This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/qXcS6OI26rFTLi_T2I0DI0xKoyk.roa File: qXcS6OI26rFTLi_T2I0DI0xKoyk.roa (raw, json) Hash identifier: 7rGGuHEL+nQFILlUsjH4I+jgvUwVxc2dc664sGkuKo4= Subject key identifier: A9:77:12:E8:E2:36:EA:B1:53:2E:2F:D3:D8:8D:03:23:4C:4A:A3:29 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019B79ECB8965F33B83DD5DA5D670CB05AA7 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/qXcS6OI26rFTLi_T2I0DI0xKoyk.roa Signing time: Thu 01 Jan 2026 14:18:35 +0000 ROA not before: Thu 01 Jan 2026 14:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204266 IP address blocks: 37.209.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b8:96:5f:33:b8:3d:d5:da:5d:67:0c:b0:5a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Jan 1 14:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a97712e8e236eab1532e2fd3d88d03234c4aa329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d5:77:2c:53:17:4e:75:d1:a0:c2:f6:d5:09: a4:88:20:b7:e6:49:b8:89:bd:7c:e8:37:35:1b:e1: 2d:a5:fb:82:63:25:6a:5b:cd:fe:9d:06:29:82:3f: 8d:dc:53:27:d9:8e:83:b9:14:e9:79:01:26:20:ac: 45:96:1e:d1:0a:3a:90:8e:ef:43:44:0e:d4:9b:54: f2:c1:51:6a:c1:9c:27:01:61:29:ff:c8:01:60:fc: 45:d2:6c:1a:dc:8b:35:ff:a6:b3:92:8c:4d:bd:78: 60:d6:57:8e:e7:05:13:3d:a0:07:4b:74:3f:60:98: 17:19:e5:22:b7:72:05:4c:7b:20:f1:38:32:36:70: 21:45:81:38:93:9b:78:9f:14:90:cf:17:53:84:20: 23:7b:9c:cc:f6:9d:7e:da:13:57:ff:86:59:cc:ee: 0f:42:97:dc:a0:46:aa:ae:14:9c:d1:3c:a0:02:4d: 92:c7:72:15:47:f8:c0:a9:f1:b0:c5:34:62:e4:39: 4f:35:90:8d:fb:75:b6:80:45:2f:de:30:87:fd:eb: a3:a2:21:b2:41:37:15:fc:52:e4:e7:fc:9e:bd:01: 2c:c6:0a:23:e0:31:c1:73:42:f9:ba:98:77:19:01: 60:f1:d2:77:c5:da:9a:9a:2a:39:69:d0:86:08:1d: 9d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:77:12:E8:E2:36:EA:B1:53:2E:2F:D3:D8:8D:03:23:4C:4A:A3:29 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/qXcS6OI26rFTLi_T2I0DI0xKoyk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.174.0/24 Signature Algorithm: sha256WithRSAEncryption 73:8a:86:a4:48:e1:eb:0f:94:f8:71:7e:af:c4:5c:ce:f3:a9: 68:9c:ad:b9:02:ae:12:50:fd:de:1e:a1:bd:63:a9:43:c0:a5: f5:d2:07:0e:6f:ec:01:b1:7d:c1:6d:61:92:53:80:0e:71:0e: 45:fa:61:af:b3:9e:2f:6b:73:ed:10:d2:a1:de:0a:24:96:50: 8a:33:85:2b:a8:e6:48:7a:dc:d9:10:92:4a:45:90:16:0a:6b: 36:96:dd:bd:79:a8:54:d0:59:7f:83:10:d7:7d:c1:d5:cd:3d: cc:b7:82:c7:3a:d2:2d:12:33:55:09:38:a6:8a:30:57:8d:a3: b5:a3:9b:e1:a2:8b:cf:d4:56:0e:7b:80:13:e9:a4:6c:7d:2a: 1c:92:b6:7c:61:51:10:86:b9:fd:92:c6:55:3e:7e:23:a7:68: 7b:ad:8d:13:40:46:3c:32:c5:7c:f0:67:29:fd:d3:dc:99:7f: a2:8c:b6:e0:f0:9f:4b:8b:47:95:83:f2:92:8f:eb:5f:66:9c: 29:c7:5f:c4:72:b6:6b:e8:62:de:8e:0c:79:cd:ff:5f:16:60: 19:b8:29:b7:bc:98:e8:ea:47:f2:3f:00:0d:e1:01:07:cc:55: c0:7d:2f:56:9a:ff:d3:54:19:c1:47:96:9c:94:ec:b2:5b:f9: a5:8f:47:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57LiWXzO4PdXaXWcMsFqnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjYwMTAxMTQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTc3MTJlOGUyMzZlYWIxNTMyZTJmZDNkODhkMDMyMzRjNGFhMzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutV3LFMXTnXRoML21QmkiCC35km4 ib186Dc1G+EtpfuCYyVqW83+nQYpgj+N3FMn2Y6DuRTpeQEmIKxFlh7RCjqQju9D RA7Um1TywVFqwZwnAWEp/8gBYPxF0mwa3Is1/6azkoxNvXhg1leO5wUTPaAHS3Q/ YJgXGeUit3IFTHsg8TgyNnAhRYE4k5t4nxSQzxdThCAje5zM9p1+2hNX/4ZZzO4P QpfcoEaqrhSc0TygAk2Sx3IVR/jAqfGwxTRi5DlPNZCN+3W2gEUv3jCH/eujoiGy QTcV/FLk5/yevQEsxgoj4DHBc0L5uph3GQFg8dJ3xdqamio5adCGCB2dlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKl3EujiNuqxUy4v09iNAyNMSqMpMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvcVhjUzZPSTI2ckZUTGlfVDJJMERJMHhLb3lrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJdGuMA0G CSqGSIb3DQEBCwUAA4IBAQBzioakSOHrD5T4cX6vxFzO86lonK25Aq4SUP3eHqG9 Y6lDwKX10gcOb+wBsX3BbWGSU4AOcQ5F+mGvs54va3PtENKh3gokllCKM4UrqOZI etzZEJJKRZAWCms2lt29eahU0Fl/gxDXfcHVzT3Mt4LHOtItEjNVCTimijBXjaO1 o5vhoovP1FYOe4AT6aRsfSockrZ8YVEQhrn9ksZVPn4jp2h7rY0TQEY8MsV88Gcp /dPcmX+ijLbg8J9Li0eVg/KSj+tfZpwpx1/EcrZr6GLejgx5zf9fFmAZuCm3vJjo 6kfyPwAN4QEHzFXAfS9Wmv/TVBnBR5aclOyyW/mlj0fk -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:41 2026 by rpki-client