This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/qr2O9uI-f7MXur8EfWUDyrvVRqA.roa File: qr2O9uI-f7MXur8EfWUDyrvVRqA.roa (raw, json) Hash identifier: b0NRWiwTRXYrs1TTnHW2M/iJRczyHkHgFa9fqw1aZnY= Subject key identifier: AA:BD:8E:F6:E2:3E:7F:B3:17:BA:BF:04:7D:65:03:CA:BB:D5:46:A0 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758E4BCE6D5BFE044DF3EB1DBF8BF21 Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/qr2O9uI-f7MXur8EfWUDyrvVRqA.roa Signing time: Thu 01 Jan 2026 02:17:52 +0000 ROA not before: Thu 01 Jan 2026 02:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47536 IP address blocks: 5.1.67.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e4:bc:e6:d5:bf:e0:44:df:3e:b1:db:f8:bf:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aabd8ef6e23e7fb317babf047d6503cabbd546a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:18:c4:04:bf:7e:1e:ca:2b:91:f4:ac:38:a2: 40:fd:9f:e4:21:27:c1:b2:03:c2:42:29:f7:99:2a: c7:2b:ae:aa:02:ef:1d:43:1f:0e:8c:82:30:08:a9: 9c:fb:98:52:5d:44:e5:44:46:59:a3:2d:d5:4b:99: 38:84:06:12:13:4f:1b:84:6c:d9:ed:fd:02:4a:be: d1:82:d1:09:e4:8f:1e:59:d2:19:d4:54:c2:f3:cf: 3a:96:66:6c:b1:b3:3a:47:ef:42:79:45:8e:29:9d: 3d:d9:92:35:99:11:5c:95:bc:0b:5e:d0:57:cc:0a: 48:b9:a9:5d:eb:40:e1:94:74:fc:ff:a6:ce:a4:25: c3:70:8f:42:1c:60:61:f7:2d:ca:f6:8a:57:b1:f7: 2f:c8:65:9e:50:bb:c9:be:4f:7d:74:16:a1:b5:33: b7:53:3f:09:e2:6e:ac:3b:7b:76:12:b3:24:07:e8: 7f:d1:82:e7:41:07:d8:f9:48:09:f4:8e:8c:e1:8c: 03:10:50:b2:2a:18:3b:25:4b:ca:97:29:d0:4e:bf: 54:85:27:0c:fa:06:31:65:d5:5b:c1:13:2c:02:99: d0:57:a4:7f:a9:36:dc:e0:f8:d7:30:7b:75:69:9d: 30:c0:9c:ae:71:30:14:ee:8f:63:0c:f5:91:34:1e: eb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BD:8E:F6:E2:3E:7F:B3:17:BA:BF:04:7D:65:03:CA:BB:D5:46:A0 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/qr2O9uI-f7MXur8EfWUDyrvVRqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.67.0/24 Signature Algorithm: sha256WithRSAEncryption 20:c2:8a:4a:86:db:63:bd:a3:ec:12:14:d4:7b:a6:15:df:c5: 0e:06:8f:87:0f:c6:de:0d:aa:8c:f7:23:c2:1e:8d:52:b5:bf: 02:c6:a4:c2:0a:c1:8e:68:51:01:48:17:b6:ba:83:d3:73:29: 05:6e:67:7b:30:cb:c9:ce:22:55:a9:79:7c:7e:89:f8:f5:7b: 8b:1e:c6:e1:61:17:6b:a8:ad:0b:af:6e:37:41:13:4d:e7:44: ed:f2:d2:3f:fd:35:03:34:4b:6c:45:71:a0:b2:d9:b5:1b:41: 1b:1a:1f:f7:89:6f:92:1a:4f:d4:aa:ec:af:1b:28:e8:13:3d: 79:49:26:a5:cb:4f:c2:15:f2:51:86:e2:0c:10:db:01:dc:19: 7b:52:9f:b3:44:74:87:df:36:34:2c:c6:4b:69:32:d3:1a:c5: 30:c6:48:42:65:2c:2b:62:09:2f:b0:49:8a:aa:51:04:c5:22: f8:85:b7:4b:c7:55:46:aa:37:d7:ed:b8:8a:b8:a2:04:c8:5c: c9:30:f9:d6:52:3a:54:2d:61:0c:53:0a:0c:d3:ba:67:44:18: 2d:63:8b:32:4a:f0:ec:08:da:e1:ea:a6:51:bd:f5:ab:c8:0a: 80:64:bc:d4:ea:a7:db:9a:cf:e2:a9:f5:83:e5:25:ee:a8:f4: 4d:ad:64:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WOS85tW/4ETfPrHb+L8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWJkOGVmNmUyM2U3ZmIzMTdiYWJmMDQ3ZDY1MDNjYWJiZDU0NmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBjEBL9+HsorkfSsOKJA/Z/kISfB sgPCQin3mSrHK66qAu8dQx8OjIIwCKmc+5hSXUTlREZZoy3VS5k4hAYSE08bhGzZ 7f0CSr7RgtEJ5I8eWdIZ1FTC8886lmZssbM6R+9CeUWOKZ092ZI1mRFclbwLXtBX zApIuald60DhlHT8/6bOpCXDcI9CHGBh9y3K9opXsfcvyGWeULvJvk99dBahtTO3 Uz8J4m6sO3t2ErMkB+h/0YLnQQfY+UgJ9I6M4YwDEFCyKhg7JUvKlynQTr9UhScM +gYxZdVbwRMsApnQV6R/qTbc4PjXMHt1aZ0wwJyucTAU7o9jDPWRNB7rNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKq9jvbiPn+zF7q/BH1lA8q71UagMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvcXIyTzl1SS1mN01YdXI4RWZXVUR5cnZWUnFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQFDMA0G CSqGSIb3DQEBCwUAA4IBAQAgwopKhttjvaPsEhTUe6YV38UOBo+HD8beDaqM9yPC Ho1Stb8CxqTCCsGOaFEBSBe2uoPTcykFbmd7MMvJziJVqXl8fon49XuLHsbhYRdr qK0Lr243QRNN50Tt8tI//TUDNEtsRXGgstm1G0EbGh/3iW+SGk/UquyvGyjoEz15 SSaly0/CFfJRhuIMENsB3Bl7Up+zRHSH3zY0LMZLaTLTGsUwxkhCZSwrYgkvsEmK qlEExSL4hbdLx1VGqjfX7biKuKIEyFzJMPnWUjpULWEMUwoM07pnRBgtY4sySvDs CNrh6qZRvfWryAqAZLzU6qfbms/iqfWD5SXuqPRNrWRt -----END CERTIFICATE-----Generated at Wed Jan 21 00:04:09 2026 by rpki-client