This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/Qb_RZp-mahSy8KfrU77wNxpfg_E.roa File: Qb_RZp-mahSy8KfrU77wNxpfg_E.roa (raw, json) Hash identifier: u1xd1aPYepFZHPAZOvL3xwts9hFrIKK/yaiHVAix9zo= Subject key identifier: 41:BF:D1:66:9F:A6:6A:14:B2:F0:A7:EB:53:BE:F0:37:1A:5F:83:F1 Certificate issuer: /CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67 Certificate serial: 019B7F852497EE8316A22A82F398DA430C24 Authority key identifier: 96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/Qb_RZp-mahSy8KfrU77wNxpfg_E.roa Signing time: Fri 02 Jan 2026 16:23:10 +0000 ROA not before: Fri 02 Jan 2026 16:23:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56361 IP address blocks: 31.41.184.0/21 maxlen: 21 46.175.120.0/21 maxlen: 21 176.98.168.0/21 maxlen: 21 176.118.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:24:97:ee:83:16:a2:2a:82:f3:98:da:43:0c:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67 Validity Not Before: Jan 2 16:23:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41bfd1669fa66a14b2f0a7eb53bef0371a5f83f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7b:37:9b:f9:61:af:e1:7d:bc:54:12:71:aa: a3:97:5c:1f:24:22:39:ca:cd:30:cb:7e:4d:3a:8a: 9b:e9:35:cb:82:a5:a0:f8:b2:53:81:4b:f7:24:86: f8:1c:0d:1d:71:fc:f3:7d:f1:1e:dc:da:bf:5d:6b: 65:9f:8f:99:7d:61:27:b2:c9:6e:b9:ea:57:1c:ef: e7:75:46:d2:1f:04:99:ba:f8:f5:86:fb:83:96:29: 6e:d6:ba:60:f6:e0:27:07:00:0a:ab:e7:5f:f4:bc: 75:21:0b:18:f9:51:70:7b:a0:84:93:76:11:4a:58: b0:ce:07:f1:8d:10:0b:f5:33:06:80:0d:06:41:48: 37:15:d5:e7:7a:0e:fb:34:df:22:51:e7:c6:5e:34: a4:fd:8f:62:ee:bc:27:e0:23:06:7f:a1:62:06:b6: 59:dc:ac:4e:31:d3:84:bf:51:03:16:6f:fa:40:be: 7d:ef:04:4b:20:6f:15:36:50:ae:4c:9e:f0:17:80: d8:61:36:5f:00:3a:75:cf:cf:be:d8:a1:49:17:28: 06:f3:7a:4b:d7:87:c8:74:9f:21:76:79:96:ff:0f: 4d:56:98:af:9e:c8:3a:47:86:d1:09:c4:39:ce:58: 19:29:83:8c:c4:24:22:ba:15:72:81:2b:84:b0:a4: d9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BF:D1:66:9F:A6:6A:14:B2:F0:A7:EB:53:BE:F0:37:1A:5F:83:F1 X509v3 Authority Key Identifier: keyid:96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/Qb_RZp-mahSy8KfrU77wNxpfg_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.184.0/21 46.175.120.0/21 176.98.168.0/21 176.118.128.0/21 Signature Algorithm: sha256WithRSAEncryption 00:8d:07:4d:70:cd:71:c6:79:ec:a0:89:c7:ff:58:d8:ac:2c: 5e:e7:bd:46:ce:30:bc:f5:e8:eb:12:7a:5d:0c:a0:fb:9c:14: 7a:17:45:b9:20:ec:dd:02:46:8c:4c:08:43:27:74:19:4d:29: 43:3e:7a:7d:91:7a:a5:46:a9:89:c5:bb:5f:35:8f:56:e8:a2: a7:2e:51:c1:8a:94:4f:b5:46:9a:e8:2f:56:64:d3:b4:d0:63: cf:86:95:6d:78:2a:f4:75:0d:2c:8d:ae:77:29:71:23:d7:bf: 5f:6d:af:6c:a1:25:76:fd:c9:a5:fb:3f:c8:11:89:09:cb:ae: db:3d:e6:da:a1:e0:55:6e:3e:51:7e:76:a1:c3:88:57:d5:3c: d7:5a:7a:d1:e3:ec:f0:34:09:45:4c:60:a0:fb:4a:cf:e7:5f: 00:05:24:12:af:14:ef:e8:ab:8f:02:d9:64:1b:df:f7:24:70: 1d:dd:4f:57:2f:6c:b4:48:0d:70:77:48:3e:9f:80:42:00:c1: cc:66:b4:98:63:10:72:dc:7d:ba:b0:73:9b:51:ce:06:93:78: 96:80:95:f1:8c:75:0d:13:ac:07:ae:82:d9:d6:ee:46:91:c6: ca:6c:c9:3a:2d:60:76:24:50:74:63:27:07:6e:f5:f3:87:4e: 83:d6:19:a5 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hSSX7oMWoiqC85jaQwwkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2Yjg3ZTVmZDFhYWRjMWJiZWEzNzJiNDI2OWVlYmQzOTNj NWNkNjcwHhcNMjYwMTAyMTYyMzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWJmZDE2NjlmYTY2YTE0YjJmMGE3ZWI1M2JlZjAzNzFhNWY4M2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApns3m/lhr+F9vFQScaqjl1wfJCI5 ys0wy35NOoqb6TXLgqWg+LJTgUv3JIb4HA0dcfzzffEe3Nq/XWtln4+ZfWEnsslu uepXHO/ndUbSHwSZuvj1hvuDlilu1rpg9uAnBwAKq+df9Lx1IQsY+VFwe6CEk3YR SliwzgfxjRAL9TMGgA0GQUg3FdXneg77NN8iUefGXjSk/Y9i7rwn4CMGf6FiBrZZ 3KxOMdOEv1EDFm/6QL597wRLIG8VNlCuTJ7wF4DYYTZfADp1z8++2KFJFygG83pL 14fIdJ8hdnmW/w9NVpivnsg6R4bRCcQ5zlgZKYOMxCQiuhVygSuEsKTZZwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEG/0WafpmoUsvCn61O+8DcaX4PxMB8GA1UdIwQY MBaAFJa4fl/RqtwbvqNytCae69OTxc1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHJoLVg5R3EzQnUtbzNLMEpwN3IwNVBGeldjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82YTg4YWMtZWZiNC00NWU0LTkxOTkt MmFiZGIyMTk0MWJjLzEvUWJfUlpwLW1haFN5OEtmclU3N3dOeHBmZ19FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi82YTg4YWMtZWZiNC00NWU0LTkxOTktMmFiZGIyMTk0MWJj LzEvbHJoLVg5R3EzQnUtbzNLMEpwN3IwNVBGeldjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDHym4AwQD Lq94AwQDsGKoAwQDsHaAMA0GCSqGSIb3DQEBCwUAA4IBAQAAjQdNcM1xxnnsoInH /1jYrCxe571GzjC89ejrEnpdDKD7nBR6F0W5IOzdAkaMTAhDJ3QZTSlDPnp9kXql RqmJxbtfNY9W6KKnLlHBipRPtUaa6C9WZNO00GPPhpVteCr0dQ0sja53KXEj179f ba9soSV2/cml+z/IEYkJy67bPebaoeBVbj5Rfnahw4hX1TzXWnrR4+zwNAlFTGCg +0rP518ABSQSrxTv6KuPAtlkG9/3JHAd3U9XL2y0SA1wd0g+n4BCAMHMZrSYYxBy 3H26sHObUc4Gk3iWgJXxjHUNE6wHroLZ1u5GkcbKbMk6LWB2JFB0YycHbvXzh06D 1hml -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:07 2026 by rpki-client