This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/qi3SqAR4IIR7pmGIGinOQFwfq00.roa File: qi3SqAR4IIR7pmGIGinOQFwfq00.roa (raw, json) Hash identifier: 7JqUABvsjicn+d6phPLtYhYvVDr7+WhkTEpAXtYm16M= Subject key identifier: AA:2D:D2:A8:04:78:20:84:7B:A6:61:88:1A:29:CE:40:5C:1F:AB:4D Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55 Certificate serial: 019B79104DB4C7C5E96FF1E22A4FC4857E8B Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/qi3SqAR4IIR7pmGIGinOQFwfq00.roa Signing time: Thu 01 Jan 2026 10:17:50 +0000 ROA not before: Thu 01 Jan 2026 10:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50349 IP address blocks: 217.11.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4d:b4:c7:c5:e9:6f:f1:e2:2a:4f:c4:85:7e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55 Validity Not Before: Jan 1 10:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa2dd2a8047820847ba661881a29ce405c1fab4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b3:69:8d:c7:75:e3:e3:ee:ab:8c:ca:da:41: 9d:b9:03:63:6a:16:c2:48:6a:b1:8f:b1:aa:07:22: df:fa:07:f4:b3:6e:57:41:dd:6a:fb:a1:5f:d3:ac: 89:1d:7e:eb:2f:5e:58:31:9d:f8:7f:15:41:7e:f6: 9b:b1:a8:62:79:88:7c:54:a5:ea:ea:8f:40:63:f3: 09:46:3b:93:82:fd:6f:e3:12:d9:84:b1:16:de:ec: 2e:b6:99:ba:19:25:64:99:3f:17:2b:bb:8d:80:47: 31:92:9a:e4:43:ac:91:4a:9c:8b:36:67:b8:91:af: b4:71:2e:e5:a1:4b:82:62:aa:69:1f:73:c8:e2:de: 2b:4a:9a:ad:5d:a2:17:ed:2c:03:f6:28:85:13:ba: 03:96:97:e8:ba:94:81:31:4c:2f:58:90:8d:62:98: 1b:bf:34:0b:c0:0b:3e:93:54:72:d4:44:55:2b:59: 6e:6c:bd:16:cc:40:e4:6b:f9:94:67:13:13:93:2a: c4:ab:75:c2:78:02:3c:92:cf:8c:35:38:c8:07:78: c1:ea:2f:01:1f:f6:84:e3:fd:4f:bd:56:6b:7e:c7: 06:14:b4:c8:b2:b2:45:ac:38:cb:30:76:a9:2c:ae: dc:74:ee:89:61:de:db:8a:ce:89:d3:0f:73:d8:80: 43:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2D:D2:A8:04:78:20:84:7B:A6:61:88:1A:29:CE:40:5C:1F:AB:4D X509v3 Authority Key Identifier: keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/qi3SqAR4IIR7pmGIGinOQFwfq00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.11.128.0/22 Signature Algorithm: sha256WithRSAEncryption 39:73:d1:f3:d3:4e:3a:ad:97:69:0e:f2:d5:e8:0d:89:f8:71: 65:4b:ba:12:fc:6d:0b:32:ec:94:94:d0:b8:56:be:cf:89:1b: 6f:ea:e5:9a:de:3c:ed:73:cc:40:44:c9:6f:03:e9:9c:6f:ee: 34:12:32:3a:af:c7:2a:7d:26:8d:f1:a2:97:cb:36:75:a9:ea: 80:26:7e:2a:a7:90:9e:4f:98:66:6e:2c:3a:e7:7e:c0:88:7a: 1b:27:95:fb:2d:d5:e5:a2:c6:ba:ca:7e:89:46:b0:d3:b7:d5: c8:c6:ee:20:d4:9a:b1:a0:41:00:0f:79:2b:a5:fa:27:94:b4: 0f:6d:27:07:29:60:7e:28:32:a7:1d:e6:c8:8a:ec:05:8c:0b: c6:37:ad:08:b7:ee:13:e4:6d:48:2b:94:12:e1:fc:e1:f2:17: e5:b2:39:18:50:95:20:f0:cb:7a:f7:37:0b:21:46:8e:34:f4: b0:d4:c5:d1:c1:c9:c1:f4:51:b5:08:12:8b:b6:bc:66:18:a3: dd:02:cb:44:b0:d2:8d:fe:4d:a0:4d:04:7b:f1:9a:9e:d6:fe: 8b:ee:6a:05:81:34:43:4a:74:bc:fc:11:ea:67:17:0a:54:fc: 86:2d:6b:6d:17:80:84:95:2e:c6:f1:a0:13:30:79:be:03:48: ec:dd:e2:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EE20x8Xpb/HiKk/EhX6LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMGExMjMxZDFjMjdhNzU0ZTQ2ZWYxMGU5MmE3MzBhZTE1 ZDBmNTUwHhcNMjYwMTAxMTAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTJkZDJhODA0NzgyMDg0N2JhNjYxODgxYTI5Y2U0MDVjMWZhYjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbNpjcd14+Puq4zK2kGduQNjahbC SGqxj7GqByLf+gf0s25XQd1q+6Ff06yJHX7rL15YMZ34fxVBfvabsahieYh8VKXq 6o9AY/MJRjuTgv1v4xLZhLEW3uwutpm6GSVkmT8XK7uNgEcxkprkQ6yRSpyLNme4 ka+0cS7loUuCYqppH3PI4t4rSpqtXaIX7SwD9iiFE7oDlpfoupSBMUwvWJCNYpgb vzQLwAs+k1Ry1ERVK1lubL0WzEDka/mUZxMTkyrEq3XCeAI8ks+MNTjIB3jB6i8B H/aE4/1PvVZrfscGFLTIsrJFrDjLMHapLK7cdO6JYd7bis6J0w9z2IBDBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKot0qgEeCCEe6ZhiBopzkBcH6tNMB8GA1UdIwQY MBaAFHAKEjHRwnp1TkbvEOkqcwrhXQ9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgt YWI3OWEzNzg5ZjhmLzEvcWkzU3FBUjRJSVI3cG1HSUdpbk9RRndmcTAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgtYWI3OWEzNzg5Zjhm LzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2QuAMA0G CSqGSIb3DQEBCwUAA4IBAQA5c9Hz0046rZdpDvLV6A2J+HFlS7oS/G0LMuyUlNC4 Vr7PiRtv6uWa3jztc8xARMlvA+mcb+40EjI6r8cqfSaN8aKXyzZ1qeqAJn4qp5Ce T5hmbiw6537AiHobJ5X7LdXlosa6yn6JRrDTt9XIxu4g1JqxoEEAD3krpfonlLQP bScHKWB+KDKnHebIiuwFjAvGN60It+4T5G1IK5QS4fzh8hflsjkYUJUg8Mt69zcL IUaONPSw1MXRwcnB9FG1CBKLtrxmGKPdAstEsNKN/k2gTQR78Zqe1v6L7moFgTRD SnS8/BHqZxcKVPyGLWttF4CElS7G8aATMHm+A0js3eJR -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:17 2026 by rpki-client