This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/qyL4pyAcBGjJOHJM0EvmdF4KW0w.roa File: qyL4pyAcBGjJOHJM0EvmdF4KW0w.roa (raw, json) Hash identifier: 27Zjq50aqFTh0F3x/N5hr5Co5n5KTC4C5HqzL3GDGGU= Subject key identifier: AB:22:F8:A7:20:1C:04:68:C9:38:72:4C:D0:4B:E6:74:5E:0A:5B:4C Certificate issuer: /CN=d07dff547eacbe81dc3465598446d3b027dcb76d Certificate serial: 019B7B36B3E35E1B7C7266E6D848074EAAF3 Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/qyL4pyAcBGjJOHJM0EvmdF4KW0w.roa Signing time: Thu 01 Jan 2026 20:19:01 +0000 ROA not before: Thu 01 Jan 2026 20:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5517 IP address blocks: 159.25.0.0/16 maxlen: 24 194.176.0.0/19 maxlen: 19 194.245.0.0/16 maxlen: 16 2a01:4fc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b3:e3:5e:1b:7c:72:66:e6:d8:48:07:4e:aa:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d Validity Not Before: Jan 1 20:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab22f8a7201c0468c938724cd04be6745e0a5b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:b0:49:99:7a:fa:67:32:43:f0:ce:bc:ea: 90:bd:19:10:69:79:4b:fd:97:4d:1d:cc:ff:fe:20: 13:f7:ca:46:1a:9e:93:a3:3c:ed:0b:d6:51:fc:c8: e4:e8:e1:ab:e4:57:30:ef:53:49:d9:27:60:dc:d4: a7:e0:58:8c:7f:6f:18:6a:bb:92:ea:3a:6d:37:f8: 1e:56:26:be:36:f7:d5:42:a8:98:95:21:a0:94:18: d1:d3:a2:53:fd:97:04:77:e7:f4:06:5f:98:06:74: 3b:26:81:bd:ab:33:5d:db:dd:66:c4:7e:f8:f8:2a: bf:d8:75:54:22:93:49:2c:1e:b2:8c:c2:74:77:6d: c3:92:c4:29:8f:e0:33:a7:ab:54:12:9d:de:47:30: 31:bf:f6:46:72:d3:da:b8:e0:ef:53:ab:5a:b7:ee: 74:51:f4:1f:7e:f0:cd:ee:01:19:5f:dd:24:6c:4a: b0:fa:12:ce:47:ca:52:8e:e5:17:53:6d:17:3e:fb: 83:85:89:76:4d:76:16:c9:39:72:6c:1b:7d:98:ba: 88:84:bf:26:54:16:15:84:0f:49:48:4b:41:25:fb: 53:0f:c6:04:18:c8:e5:44:09:9c:f4:6b:44:7b:49: 5d:81:2f:81:bb:62:75:be:ae:04:17:cc:18:54:df: 12:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:22:F8:A7:20:1C:04:68:C9:38:72:4C:D0:4B:E6:74:5E:0A:5B:4C X509v3 Authority Key Identifier: keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/qyL4pyAcBGjJOHJM0EvmdF4KW0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.25.0.0/16 194.176.0.0/19 194.245.0.0/16 IPv6: 2a01:4fc0::/32 Signature Algorithm: sha256WithRSAEncryption 2c:5f:2e:59:53:70:0a:62:92:7a:fe:cf:30:2f:1b:9b:4d:39: 45:7f:5b:74:7b:16:e0:7e:c4:37:96:ab:2a:50:aa:11:30:9a: ca:bd:e8:ac:cd:08:7b:e1:6e:e7:bc:8c:da:7e:ca:7b:48:dd: 1a:27:31:f5:ff:bb:be:09:6e:b8:f5:bf:ac:0c:dc:19:c0:6f: 0e:75:3b:e3:11:dd:66:cb:c7:c7:25:70:dc:ce:a5:23:76:e8: 84:db:8d:4c:ae:16:b3:de:95:fb:32:15:c6:78:c5:74:bd:c4: de:61:33:3a:12:a0:f9:a0:c5:76:5b:25:2b:e6:8e:fb:14:3d: 40:a4:10:02:60:82:fe:2f:cb:7a:cc:a2:93:14:b9:7a:4b:7f: 61:1c:18:06:16:24:c5:73:50:87:66:53:24:81:d2:d7:a6:88: 2c:ec:5f:24:c3:0c:7d:3c:38:17:8d:ba:4e:46:f5:b7:ac:48: 3d:5e:f5:7b:76:47:95:da:78:0e:de:30:42:f2:1b:0d:73:2f: f0:16:c6:9d:b6:03:8d:47:f6:55:79:5e:d3:9e:3f:2a:12:b3: 65:84:9f:6d:f9:25:cb:ee:0d:0e:8e:d2:be:65:6a:97:48:8d: 38:8e:17:5f:67:54:bb:9c:fb:b9:34:73:a4:d7:03:9f:0e:99: 72:56:4c:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt7NrPjXht8cmbm2EgHTqrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2RmZjU0N2VhY2JlODFkYzM0NjU1OTg0NDZkM2IwMjdk Y2I3NmQwHhcNMjYwMTAxMjAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjIyZjhhNzIwMWMwNDY4YzkzODcyNGNkMDRiZTY3NDVlMGE1YjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAKwSZl6+mcyQ/DOvOqQvRkQaXlL /ZdNHcz//iAT98pGGp6TozztC9ZR/Mjk6OGr5Fcw71NJ2Sdg3NSn4FiMf28YaruS 6jptN/geVia+NvfVQqiYlSGglBjR06JT/ZcEd+f0Bl+YBnQ7JoG9qzNd291mxH74 +Cq/2HVUIpNJLB6yjMJ0d23DksQpj+Azp6tUEp3eRzAxv/ZGctPauODvU6tat+50 UfQffvDN7gEZX90kbEqw+hLOR8pSjuUXU20XPvuDhYl2TXYWyTlybBt9mLqIhL8m VBYVhA9JSEtBJftTD8YEGMjlRAmc9GtEe0ldgS+Bu2J1vq4EF8wYVN8ScQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsi+KcgHARoyThyTNBL5nReCltMMB8GA1UdIwQY MBaAFNB9/1R+rL6B3DRlWYRG07An3LdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lMGU4MjktMTI4NC00ZGIxLWJhNDgt Nzg1YWMxOTFiMzFhLzEvcXlMNHB5QWNCR2pKT0hKTTBFdm1kRjRLVzB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9lMGU4MjktMTI4NC00ZGIxLWJhNDgtNzg1YWMxOTFiMzFh LzEvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAWBAIAATAQAwMAnxkDBAXC sAADAwDC9TANBAIAAjAHAwUAKgFPwDANBgkqhkiG9w0BAQsFAAOCAQEALF8uWVNw CmKSev7PMC8bm005RX9bdHsW4H7EN5arKlCqETCayr3orM0Ie+Fu57yM2n7Ke0jd Gicx9f+7vgluuPW/rAzcGcBvDnU74xHdZsvHxyVw3M6lI3bohNuNTK4Ws96V+zIV xnjFdL3E3mEzOhKg+aDFdlslK+aO+xQ9QKQQAmCC/i/LesyikxS5ekt/YRwYBhYk xXNQh2ZTJIHS16aILOxfJMMMfTw4F426Tkb1t6xIPV71e3ZHldp4Dt4wQvIbDXMv 8BbGnbYDjUf2VXle054/KhKzZYSfbfkly+4NDo7SvmVql0iNOI4XX2dUu5z7uTRz pNcDnw6ZclZMtQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:26:57 2026 by rpki-client