This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/qcmbgoQaCmbceJ4xZI3Tt6jb-E8.roa File: qcmbgoQaCmbceJ4xZI3Tt6jb-E8.roa (raw, json) Hash identifier: OD8AG1ILYuTSDHzZIy152Q30x3zv2+IbmXk5SHJVDkU= Subject key identifier: A9:C9:9B:82:84:1A:0A:66:DC:78:9E:31:64:8D:D3:B7:A8:DB:F8:4F Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 019B7E38D79360E63A7B0543CB11DC57ECFF Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/qcmbgoQaCmbceJ4xZI3Tt6jb-E8.roa Signing time: Fri 02 Jan 2026 10:20:12 +0000 ROA not before: Fri 02 Jan 2026 10:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212477 IP address blocks: 212.23.198.0/24 maxlen: 24 2a11:5440::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 05:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d7:93:60:e6:3a:7b:05:43:cb:11:dc:57:ec:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Jan 2 10:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9c99b82841a0a66dc789e31648dd3b7a8dbf84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:64:24:51:dc:ec:03:68:ca:af:78:26:a9:fb: c5:cc:b0:03:5a:17:32:36:f9:d0:a8:ed:99:55:7b: 3d:80:2c:0d:20:d3:25:8d:c1:f7:91:20:c3:3f:20: cd:87:b7:31:42:ca:7e:60:5f:95:b0:aa:2e:df:b7: 0e:a9:39:52:f2:e1:e2:99:d8:e1:ab:c3:eb:b3:55: 8a:3c:85:b3:2f:f2:ca:b2:03:ff:44:14:e6:94:72: be:0d:6d:cf:77:96:b3:0e:64:77:aa:27:a2:ce:82: b5:76:cd:af:c3:e9:ed:24:81:2c:19:d0:12:61:1d: f3:8f:22:f3:8d:02:1e:f8:4a:f5:cf:e3:f0:15:6b: 90:1e:f8:f8:3d:57:d5:e6:88:dc:8a:87:58:08:df: a4:1d:ef:c1:c4:88:f8:71:95:ee:54:3a:33:bf:02: 7d:15:5b:d8:39:8d:58:34:d7:67:0e:17:28:07:fb: 31:44:9b:60:b0:f1:10:1f:c1:19:91:03:d7:5f:28: c3:64:28:22:f3:b9:e7:b9:8b:51:db:43:8e:da:5a: 8d:a2:7f:43:04:5b:f1:da:dd:63:c2:bc:fe:61:d0: b2:e7:9a:96:94:4a:ea:e8:a8:b1:07:0e:9b:45:11: 4f:45:ad:00:6e:bd:6e:ea:f8:01:d5:a9:91:96:01: 95:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C9:9B:82:84:1A:0A:66:DC:78:9E:31:64:8D:D3:B7:A8:DB:F8:4F X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/qcmbgoQaCmbceJ4xZI3Tt6jb-E8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.23.198.0/24 IPv6: 2a11:5440::/29 Signature Algorithm: sha256WithRSAEncryption 54:49:09:44:30:d6:d3:b4:b5:ce:a9:08:15:20:72:7f:df:66: e9:40:08:e2:b3:04:10:cc:2d:f5:81:63:54:66:b8:a2:de:9b: 46:cf:2b:7d:ba:8b:20:b4:01:c2:c2:dd:31:c3:9a:e8:ed:2c: d3:61:23:9f:35:f9:37:10:f4:82:15:e9:e9:de:b1:d0:65:a6: 1c:13:b3:d9:a0:65:d8:d8:2f:24:b8:75:7a:c7:b7:ae:6e:d1: b8:c1:a7:ea:9e:ae:db:73:77:bd:8f:50:bd:e3:68:f6:ba:96: 58:fb:ff:3c:dd:ca:41:dc:2a:64:65:e9:dd:86:60:95:e1:4d: cf:de:90:d5:b0:33:f0:d0:5d:96:8c:39:05:21:97:25:87:ac: 52:e0:51:89:6c:50:3a:aa:92:98:40:26:0e:80:1f:b8:a9:ff: e7:81:0e:13:60:b1:ad:b2:a5:a2:c8:2a:7b:8d:cb:8a:c5:24: 5f:59:42:eb:b0:7d:72:51:32:d7:cb:58:9b:de:19:10:17:42: 36:c3:9c:db:b0:61:e0:5c:f3:a4:aa:4b:78:33:b5:24:81:8d: a1:0e:c3:e1:be:2a:8d:b8:66:8d:48:1b:ea:9f:49:f8:4e:13: ad:7f:12:d7:11:49:bd:12:1f:db:04:b7:5c:0b:d1:70:fd:26: 7f:fc:2c:06 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+ONeTYOY6ewVDyxHcV+z/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjYwMTAyMTAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWM5OWI4Mjg0MWEwYTY2ZGM3ODllMzE2NDhkZDNiN2E4ZGJmODRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWQkUdzsA2jKr3gmqfvFzLADWhcy NvnQqO2ZVXs9gCwNINMljcH3kSDDPyDNh7cxQsp+YF+VsKou37cOqTlS8uHimdjh q8Prs1WKPIWzL/LKsgP/RBTmlHK+DW3Pd5azDmR3qieizoK1ds2vw+ntJIEsGdAS YR3zjyLzjQIe+Er1z+PwFWuQHvj4PVfV5ojciodYCN+kHe/BxIj4cZXuVDozvwJ9 FVvYOY1YNNdnDhcoB/sxRJtgsPEQH8EZkQPXXyjDZCgi87nnuYtR20OO2lqNon9D BFvx2t1jwrz+YdCy55qWlErq6KixBw6bRRFPRa0Abr1u6vgB1amRlgGVXQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKnJm4KEGgpm3HieMWSN07eo2/hPMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvcWNtYmdvUWFDbWJjZUo0eFpJM1R0NmpiLUU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1BfGMA0E AgACMAcDBQMqEVRAMA0GCSqGSIb3DQEBCwUAA4IBAQBUSQlEMNbTtLXOqQgVIHJ/ 32bpQAjiswQQzC31gWNUZrii3ptGzyt9uosgtAHCwt0xw5ro7SzTYSOfNfk3EPSC Fenp3rHQZaYcE7PZoGXY2C8kuHV6x7eubtG4wafqnq7bc3e9j1C942j2upZY+/88 3cpB3CpkZendhmCV4U3P3pDVsDPw0F2WjDkFIZclh6xS4FGJbFA6qpKYQCYOgB+4 qf/ngQ4TYLGtsqWiyCp7jcuKxSRfWULrsH1yUTLXy1ib3hkQF0I2w5zbsGHgXPOk qkt4M7UkgY2hDsPhviqNuGaNSBvqn0n4ThOtfxLXEUm9Eh/bBLdcC9Fw/SZ//CwG -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:45 2026 by rpki-client