This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/qi2McZp71fHBoWBI2ZHbtQCvE4o.roa File: qi2McZp71fHBoWBI2ZHbtQCvE4o.roa (raw, json) Hash identifier: i0mtBmOyDYgRrM3+GxWl4R2NJ84ChiPy81fprThNQJs= Subject key identifier: AA:2D:8C:71:9A:7B:D5:F1:C1:A1:60:48:D9:91:DB:B5:00:AF:13:8A Certificate issuer: /CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16 Certificate serial: 019B77C6B7A87A97A591FAAD36C0B5BC2716 Authority key identifier: 9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/qi2McZp71fHBoWBI2ZHbtQCvE4o.roa Signing time: Thu 01 Jan 2026 04:17:50 +0000 ROA not before: Thu 01 Jan 2026 04:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197435 IP address blocks: 194.0.179.0/24 maxlen: 24 2a0a:a300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b7:a8:7a:97:a5:91:fa:ad:36:c0:b5:bc:27:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16 Validity Not Before: Jan 1 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa2d8c719a7bd5f1c1a16048d991dbb500af138a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e5:87:39:7b:6f:ce:7e:40:4c:0c:98:3c:1b: 92:e4:72:f2:42:ed:94:b8:1a:1e:34:81:58:4d:87: 43:07:a6:d8:35:da:f8:93:7b:9a:15:04:cb:8f:f6: 8a:d9:85:ab:99:93:1e:03:de:1b:90:4e:94:d3:03: 80:84:58:c3:08:bc:eb:4a:cd:64:0c:0a:8c:e7:18: 49:c4:48:80:da:20:6a:15:51:f6:0f:46:e4:3f:cd: 01:07:77:7b:aa:fb:88:ba:6a:a6:33:e6:76:2f:55: cf:21:12:7a:d1:92:c1:46:8f:b6:7c:01:51:98:f8: 58:e1:1c:ed:7c:8c:46:83:34:a8:d2:65:29:2d:ee: 36:1c:e0:17:3c:19:b3:fa:66:ee:0b:92:b8:a3:0f: 09:ff:26:2a:ee:80:04:26:ff:8d:19:77:5b:4c:99: 5a:e6:7e:69:ce:13:a8:29:4b:7f:04:f9:88:f1:80: 21:8b:26:a7:f4:34:ee:75:68:b0:15:48:b7:05:ea: 85:e8:00:8f:ac:6f:5d:c8:41:d4:d1:db:09:51:2b: 62:c6:c1:40:17:33:c9:0d:b3:73:e3:78:77:cf:7f: 36:e4:82:a2:cc:d0:2a:41:dc:4a:19:86:cc:bd:c2: ce:87:e1:6a:d1:11:ab:18:79:e7:3f:47:d7:65:f3: 1e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2D:8C:71:9A:7B:D5:F1:C1:A1:60:48:D9:91:DB:B5:00:AF:13:8A X509v3 Authority Key Identifier: keyid:9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/qi2McZp71fHBoWBI2ZHbtQCvE4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.179.0/24 IPv6: 2a0a:a300::/32 Signature Algorithm: sha256WithRSAEncryption 3d:29:c5:5b:e6:8b:e1:9b:47:78:ea:0c:a3:a1:ed:04:fd:21: 98:7f:09:c0:96:66:70:3f:1b:1a:9a:cf:6d:55:6e:48:c8:00: 7c:59:20:f3:4e:3b:9d:de:32:a3:9d:15:06:9b:42:63:e7:85: 80:20:33:a1:80:06:39:51:c1:fa:84:9d:0a:ea:fa:5a:6a:1d: 95:2b:d9:e1:14:3d:5a:c4:6f:cf:8f:8a:b1:46:ed:4d:a4:8c: 45:fb:57:73:a1:f5:43:21:f0:c3:a3:10:3c:00:3c:5e:50:9f: b6:43:f2:47:01:dd:d4:a4:4c:a7:5d:1a:c4:71:fd:84:1e:c0: 3f:65:72:c7:06:5f:59:45:5d:42:59:19:85:cd:e7:62:a6:ee: f8:35:63:f7:80:e9:28:6f:81:cf:de:68:6c:d0:a6:66:55:af: 4d:c6:c0:dc:11:f6:0a:a9:cd:a6:ba:7f:be:ab:28:b8:3a:69: 5b:23:b2:3e:d3:4a:c6:2b:52:83:2a:a3:87:95:0c:a5:c5:88: 67:78:31:9d:6f:53:5c:84:58:8c:74:b8:05:01:b3:80:e4:5a: eb:7b:bc:f0:37:37:84:80:0c:4e:b6:dc:10:1f:89:0d:d6:f2: 86:95:04:e2:de:07:d0:9f:14:23:27:ec:91:3a:c7:57:b8:f7: 09:ac:7e:7a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xreoepelkfqtNsC1vCcWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMmRhZDQ4MWNiYTU0ODNiYWFiMGQ3YTBjY2RjMWFkZTgz MmFkMTYwHhcNMjYwMTAxMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTJkOGM3MTlhN2JkNWYxYzFhMTYwNDhkOTkxZGJiNTAwYWYxMzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOWHOXtvzn5ATAyYPBuS5HLyQu2U uBoeNIFYTYdDB6bYNdr4k3uaFQTLj/aK2YWrmZMeA94bkE6U0wOAhFjDCLzrSs1k DAqM5xhJxEiA2iBqFVH2D0bkP80BB3d7qvuIumqmM+Z2L1XPIRJ60ZLBRo+2fAFR mPhY4RztfIxGgzSo0mUpLe42HOAXPBmz+mbuC5K4ow8J/yYq7oAEJv+NGXdbTJla 5n5pzhOoKUt/BPmI8YAhiyan9DTudWiwFUi3BeqF6ACPrG9dyEHU0dsJUStixsFA FzPJDbNz43h3z3825IKizNAqQdxKGYbMvcLOh+Fq0RGrGHnnP0fXZfMe1wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKotjHGae9XxwaFgSNmR27UArxOKMB8GA1UdIwQY MBaAFJstrUgculSDuqsNegzNwa3oMq0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXkydFNCeTZWSU82cXcxNkRNM0JyZWd5clJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82NGJhYjgtODliNy00ZjY4LWFmYzMt ODVhMmFlYjA3OThkLzEvcWkyTWNacDcxZkhCb1dCSTJaSGJ0UUN2RTRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi82NGJhYjgtODliNy00ZjY4LWFmYzMtODVhMmFlYjA3OThk LzEvbXkydFNCeTZWSU82cXcxNkRNM0JyZWd5clJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwgCzMA0E AgACMAcDBQAqCqMAMA0GCSqGSIb3DQEBCwUAA4IBAQA9KcVb5ovhm0d46gyjoe0E /SGYfwnAlmZwPxsams9tVW5IyAB8WSDzTjud3jKjnRUGm0Jj54WAIDOhgAY5UcH6 hJ0K6vpaah2VK9nhFD1axG/Pj4qxRu1NpIxF+1dzofVDIfDDoxA8ADxeUJ+2Q/JH Ad3UpEynXRrEcf2EHsA/ZXLHBl9ZRV1CWRmFzedipu74NWP3gOkob4HP3mhs0KZm Va9NxsDcEfYKqc2mun++qyi4OmlbI7I+00rGK1KDKqOHlQylxYhneDGdb1NchFiM dLgFAbOA5Frre7zwNzeEgAxOttwQH4kN1vKGlQTi3gfQnxQjJ+yROsdXuPcJrH56 -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:51 2026 by rpki-client