This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/qlxYIa3PjXKqV7hlzapOlNgcm0I.roa File: qlxYIa3PjXKqV7hlzapOlNgcm0I.roa (raw, json) Hash identifier: 1ZBb0ZiezUactfqIZmt39M9PRVHG48Yw9HnDmIgNQw4= Subject key identifier: AA:5C:58:21:AD:CF:8D:72:AA:57:B8:65:CD:AA:4E:94:D8:1C:9B:42 Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9 Certificate serial: 019B7DC8959A86A5C6A2F6511D62F491CBF5 Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/qlxYIa3PjXKqV7hlzapOlNgcm0I.roa Signing time: Fri 02 Jan 2026 08:17:36 +0000 ROA not before: Fri 02 Jan 2026 08:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16057 IP address blocks: 212.78.32.0/24 maxlen: 24 212.78.33.0/24 maxlen: 24 212.78.34.0/24 maxlen: 24 212.78.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:95:9a:86:a5:c6:a2:f6:51:1d:62:f4:91:cb:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9 Validity Not Before: Jan 2 08:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa5c5821adcf8d72aa57b865cdaa4e94d81c9b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c5:45:a6:83:be:6d:b5:d5:7c:12:01:29:3c: cb:34:94:1f:08:fd:cf:13:bc:fb:5e:d1:16:3c:45: 46:d6:a9:f9:e3:ff:f6:65:22:fa:b4:54:88:9f:46: cb:69:c6:8b:4b:fb:b9:4a:2a:ce:db:08:3a:95:33: cf:2a:94:12:e2:ee:c2:77:60:cc:46:62:c8:8a:e8: a4:c1:76:c8:9a:3c:e1:cf:5c:df:2f:e8:d3:2e:5b: a6:31:4f:77:b1:7d:9a:9d:70:f8:d5:51:0d:1c:60: 03:47:1b:74:71:bd:9d:07:a1:20:73:b8:8d:17:5c: 63:a6:4a:95:31:7a:e4:8b:5f:69:2f:66:f7:65:94: a8:fc:62:c2:7c:04:b8:ca:20:c1:ea:9b:71:0f:bd: 1c:ff:9a:cb:64:f4:98:fd:a6:cc:cd:74:54:eb:e8: 25:5c:01:18:ba:16:86:2e:ec:5c:51:6a:1e:e6:59: 08:74:a5:08:bc:b7:e8:06:51:35:30:80:4d:3f:71: 67:f6:c5:a2:4a:6d:5b:05:2d:40:7d:bc:42:b0:3c: f1:9d:17:0b:e7:a6:6d:c0:64:68:ee:e7:5a:9a:c5: 34:82:65:1b:27:5e:74:bc:41:e1:13:19:cb:a3:c4: 93:d2:06:74:00:2d:7d:7e:0c:fb:31:86:9d:80:5e: 9c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5C:58:21:AD:CF:8D:72:AA:57:B8:65:CD:AA:4E:94:D8:1C:9B:42 X509v3 Authority Key Identifier: keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/qlxYIa3PjXKqV7hlzapOlNgcm0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.78.32.0/22 Signature Algorithm: sha256WithRSAEncryption 26:ca:59:bf:92:9b:1b:dc:8c:a5:4e:cb:73:5a:ec:63:d1:77: 72:99:9d:dc:2c:6a:fb:9d:31:62:62:13:02:6d:c1:6d:5f:27: 99:1b:88:fb:bf:0c:f9:ea:f2:3a:2a:e9:ae:4a:65:5b:27:a0: a6:5a:5a:d6:40:a3:cf:0f:e9:c8:7a:35:ee:13:b2:c4:5e:04: f8:ca:a0:ba:5a:61:0a:3c:48:b0:75:e7:f1:b3:19:5e:4f:a7: c6:33:e4:62:09:49:76:cc:8a:68:67:64:b1:aa:31:63:82:9a: 84:15:97:e2:9b:4b:46:8d:ea:0c:e6:b0:b7:56:fc:d4:0b:37: 72:ac:a9:19:ef:32:5f:90:66:2e:31:97:ce:7d:ca:ea:34:36: 83:73:8b:98:2a:aa:2e:d6:f0:b6:79:86:29:32:34:cb:5c:3f: fa:38:a5:d0:5c:b9:a7:33:5b:e0:2c:ee:b8:61:4e:d9:53:43: 9d:4b:4b:2e:f5:84:24:6a:05:00:c3:d4:92:bf:df:be:4d:78: 13:ce:35:93:8d:a7:6a:f6:d9:1f:08:79:03:05:db:28:52:8d: 77:77:d9:4e:0d:15:d0:2a:c7:22:96:70:d7:4b:b5:aa:6d:b4: 53:37:fc:92:2f:a5:b7:24:4b:f6:77:0a:ff:92:f4:85:f9:07: 64:90:6a:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yJWahqXGovZRHWL0kcv1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMTkzNjI4MWI4NjcwN2EwNWQ1NWEwMWY4OGIyZTY1M2Q3 YjNlZTkwHhcNMjYwMTAyMDgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTVjNTgyMWFkY2Y4ZDcyYWE1N2I4NjVjZGFhNGU5NGQ4MWM5YjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8VFpoO+bbXVfBIBKTzLNJQfCP3P E7z7XtEWPEVG1qn54//2ZSL6tFSIn0bLacaLS/u5SirO2wg6lTPPKpQS4u7Cd2DM RmLIiuikwXbImjzhz1zfL+jTLlumMU93sX2anXD41VENHGADRxt0cb2dB6Egc7iN F1xjpkqVMXrki19pL2b3ZZSo/GLCfAS4yiDB6ptxD70c/5rLZPSY/abMzXRU6+gl XAEYuhaGLuxcUWoe5lkIdKUIvLfoBlE1MIBNP3Fn9sWiSm1bBS1AfbxCsDzxnRcL 56ZtwGRo7udamsU0gmUbJ150vEHhExnLo8ST0gZ0AC19fgz7MYadgF6cWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKpcWCGtz41yqle4Zc2qTpTYHJtCMB8GA1UdIwQY MBaAFAsZNigbhnB6BdVaAfiLLmU9ez7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3hrMktCdUdjSG9GMVZvQi1Jc3VaVDE3UHVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84NWVlMDItNmY0My00OTI3LWFiNWQt ZWQ1N2IyNGI0NDY1LzEvcWx4WUlhM1BqWEtxVjdobHphcE9sTmdjbTBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi84NWVlMDItNmY0My00OTI3LWFiNWQtZWQ1N2IyNGI0NDY1 LzEvQ3hrMktCdUdjSG9GMVZvQi1Jc3VaVDE3UHVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1E4gMA0G CSqGSIb3DQEBCwUAA4IBAQAmylm/kpsb3IylTstzWuxj0XdymZ3cLGr7nTFiYhMC bcFtXyeZG4j7vwz56vI6KumuSmVbJ6CmWlrWQKPPD+nIejXuE7LEXgT4yqC6WmEK PEiwdefxsxleT6fGM+RiCUl2zIpoZ2SxqjFjgpqEFZfim0tGjeoM5rC3VvzUCzdy rKkZ7zJfkGYuMZfOfcrqNDaDc4uYKqou1vC2eYYpMjTLXD/6OKXQXLmnM1vgLO64 YU7ZU0OdS0su9YQkagUAw9SSv9++TXgTzjWTjadq9tkfCHkDBdsoUo13d9lODRXQ KscilnDXS7WqbbRTN/ySL6W3JEv2dwr/kvSF+QdkkGpj -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:25 2026 by rpki-client