This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/qo4K2MxKuprqgn2JH-P6sbefGGQ.roa File: qo4K2MxKuprqgn2JH-P6sbefGGQ.roa (raw, json) Hash identifier: 5nQ7RiiW8bFTZTK/XJeOeCamYJvNUIxvBcEODwO0sgE= Subject key identifier: AA:8E:0A:D8:CC:4A:BA:9A:EA:82:7D:89:1F:E3:FA:B1:B7:9F:18:64 Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724 Certificate serial: 019B797F09CB5246DF90ECBEA305015E927B Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/qo4K2MxKuprqgn2JH-P6sbefGGQ.roa Signing time: Thu 01 Jan 2026 12:18:47 +0000 ROA not before: Thu 01 Jan 2026 12:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8387 IP address blocks: 207.244.212.0/24 maxlen: 24 216.120.174.0/23 maxlen: 23 216.120.174.0/24 maxlen: 24 2001:678:554::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:09:cb:52:46:df:90:ec:be:a3:05:01:5e:92:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724 Validity Not Before: Jan 1 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa8e0ad8cc4aba9aea827d891fe3fab1b79f1864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:dd:a9:1c:83:a8:fc:ca:35:d2:c4:85:5b:39: 49:4c:3d:39:ef:39:ec:8f:68:9e:93:e5:90:73:f6: f8:ba:1c:58:2f:c5:aa:40:6c:53:a4:c8:f4:fe:49: 37:de:48:e3:78:9b:db:e3:1c:4c:35:6f:b0:a6:9c: b2:15:29:a0:69:06:5b:bb:d1:87:39:5e:ee:56:cc: a7:d6:6b:9d:d8:d5:88:9d:09:81:45:4a:ea:04:85: cd:6d:29:2b:ea:2f:43:1c:a9:e1:af:5f:50:38:16: 82:78:9f:b8:04:54:35:11:3d:98:aa:14:56:7a:0b: ae:2f:04:27:84:c6:61:27:af:ff:89:7d:9c:b2:46: e8:67:96:e7:b9:57:06:9d:93:da:e1:7e:d4:a3:04: 24:42:7d:68:cc:02:5c:6a:36:11:61:d9:5f:97:7e: 57:7a:6f:96:cd:bd:9b:ed:80:2d:02:df:a6:f0:7b: 51:3c:86:c9:4a:17:c4:94:12:d2:a7:0a:87:00:31: 62:d1:d1:40:d9:0e:98:30:60:f2:1f:00:ae:70:6a: 8b:61:5e:68:1a:a9:4d:7e:d4:c7:5a:5c:a5:26:17: 19:4e:a9:63:a8:5f:15:0b:36:8f:f9:9c:26:d1:34: 35:1a:21:f9:00:ab:4c:be:0c:57:05:8f:ad:50:69: 1e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8E:0A:D8:CC:4A:BA:9A:EA:82:7D:89:1F:E3:FA:B1:B7:9F:18:64 X509v3 Authority Key Identifier: keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/qo4K2MxKuprqgn2JH-P6sbefGGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.244.212.0/24 216.120.174.0/23 IPv6: 2001:678:554::/48 Signature Algorithm: sha256WithRSAEncryption 3f:16:1d:c5:08:4f:1f:f8:90:59:59:f3:4a:ac:ec:8d:cd:68: c2:e2:54:75:fa:93:4a:9a:30:4f:b7:bf:5a:b5:3d:7f:53:7f: 99:07:fd:94:63:2a:30:4f:76:a5:1a:0b:1d:7d:e7:75:0c:64: 58:14:3d:43:5a:70:06:e9:6f:7c:88:71:8e:16:1f:7c:84:c6: d9:83:6f:35:78:ee:94:89:78:02:bf:f7:ab:76:12:96:9c:42: d7:cc:63:15:aa:7f:ee:c7:6d:b2:3b:76:6f:42:57:23:ae:c7: 43:79:1d:4f:03:08:1a:72:c0:c6:4e:52:58:71:73:a8:8b:7a: 83:16:97:5c:80:9e:8f:ed:d5:8e:2f:26:82:8b:30:56:ff:5e: c0:d3:9d:31:2a:e4:ac:af:f2:7b:a8:a3:89:84:1f:b6:fe:29: 5b:8d:99:24:53:1f:44:10:35:0e:6b:de:53:36:eb:3a:72:ed: 4b:85:11:40:cd:45:cf:30:ec:07:37:47:ee:4c:0a:21:66:4c: a2:82:a9:5a:fa:2b:6e:2f:dd:0b:21:9f:9b:b2:90:17:44:6e: a2:ed:65:01:41:eb:56:c5:8c:45:12:1e:47:26:3f:a5:cf:cf: 41:6d:b7:39:82:6e:3d:4c:7a:07:00:69:63:7c:80:1f:00:0a: af:2e:fb:cf -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5fwnLUkbfkOy+owUBXpJ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOTkzZjc4Y2FlNDQ1OWE5YjllMjY4OWFkMzBmMGJjNDRj YzY3MjQwHhcNMjYwMTAxMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYThlMGFkOGNjNGFiYTlhZWE4MjdkODkxZmUzZmFiMWI3OWYxODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t2pHIOo/Mo10sSFWzlJTD057zns j2iek+WQc/b4uhxYL8WqQGxTpMj0/kk33kjjeJvb4xxMNW+wppyyFSmgaQZbu9GH OV7uVsyn1mud2NWInQmBRUrqBIXNbSkr6i9DHKnhr19QOBaCeJ+4BFQ1ET2YqhRW eguuLwQnhMZhJ6//iX2cskboZ5bnuVcGnZPa4X7UowQkQn1ozAJcajYRYdlfl35X em+Wzb2b7YAtAt+m8HtRPIbJShfElBLSpwqHADFi0dFA2Q6YMGDyHwCucGqLYV5o GqlNftTHWlylJhcZTqljqF8VCzaP+Zwm0TQ1GiH5AKtMvgxXBY+tUGke+wIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFKqOCtjMSrqa6oJ9iR/j+rG3nxhkMB8GA1UdIwQY MBaAFNGZP3jK5EWam54mia0w8LxEzGckMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8yZWJjNzktN2I5NC00YmY4LTkxMzMt NGIwNTc3NGRlMzcxLzEvcW80SzJNeEt1cHJxZ24ySkgtUDZzYmVmR0dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8yZWJjNzktN2I5NC00YmY4LTkxMzMtNGIwNTc3NGRlMzcx LzEvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAz/TUAwQB 2HiuMA8EAgACMAkDBwAgAQZ4BVQwDQYJKoZIhvcNAQELBQADggEBAD8WHcUITx/4 kFlZ80qs7I3NaMLiVHX6k0qaME+3v1q1PX9Tf5kH/ZRjKjBPdqUaCx1953UMZFgU PUNacAbpb3yIcY4WH3yExtmDbzV47pSJeAK/96t2EpacQtfMYxWqf+7HbbI7dm9C VyOux0N5HU8DCBpywMZOUlhxc6iLeoMWl1yAno/t1Y4vJoKLMFb/XsDTnTEq5Kyv 8nuoo4mEH7b+KVuNmSRTH0QQNQ5r3lM26zpy7UuFEUDNRc8w7Ac3R+5MCiFmTKKC qVr6K24v3Qshn5uykBdEbqLtZQFB61bFjEUSHkcmP6XPz0FttzmCbj1MegcAaWN8 gB8ACq8u+88= -----END CERTIFICATE-----Generated at Mon Feb 9 20:11:13 2026 by rpki-client