This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/rbqy0clmqI55jleoqbDhNl2Cihg.roa File: rbqy0clmqI55jleoqbDhNl2Cihg.roa (raw, json) Hash identifier: 9mmN8R4c+u54HhYaMWLkg9F/Yl2W8b7Mo8bfHqLdKTc= Subject key identifier: AD:BA:B2:D1:C9:66:A8:8E:79:8E:57:A8:A9:B0:E1:36:5D:82:8A:18 Certificate issuer: /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2 Certificate serial: 019B7A59A2D19546AC9A7361CE8B40D27BD7 Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/rbqy0clmqI55jleoqbDhNl2Cihg.roa Signing time: Thu 01 Jan 2026 16:17:33 +0000 ROA not before: Thu 01 Jan 2026 16:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29676 IP address blocks: 109.224.192.0/20 maxlen: 20 109.224.220.0/23 maxlen: 23 109.224.222.0/24 maxlen: 24 109.224.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:a2:d1:95:46:ac:9a:73:61:ce:8b:40:d2:7b:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2 Validity Not Before: Jan 1 16:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adbab2d1c966a88e798e57a8a9b0e1365d828a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:df:2e:00:94:53:48:a1:fb:62:e4:bc:6e:1e: 74:19:94:f9:79:77:d5:3e:5f:7d:0d:fd:a3:b4:7a: fb:dd:c1:1b:44:0b:e3:9c:07:d1:c9:9e:51:73:7e: 71:09:ba:65:d5:47:33:d6:c6:3b:78:07:c0:3e:9e: e5:45:fc:f0:23:d0:37:66:12:a6:24:03:42:8c:10: 06:71:c6:ff:37:6f:6c:14:30:2f:ea:c0:d5:c3:2b: 23:39:3d:df:0a:3e:9b:44:b0:03:b8:b8:b8:5e:3e: cc:c1:f9:30:58:71:6b:2a:00:46:a0:42:45:3b:2a: 1d:8a:53:f9:35:9d:f5:40:0d:d1:f6:1a:39:c6:41: 88:1c:d8:58:eb:38:bd:34:da:db:3e:cb:83:38:06: f2:20:01:96:9f:f2:3f:0e:10:ad:ad:25:0b:ec:62: 88:bc:b9:d7:5a:97:01:84:e8:61:bd:26:b1:e4:bc: 25:4c:aa:b8:8b:78:95:07:c0:fc:6d:76:9c:a8:91: dd:a7:23:d1:7b:2a:cb:c9:28:55:1a:1b:8a:0a:d8: 37:87:11:bf:b4:39:d5:da:9c:9c:b8:ba:ac:17:00: 0a:71:58:39:0b:f1:b8:a1:94:f5:f8:28:bf:69:6a: 41:00:9e:78:64:ad:29:d2:8b:45:c6:f6:9c:50:fe: ba:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BA:B2:D1:C9:66:A8:8E:79:8E:57:A8:A9:B0:E1:36:5D:82:8A:18 X509v3 Authority Key Identifier: keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/rbqy0clmqI55jleoqbDhNl2Cihg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.224.192.0/20 109.224.220.0-109.224.222.255 109.224.233.0/24 Signature Algorithm: sha256WithRSAEncryption 67:43:c1:55:c2:90:83:37:67:6c:15:5b:47:81:e8:67:28:5d: e6:7e:58:11:36:93:1e:6f:d2:24:17:32:20:68:ef:b1:8b:7c: de:26:cf:67:e6:bc:96:75:8b:d7:88:70:0f:07:57:4c:ad:f9: af:16:a9:13:19:67:c1:30:37:df:13:ac:3a:0f:7a:92:83:00: 43:1b:a5:e3:b8:46:40:d2:6a:e7:f0:53:e2:e8:52:13:80:fa: 1d:ab:b0:31:8e:a5:68:46:3b:b3:cf:99:03:96:60:19:93:c0: 07:91:ec:3c:c0:0f:5f:a5:a6:a6:8b:39:b7:78:a3:49:5b:b4: 02:91:2e:64:f7:d1:51:27:e7:ad:38:66:c0:c0:5c:d2:80:8d: 71:33:41:75:59:a6:3d:4a:b7:0c:ef:1f:27:e0:89:7c:e5:31: 4d:3d:f7:6b:de:5d:4b:bc:2d:ba:32:41:06:64:e4:13:96:2e: dc:42:2c:c7:74:4a:aa:7e:36:98:cf:27:83:34:12:b6:3b:00: 70:42:64:5c:12:b6:25:5e:d0:8a:ac:a8:3f:4d:8b:8c:f8:e3: 4d:77:8f:c3:ed:33:4f:d7:94:05:b3:a9:c6:08:d9:bd:25:1c: 74:d7:99:a3:75:be:1d:e5:08:f9:57:37:0f:91:b8:a6:09:4d: 0f:a1:24:b5 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt6WaLRlUasmnNhzotA0nvXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYjk4MGMxMGQ3MTEwZjkxZmZmOWUwZWNlYjYzOWQ5ZTc1 YjM1ZTIwHhcNMjYwMTAxMTYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGJhYjJkMWM5NjZhODhlNzk4ZTU3YThhOWIwZTEzNjVkODI4YTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt8uAJRTSKH7YuS8bh50GZT5eXfV Pl99Df2jtHr73cEbRAvjnAfRyZ5Rc35xCbpl1Ucz1sY7eAfAPp7lRfzwI9A3ZhKm JANCjBAGccb/N29sFDAv6sDVwysjOT3fCj6bRLADuLi4Xj7MwfkwWHFrKgBGoEJF OyodilP5NZ31QA3R9ho5xkGIHNhY6zi9NNrbPsuDOAbyIAGWn/I/DhCtrSUL7GKI vLnXWpcBhOhhvSax5LwlTKq4i3iVB8D8bXacqJHdpyPReyrLyShVGhuKCtg3hxG/ tDnV2pycuLqsFwAKcVg5C/G4oZT1+Ci/aWpBAJ54ZK0p0otFxvacUP66bwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFK26stHJZqiOeY5XqKmw4TZdgooYMB8GA1UdIwQY MBaAFAK5gMENcRD5H/+eDs62OdnnWzXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXJtQXdRMXhFUGtmXzU0T3pyWTUyZWRiTmVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hODk0N2YtZTUyYy00ZGUxLWJhZGUt NzBjMGE1MDZkNzk3LzEvcmJxeTBjbG1xSTU1amxlb3FiRGhObDJDaWhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hODk0N2YtZTUyYy00ZGUxLWJhZGUtNzBjMGE1MDZkNzk3 LzEvQXJtQXdRMXhFUGtmXzU0T3pyWTUyZWRiTmVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQEbeDAMAwD BAJt4NwDBABt4N4DBABt4OkwDQYJKoZIhvcNAQELBQADggEBAGdDwVXCkIM3Z2wV W0eB6GcoXeZ+WBE2kx5v0iQXMiBo77GLfN4mz2fmvJZ1i9eIcA8HV0yt+a8WqRMZ Z8EwN98TrDoPepKDAEMbpeO4RkDSaufwU+LoUhOA+h2rsDGOpWhGO7PPmQOWYBmT wAeR7DzAD1+lpqaLObd4o0lbtAKRLmT30VEn5604ZsDAXNKAjXEzQXVZpj1Ktwzv HyfgiXzlMU0992veXUu8LboyQQZk5BOWLtxCLMd0Sqp+NpjPJ4M0ErY7AHBCZFwS tiVe0IqsqD9Ni4z44013j8PtM0/XlAWzqcYI2b0lHHTXmaN1vh3lCPlXNw+RuKYJ TQ+hJLU= -----END CERTIFICATE-----Generated at Sat Jan 10 22:50:56 2026 by rpki-client