This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/qobIcfeU6nrdlOVqSH5eoEXWNc4.roa File: qobIcfeU6nrdlOVqSH5eoEXWNc4.roa (raw, json) Hash identifier: Ajh39YpvJBLhmSQ2jvIh5vojnzHR5G4xIOrDmEyjq6g= Subject key identifier: AA:86:C8:71:F7:94:EA:7A:DD:94:E5:6A:48:7E:5E:A0:45:D6:35:CE Certificate issuer: /CN=bc663667973238b184d9eefd36bbf3810ba4b6d9 Certificate serial: 019B7A5B1EFBB5C5477AD607779104DE6432 Authority key identifier: BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/qobIcfeU6nrdlOVqSH5eoEXWNc4.roa Signing time: Thu 01 Jan 2026 16:19:10 +0000 ROA not before: Thu 01 Jan 2026 16:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198608 IP address blocks: 5.57.48.0/21 maxlen: 21 185.168.244.0/22 maxlen: 22 2a01:4c40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1e:fb:b5:c5:47:7a:d6:07:77:91:04:de:64:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc663667973238b184d9eefd36bbf3810ba4b6d9 Validity Not Before: Jan 1 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa86c871f794ea7add94e56a487e5ea045d635ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5d:75:f9:75:1f:14:7e:7c:fa:76:75:8c:76: 54:73:ed:75:15:55:5b:f1:c9:27:f7:c5:10:8f:7e: 41:a5:fd:8a:88:0b:65:1c:21:da:9a:79:41:b6:74: d3:1c:c2:1c:b7:e2:18:5d:4b:5b:66:a2:f0:e7:d9: 96:00:b9:d8:b2:54:35:ed:56:97:0a:12:d3:e6:36: b9:98:6b:b9:59:f8:a0:65:ab:fe:0d:4e:78:89:ae: bc:09:b1:c8:eb:b8:2f:5e:6d:6a:a4:92:6d:f8:67: f5:b3:d0:46:83:43:d3:1f:08:1e:e3:8f:b2:54:a4: 87:d7:aa:a5:08:88:a6:12:f2:e1:5d:1c:e8:68:e1: b1:52:de:e9:d5:da:35:7b:3a:56:de:87:c8:79:64: 46:00:3e:07:e2:34:24:48:9d:22:fd:2c:b4:1e:ae: 86:dc:ab:d4:84:f5:9c:1e:65:ad:ea:20:6c:1f:b9: 6e:c4:54:62:e8:ac:51:98:87:3d:1b:42:6c:0f:63: 93:c3:1b:4e:3a:75:de:0d:40:b1:2d:fe:d5:25:c4: 3b:3a:27:1e:e6:dc:f2:35:fe:20:92:4e:34:e1:bb: 34:15:7a:67:c9:55:b0:0f:de:3f:66:ef:71:a1:2d: 00:7c:b1:d8:bc:7e:8f:c9:b6:56:57:1c:19:07:82: 38:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:86:C8:71:F7:94:EA:7A:DD:94:E5:6A:48:7E:5E:A0:45:D6:35:CE X509v3 Authority Key Identifier: keyid:BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/qobIcfeU6nrdlOVqSH5eoEXWNc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.48.0/21 185.168.244.0/22 IPv6: 2a01:4c40::/32 Signature Algorithm: sha256WithRSAEncryption 73:56:66:7b:73:2c:de:89:dd:8f:62:34:19:28:6d:8a:94:bf: f9:03:3c:97:9f:28:a6:55:7e:4b:95:83:16:b4:82:e4:a3:03: 80:b6:59:6d:8f:a6:a2:c3:49:b1:16:7e:cf:06:b2:33:3a:30: bc:4f:68:b7:aa:b9:c9:c0:77:96:ce:f3:90:e7:82:5d:d4:22: 12:7d:1d:18:54:99:74:a6:da:fd:5f:9f:75:6e:8e:6e:b5:da: 9d:ae:22:a7:77:2a:f1:a4:bc:cb:61:b0:69:5b:76:7b:fa:25: a5:a8:50:c6:64:35:80:a5:60:62:58:e8:ac:d7:ab:36:52:59: e2:03:84:7a:e4:f9:76:3e:d3:81:b1:23:e8:f9:82:52:21:6a: 16:80:82:2b:10:5e:e4:34:b7:69:be:08:29:d4:ae:e5:cc:55: 24:41:7b:99:ef:05:aa:85:53:27:18:5a:40:6e:ce:5d:ba:19: ee:a8:e0:4d:7d:dc:eb:b4:27:cd:ff:11:78:82:d1:0a:67:46: c1:8d:6c:bc:48:ef:93:da:07:d7:84:75:b4:27:f1:f5:49:4b: 3d:46:97:cb:0e:36:6f:5f:28:26:c7:3c:35:1a:ac:22:38:e9: 3a:1f:df:a6:bf:b7:80:3e:b7:d7:b8:cb:b8:71:79:af:5f:96: d4:37:f5:9b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6Wx77tcVHetYHd5EE3mQyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNjYzNjY3OTczMjM4YjE4NGQ5ZWVmZDM2YmJmMzgxMGJh NGI2ZDkwHhcNMjYwMTAxMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTg2Yzg3MWY3OTRlYTdhZGQ5NGU1NmE0ODdlNWVhMDQ1ZDYzNWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl11+XUfFH58+nZ1jHZUc+11FVVb 8ckn98UQj35Bpf2KiAtlHCHamnlBtnTTHMIct+IYXUtbZqLw59mWALnYslQ17VaX ChLT5ja5mGu5WfigZav+DU54ia68CbHI67gvXm1qpJJt+Gf1s9BGg0PTHwge44+y VKSH16qlCIimEvLhXRzoaOGxUt7p1do1ezpW3ofIeWRGAD4H4jQkSJ0i/Sy0Hq6G 3KvUhPWcHmWt6iBsH7luxFRi6KxRmIc9G0JsD2OTwxtOOnXeDUCxLf7VJcQ7Oice 5tzyNf4gkk404bs0FXpnyVWwD94/Zu9xoS0AfLHYvH6PybZWVxwZB4I4yQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKqGyHH3lOp63ZTlakh+XqBF1jXOMB8GA1UdIwQY MBaAFLxmNmeXMjixhNnu/Ta784ELpLbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkdZMlo1Y3lPTEdFMmU3OU5ydnpnUXVrdHRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wYjk1MWEtOGU2Yy00NDQ1LTljMmQt OWYwMGM3MjYyMGY2LzEvcW9iSWNmZVU2bnJkbE9WcVNINWVvRVhXTmM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8wYjk1MWEtOGU2Yy00NDQ1LTljMmQtOWYwMGM3MjYyMGY2 LzEvdkdZMlo1Y3lPTEdFMmU3OU5ydnpnUXVrdHRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDBTkwAwQC uaj0MA0EAgACMAcDBQAqAUxAMA0GCSqGSIb3DQEBCwUAA4IBAQBzVmZ7cyzeid2P YjQZKG2KlL/5AzyXnyimVX5LlYMWtILkowOAtlltj6aiw0mxFn7PBrIzOjC8T2i3 qrnJwHeWzvOQ54Jd1CISfR0YVJl0ptr9X591bo5utdqdriKndyrxpLzLYbBpW3Z7 +iWlqFDGZDWApWBiWOis16s2UlniA4R65Pl2PtOBsSPo+YJSIWoWgIIrEF7kNLdp vggp1K7lzFUkQXuZ7wWqhVMnGFpAbs5duhnuqOBNfdzrtCfN/xF4gtEKZ0bBjWy8 SO+T2gfXhHW0J/H1SUs9RpfLDjZvXygmxzw1GqwiOOk6H9+mv7eAPrfXuMu4cXmv X5bUN/Wb -----END CERTIFICATE-----Generated at Mon Feb 9 22:14:57 2026 by rpki-client