This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/qybWWPweMAxxbe6Dx9t3-MHAIDM.roa File: qybWWPweMAxxbe6Dx9t3-MHAIDM.roa (raw, json) Hash identifier: Vk+vGEJAunUNZlN6ZA7MDbwnLEBdBJ90nYvsUNNE5Fs= Subject key identifier: AB:26:D6:58:FC:1E:30:0C:71:6D:EE:83:C7:DB:77:F8:C1:C0:20:33 Certificate issuer: /CN=fec6fb5a467974c977a997c6dda1464805ed379f Certificate serial: 019B7CED0BDDD3E6844CD146D268D244FCEC Authority key identifier: FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/qybWWPweMAxxbe6Dx9t3-MHAIDM.roa Signing time: Fri 02 Jan 2026 04:17:48 +0000 ROA not before: Fri 02 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 176.116.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:0b:dd:d3:e6:84:4c:d1:46:d2:68:d2:44:fc:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fec6fb5a467974c977a997c6dda1464805ed379f Validity Not Before: Jan 2 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab26d658fc1e300c716dee83c7db77f8c1c02033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b3:37:9b:49:76:97:1e:bc:58:6f:ab:02:5a: 81:bf:71:0c:95:ea:11:16:09:0b:9c:37:40:80:b9: 98:43:7c:79:25:7d:7e:bc:66:61:46:bc:b7:71:0c: 94:61:9d:8e:41:43:78:b6:c0:db:7a:d6:04:0d:d8: 07:f5:18:f7:e1:5c:de:34:5c:8e:56:ba:8a:23:67: 34:28:55:9d:b4:6d:f6:9d:1d:56:19:2f:99:bc:21: 88:d9:32:d9:01:6c:b2:fc:c3:c2:a2:af:96:06:cb: 77:24:bc:d0:0b:56:3c:34:53:13:2d:b0:6e:34:5c: 90:6c:27:a4:77:b7:59:f3:80:61:b6:25:32:49:5d: 51:3c:5c:dc:90:ab:fe:5e:27:eb:5a:d2:a2:1f:5a: 40:fd:7b:5f:1d:16:24:c5:e0:fb:8d:6f:15:9f:57: ed:2a:5d:91:cb:56:5a:c6:d9:6d:e1:70:be:47:10: 3d:ed:25:41:64:71:b4:af:91:9a:d5:23:11:a1:9e: d3:ba:c2:60:33:f2:df:aa:9b:fc:41:10:8e:c0:80: 4f:6b:66:6a:ba:f8:8e:12:fc:dd:3e:46:5e:3d:3f: 52:c4:fb:7a:22:52:f5:09:7e:7a:2b:61:e9:f9:04: 7a:7a:72:fb:99:39:0a:24:54:49:9f:d2:d9:8b:72: e7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:26:D6:58:FC:1E:30:0C:71:6D:EE:83:C7:DB:77:F8:C1:C0:20:33 X509v3 Authority Key Identifier: keyid:FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/qybWWPweMAxxbe6Dx9t3-MHAIDM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.116.123.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:52:6d:a0:cf:65:2c:f1:ab:9b:99:d0:2f:3d:ec:63:7a:9e: be:9e:3a:4e:5e:3f:3a:ec:6a:73:d7:3b:0c:9f:e7:f7:9f:2c: 48:f9:e7:3d:24:61:08:45:4a:95:4c:a9:4b:4b:a3:e1:eb:4b: f6:76:35:72:55:ae:c2:b5:bc:ce:e1:f3:0e:8a:e5:b5:21:d9: fd:ad:94:ee:17:ce:87:e6:7f:76:11:5d:bd:58:4f:ff:70:5e: db:42:c9:cf:30:ff:ec:0c:c9:d0:14:e8:c6:c7:b8:db:ef:30: ab:81:fe:61:aa:78:17:d8:90:f2:f8:9d:48:bd:71:e1:22:fc: 96:e5:9c:7a:af:ef:a1:03:09:c2:18:c4:7d:9a:eb:42:57:2b: de:c8:e3:c6:ce:e7:8a:36:7b:90:2d:41:0f:31:d0:45:ad:ef: 2e:e9:8b:19:4f:fd:7b:d6:8c:97:10:4a:7c:92:d1:b9:58:69: e7:f9:96:c6:1b:56:b2:e1:40:a7:e8:75:f7:ad:be:60:f1:12: 75:81:ea:3d:c2:71:48:c8:de:ad:88:64:72:88:e7:91:5d:fa: cd:b6:b5:29:5d:b6:1b:b8:44:37:f0:8c:5f:43:0e:be:9a:47: 56:a4:55:d6:14:7b:3f:9e:94:c3:54:a9:33:a9:bb:96:9e:4d: 20:b0:ef:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Qvd0+aETNFG0mjSRPzsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYzZmYjVhNDY3OTc0Yzk3N2E5OTdjNmRkYTE0NjQ4MDVl ZDM3OWYwHhcNMjYwMTAyMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjI2ZDY1OGZjMWUzMDBjNzE2ZGVlODNjN2RiNzdmOGMxYzAyMDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrM3m0l2lx68WG+rAlqBv3EMleoR FgkLnDdAgLmYQ3x5JX1+vGZhRry3cQyUYZ2OQUN4tsDbetYEDdgH9Rj34VzeNFyO VrqKI2c0KFWdtG32nR1WGS+ZvCGI2TLZAWyy/MPCoq+WBst3JLzQC1Y8NFMTLbBu NFyQbCekd7dZ84BhtiUySV1RPFzckKv+XifrWtKiH1pA/XtfHRYkxeD7jW8Vn1ft Kl2Ry1Zaxtlt4XC+RxA97SVBZHG0r5Ga1SMRoZ7TusJgM/Lfqpv8QRCOwIBPa2Zq uviOEvzdPkZePT9SxPt6IlL1CX56K2Hp+QR6enL7mTkKJFRJn9LZi3LnuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKsm1lj8HjAMcW3ug8fbd/jBwCAzMB8GA1UdIwQY MBaAFP7G+1pGeXTJd6mXxt2hRkgF7TefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUt MTI2NDFmOWU2ZmMwLzEvcXliV1dQd2VNQXh4YmU2RHg5dDMtTUhBSURNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUtMTI2NDFmOWU2ZmMw LzEvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHR7MA0G CSqGSIb3DQEBCwUAA4IBAQBdUm2gz2Us8aubmdAvPexjep6+njpOXj867Gpz1zsM n+f3nyxI+ec9JGEIRUqVTKlLS6Ph60v2djVyVa7CtbzO4fMOiuW1Idn9rZTuF86H 5n92EV29WE//cF7bQsnPMP/sDMnQFOjGx7jb7zCrgf5hqngX2JDy+J1IvXHhIvyW 5Zx6r++hAwnCGMR9mutCVyveyOPGzueKNnuQLUEPMdBFre8u6YsZT/171oyXEEp8 ktG5WGnn+ZbGG1ay4UCn6HX3rb5g8RJ1geo9wnFIyN6tiGRyiOeRXfrNtrUpXbYb uEQ38IxfQw6+mkdWpFXWFHs/npTDVKkzqbuWnk0gsO8V -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:37 2026 by rpki-client