This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/qrulOy0Coki4wn_-Qkde4O77Hns.roa File: qrulOy0Coki4wn_-Qkde4O77Hns.roa (raw, json) Hash identifier: 9SWbk/UztYZ7NcndOcjAJ8N03S/0ds8NsEMX2Ibcv78= Subject key identifier: AA:BB:A5:3B:2D:02:A2:48:B8:C2:7F:FE:42:47:5E:E0:EE:FB:1E:7B Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Certificate serial: 019B7DCAE2CD72374C8F8461978237842FB0 Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/qrulOy0Coki4wn_-Qkde4O77Hns.roa Signing time: Fri 02 Jan 2026 08:20:06 +0000 ROA not before: Fri 02 Jan 2026 08:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207645 IP address blocks: 87.254.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e2:cd:72:37:4c:8f:84:61:97:82:37:84:2f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Validity Not Before: Jan 2 08:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aabba53b2d02a248b8c27ffe42475ee0eefb1e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:92:31:44:3a:a7:42:9e:51:b1:35:e0:16:2b: 15:5b:1f:5d:44:5f:62:c4:8f:88:ec:53:53:2e:2a: 0c:4c:5f:9b:cb:aa:74:92:dd:89:1f:cf:db:ca:65: 4e:d7:08:7d:53:11:61:bf:5f:76:06:e8:e9:02:cc: 3b:0b:d2:e3:0c:be:ff:6e:2f:59:cd:6d:fb:f1:35: 88:db:a7:38:bc:18:03:0e:6e:7f:21:5a:10:a2:13: 82:f5:b0:24:e8:d1:56:9b:7b:cd:24:97:64:fe:0c: 85:e1:f0:14:17:77:db:01:cf:7c:85:69:47:ac:64: 9c:3c:96:a4:a5:4a:78:48:23:36:ab:1b:87:aa:b7: 6c:75:3c:36:74:08:6a:b3:49:47:15:7b:69:f6:95: 15:a6:52:a5:22:71:a1:9a:7a:53:11:9f:68:88:0c: aa:08:f5:7f:41:87:19:ac:f4:9b:55:83:70:8d:70: 37:ea:44:a6:d4:65:3f:6d:1c:65:0e:de:ec:36:20: ad:7d:88:4d:b5:eb:d1:14:ad:48:49:3f:07:69:67: 07:15:e2:dd:a8:fc:11:5f:03:0f:b6:d5:0d:cf:43: cf:87:fe:77:88:4f:08:fd:af:53:49:68:77:0f:7f: 24:f3:c7:9a:65:9c:70:bc:a7:89:2d:78:b6:77:44: bd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BB:A5:3B:2D:02:A2:48:B8:C2:7F:FE:42:47:5E:E0:EE:FB:1E:7B X509v3 Authority Key Identifier: keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/qrulOy0Coki4wn_-Qkde4O77Hns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.254.0.0/23 Signature Algorithm: sha256WithRSAEncryption 46:49:1a:88:22:12:e9:1d:1b:5e:d7:d7:90:72:84:7a:0b:00: 94:bf:b3:c9:24:52:b0:82:9e:5a:05:ab:18:ef:44:59:36:b3: 40:cd:86:99:05:5d:d2:11:61:02:b8:90:ae:c4:a1:ae:54:fa: df:6b:4e:ad:ef:21:8e:f6:dc:6d:7e:2c:90:a7:e0:f2:9a:b3: 84:dc:2b:bf:6e:37:5a:fa:eb:dd:99:0a:9d:44:cc:ca:f2:dd: 9f:00:e8:79:df:e5:21:40:95:a0:31:de:80:cc:af:ab:6f:7e: 7c:f1:8e:db:2f:5b:45:9f:c1:5e:1c:7d:1b:40:15:e5:3e:7a: d1:0c:75:7b:67:a7:83:f7:46:96:27:8c:9d:a2:b3:b6:90:90: 34:8e:a2:a7:dd:b6:ff:fe:ea:db:2f:a7:33:f8:2f:34:fe:b0: 2b:20:d5:92:dc:50:6a:a2:f0:d5:ba:53:5f:3d:33:af:df:a3: 2e:3c:92:56:73:68:7c:5d:39:e8:89:a6:31:13:a4:81:95:0e: 6f:7f:0c:fc:b5:93:aa:89:95:f1:bc:9c:9e:58:b0:fb:d1:05: 26:d6:dc:25:8d:86:30:33:3d:05:e6:68:30:29:9e:82:80:67: 00:ef:4f:5a:49:8e:98:d8:69:12:05:83:74:b2:c6:54:6f:89: 98:c8:99:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yuLNcjdMj4Rhl4I3hC+wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1 OGRjZDQwHhcNMjYwMTAyMDgyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWJiYTUzYjJkMDJhMjQ4YjhjMjdmZmU0MjQ3NWVlMGVlZmIxZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpIxRDqnQp5RsTXgFisVWx9dRF9i xI+I7FNTLioMTF+by6p0kt2JH8/bymVO1wh9UxFhv192BujpAsw7C9LjDL7/bi9Z zW378TWI26c4vBgDDm5/IVoQohOC9bAk6NFWm3vNJJdk/gyF4fAUF3fbAc98hWlH rGScPJakpUp4SCM2qxuHqrdsdTw2dAhqs0lHFXtp9pUVplKlInGhmnpTEZ9oiAyq CPV/QYcZrPSbVYNwjXA36kSm1GU/bRxlDt7sNiCtfYhNtevRFK1IST8HaWcHFeLd qPwRXwMPttUNz0PPh/53iE8I/a9TSWh3D38k88eaZZxwvKeJLXi2d0S9dwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKq7pTstAqJIuMJ//kJHXuDu+x57MB8GA1UdIwQY MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt NmZjZGNkNWFiNjYwLzEvcXJ1bE95MENva2k0d25fLVFrZGU0Tzc3SG5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV/4AMA0G CSqGSIb3DQEBCwUAA4IBAQBGSRqIIhLpHRte19eQcoR6CwCUv7PJJFKwgp5aBasY 70RZNrNAzYaZBV3SEWECuJCuxKGuVPrfa06t7yGO9txtfiyQp+DymrOE3Cu/bjda +uvdmQqdRMzK8t2fAOh53+UhQJWgMd6AzK+rb3588Y7bL1tFn8FeHH0bQBXlPnrR DHV7Z6eD90aWJ4ydorO2kJA0jqKn3bb//urbL6cz+C80/rArINWS3FBqovDVulNf PTOv36MuPJJWc2h8XTnoiaYxE6SBlQ5vfwz8tZOqiZXxvJyeWLD70QUm1twljYYw Mz0F5mgwKZ6CgGcA709aSY6Y2GkSBYN0ssZUb4mYyJna -----END CERTIFICATE-----Generated at Thu Jan 22 00:57:45 2026 by rpki-client