAG9eBM6Sa7I+MWvqy6SUKS8Q -----END CERTIFICATE-----Generated at Wed Jan 21 19:15:56 2026 by rpki-client