This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/qoiSe-yUdTemPI1EK5KhIQZ-WAQ.roa File: qoiSe-yUdTemPI1EK5KhIQZ-WAQ.roa (raw, json) Hash identifier: BzNUsMLYSBasxZtN78dIEsZxiGVfFhzEpfLc24JU6bM= Subject key identifier: AA:88:92:7B:EC:94:75:37:A6:3C:8D:44:2B:92:A1:21:06:7E:58:04 Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082 Certificate serial: 019B7F15FC5A78CF8AEBBF6F709BE6139E65 Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/qoiSe-yUdTemPI1EK5KhIQZ-WAQ.roa Signing time: Fri 02 Jan 2026 14:21:45 +0000 ROA not before: Fri 02 Jan 2026 14:21:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213909 IP address blocks: 188.211.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:fc:5a:78:cf:8a:eb:bf:6f:70:9b:e6:13:9e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082 Validity Not Before: Jan 2 14:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa88927bec947537a63c8d442b92a121067e5804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f9:c1:aa:0f:2f:c0:08:7c:c2:84:99:ed:55: 81:1b:87:72:84:4f:77:f9:93:b3:f2:e3:62:06:23: eb:1e:28:18:28:c5:57:78:4b:23:59:2b:68:1f:1b: 07:35:92:b6:db:1e:98:9a:36:1b:cc:9d:1e:8b:08: 55:27:45:05:1c:8b:ef:32:7d:04:c4:72:da:39:97: d1:a2:fe:5e:78:a8:44:68:9b:db:37:7c:d3:4e:95: 3e:90:0e:79:db:57:38:d1:3b:0b:8b:0b:1c:68:d1: 2d:97:ac:92:99:2b:81:0c:a4:9b:70:d4:d8:a3:1d: 57:cd:d5:fe:50:e4:0f:29:ac:ec:53:46:de:3f:e6: 85:22:3b:9f:a5:9f:79:9c:13:3d:c9:e3:a8:ce:36: aa:d4:ed:74:ff:68:2a:8d:57:0a:f4:75:df:c9:95: f0:80:7e:94:aa:58:50:ed:28:0f:2b:36:21:de:20: 92:18:f0:28:54:2f:aa:ec:86:07:cb:96:02:3a:e5: 46:16:2c:94:0d:eb:ef:d6:be:ea:9a:a3:14:81:07: d7:ff:04:fe:70:ec:c8:e4:e7:b8:17:99:f1:04:7b: 5a:f5:ff:15:70:75:42:83:ee:db:6d:b8:ee:63:5f: d9:a5:ff:95:7f:4c:b4:7a:6c:88:22:da:a7:95:e8: 45:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:88:92:7B:EC:94:75:37:A6:3C:8D:44:2B:92:A1:21:06:7E:58:04 X509v3 Authority Key Identifier: keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/qoiSe-yUdTemPI1EK5KhIQZ-WAQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.211.169.0/24 Signature Algorithm: sha256WithRSAEncryption 85:85:fc:3e:43:3a:ce:79:05:9e:7c:24:e6:34:b3:d4:25:9a: e3:8b:b1:ac:8e:ae:64:5f:b6:c2:52:c4:40:aa:ba:1f:a4:d0: 02:16:93:9f:ee:ea:59:29:ec:52:07:0f:16:02:99:9f:5b:aa: 51:56:27:a6:27:b1:ef:1d:d6:83:0a:30:97:11:73:0b:fa:89: f7:af:18:27:c7:40:e4:16:a3:0d:8f:c0:ef:3d:e7:9e:59:55: a5:7a:e5:45:07:b5:ac:51:dd:0f:e8:b6:e9:23:ae:2b:a9:88: ba:a9:4a:3b:ce:6b:5d:8a:19:68:94:42:5f:ca:6b:13:15:2c: 05:e7:7a:a7:13:e3:e6:a7:c5:ac:b4:0f:5e:d9:fb:39:68:43: 47:2f:e3:51:a3:d8:c2:a1:ef:ca:0a:0d:b9:33:1e:7e:64:aa: 18:5e:58:32:9a:b3:ac:6e:b6:42:77:a4:ee:bb:a5:41:f2:94: 78:66:0a:74:6a:e0:14:f7:6c:60:9e:22:d0:35:37:9d:8e:ff: 2f:76:f6:d5:1b:ec:3a:d6:15:a5:c0:b5:25:f4:fc:d6:1d:a3: 5c:eb:ed:46:b1:86:46:80:45:b1:e4:25:7e:c0:5a:0b:da:e1: a1:91:64:59:3b:58:13:6b:1f:4e:0e:e9:e5:f7:34:b0:b6:af: 1e:e2:16:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FfxaeM+K679vcJvmE55lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGUyYTIwN2Y2OTc3MjE0YTk1N2E4ZTE0OGQxZjhiNWE1 Y2QwODIwHhcNMjYwMTAyMTQyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTg4OTI3YmVjOTQ3NTM3YTYzYzhkNDQyYjkyYTEyMTA2N2U1ODA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPnBqg8vwAh8woSZ7VWBG4dyhE93 +ZOz8uNiBiPrHigYKMVXeEsjWStoHxsHNZK22x6YmjYbzJ0eiwhVJ0UFHIvvMn0E xHLaOZfRov5eeKhEaJvbN3zTTpU+kA5521c40TsLiwscaNEtl6ySmSuBDKSbcNTY ox1XzdX+UOQPKazsU0beP+aFIjufpZ95nBM9yeOozjaq1O10/2gqjVcK9HXfyZXw gH6UqlhQ7SgPKzYh3iCSGPAoVC+q7IYHy5YCOuVGFiyUDevv1r7qmqMUgQfX/wT+ cOzI5Oe4F5nxBHta9f8VcHVCg+7bbbjuY1/Zpf+Vf0y0emyIItqnlehFrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKqIknvslHU3pjyNRCuSoSEGflgEMB8GA1UdIwQY MBaAFIcOKiB/aXchSpV6jhSNH4taXNCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHc0cUlIOXBkeUZLbFhxT0ZJMGZpMXBjMElJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80MjExNTgtZjBjNi00NjE5LWFmYTUt OGE5NDY4N2RiYTZmLzEvcW9pU2UteVVkVGVtUEkxRUs1S2hJUVotV0FRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi80MjExNTgtZjBjNi00NjE5LWFmYTUtOGE5NDY4N2RiYTZm LzEvaHc0cUlIOXBkeUZLbFhxT0ZJMGZpMXBjMElJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNOpMA0G CSqGSIb3DQEBCwUAA4IBAQCFhfw+QzrOeQWefCTmNLPUJZrji7Gsjq5kX7bCUsRA qrofpNACFpOf7upZKexSBw8WApmfW6pRViemJ7HvHdaDCjCXEXML+on3rxgnx0Dk FqMNj8DvPeeeWVWleuVFB7WsUd0P6LbpI64rqYi6qUo7zmtdihlolEJfymsTFSwF 53qnE+Pmp8WstA9e2fs5aENHL+NRo9jCoe/KCg25Mx5+ZKoYXlgymrOsbrZCd6Tu u6VB8pR4Zgp0auAU92xgniLQNTedjv8vdvbVG+w61hWlwLUl9PzWHaNc6+1GsYZG gEWx5CV+wFoL2uGhkWRZO1gTax9ODunl9zSwtq8e4hbL -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:43 2026 by rpki-client