This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/cq8gxju5oWNcYnI5PxKC4JIOX9U.roa File: cq8gxju5oWNcYnI5PxKC4JIOX9U.roa (raw, json) Hash identifier: jLj78jxraqm7W54FO62Mu8iYhA0T1LmaYubfOc77vt0= Subject key identifier: 72:AF:20:C6:3B:B9:A1:63:5C:62:72:39:3F:12:82:E0:92:0E:5F:D5 Certificate issuer: /CN=b37d15e43470ef0a1dc701074393fe70f2df8d06 Certificate serial: 019B7C11DA35ED3157AE1C8B1CDA84FF7767 Authority key identifier: B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/cq8gxju5oWNcYnI5PxKC4JIOX9U.roa Signing time: Fri 02 Jan 2026 00:18:23 +0000 ROA not before: Fri 02 Jan 2026 00:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216162 IP address blocks: 69.7.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:da:35:ed:31:57:ae:1c:8b:1c:da:84:ff:77:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37d15e43470ef0a1dc701074393fe70f2df8d06 Validity Not Before: Jan 2 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72af20c63bb9a1635c6272393f1282e0920e5fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:60:f3:25:e9:ee:24:4f:be:9c:73:2b:81:3f: c7:27:2e:1c:ce:ba:4f:9b:6e:5b:29:7c:5b:27:a6: de:9f:0d:aa:25:ee:24:4f:97:0e:17:96:f5:a0:e7: 2d:0f:91:e6:b4:a0:8e:47:cc:3d:7e:45:4c:87:34: 38:0c:91:76:48:c0:60:18:f4:4e:93:4a:a4:b7:26: e4:be:2f:0a:b6:af:9a:91:00:2f:1a:df:e7:d8:75: e8:40:85:d0:30:b2:db:a0:da:3e:c2:02:8e:01:56: 0f:e0:01:3a:d3:b6:e8:7a:0e:a7:71:a6:8d:de:a8: ee:dd:71:d8:d9:ac:96:c7:15:46:29:79:98:e5:aa: 7e:77:e2:5e:f9:ea:17:a6:10:81:e8:cf:bc:94:96: 6c:43:de:27:eb:85:d3:82:e2:c4:eb:b7:61:c8:d8: e8:03:02:ae:04:31:18:73:c7:54:3a:a0:04:df:3f: f6:4c:28:e7:e2:fa:f0:ab:68:d6:14:13:65:ce:4e: 73:47:f8:a3:30:ca:fe:54:43:aa:e5:9b:62:56:1a: d4:fa:99:bf:dc:fe:3c:2f:20:5e:8a:70:f9:fe:d9: bb:65:e3:f8:cc:1d:cf:74:b1:10:9d:80:21:f7:96: ca:d7:11:ec:dc:dc:9a:44:18:28:5c:32:1c:c1:15: ef:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AF:20:C6:3B:B9:A1:63:5C:62:72:39:3F:12:82:E0:92:0E:5F:D5 X509v3 Authority Key Identifier: keyid:B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/cq8gxju5oWNcYnI5PxKC4JIOX9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.7.78.0/24 Signature Algorithm: sha256WithRSAEncryption 20:1b:45:3d:84:88:d9:2c:39:f3:a5:08:7f:f4:a6:f8:b3:76: ec:01:3e:97:76:a7:49:db:41:b3:2d:7d:eb:bc:f9:b7:b4:ae: a6:4d:27:6a:8f:65:b4:ef:6c:67:f2:8d:5a:26:74:0d:93:48: af:90:f5:d8:45:87:a7:9e:c7:82:70:db:12:96:cf:82:44:53: 0f:04:0c:5a:7b:67:d7:4c:87:ce:fd:0c:04:0e:14:07:2b:1e: 35:63:0f:0a:b2:4b:3f:72:0e:b8:2f:46:ac:e8:01:df:d7:bf: 86:ee:8e:6c:1d:f3:fe:87:01:b9:be:a9:27:6d:d5:a4:f0:ff: c9:cb:35:dd:5c:05:84:73:8e:f4:32:92:d8:70:f6:f9:19:7f: f4:0e:f1:e9:58:77:78:02:7f:b0:52:bc:26:c9:56:0c:e2:68: 20:b6:97:77:6d:11:af:dd:7e:20:4e:f6:b9:d9:88:fd:38:dd: ba:01:88:0b:da:0b:88:35:28:c8:ea:a5:55:d2:61:3a:02:24: d2:6c:91:5f:51:9f:44:45:97:4f:8c:17:73:e6:6b:40:db:ba: 7a:c7:dd:88:27:38:87:7b:21:3c:64:6f:9e:1c:0f:d4:53:87: 25:bf:c6:04:10:90:8e:ba:97:e4:b5:96:44:05:f7:e0:e3:f1: 21:10:d2:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Edo17TFXrhyLHNqE/3dnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2QxNWU0MzQ3MGVmMGExZGM3MDEwNzQzOTNmZTcwZjJk ZjhkMDYwHhcNMjYwMTAyMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmFmMjBjNjNiYjlhMTYzNWM2MjcyMzkzZjEyODJlMDkyMGU1ZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGDzJenuJE++nHMrgT/HJy4czrpP m25bKXxbJ6benw2qJe4kT5cOF5b1oOctD5HmtKCOR8w9fkVMhzQ4DJF2SMBgGPRO k0qktybkvi8Ktq+akQAvGt/n2HXoQIXQMLLboNo+wgKOAVYP4AE607boeg6ncaaN 3qju3XHY2ayWxxVGKXmY5ap+d+Je+eoXphCB6M+8lJZsQ94n64XTguLE67dhyNjo AwKuBDEYc8dUOqAE3z/2TCjn4vrwq2jWFBNlzk5zR/ijMMr+VEOq5ZtiVhrU+pm/ 3P48LyBeinD5/tm7ZeP4zB3PdLEQnYAh95bK1xHs3NyaRBgoXDIcwRXv2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHKvIMY7uaFjXGJyOT8SguCSDl/VMB8GA1UdIwQY MBaAFLN9FeQ0cO8KHccBB0OT/nDy340GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczMwVjVEUnc3d29keHdFSFE1UC1jUExmalFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9kNjc0NGQtYjVjZC00ZGE3LWExMGQt ZGFmNjY5ZmFiZjgwLzEvY3E4Z3hqdTVvV05jWW5JNVB4S0M0SklPWDlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9kNjc0NGQtYjVjZC00ZGE3LWExMGQtZGFmNjY5ZmFiZjgw LzEvczMwVjVEUnc3d29keHdFSFE1UC1jUExmalFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQdOMA0G CSqGSIb3DQEBCwUAA4IBAQAgG0U9hIjZLDnzpQh/9Kb4s3bsAT6XdqdJ20GzLX3r vPm3tK6mTSdqj2W072xn8o1aJnQNk0ivkPXYRYennseCcNsSls+CRFMPBAxae2fX TIfO/QwEDhQHKx41Yw8Ksks/cg64L0as6AHf17+G7o5sHfP+hwG5vqknbdWk8P/J yzXdXAWEc470MpLYcPb5GX/0DvHpWHd4An+wUrwmyVYM4mggtpd3bRGv3X4gTva5 2Yj9ON26AYgL2guINSjI6qVV0mE6AiTSbJFfUZ9ERZdPjBdz5mtA27p6x92IJziH eyE8ZG+eHA/UU4clv8YEEJCOupfktZZEBffg4/EhENJb -----END CERTIFICATE-----Generated at Tue Feb 10 01:14:17 2026 by rpki-client