This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-qhtSbMlLyCBEl6GxatZJF4Of1s.roa File: 1-qhtSbMlLyCBEl6GxatZJF4Of1s.roa (raw, json) Hash identifier: quy4PnAQYa/TEccjPsx0x0wzm8S4kM2LE24/HIrHl4s= Subject key identifier: FA:A8:6D:49:B3:25:2F:20:81:12:5E:86:C5:AB:59:24:5E:0E:7F:5B Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A25FBF81E4198160C4D418A87DB8E4 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-qhtSbMlLyCBEl6GxatZJF4Of1s.roa Signing time: Thu 01 Jan 2026 08:17:45 +0000 ROA not before: Thu 01 Jan 2026 08:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 212.135.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:5f:bf:81:e4:19:81:60:c4:d4:18:a8:7d:b8:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=faa86d49b3252f2081125e86c5ab59245e0e7f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3b:b7:7f:86:91:74:90:73:96:a5:3d:ab:1c: da:43:18:13:3e:c7:21:b5:d6:9e:da:30:ab:2b:38: ad:3f:99:57:88:b3:5d:fa:f3:08:48:c9:01:bb:01: a0:53:52:23:38:89:77:00:f1:aa:e6:3d:25:f4:b3: c3:ac:e6:46:df:24:bf:0c:09:38:f7:a1:50:85:48: 4b:1a:13:50:95:03:dc:c7:6c:e2:e8:8d:8f:a5:80: 46:23:f2:6e:9f:a2:7f:51:7f:01:1d:94:4e:a0:aa: 08:b6:b5:a0:96:4a:70:fe:9e:f4:cd:75:46:85:3a: 29:5a:3f:64:ff:76:6e:f8:5a:cf:01:74:5a:99:fd: 24:ce:4f:3c:68:d9:5e:0c:0c:3b:5d:9a:a0:9d:bb: 4d:3f:d9:96:d2:24:79:e0:4a:8c:10:ae:d2:5b:fa: 13:a1:1a:67:92:8d:e6:35:5e:c3:81:db:37:d3:d2: 71:eb:87:f2:d3:d2:5f:f5:96:56:94:3d:c9:b8:44: 2a:79:20:34:95:08:05:b0:f1:3a:77:5d:e0:a1:3b: 56:48:e5:98:e0:37:56:a7:90:77:65:ea:05:a1:9f: 26:43:4f:93:29:10:fb:ad:5b:28:fd:b6:8b:90:a6: 98:55:1b:ca:7e:d5:a0:53:45:c8:01:fb:a6:6b:a1: d8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A8:6D:49:B3:25:2F:20:81:12:5E:86:C5:AB:59:24:5E:0E:7F:5B X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-qhtSbMlLyCBEl6GxatZJF4Of1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.135.24.0/24 Signature Algorithm: sha256WithRSAEncryption 13:e9:80:8a:f9:e9:f4:02:5c:55:3a:9b:44:f7:43:8f:ec:85: 0b:7c:86:07:5e:05:db:f7:6d:b9:04:b6:98:17:ba:8f:37:5b: a1:0b:89:32:7a:a3:56:a4:a6:49:ee:cd:00:13:de:94:c7:c8: 81:93:c1:7a:da:20:b3:92:a2:62:d5:fc:9d:d0:31:38:5f:92: cf:d3:cb:21:98:7b:4e:51:80:b4:8a:42:84:16:f0:51:b1:2a: 81:e0:61:0b:d2:02:ed:ff:e8:e7:f5:25:32:56:ce:6f:84:a2: 3c:96:01:b2:70:7f:06:38:f6:c5:6e:9a:c9:7b:73:b0:22:46: 71:a2:33:8a:8f:b6:51:1f:90:f3:44:a5:b1:de:b6:56:85:63: 57:79:40:55:6f:24:f8:ca:8c:41:59:a6:a0:6b:9c:ec:17:d2: 41:b6:9f:6c:f0:31:29:75:ae:0f:23:08:58:19:21:63:39:df: eb:11:3f:0e:09:a7:5b:dc:04:08:71:17:55:7d:90:fd:38:ad: 81:e0:8f:32:44:43:8d:d1:c4:5b:17:69:b2:38:96:ae:43:75: 60:de:df:1a:93:90:77:1a:b8:70:29:3f:e4:ab:74:d9:73:08: ea:b6:a5:ce:69:a9:2d:89:62:65:d0:fb:d5:0f:80:7d:b9:e2: c6:f4:a6:6e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4ol+/geQZgWDE1BiofbjkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWE4NmQ0OWIzMjUyZjIwODExMjVlODZjNWFiNTkyNDVlMGU3ZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ju3f4aRdJBzlqU9qxzaQxgTPsch tdae2jCrKzitP5lXiLNd+vMISMkBuwGgU1IjOIl3APGq5j0l9LPDrOZG3yS/DAk4 96FQhUhLGhNQlQPcx2zi6I2PpYBGI/Jun6J/UX8BHZROoKoItrWglkpw/p70zXVG hTopWj9k/3Zu+FrPAXRamf0kzk88aNleDAw7XZqgnbtNP9mW0iR54EqMEK7SW/oT oRpnko3mNV7Dgds309Jx64fy09Jf9ZZWlD3JuEQqeSA0lQgFsPE6d13goTtWSOWY 4DdWp5B3ZeoFoZ8mQ0+TKRD7rVso/baLkKaYVRvKftWgU0XIAfuma6HYPwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPqobUmzJS8ggRJehsWrWSReDn9bMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvMS1xaHRTYk1sTHlDQkVsNkd4YXRaSkY0T2Yxcy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODAvNmI2NjJkLTAyYTEtNDZlNy1iOWNkLTAzNWQ5NzdmNDIx Ni8xL2ZpQ3dOT0xFbDdHSVJJamU4UWFYSndSMlVDay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANSHGDAN BgkqhkiG9w0BAQsFAAOCAQEAE+mAivnp9AJcVTqbRPdDj+yFC3yGB14F2/dtuQS2 mBe6jzdboQuJMnqjVqSmSe7NABPelMfIgZPBetogs5KiYtX8ndAxOF+Sz9PLIZh7 TlGAtIpChBbwUbEqgeBhC9IC7f/o5/UlMlbOb4SiPJYBsnB/Bjj2xW6ayXtzsCJG caIzio+2UR+Q80Slsd62VoVjV3lAVW8k+MqMQVmmoGuc7BfSQbafbPAxKXWuDyMI WBkhYznf6xE/DgmnW9wECHEXVX2Q/TitgeCPMkRDjdHEWxdpsjiWrkN1YN7fGpOQ dxq4cCk/5Kt02XMI6ralzmmpLYliZdD71Q+AfbnixvSmbg== -----END CERTIFICATE-----Generated at Mon Jan 19 05:21:58 2026 by rpki-client