This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/qc7Q2TrAD7-oyN-rXryRK-RP0Zo.roa File: qc7Q2TrAD7-oyN-rXryRK-RP0Zo.roa (raw, json) Hash identifier: +pjqzmokR2G2qc24N9ur5O1FIrpMiWBJ/MAwmqbWH98= Subject key identifier: A9:CE:D0:D9:3A:C0:0F:BF:A8:C8:DF:AB:5E:BC:91:2B:E4:4F:D1:9A Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266 Certificate serial: 019B78A2956F6DBAAA868A565175BF96BFA6 Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/qc7Q2TrAD7-oyN-rXryRK-RP0Zo.roa Signing time: Thu 01 Jan 2026 08:17:59 +0000 ROA not before: Thu 01 Jan 2026 08:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34458 IP address blocks: 185.80.40.0/24 maxlen: 24 217.150.80.0/24 maxlen: 24 217.150.81.0/24 maxlen: 24 217.150.82.0/24 maxlen: 24 217.150.83.0/24 maxlen: 24 217.150.84.0/24 maxlen: 24 217.150.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:95:6f:6d:ba:aa:86:8a:56:51:75:bf:96:bf:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266 Validity Not Before: Jan 1 08:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9ced0d93ac00fbfa8c8dfab5ebc912be44fd19a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9e:f4:e4:f5:f5:b9:73:b0:25:da:ef:64:06: 1d:c2:5e:b0:97:29:41:ee:8f:22:5d:40:ce:d6:4c: 13:ca:88:6e:ab:44:c0:13:55:15:ee:94:f0:5c:3e: 54:97:bf:a4:f5:5a:4d:fb:3c:2a:21:fd:62:83:3a: 98:25:60:0e:41:30:95:dc:82:d6:71:05:da:e8:04: dc:31:3a:a7:ad:61:77:a9:d6:37:03:77:30:45:c5: e9:c5:75:91:23:09:0e:68:be:16:b0:8c:ee:56:be: 2b:99:4f:02:8d:6d:6e:20:0e:4b:d1:02:5b:f8:bf: 5a:37:ff:74:57:d1:40:ed:e4:54:30:3e:57:1e:b4: 78:f4:62:ce:cb:20:dc:5d:b6:bb:5a:8c:ac:71:da: b8:5f:56:87:2b:d8:ed:f0:77:47:ca:c2:45:d8:89: 83:05:14:32:bb:3e:e4:2e:fb:e0:61:47:24:40:bf: 6b:2a:ef:b9:55:9a:26:43:ce:81:c6:16:a2:e1:ea: b1:3b:a6:90:2d:0a:80:8d:ed:35:80:1b:75:7a:c1: ab:8b:33:c2:49:33:48:c7:cd:13:db:11:9a:1d:52: 4c:d8:03:19:79:94:db:28:79:46:19:07:7f:24:5c: 0c:f7:f6:66:ae:76:a0:39:98:1a:ca:2e:f8:e4:3b: 4b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CE:D0:D9:3A:C0:0F:BF:A8:C8:DF:AB:5E:BC:91:2B:E4:4F:D1:9A X509v3 Authority Key Identifier: keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/qc7Q2TrAD7-oyN-rXryRK-RP0Zo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.40.0/24 217.150.80.0-217.150.85.255 Signature Algorithm: sha256WithRSAEncryption 21:41:b5:af:e4:47:b6:1f:1d:45:64:c8:3e:95:ef:7f:9e:0f: 21:25:47:ff:50:5a:d2:72:8a:d3:e8:60:ec:db:6c:d3:6b:0e: e5:d6:d2:e2:33:21:92:e1:32:b0:a6:9f:0e:0f:20:fd:84:33: c6:ad:c8:cd:12:fe:de:f7:d2:2f:8d:75:39:26:ee:5f:fe:dc: 4c:1f:da:99:97:4d:d6:da:3c:d0:2e:92:d8:e7:56:c6:bd:f9: 9b:af:9b:b8:67:ac:ad:72:76:4d:72:82:e4:a1:96:64:67:66: ce:68:3a:95:60:37:26:35:f3:85:ad:90:3a:d3:0c:38:7d:11: 34:d6:d4:4b:56:cc:21:7e:84:4f:51:27:2c:58:4f:b5:8c:6a: ca:fc:b2:46:3f:43:dd:18:88:6d:8e:b0:53:bb:4f:bd:92:23: 22:a5:18:27:b4:fa:a9:56:09:2d:3e:08:8e:e1:fa:de:4b:da: 31:f0:c4:55:ee:cc:22:c9:31:ad:95:f9:c7:48:19:50:10:2b: 2f:8c:ff:11:54:14:56:f6:67:61:a6:80:6c:a2:a3:f6:73:d9: 44:5e:66:be:5c:f5:2f:3e:11:fa:2f:0a:26:0a:d9:e7:2e:22: 41:9c:48:ab:b0:8a:0a:6b:5b:15:b0:4e:b3:86:03:0f:a3:f9: a0:db:fa:2b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt4opVvbbqqhopWUXW/lr+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZGQwZWJmZjViYTM4YTg3NThiNzk0ZDA0ZDYyOTA1MTk0 YTMyNjYwHhcNMjYwMTAxMDgxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWNlZDBkOTNhYzAwZmJmYThjOGRmYWI1ZWJjOTEyYmU0NGZkMTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ705PX1uXOwJdrvZAYdwl6wlylB 7o8iXUDO1kwTyohuq0TAE1UV7pTwXD5Ul7+k9VpN+zwqIf1igzqYJWAOQTCV3ILW cQXa6ATcMTqnrWF3qdY3A3cwRcXpxXWRIwkOaL4WsIzuVr4rmU8CjW1uIA5L0QJb +L9aN/90V9FA7eRUMD5XHrR49GLOyyDcXba7Woyscdq4X1aHK9jt8HdHysJF2ImD BRQyuz7kLvvgYUckQL9rKu+5VZomQ86Bxhai4eqxO6aQLQqAje01gBt1esGrizPC STNIx80T2xGaHVJM2AMZeZTbKHlGGQd/JFwM9/ZmrnagOZgayi745DtLJQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFKnO0Nk6wA+/qMjfq168kSvkT9GaMB8GA1UdIwQY MBaAFBHdDr/1ujiodYt5TQTWKQUZSjJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWQwT3ZfVzZPS2gxaTNsTkJOWXBCUmxLTW1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9hNjZhMjktNTFjYy00YmE5LTg4NGYt ZjE3NjEzZWE0OWU3LzEvcWM3UTJUckFENy1veU4tclhyeVJLLVJQMFpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9hNjZhMjktNTFjYy00YmE5LTg4NGYtZjE3NjEzZWE0OWU3 LzEvRWQwT3ZfVzZPS2gxaTNsTkJOWXBCUmxLTW1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAuVAoMAwD BATZllADBAHZllQwDQYJKoZIhvcNAQELBQADggEBACFBta/kR7YfHUVkyD6V73+e DyElR/9QWtJyitPoYOzbbNNrDuXW0uIzIZLhMrCmnw4PIP2EM8atyM0S/t730i+N dTkm7l/+3Ewf2pmXTdbaPNAuktjnVsa9+Zuvm7hnrK1ydk1yguShlmRnZs5oOpVg NyY184WtkDrTDDh9ETTW1EtWzCF+hE9RJyxYT7WMasr8skY/Q90YiG2OsFO7T72S IyKlGCe0+qlWCS0+CI7h+t5L2jHwxFXuzCLJMa2V+cdIGVAQKy+M/xFUFFb2Z2Gm gGyio/Zz2UReZr5c9S8+EfovCiYK2ecuIkGcSKuwigprWxWwTrOGAw+j+aDb+is= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:24 2026 by rpki-client