This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/BqRJvB_nPRiPWuTGUs43OFgE1cg.roa File: BqRJvB_nPRiPWuTGUs43OFgE1cg.roa (raw, json) Hash identifier: CouaUfaCJlCnH6IGbuUpQJc4a6XZQ+ovYHzWhnqUp88= Subject key identifier: 06:A4:49:BC:1F:E7:3D:18:8F:5A:E4:C6:52:CE:37:38:58:04:D5:C8 Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7 Certificate serial: 019B7CECEC19E611ADE6478B8FB4B9817117 Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/BqRJvB_nPRiPWuTGUs43OFgE1cg.roa Signing time: Fri 02 Jan 2026 04:17:40 +0000 ROA not before: Fri 02 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 141.67.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:ec:19:e6:11:ad:e6:47:8b:8f:b4:b9:81:71:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7 Validity Not Before: Jan 2 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06a449bc1fe73d188f5ae4c652ce37385804d5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:50:c1:8c:dc:01:67:9d:58:5f:3f:c1:46:20: 49:54:1e:f5:de:ee:25:89:19:17:23:bd:3a:1f:8d: e9:33:a3:2b:e6:42:cd:27:03:5f:93:54:46:62:d1: c4:7b:81:29:7b:70:d1:4e:6b:59:34:cd:d7:19:f0: 87:55:c2:3a:98:d7:d1:79:75:42:df:b6:bc:e6:6c: 0d:33:ba:84:3d:60:9c:0c:1e:bf:5f:3e:31:83:a3: 95:88:ca:9e:54:35:e2:37:3b:f0:db:0c:d9:7a:f5: 9c:b2:46:74:29:72:2f:3c:da:47:3c:a5:15:7f:88: 41:fe:1e:98:21:3b:3e:47:c2:cd:fd:49:4a:9b:68: 43:5d:f9:0a:12:ab:78:68:a6:ba:ab:89:52:ac:77: 55:11:6b:82:a2:a1:f1:d6:21:3d:a1:8e:d8:27:aa: 48:9a:d5:64:e7:42:a8:27:a8:49:23:85:0e:3c:82: 5b:0f:e3:ec:f1:cc:7f:5a:34:e7:a0:c9:e3:17:fb: 2e:fe:74:f0:d2:b4:35:3d:e9:3e:87:0c:f9:d3:76: b9:e7:e4:71:f7:15:a4:29:04:36:73:46:91:2d:7b: b6:26:b2:53:be:f7:af:bb:15:cb:a9:d6:28:04:92: a4:16:02:16:f9:53:ac:bc:cd:8e:35:ee:99:ac:a3: 36:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A4:49:BC:1F:E7:3D:18:8F:5A:E4:C6:52:CE:37:38:58:04:D5:C8 X509v3 Authority Key Identifier: keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/BqRJvB_nPRiPWuTGUs43OFgE1cg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.67.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7b:1a:c8:3d:70:f6:be:de:1f:10:27:30:c3:c0:55:52:59:2f: 14:7c:f9:59:9b:5b:29:8e:d8:cc:8f:39:f3:ab:e2:c0:e2:fe: fb:5f:32:74:10:fb:10:80:05:e2:8b:28:f9:bf:83:2f:3e:42: e8:3d:f9:8e:05:a7:65:56:bd:9b:17:2e:e5:9c:d3:74:ae:40: a1:75:3c:e3:29:cd:ca:7b:1b:74:4a:37:54:9d:0b:de:fe:09: 62:b2:0a:cc:d1:2a:1d:8a:7d:d3:ff:e7:cb:ab:bf:31:94:53: ad:8a:3b:f3:f9:88:1a:8a:bd:47:9d:34:9e:53:b1:14:59:b5: 69:02:0d:33:d2:a5:24:6c:0c:1c:98:a5:60:47:ea:86:9f:10: 75:77:86:35:9e:37:cc:65:7a:ef:dd:d6:b6:07:03:a2:5b:7e: 69:a4:88:a0:70:7a:e2:c6:43:a3:80:1e:92:84:71:83:1c:ea: b5:f4:9c:4a:43:7e:33:ac:51:81:c2:80:6a:05:99:e9:a8:38: b5:83:4f:3b:38:60:53:69:6c:73:bc:4d:80:c4:36:16:b1:37: d3:00:ff:01:a8:98:b7:a1:04:3b:bd:d6:03:52:b0:7d:28:e0: e2:b3:24:c9:d2:2e:8b:ac:0f:53:25:a4:2b:97:f6:37:ea:9b: 4b:38:24:ea -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt87OwZ5hGt5keLj7S5gXEXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OWEwYTVkMWU4ZDU0MjQ4ZTg3NjY3ZTk4ODNjOTAyZjE3 NWUyZTcwHhcNMjYwMTAyMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmE0NDliYzFmZTczZDE4OGY1YWU0YzY1MmNlMzczODU4MDRkNWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lDBjNwBZ51YXz/BRiBJVB713u4l iRkXI706H43pM6Mr5kLNJwNfk1RGYtHEe4Epe3DRTmtZNM3XGfCHVcI6mNfReXVC 37a85mwNM7qEPWCcDB6/Xz4xg6OViMqeVDXiNzvw2wzZevWcskZ0KXIvPNpHPKUV f4hB/h6YITs+R8LN/UlKm2hDXfkKEqt4aKa6q4lSrHdVEWuCoqHx1iE9oY7YJ6pI mtVk50KoJ6hJI4UOPIJbD+Ps8cx/WjTnoMnjF/su/nTw0rQ1Pek+hwz503a55+Rx 9xWkKQQ2c0aRLXu2JrJTvvevuxXLqdYoBJKkFgIW+VOsvM2ONe6ZrKM2SwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFAakSbwf5z0Yj1rkxlLONzhYBNXIMB8GA1UdIwQY MBaAFPaaCl0ejVQkjodmfpiDyQLxdeLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85NDQwYTQtMGI0Mi00YTU4LTkwMGEt ZTk5ZjIyNzcyNjI0LzEvQnFSSnZCX25QUmlQV3VUR1VzNDNPRmdFMWNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS85NDQwYTQtMGI0Mi00YTU4LTkwMGEtZTk5ZjIyNzcyNjI0 LzEvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjUMwDQYJ KoZIhvcNAQELBQADggEBAHsayD1w9r7eHxAnMMPAVVJZLxR8+VmbWymO2MyPOfOr 4sDi/vtfMnQQ+xCABeKLKPm/gy8+Qug9+Y4Fp2VWvZsXLuWc03SuQKF1POMpzcp7 G3RKN1SdC97+CWKyCszRKh2KfdP/58urvzGUU62KO/P5iBqKvUedNJ5TsRRZtWkC DTPSpSRsDByYpWBH6oafEHV3hjWeN8xleu/d1rYHA6JbfmmkiKBweuLGQ6OAHpKE cYMc6rX0nEpDfjOsUYHCgGoFmemoOLWDTzs4YFNpbHO8TYDENhaxN9MA/wGomLeh BDu91gNSsH0o4OKzJMnSLousD1MlpCuX9jfqm0s4JOo= -----END CERTIFICATE-----Generated at Tue Jan 27 11:26:45 2026 by rpki-client