This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qXbKYEb-OPpzOV_XPg31yCJAfwo.roa File: qXbKYEb-OPpzOV_XPg31yCJAfwo.roa (raw, json) Hash identifier: ecSYp8Vy73LEPlIxOBHcVaTZ8o2xUH7m4S2UP6/huuk= Subject key identifier: A9:76:CA:60:46:FE:38:FA:73:39:5F:D7:3E:0D:F5:C8:22:40:7F:0A Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A239A16D6ABE7976D77370876EFF26 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qXbKYEb-OPpzOV_XPg31yCJAfwo.roa Signing time: Thu 01 Jan 2026 08:17:36 +0000 ROA not before: Thu 01 Jan 2026 08:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 984 IP address blocks: 95.177.63.0/24 maxlen: 24 95.177.67.0/24 maxlen: 24 95.177.74.0/24 maxlen: 24 95.177.85.0/24 maxlen: 24 212.135.24.0/24 maxlen: 24 213.177.226.0/23 maxlen: 24 213.177.230.0/23 maxlen: 24 213.177.234.0/23 maxlen: 24 213.177.238.0/23 maxlen: 24 213.177.242.0/23 maxlen: 24 213.177.246.0/23 maxlen: 24 213.177.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:39:a1:6d:6a:be:79:76:d7:73:70:87:6e:ff:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a976ca6046fe38fa73395fd73e0df5c822407f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d1:27:d8:08:f0:67:41:42:4d:be:b4:1f:73: 19:6a:21:8f:e3:0e:f9:1f:7c:93:86:0f:32:b0:90: dd:cc:9a:97:de:6a:ba:04:91:ee:16:96:d4:4f:b7: 0b:9e:12:db:38:8a:e8:a6:91:05:8a:5a:47:f1:91: 6c:19:37:41:ae:33:72:9d:82:9b:e8:f6:75:da:e0: f7:3f:82:d1:3c:30:04:44:d4:6d:05:a4:a4:6e:ec: 8d:c7:7a:db:35:90:02:b5:76:ae:88:49:b8:04:12: 83:69:d3:46:52:e6:86:be:ab:48:40:b1:d0:a4:8e: aa:60:11:4b:7d:46:a5:40:55:13:a0:e6:80:1f:3e: 6f:a3:ef:97:f8:59:6f:fb:83:33:d6:4d:87:6c:89: c7:47:2d:14:7f:7b:19:ae:73:6a:c3:97:67:f3:fd: d5:20:9f:72:0b:c7:e5:05:38:14:f5:b4:fd:8f:6a: 91:15:f1:55:8d:24:e3:bf:32:a5:8a:6d:dc:3c:e2: bf:a2:fc:9f:0f:3e:19:be:57:e2:ba:17:5c:cc:31: e4:46:9a:fe:ee:01:6f:17:0a:bb:e9:2b:6f:5a:4e: c6:f4:80:d8:7a:0e:ce:7f:8b:69:4f:0e:97:98:e6: 8f:2f:bd:0c:4b:76:61:ab:09:b6:9c:84:db:4e:47: b5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:76:CA:60:46:FE:38:FA:73:39:5F:D7:3E:0D:F5:C8:22:40:7F:0A X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qXbKYEb-OPpzOV_XPg31yCJAfwo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.177.63.0/24 95.177.67.0/24 95.177.74.0/24 95.177.85.0/24 212.135.24.0/24 213.177.226.0/23 213.177.230.0/23 213.177.234.0/23 213.177.238.0/23 213.177.242.0/23 213.177.246.0/23 213.177.250.0/23 Signature Algorithm: sha256WithRSAEncryption 54:a4:1e:bc:6a:d5:d0:55:5f:34:1d:ed:3b:1c:d2:9a:56:f7: 20:1d:7f:ed:a3:63:d9:43:53:36:2c:eb:58:75:ab:ae:83:0b: bc:3e:fe:85:3b:24:e2:a4:92:80:e0:53:b9:db:91:25:1b:6f: 2c:25:13:4c:cc:c5:c2:64:4c:20:87:78:6f:ed:0c:49:c1:70: 12:b5:58:b5:a4:28:59:2c:ef:98:06:63:e5:c2:88:67:6f:79: 00:50:31:44:d6:ea:c9:64:b6:ef:0d:83:9e:83:fe:57:f7:45: c2:84:d6:0b:0a:4d:b3:52:ea:98:49:20:4b:b0:5e:47:3b:aa: fc:f7:63:6d:e2:bb:dc:39:3e:0d:e8:d0:c8:68:99:fe:1f:60: 9a:5a:18:f6:78:ca:65:ae:3a:3e:92:2e:bb:5c:e7:c7:23:33: 04:9a:a5:9b:cf:49:23:50:60:05:93:18:85:78:d4:0e:f0:ce: f5:a5:83:d0:58:a5:c3:e8:6b:52:18:20:c3:bb:87:b0:04:da: 93:e2:56:5f:de:29:c2:08:4c:a0:c2:4d:19:01:61:38:44:37: 76:5d:80:2e:f8:6f:33:3b:bb:d7:3a:5c:1d:b5:bf:eb:09:3b: c0:80:a2:90:8a:1a:07:e0:a7:e8:50:e6:60:52:2e:c0:3d:d5: ee:26:43:4e -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt4ojmhbWq+eXbXc3CHbv8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTc2Y2E2MDQ2ZmUzOGZhNzMzOTVmZDczZTBkZjVjODIyNDA3ZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdEn2AjwZ0FCTb60H3MZaiGP4w75 H3yThg8ysJDdzJqX3mq6BJHuFpbUT7cLnhLbOIroppEFilpH8ZFsGTdBrjNynYKb 6PZ12uD3P4LRPDAERNRtBaSkbuyNx3rbNZACtXauiEm4BBKDadNGUuaGvqtIQLHQ pI6qYBFLfUalQFUToOaAHz5vo++X+Flv+4Mz1k2HbInHRy0Uf3sZrnNqw5dn8/3V IJ9yC8flBTgU9bT9j2qRFfFVjSTjvzKlim3cPOK/ovyfDz4ZvlfiuhdczDHkRpr+ 7gFvFwq76StvWk7G9IDYeg7Of4tpTw6XmOaPL70MS3Zhqwm2nITbTke1PQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKl2ymBG/jj6czlf1z4N9cgiQH8KMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvcVhiS1lFYi1PUHB6T1ZfWFBnMzF5Q0pBZndvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAX7E/AwQA X7FDAwQAX7FKAwQAX7FVAwQA1IcYAwQB1bHiAwQB1bHmAwQB1bHqAwQB1bHuAwQB 1bHyAwQB1bH2AwQB1bH6MA0GCSqGSIb3DQEBCwUAA4IBAQBUpB68atXQVV80He07 HNKaVvcgHX/to2PZQ1M2LOtYdauugwu8Pv6FOyTipJKA4FO525ElG28sJRNMzMXC ZEwgh3hv7QxJwXAStVi1pChZLO+YBmPlwohnb3kAUDFE1urJZLbvDYOeg/5X90XC hNYLCk2zUuqYSSBLsF5HO6r892Nt4rvcOT4N6NDIaJn+H2CaWhj2eMplrjo+ki67 XOfHIzMEmqWbz0kjUGAFkxiFeNQO8M71pYPQWKXD6GtSGCDDu4ewBNqT4lZf3inC CEygwk0ZAWE4RDd2XYAu+G8zO7vXOlwdtb/rCTvAgKKQihoH4KfoUOZgUi7APdXu JkNO -----END CERTIFICATE-----Generated at Sun Jan 18 04:27:26 2026 by rpki-client