This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/qRy6ONe0R3SK-tgWlZzQz3yXI-8.roa File: qRy6ONe0R3SK-tgWlZzQz3yXI-8.roa (raw, json) Hash identifier: 2lNtTexaTuQ64Sk2B9hHpKofwKN/Vg7RcO43ReydSmY= Subject key identifier: A9:1C:BA:38:D7:B4:47:74:8A:FA:D8:16:95:9C:D0:CF:7C:97:23:EF Certificate issuer: /CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac Certificate serial: 019B7D5D35487127D9FA903C65AABEC539BF Authority key identifier: D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/qRy6ONe0R3SK-tgWlZzQz3yXI-8.roa Signing time: Fri 02 Jan 2026 06:20:19 +0000 ROA not before: Fri 02 Jan 2026 06:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57201 IP address blocks: 188.0.48.0/20 maxlen: 20 2001:67c:23d4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:35:48:71:27:d9:fa:90:3c:65:aa:be:c5:39:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac Validity Not Before: Jan 2 06:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a91cba38d7b447748afad816959cd0cf7c9723ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:32:51:5e:47:8b:03:6a:53:bd:a8:f8:bc:32: ee:10:e8:76:c8:6b:3a:26:b9:c8:1c:d3:cb:a3:a4: 6c:d5:4f:77:fa:4b:bd:f7:8d:c9:45:6b:6b:36:ec: 0a:af:52:6d:14:30:d8:cf:22:7a:87:e9:8f:07:f8: 5f:25:51:e4:ed:24:40:a4:06:59:0c:78:23:64:43: 4f:47:bf:1a:b9:73:89:9d:ab:ac:4e:c7:2f:35:7e: 84:1d:06:95:0e:08:1f:51:48:da:d3:07:b0:fb:b2: f3:38:21:70:6d:1e:d5:0b:7d:85:01:57:ef:bd:95: c5:01:3f:b7:9d:6b:9b:b3:c5:48:c6:80:78:66:99: 0e:21:6e:e9:55:1a:7e:71:48:4c:74:f4:13:4d:1e: ea:03:f6:8a:83:52:ed:26:a1:46:63:fa:3b:40:54: a3:93:ae:c2:04:6e:27:ea:72:f2:14:ea:9d:a6:81: 40:94:84:d7:30:dc:24:df:2b:66:69:02:bf:73:77: a4:4c:ea:13:b7:77:45:94:d9:af:51:f9:b2:2c:0c: c5:45:1d:a2:3f:e3:01:fe:28:a6:44:a8:49:e1:06: e7:21:d7:6b:05:d4:0d:10:64:da:ee:27:c7:79:b9: 8b:25:d6:b5:be:ac:07:3e:73:79:b5:0a:23:14:b2: 0d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1C:BA:38:D7:B4:47:74:8A:FA:D8:16:95:9C:D0:CF:7C:97:23:EF X509v3 Authority Key Identifier: keyid:D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/qRy6ONe0R3SK-tgWlZzQz3yXI-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.0.48.0/20 IPv6: 2001:67c:23d4::/48 Signature Algorithm: sha256WithRSAEncryption b1:60:28:93:0b:3c:31:a2:27:6c:1f:d8:04:96:55:4c:fe:96: 60:0d:a2:2c:4a:9c:6a:35:9a:05:1c:62:60:5e:79:ce:4e:67: be:1e:30:65:e1:2f:6c:6f:04:10:3c:4d:50:27:5c:56:35:29: 91:44:ad:66:f5:a2:80:a1:56:6e:ce:e7:b2:ef:da:99:9a:26: f9:24:10:84:d3:23:1b:49:d9:d4:2b:6e:b1:b2:6f:7b:d6:a4: 3e:63:d0:63:b1:fe:ca:6c:fd:d0:fc:87:5a:e6:99:7d:f4:24: 89:10:b8:9a:de:a4:44:69:06:2c:4e:6c:3c:e3:f6:fe:8a:fa: ed:85:c2:15:50:42:be:b8:2a:51:ab:a6:d4:9a:2f:ae:51:df: 7f:c3:b9:76:7d:d4:a2:3c:d0:b4:26:e5:e8:97:0a:d5:c6:5d: bf:c4:ce:cf:be:86:87:f9:77:7c:bc:ca:32:a2:76:1b:c7:0c: 6c:3a:b8:d3:35:b7:be:5d:bf:05:11:38:f4:17:d5:e2:5e:e0: 24:25:4f:ed:d1:6f:b8:3c:de:46:c1:0b:28:db:cb:99:60:6d: 8f:5d:8e:83:a5:63:f3:a9:cb:4f:01:06:be:ce:c8:e8:54:aa: 98:1b:92:c8:82:a1:17:31:d8:46:08:ea:12:74:b2:9a:0d:57: 30:a5:00:e7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XTVIcSfZ+pA8Zaq+xTm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDYxZWU4N2Y1YjU1ZjE5MDNhMmIzNzA0ZWJhMDk0NGFi MGM1YWMwHhcNMjYwMTAyMDYyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTFjYmEzOGQ3YjQ0Nzc0OGFmYWQ4MTY5NTljZDBjZjdjOTcyM2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TJRXkeLA2pTvaj4vDLuEOh2yGs6 JrnIHNPLo6Rs1U93+ku9943JRWtrNuwKr1JtFDDYzyJ6h+mPB/hfJVHk7SRApAZZ DHgjZENPR78auXOJnausTscvNX6EHQaVDggfUUja0wew+7LzOCFwbR7VC32FAVfv vZXFAT+3nWubs8VIxoB4ZpkOIW7pVRp+cUhMdPQTTR7qA/aKg1LtJqFGY/o7QFSj k67CBG4n6nLyFOqdpoFAlITXMNwk3ytmaQK/c3ekTOoTt3dFlNmvUfmyLAzFRR2i P+MB/iimRKhJ4QbnIddrBdQNEGTa7ifHebmLJda1vqwHPnN5tQojFLINEwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKkcujjXtEd0ivrYFpWc0M98lyPvMB8GA1UdIwQY MBaAFNcGHuh/W1XxkDorNwTroJRKsMWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdZZTZIOWJWZkdRT2lzM0JPdWdsRXF3eGF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMTEzYzQtN2NmMS00MTFjLTg3M2It Mjg4M2Y4OGE4NmVjLzEvcVJ5Nk9OZTBSM1NLLXRnV2xaelF6M3lYSS04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMTEzYzQtN2NmMS00MTFjLTg3M2ItMjg4M2Y4OGE4NmVj LzEvMXdZZTZIOWJWZkdRT2lzM0JPdWdsRXF3eGF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEvAAwMA8E AgACMAkDBwAgAQZ8I9QwDQYJKoZIhvcNAQELBQADggEBALFgKJMLPDGiJ2wf2ASW VUz+lmANoixKnGo1mgUcYmBeec5OZ74eMGXhL2xvBBA8TVAnXFY1KZFErWb1ooCh Vm7O57Lv2pmaJvkkEITTIxtJ2dQrbrGyb3vWpD5j0GOx/sps/dD8h1rmmX30JIkQ uJrepERpBixObDzj9v6K+u2FwhVQQr64KlGrptSaL65R33/DuXZ91KI80LQm5eiX CtXGXb/Ezs++hof5d3y8yjKidhvHDGw6uNM1t75dvwUROPQX1eJe4CQlT+3Rb7g8 3kbBCyjby5lgbY9djoOlY/Opy08BBr7OyOhUqpgbksiCoRcx2EYI6hJ0spoNVzCl AOc= -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:34 2026 by rpki-client