This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/qtZoVhX5rK4cZg7Ko3vwHIbRlE4.roa File: qtZoVhX5rK4cZg7Ko3vwHIbRlE4.roa (raw, json) Hash identifier: B+cfOBFQS0AHm1xsdf8uja/gqoAukeAQ2CKGxd1/H5s= Subject key identifier: AA:D6:68:56:15:F9:AC:AE:1C:66:0E:CA:A3:7B:F0:1C:86:D1:94:4E Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED88B6822A479B275EC9F04602892A Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/qtZoVhX5rK4cZg7Ko3vwHIbRlE4.roa Signing time: Fri 02 Jan 2026 04:18:20 +0000 ROA not before: Fri 02 Jan 2026 04:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62110 IP address blocks: 151.237.78.0/23 maxlen: 23 151.237.78.0/24 maxlen: 24 151.237.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:88:b6:82:2a:47:9b:27:5e:c9:f0:46:02:89:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aad6685615f9acae1c660ecaa37bf01c86d1944e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:26:8a:7f:4b:9b:e2:45:4e:ae:4a:92:37:9b: 5b:55:94:c3:e6:78:57:c8:7b:92:c0:61:66:bf:f1: a9:c4:51:1f:da:be:34:13:51:25:46:77:d9:d5:22: 3f:ef:6a:1b:29:13:3d:bb:ca:82:c8:4f:85:ec:56: e9:0a:03:6c:5c:62:44:ba:07:ca:9f:ef:bb:30:99: 1a:0f:90:9b:52:a9:6a:9b:b4:a2:19:df:3f:a7:30: 49:e5:80:1b:8e:ba:b7:10:92:1c:b7:6d:0d:e3:f7: 36:81:c9:56:f1:66:6a:36:1a:82:a3:f4:8a:22:9d: 6e:68:da:ea:09:22:b8:7e:aa:38:d6:14:bf:48:c6: 9e:de:d0:af:b1:6b:dd:4c:f4:48:fc:eb:2f:63:ca: 50:37:1e:d6:23:42:5d:7a:e2:20:6b:29:3f:a8:ba: f7:f6:8d:52:0a:c5:2b:99:b9:56:ac:cd:e6:4b:b7: 46:e8:ba:61:5c:f5:4f:f1:00:88:1a:69:c2:58:6d: c6:3e:29:9d:ee:b4:d7:f3:9d:09:12:4f:75:0a:07: 17:a6:36:76:cd:4f:10:0f:51:06:f4:1b:fa:10:74: bf:76:8f:7b:45:f4:6a:b9:80:af:87:26:4c:d6:a4: 63:2c:d8:51:73:00:18:84:61:51:3e:9b:92:bc:b4: d4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D6:68:56:15:F9:AC:AE:1C:66:0E:CA:A3:7B:F0:1C:86:D1:94:4E X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/qtZoVhX5rK4cZg7Ko3vwHIbRlE4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.237.78.0/23 Signature Algorithm: sha256WithRSAEncryption a5:6f:98:76:90:46:00:f1:dc:2e:f2:62:04:11:8e:a2:52:73: 4c:19:de:b1:2b:7a:fd:86:bf:67:f3:12:26:a9:5d:72:08:c0: 6b:67:0d:cb:92:0f:d2:44:be:0d:24:3b:6a:66:40:ea:2c:df: 65:29:48:db:37:9b:dc:57:1d:75:00:e5:84:b8:a4:90:74:53: 47:be:6c:b3:20:43:83:dd:49:2c:12:80:45:20:6e:f7:72:42: ef:77:05:86:05:6f:93:3a:b2:1f:6a:9a:22:6a:da:89:74:da: f4:d7:4d:24:fd:b6:0d:21:57:78:26:b3:4b:af:d2:1f:de:89: 59:5c:02:67:18:22:08:99:21:9e:0d:47:a7:eb:b8:64:65:76: e0:52:c6:ed:10:98:55:51:0c:67:29:83:e0:d7:95:be:e2:39: f3:2f:1a:87:ee:e8:c3:00:6f:e5:3f:75:33:b8:e6:59:9d:60: b7:00:39:ac:7e:b7:e1:e1:ca:aa:49:61:16:99:3b:88:af:20: 6d:29:74:21:5f:50:14:24:26:3e:83:09:f3:ef:f1:8d:4c:91: 38:16:da:30:51:09:7f:99:ef:46:27:06:c5:7e:27:d0:64:d5: 4f:77:5b:36:fe:1b:fa:1e:73:b3:6e:73:75:c2:99:dc:a2:cb: 63:f5:28:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Yi2gipHmydeyfBGAokqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWQ2Njg1NjE1ZjlhY2FlMWM2NjBlY2FhMzdiZjAxYzg2ZDE5NDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CaKf0ub4kVOrkqSN5tbVZTD5nhX yHuSwGFmv/GpxFEf2r40E1ElRnfZ1SI/72obKRM9u8qCyE+F7FbpCgNsXGJEugfK n++7MJkaD5CbUqlqm7SiGd8/pzBJ5YAbjrq3EJIct20N4/c2gclW8WZqNhqCo/SK Ip1uaNrqCSK4fqo41hS/SMae3tCvsWvdTPRI/OsvY8pQNx7WI0JdeuIgayk/qLr3 9o1SCsUrmblWrM3mS7dG6LphXPVP8QCIGmnCWG3GPimd7rTX850JEk91CgcXpjZ2 zU8QD1EG9Bv6EHS/do97RfRquYCvhyZM1qRjLNhRcwAYhGFRPpuSvLTUaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKrWaFYV+ayuHGYOyqN78ByG0ZROMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvcXRab1ZoWDVySzRjWmc3S28zdndISWJSbEU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl+1OMA0G CSqGSIb3DQEBCwUAA4IBAQClb5h2kEYA8dwu8mIEEY6iUnNMGd6xK3r9hr9n8xIm qV1yCMBrZw3Lkg/SRL4NJDtqZkDqLN9lKUjbN5vcVx11AOWEuKSQdFNHvmyzIEOD 3UksEoBFIG73ckLvdwWGBW+TOrIfapoiatqJdNr0100k/bYNIVd4JrNLr9If3olZ XAJnGCIImSGeDUen67hkZXbgUsbtEJhVUQxnKYPg15W+4jnzLxqH7ujDAG/lP3Uz uOZZnWC3ADmsfrfh4cqqSWEWmTuIryBtKXQhX1AUJCY+gwnz7/GNTJE4FtowUQl/ me9GJwbFfifQZNVPd1s2/hv6HnOzbnN1wpncostj9Sg3 -----END CERTIFICATE-----Generated at Mon Jan 26 20:26:08 2026 by rpki-client