This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/qgZQRIByCSALcE73ENt-q4UPqdY.roa File: qgZQRIByCSALcE73ENt-q4UPqdY.roa (raw, json) Hash identifier: GR9g1THKzvFcNqQhXU+wmTdELTKbBSkjvvOetVfO1p8= Subject key identifier: AA:06:50:44:80:72:09:20:0B:70:4E:F7:10:DB:7E:AB:85:0F:A9:D6 Certificate issuer: /CN=d223093ce150874016d793f439f43d2e6440c3f2 Certificate serial: 019B7A5B3D3D6976E9AEFECD9B087ADF601A Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/qgZQRIByCSALcE73ENt-q4UPqdY.roa Signing time: Thu 01 Jan 2026 16:19:18 +0000 ROA not before: Thu 01 Jan 2026 16:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 212.123.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 01:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:3d:3d:69:76:e9:ae:fe:cd:9b:08:7a:df:60:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2 Validity Not Before: Jan 1 16:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa065044807209200b704ef710db7eab850fa9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e9:45:ce:4c:26:75:6f:73:e4:3f:61:33:26: 9f:56:ae:4d:b3:b8:48:d9:2b:95:1c:37:2e:d9:25: 6a:e1:5b:99:ce:0b:87:b5:96:35:30:1a:f9:a9:28: 1b:83:b8:d3:db:39:7f:67:1c:83:d3:f7:38:e2:67: fe:95:14:29:93:32:e8:f4:aa:46:8c:69:26:51:a1: 32:a1:25:6a:82:2e:10:7c:c2:35:57:ad:aa:39:04: 90:69:77:31:83:99:d9:d1:d3:01:03:7e:8b:2e:e3: 70:ee:f4:83:23:80:85:7a:0a:9f:2a:83:60:f7:7a: e0:76:4b:3a:31:9d:86:86:73:fa:6b:76:c2:7e:17: 3b:46:f8:06:8f:99:38:9e:97:0c:c3:f9:f0:db:ef: 24:84:10:40:94:90:c8:62:6f:35:ed:48:22:e1:37: 1d:60:9f:48:ca:09:fc:7b:20:0d:c0:e7:2c:46:a3: af:f8:60:f2:d2:f7:b3:53:3a:f6:28:14:f9:d9:98: 71:1c:75:6b:4d:32:2d:dd:25:29:d7:df:b2:1f:e6: 52:7d:01:10:8e:e9:ef:e8:4a:37:86:58:31:87:3a: 4d:ee:d8:8b:0f:f8:88:3d:a3:81:53:99:de:3d:7d: 57:d1:14:55:fc:b5:d8:17:8e:9e:50:d7:c4:3f:3e: 1f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:06:50:44:80:72:09:20:0B:70:4E:F7:10:DB:7E:AB:85:0F:A9:D6 X509v3 Authority Key Identifier: keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/qgZQRIByCSALcE73ENt-q4UPqdY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.123.46.0/23 Signature Algorithm: sha256WithRSAEncryption 66:34:54:da:27:c1:07:68:c6:af:97:0b:27:dc:b2:e4:a2:43: c7:e3:66:0e:a7:a5:f0:fd:05:54:a4:f8:ac:cc:c0:66:f5:87: 7a:86:39:ca:57:8f:83:36:f6:aa:3d:c3:25:1d:98:0a:7f:b8: 88:14:c3:3f:b2:d1:f0:cd:e7:75:ab:91:36:b8:01:8f:53:8a: e2:ca:a8:80:ed:24:b6:02:10:41:48:c4:09:c9:8a:6d:ca:c4: 53:bb:40:54:99:db:ed:43:4b:43:96:be:98:0b:8f:83:8f:58: 8a:54:a3:11:61:b7:d2:0f:09:7a:26:93:6b:aa:c7:31:cc:0c: 68:f8:3f:8a:b0:06:b1:d7:88:a7:1b:69:38:37:6f:18:6a:74: c2:6f:38:30:49:f5:ce:a0:2b:52:3e:43:a7:fd:be:4b:b2:cd: cc:88:84:5f:65:b7:e2:dc:9a:e2:3e:2f:63:da:29:73:e5:e6: 29:42:0d:38:1b:ff:72:3b:e9:f4:e5:07:9e:ac:98:5d:4f:13: d7:e5:7a:27:02:4d:02:23:3c:9a:d5:35:66:52:cb:53:d6:c7: 89:b9:a9:9f:df:5b:2d:82:61:cb:d0:22:05:1a:67:86:a7:63: ab:94:fb:31:9d:e4:43:51:a5:e9:da:1c:2a:1f:8f:cc:20:df: 67:6e:c2:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wz09aXbprv7Nmwh632AaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMjMwOTNjZTE1MDg3NDAxNmQ3OTNmNDM5ZjQzZDJlNjQ0 MGMzZjIwHhcNMjYwMTAxMTYxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTA2NTA0NDgwNzIwOTIwMGI3MDRlZjcxMGRiN2VhYjg1MGZhOWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkulFzkwmdW9z5D9hMyafVq5Ns7hI 2SuVHDcu2SVq4VuZzguHtZY1MBr5qSgbg7jT2zl/ZxyD0/c44mf+lRQpkzLo9KpG jGkmUaEyoSVqgi4QfMI1V62qOQSQaXcxg5nZ0dMBA36LLuNw7vSDI4CFegqfKoNg 93rgdks6MZ2GhnP6a3bCfhc7RvgGj5k4npcMw/nw2+8khBBAlJDIYm817Ugi4Tcd YJ9Iygn8eyANwOcsRqOv+GDy0vezUzr2KBT52ZhxHHVrTTIt3SUp19+yH+ZSfQEQ junv6Eo3hlgxhzpN7tiLD/iIPaOBU5nePX1X0RRV/LXYF46eUNfEPz4f8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKoGUESAcgkgC3BO9xDbfquFD6nWMB8GA1UdIwQY MBaAFNIjCTzhUIdAFteT9Dn0PS5kQMPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGlNSlBPRlFoMEFXMTVQME9mUTlMbVJBd19JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mOWEzZGQtNWE2MS00NzI0LWE1YTMt NWIwYjA1MDkzZTBjLzEvcWdaUVJJQnlDU0FMY0U3M0VOdC1xNFVQcWRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mOWEzZGQtNWE2MS00NzI0LWE1YTMtNWIwYjA1MDkzZTBj LzEvMGlNSlBPRlFoMEFXMTVQME9mUTlMbVJBd19JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1HsuMA0G CSqGSIb3DQEBCwUAA4IBAQBmNFTaJ8EHaMavlwsn3LLkokPH42YOp6Xw/QVUpPis zMBm9Yd6hjnKV4+DNvaqPcMlHZgKf7iIFMM/stHwzed1q5E2uAGPU4riyqiA7SS2 AhBBSMQJyYptysRTu0BUmdvtQ0tDlr6YC4+Dj1iKVKMRYbfSDwl6JpNrqscxzAxo +D+KsAax14inG2k4N28YanTCbzgwSfXOoCtSPkOn/b5Lss3MiIRfZbfi3JriPi9j 2ilz5eYpQg04G/9yO+n05QeerJhdTxPX5XonAk0CIzya1TVmUstT1seJuamf31st gmHL0CIFGmeGp2OrlPsxneRDUaXp2hwqH4/MIN9nbsI4 -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:46 2026 by rpki-client