This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/qyB9u_3J_RVeVDkMwpKRWS3V5cg.roa File: qyB9u_3J_RVeVDkMwpKRWS3V5cg.roa (raw, json) Hash identifier: PkKzlFF97/fV6zQLm2s5vsmD97htFdAYzjNYK4JSses= Subject key identifier: AB:20:7D:BB:FD:C9:FD:15:5E:54:39:0C:C2:92:91:59:2D:D5:E5:C8 Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808 Certificate serial: 019B7EA67272E7359FA47E27EAF09D10D4D8 Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/qyB9u_3J_RVeVDkMwpKRWS3V5cg.roa Signing time: Fri 02 Jan 2026 12:19:56 +0000 ROA not before: Fri 02 Jan 2026 12:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59476 IP address blocks: 176.99.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:72:72:e7:35:9f:a4:7e:27:ea:f0:9d:10:d4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808 Validity Not Before: Jan 2 12:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab207dbbfdc9fd155e54390cc29291592dd5e5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:aa:dd:42:3c:23:c1:db:ac:3f:21:7a:a8:b9: 65:9c:d8:ca:bf:79:f8:fc:f7:94:65:2b:ce:85:e1: 35:14:7c:32:b9:ab:2f:f5:eb:e8:d3:88:3f:69:af: 0e:f5:5c:05:6e:5a:8f:ca:c9:3d:ff:5e:14:94:15: 69:7f:d8:72:40:7a:b7:a7:f2:61:08:85:e3:e6:55: 7b:ae:e2:5c:87:16:8a:99:f3:88:e6:14:4b:0b:5e: 9c:6d:f2:81:ab:ef:8c:1d:9f:88:9c:ff:ed:83:79: 1f:b4:ed:76:b6:9a:47:0b:5b:a9:67:ab:6e:55:42: 09:85:f0:01:79:11:8f:68:28:8e:3f:72:e4:53:56: d7:54:f1:27:8b:a6:95:a5:da:69:07:82:db:e3:1e: f4:a2:45:33:e3:7e:1f:67:8c:14:80:0d:47:f6:5e: 1b:08:62:af:70:ed:6e:5c:1c:c6:59:22:b1:c2:b1: 4d:d7:10:86:7a:bc:2e:a5:f7:a7:5f:a7:74:e9:aa: 5e:eb:f9:be:2a:a2:f6:31:e3:55:74:cc:7a:b4:90: a8:b4:48:79:b7:5c:08:38:4d:a7:1d:c5:b5:82:67: 64:1b:e4:69:71:30:28:e5:60:0c:0e:81:92:a3:05: cb:a8:0e:9c:08:ed:79:44:df:96:30:2c:01:3f:44: 45:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:20:7D:BB:FD:C9:FD:15:5E:54:39:0C:C2:92:91:59:2D:D5:E5:C8 X509v3 Authority Key Identifier: keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/qyB9u_3J_RVeVDkMwpKRWS3V5cg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.99.56.0/21 Signature Algorithm: sha256WithRSAEncryption 10:7c:fc:a5:fc:39:3f:ae:3e:d8:05:42:e8:ae:fc:0c:73:4c: 14:ab:b6:29:15:cc:49:54:30:56:ec:da:97:22:80:73:d2:37: a9:84:db:5c:bf:d0:bd:a3:fd:b6:cc:5b:d0:d7:aa:46:de:15: a5:73:56:2f:dc:a2:99:00:21:e0:f3:ef:87:e9:76:08:6e:17: 13:d5:e8:26:fd:4d:07:96:5f:59:0b:32:83:e5:a2:8d:ee:f9: dd:de:2c:f9:1e:0d:f2:fe:15:f1:fd:a2:7e:d7:6b:20:01:91: aa:48:f4:de:1d:6a:27:f5:c6:81:9f:a2:58:b6:7d:33:0a:62: 50:94:77:fb:c1:d7:db:14:fc:5b:14:fb:3f:90:07:67:27:3e: 62:c7:83:a3:8e:85:35:e0:3c:6c:3d:9a:26:38:34:e6:c0:8d: cf:c1:b8:38:73:85:64:e2:d2:3e:4b:87:58:91:da:1f:44:f9: 7e:db:01:09:d4:14:f2:da:f3:e5:07:72:12:a4:e0:8e:f6:98: f5:8b:ac:37:ec:0b:70:34:4d:a8:4f:6f:15:51:7f:b0:20:60: 79:88:81:79:f7:d7:de:5b:9e:4a:49:dd:f9:8e:ff:1b:07:53: 58:67:75:ad:d4:26:36:7b:9a:e7:da:fe:3e:5c:f3:bc:09:ce: 22:0a:68:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pnJy5zWfpH4n6vCdENTYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj NmY4MDgwHhcNMjYwMTAyMTIxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjIwN2RiYmZkYzlmZDE1NWU1NDM5MGNjMjkyOTE1OTJkZDVlNWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKrdQjwjwdusPyF6qLllnNjKv3n4 /PeUZSvOheE1FHwyuasv9evo04g/aa8O9VwFblqPysk9/14UlBVpf9hyQHq3p/Jh CIXj5lV7ruJchxaKmfOI5hRLC16cbfKBq++MHZ+InP/tg3kftO12tppHC1upZ6tu VUIJhfABeRGPaCiOP3LkU1bXVPEni6aVpdppB4Lb4x70okUz434fZ4wUgA1H9l4b CGKvcO1uXBzGWSKxwrFN1xCGerwupfenX6d06ape6/m+KqL2MeNVdMx6tJCotEh5 t1wIOE2nHcW1gmdkG+RpcTAo5WAMDoGSowXLqA6cCO15RN+WMCwBP0RF2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKsgfbv9yf0VXlQ5DMKSkVkt1eXIMB8GA1UdIwQY MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt OTI5ZjdkNjM1ZjRiLzEvcXlCOXVfM0pfUlZlVkRrTXdwS1JXUzNWNWNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsGM4MA0G CSqGSIb3DQEBCwUAA4IBAQAQfPyl/Dk/rj7YBULorvwMc0wUq7YpFcxJVDBW7NqX IoBz0jephNtcv9C9o/22zFvQ16pG3hWlc1Yv3KKZACHg8++H6XYIbhcT1egm/U0H ll9ZCzKD5aKN7vnd3iz5Hg3y/hXx/aJ+12sgAZGqSPTeHWon9caBn6JYtn0zCmJQ lHf7wdfbFPxbFPs/kAdnJz5ix4OjjoU14DxsPZomODTmwI3Pwbg4c4Vk4tI+S4dY kdofRPl+2wEJ1BTy2vPlB3ISpOCO9pj1i6w37AtwNE2oT28VUX+wIGB5iIF599fe W55KSd35jv8bB1NYZ3Wt1CY2e5rn2v4+XPO8Cc4iCmhG -----END CERTIFICATE-----Generated at Sat Jan 31 07:26:32 2026 by rpki-client