This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/qWe294Ei1KcP7LLF_E68t8u4v2o.roa File: qWe294Ei1KcP7LLF_E68t8u4v2o.roa (raw, json) Hash identifier: TmWYzb/EBwItjJBOCTUphVA+ws8PNz247snlygTbJKo= Subject key identifier: A9:67:B6:F7:81:22:D4:A7:0F:EC:B2:C5:FC:4E:BC:B7:CB:B8:BF:6A Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019B7F81780EFC6C93B4181ECE2764673A5A Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/qWe294Ei1KcP7LLF_E68t8u4v2o.roa Signing time: Fri 02 Jan 2026 16:19:09 +0000 ROA not before: Fri 02 Jan 2026 16:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201838 IP address blocks: 168.199.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:78:0e:fc:6c:93:b4:18:1e:ce:27:64:67:3a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Jan 2 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a967b6f78122d4a70fecb2c5fc4ebcb7cbb8bf6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:01:9a:00:0c:89:33:a9:2a:2c:32:9a:28:33: be:c2:2c:fa:d9:af:12:fa:88:c1:9a:ae:2e:e9:18: a4:2a:63:5a:2c:8b:19:19:0a:8f:93:0f:f5:4d:45: 56:8e:76:6c:d3:d9:93:be:bf:27:5e:af:ee:ae:3c: e9:62:d9:6a:5c:fd:87:f4:7d:17:7c:c1:08:d2:2b: 14:8a:a2:2d:97:4e:f7:44:a9:a4:51:8b:bf:f0:2a: 87:69:6a:6d:8e:91:f4:36:94:48:42:af:61:36:1b: 00:3b:de:5a:ae:57:0b:6f:f9:5e:2c:1b:0e:13:fb: 26:bd:54:47:c2:c3:89:61:73:ba:2b:ff:89:e9:89: 75:87:58:ab:93:ff:76:bd:36:44:1c:2b:61:8a:7b: c9:dd:58:ed:6c:f3:56:67:20:8f:80:07:d3:41:e7: ca:03:73:0f:48:ab:a5:0a:18:9b:64:45:ac:02:a9: 49:b1:1a:61:8b:3d:04:a7:62:d9:75:f5:cd:ae:7d: ce:a3:7a:c5:55:42:41:f1:87:04:e8:74:33:9f:c1: 2d:3e:da:34:51:2a:b9:5e:95:01:a3:c5:82:cd:17: a9:04:e2:f3:89:e6:12:43:da:be:c5:c0:e4:0b:b2: e5:9e:7b:cb:f5:cf:8b:28:60:33:2b:e6:f6:8f:d3: 0f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:67:B6:F7:81:22:D4:A7:0F:EC:B2:C5:FC:4E:BC:B7:CB:B8:BF:6A X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/qWe294Ei1KcP7LLF_E68t8u4v2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.199.64.0/19 Signature Algorithm: sha256WithRSAEncryption 1c:e5:8b:5b:b8:0e:7c:c5:45:37:bb:92:31:84:e8:8b:70:77: 8d:d1:78:f8:e6:64:3f:8e:31:4d:ed:60:8b:1a:75:dd:1a:6a: 12:b1:08:47:de:28:b7:f3:b3:3a:4d:7f:20:d6:5b:c9:5d:12: e1:ec:f0:8e:7f:87:f8:a7:04:50:64:42:65:f9:81:bf:be:6f: 40:75:4b:4e:76:b5:88:d1:b6:ad:13:43:3d:af:9d:b0:de:c6: ba:1b:07:29:14:f0:f8:1b:9d:e3:c3:51:1d:c2:e7:77:c7:0d: 4a:69:6a:e5:d2:3e:f4:72:7c:38:2a:0e:e3:11:76:8e:c0:89: d6:2d:e7:30:fd:4e:25:df:da:a6:67:f0:ea:b2:06:29:c9:2f: 19:70:cf:a5:7a:25:93:f8:65:51:6a:ce:61:bc:6e:53:4b:31: 6f:0d:c3:3b:a5:a4:6d:45:78:7b:ab:41:6c:6b:a9:f9:8a:cb: 99:84:04:1b:45:ee:f6:be:9f:31:b8:7c:ba:bc:45:ed:63:3c: e5:b5:3f:38:df:d2:c2:88:a8:a5:94:b3:1f:1c:5c:c9:6a:df: c7:ba:70:75:d6:bf:70:03:95:4d:db:cf:8a:c7:2e:55:8c:10: 8a:74:93:21:d3:80:aa:0d:a1:59:14:cd:bc:e4:ed:dc:79:ac: f6:b8:6b:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gXgO/GyTtBgezidkZzpaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjYwMTAyMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTY3YjZmNzgxMjJkNGE3MGZlY2IyYzVmYzRlYmNiN2NiYjhiZjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAGaAAyJM6kqLDKaKDO+wiz62a8S +ojBmq4u6RikKmNaLIsZGQqPkw/1TUVWjnZs09mTvr8nXq/urjzpYtlqXP2H9H0X fMEI0isUiqItl073RKmkUYu/8CqHaWptjpH0NpRIQq9hNhsAO95arlcLb/leLBsO E/smvVRHwsOJYXO6K/+J6Yl1h1irk/92vTZEHCthinvJ3VjtbPNWZyCPgAfTQefK A3MPSKulChibZEWsAqlJsRphiz0Ep2LZdfXNrn3Oo3rFVUJB8YcE6HQzn8EtPto0 USq5XpUBo8WCzRepBOLzieYSQ9q+xcDkC7LlnnvL9c+LKGAzK+b2j9MPkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKlntveBItSnD+yyxfxOvLfLuL9qMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvcVdlMjk0RWkxS2NQN0xMRl9FNjh0OHU0djJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqMdAMA0G CSqGSIb3DQEBCwUAA4IBAQAc5YtbuA58xUU3u5IxhOiLcHeN0Xj45mQ/jjFN7WCL GnXdGmoSsQhH3ii387M6TX8g1lvJXRLh7PCOf4f4pwRQZEJl+YG/vm9AdUtOdrWI 0batE0M9r52w3sa6GwcpFPD4G53jw1Edwud3xw1KaWrl0j70cnw4Kg7jEXaOwInW Lecw/U4l39qmZ/DqsgYpyS8ZcM+leiWT+GVRas5hvG5TSzFvDcM7paRtRXh7q0Fs a6n5isuZhAQbRe72vp8xuHy6vEXtYzzltT8439LCiKillLMfHFzJat/HunB11r9w A5VN28+Kxy5VjBCKdJMh04CqDaFZFM285O3ceaz2uGv2 -----END CERTIFICATE-----Generated at Fri Jan 9 16:49:22 2026 by rpki-client