This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/q-tGkn68JX1iQNUAcoaav1O9DAY.roa File: q-tGkn68JX1iQNUAcoaav1O9DAY.roa (raw, json) Hash identifier: mJUUTb4OWlSpjDRCx3qVRgRZAaIDDrJog20ANOTrCK4= Subject key identifier: AB:EB:46:92:7E:BC:25:7D:62:40:D5:00:72:86:9A:BF:53:BD:0C:06 Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019B7F8427E49C1E73E4B7D83FF53E3E36A6 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/q-tGkn68JX1iQNUAcoaav1O9DAY.roa Signing time: Fri 02 Jan 2026 16:22:05 +0000 ROA not before: Fri 02 Jan 2026 16:22:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207944 IP address blocks: 77.225.29.0/24 maxlen: 24 212.145.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:27:e4:9c:1e:73:e4:b7:d8:3f:f5:3e:3e:36:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jan 2 16:22:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abeb46927ebc257d6240d50072869abf53bd0c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:e6:bb:25:a8:28:54:7d:7f:97:51:07:53:c1: f5:9c:e4:bd:9b:83:7b:80:49:bd:25:d3:7c:67:ed: 54:3a:37:3d:dc:bb:7a:28:6d:98:79:38:22:5d:7e: be:1d:d5:bf:71:33:11:50:1f:dd:35:cd:a1:27:34: b0:98:98:73:26:e7:32:1f:46:6e:1b:c8:2e:75:6a: 71:87:37:16:74:57:a3:d4:ae:34:81:6c:ee:32:17: 0f:64:1f:f2:cf:41:e8:d1:58:a0:e5:fb:48:03:9b: fd:ec:bc:03:8d:5a:70:ae:45:4c:2f:e8:a1:8b:aa: 00:10:d6:45:cb:d8:bd:9e:b8:60:ec:fb:95:bc:38: e2:77:ca:93:87:c1:5f:d7:d1:40:e5:d2:ac:a0:f7: 97:eb:39:eb:d1:1f:80:45:3a:fd:91:ea:8d:63:c4: c3:10:7b:3f:15:32:fa:98:d3:f2:6d:6c:bd:f5:97: 1c:b9:f5:38:b9:30:6c:14:1c:1c:0f:62:cd:05:d5: 19:d7:ab:ca:60:a5:e1:0d:f9:e2:09:ce:00:6a:23: 01:38:b7:c7:42:9a:df:e4:e6:b5:e0:48:ac:25:33: ee:7a:79:84:c5:06:36:52:b1:4b:c4:ea:49:ca:c3: 20:ab:12:c8:54:6b:76:80:ee:d5:af:6e:18:2f:0d: 9e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EB:46:92:7E:BC:25:7D:62:40:D5:00:72:86:9A:BF:53:BD:0C:06 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/q-tGkn68JX1iQNUAcoaav1O9DAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.225.29.0/24 212.145.199.0/24 Signature Algorithm: sha256WithRSAEncryption 94:4d:0d:3c:12:50:c3:72:ea:8d:7a:1c:b5:e5:8b:d9:c1:5f: 8a:a7:b1:c2:f1:d6:e0:a7:90:88:2c:b9:44:ee:17:95:45:62: ec:e8:27:42:d4:02:ed:db:46:55:cc:09:5d:9a:b6:9f:fc:91: 7e:8b:b9:a8:51:2a:22:33:c5:bc:dd:e4:8e:5e:2b:f5:0c:ed: 50:64:72:85:c1:de:43:09:fe:82:38:08:33:70:c3:fb:2d:71: cb:90:b2:3f:4c:36:91:84:09:26:15:89:b9:41:9e:c0:7f:ae: a1:1b:d5:db:75:f8:5a:8b:86:59:bf:14:50:74:fc:b5:c3:7c: ab:bf:33:00:61:96:7a:89:9d:c2:f0:92:0f:1a:b0:36:e5:ed: 25:5c:f8:08:90:40:f0:ec:fe:42:f7:ca:35:f9:0e:39:10:2a: e4:a2:fd:64:0e:04:4f:ec:94:3a:db:97:e9:86:5b:10:95:00: 68:71:23:de:5b:a1:3c:57:68:a5:00:7e:b3:c5:17:9f:7f:08: 85:13:ce:ac:a5:16:98:16:6c:f4:ae:ab:81:55:4a:72:f3:6f: a6:76:b4:12:20:a8:5f:da:d1:01:56:2a:5d:2a:5f:a4:e1:09: e0:dd:83:95:22:17:e9:f0:c3:3f:0f:79:b9:e7:95:8f:33:4d: 2e:c3:7c:97 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hCfknB5z5LfYP/U+PjamMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwMTAyMTYyMjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmViNDY5MjdlYmMyNTdkNjI0MGQ1MDA3Mjg2OWFiZjUzYmQwYzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Oa7JagoVH1/l1EHU8H1nOS9m4N7 gEm9JdN8Z+1UOjc93Lt6KG2YeTgiXX6+HdW/cTMRUB/dNc2hJzSwmJhzJucyH0Zu G8gudWpxhzcWdFej1K40gWzuMhcPZB/yz0Ho0Vig5ftIA5v97LwDjVpwrkVML+ih i6oAENZFy9i9nrhg7PuVvDjid8qTh8Ff19FA5dKsoPeX6znr0R+ARTr9keqNY8TD EHs/FTL6mNPybWy99ZccufU4uTBsFBwcD2LNBdUZ16vKYKXhDfniCc4AaiMBOLfH Qprf5Oa14EisJTPuenmExQY2UrFLxOpJysMgqxLIVGt2gO7Vr24YLw2ehQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKvrRpJ+vCV9YkDVAHKGmr9TvQwGMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvcS10R2tuNjhKWDFpUU5VQWNvYWF2MU85REFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATeEdAwQA 1JHHMA0GCSqGSIb3DQEBCwUAA4IBAQCUTQ08ElDDcuqNehy15YvZwV+Kp7HC8dbg p5CILLlE7heVRWLs6CdC1ALt20ZVzAldmraf/JF+i7moUSoiM8W83eSOXiv1DO1Q ZHKFwd5DCf6COAgzcMP7LXHLkLI/TDaRhAkmFYm5QZ7Af66hG9Xbdfhai4ZZvxRQ dPy1w3yrvzMAYZZ6iZ3C8JIPGrA25e0lXPgIkEDw7P5C98o1+Q45ECrkov1kDgRP 7JQ625fphlsQlQBocSPeW6E8V2ilAH6zxReffwiFE86spRaYFmz0rquBVUpy82+m drQSIKhf2tEBVipdKl+k4Qng3YOVIhfp8MM/D3m555WPM00uw3yX -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:19 2026 by rpki-client