This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/qW7GPOXUB2kOz17G8MW05EGL-qI.roa File: qW7GPOXUB2kOz17G8MW05EGL-qI.roa (raw, json) Hash identifier: 23gVv5PC4uk3d5shuh+rzrrM1ECcEw5rTuYmm2m+M2k= Subject key identifier: A9:6E:C6:3C:E5:D4:07:69:0E:CF:5E:C6:F0:C5:B4:E4:41:8B:FA:A2 Certificate issuer: /CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae Certificate serial: 019B7B366DC52E6EDD4BE4F4F43F6AB58908 Authority key identifier: D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/qW7GPOXUB2kOz17G8MW05EGL-qI.roa Signing time: Thu 01 Jan 2026 20:18:43 +0000 ROA not before: Thu 01 Jan 2026 20:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41745 IP address blocks: 188.92.28.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 05:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6d:c5:2e:6e:dd:4b:e4:f4:f4:3f:6a:b5:89:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae Validity Not Before: Jan 1 20:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a96ec63ce5d407690ecf5ec6f0c5b4e4418bfaa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:16:81:91:f7:b1:d6:52:d8:05:31:97:0f:e0: 3c:7f:32:6d:91:12:c8:3d:dd:ed:3d:25:63:11:67: f8:c1:c8:7d:db:e1:fa:f2:00:c4:d2:2a:01:c3:e0: e5:49:9a:8a:0d:de:89:53:cb:32:36:f9:db:ac:a6: 3d:8e:c3:53:d1:b4:3c:53:f1:79:f4:72:98:20:87: 16:17:21:2a:25:62:ad:3b:26:38:27:78:97:74:44: f3:1d:25:10:f9:69:b1:aa:21:55:f1:71:d5:6f:d2: b5:d1:d7:ee:20:36:63:a3:d2:da:20:b8:f4:b5:a0: d5:04:42:7a:17:8d:f6:a4:99:97:32:75:ae:2f:f1: 36:94:97:4a:53:f7:5e:0b:04:08:6c:83:f4:b5:ff: a3:60:41:76:f8:22:9c:d1:c2:35:05:9f:fa:b7:4f: 5c:8b:95:80:7f:4b:db:e1:d7:e5:38:04:1b:bd:aa: bf:49:68:14:b2:85:d2:b5:c0:de:40:89:b3:b5:af: 25:26:5e:3b:63:c3:82:56:4f:96:3d:0d:18:5b:64: e4:81:3d:76:f6:c1:3f:99:79:f1:23:60:7a:c5:bd: ab:fe:f1:9c:87:15:29:3a:00:12:42:0e:80:47:31: 02:d0:b8:7b:58:f6:1f:c0:90:af:1a:d3:6e:88:ae: e7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6E:C6:3C:E5:D4:07:69:0E:CF:5E:C6:F0:C5:B4:E4:41:8B:FA:A2 X509v3 Authority Key Identifier: keyid:D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/qW7GPOXUB2kOz17G8MW05EGL-qI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.92.28.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:d0:65:ab:03:74:40:8a:7a:3f:fb:09:57:11:3c:c7:90:d1: a1:ea:c7:d8:86:3e:48:a4:d8:99:3d:94:8b:5e:22:ad:cc:17: f9:e3:3d:f5:3b:4a:f5:50:4a:9d:8b:30:76:61:27:7c:44:e9: 1c:68:34:13:de:12:4a:be:5b:63:b3:11:13:94:bc:bb:c4:99: ae:20:fd:f8:a8:e4:a5:4b:a8:af:1e:07:ec:7d:51:9e:13:8e: 75:93:2e:f7:c9:e1:b8:6d:49:07:0b:de:b7:03:1e:1d:02:46: 24:fd:75:6c:04:c4:37:66:2b:fd:ce:f7:cb:4c:87:92:4f:27: c3:21:5f:fa:04:d9:6f:56:b5:a5:ed:4f:15:5d:21:6a:ec:28: b0:8b:0b:7e:9b:0c:6f:34:45:47:74:0e:9b:67:32:cb:cb:dc: cd:33:36:1b:47:2c:2e:73:28:0a:39:fb:f7:a6:6a:57:d5:5f: 5b:d0:63:df:e8:f6:87:6d:e2:95:2c:e5:8e:39:2a:f9:60:72: d1:67:f1:4d:bf:5b:15:7c:3e:68:4f:91:b5:48:9f:10:d0:2c: 08:ff:da:85:17:66:85:9f:47:5b:49:be:a2:96:45:bf:57:44: ad:1b:e6:9c:2a:56:b4:c5:fd:64:11:20:14:74:af:a9:9b:3d: 48:1c:e1:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nm3FLm7dS+T09D9qtYkIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNzA5NjBlZDlhMGRhMWM5YjdlMjQ1N2VhYmNiNjYwNDc4 ZDA4YWUwHhcNMjYwMTAxMjAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTZlYzYzY2U1ZDQwNzY5MGVjZjVlYzZmMGM1YjRlNDQxOGJmYWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRaBkfex1lLYBTGXD+A8fzJtkRLI Pd3tPSVjEWf4wch92+H68gDE0ioBw+DlSZqKDd6JU8syNvnbrKY9jsNT0bQ8U/F5 9HKYIIcWFyEqJWKtOyY4J3iXdETzHSUQ+WmxqiFV8XHVb9K10dfuIDZjo9LaILj0 taDVBEJ6F432pJmXMnWuL/E2lJdKU/deCwQIbIP0tf+jYEF2+CKc0cI1BZ/6t09c i5WAf0vb4dflOAQbvaq/SWgUsoXStcDeQImzta8lJl47Y8OCVk+WPQ0YW2TkgT12 9sE/mXnxI2B6xb2r/vGchxUpOgASQg6ARzEC0Lh7WPYfwJCvGtNuiK7nFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKluxjzl1AdpDs9exvDFtORBi/qiMB8GA1UdIwQY MBaAFNBwlg7ZoNocm34kV+q8tmBHjQiuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEhDV0R0bWcyaHliZmlSWDZyeTJZRWVOQ0s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8wMzU1OGUtNjg4Zi00ZTFjLWE2NmYt NmVlZmRhMTEwOGFkLzEvcVc3R1BPWFVCMmtPejE3RzhNVzA1RUdMLXFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8wMzU1OGUtNjg4Zi00ZTFjLWE2NmYtNmVlZmRhMTEwOGFk LzEvMEhDV0R0bWcyaHliZmlSWDZyeTJZRWVOQ0s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvFwcMA0G CSqGSIb3DQEBCwUAA4IBAQAa0GWrA3RAino/+wlXETzHkNGh6sfYhj5IpNiZPZSL XiKtzBf54z31O0r1UEqdizB2YSd8ROkcaDQT3hJKvltjsxETlLy7xJmuIP34qOSl S6ivHgfsfVGeE451ky73yeG4bUkHC963Ax4dAkYk/XVsBMQ3Ziv9zvfLTIeSTyfD IV/6BNlvVrWl7U8VXSFq7Ciwiwt+mwxvNEVHdA6bZzLLy9zNMzYbRywucygKOfv3 pmpX1V9b0GPf6PaHbeKVLOWOOSr5YHLRZ/FNv1sVfD5oT5G1SJ8Q0CwI/9qFF2aF n0dbSb6ilkW/V0StG+acKla0xf1kESAUdK+pmz1IHOGT -----END CERTIFICATE-----Generated at Tue Jan 20 14:14:20 2026 by rpki-client