This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/q_ccM_3Nsf3YIqRvSxwp7j28WKA.roa File: q_ccM_3Nsf3YIqRvSxwp7j28WKA.roa (raw, json) Hash identifier: bQAdrUPOpax3Tea6DtDpoS5dYyAQRIvDyf7eum/Y1dM= Subject key identifier: AB:F7:1C:33:FD:CD:B1:FD:D8:22:A4:6F:4B:1C:29:EE:3D:BC:58:A0 Certificate issuer: /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea Certificate serial: 019B7A5A5CA2BB5591DC84C7BA889A00EB9F Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/q_ccM_3Nsf3YIqRvSxwp7j28WKA.roa Signing time: Thu 01 Jan 2026 16:18:20 +0000 ROA not before: Thu 01 Jan 2026 16:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48803 IP address blocks: 88.206.160.0/20 maxlen: 24 88.206.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:5c:a2:bb:55:91:dc:84:c7:ba:88:9a:00:eb:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea Validity Not Before: Jan 1 16:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abf71c33fdcdb1fdd822a46f4b1c29ee3dbc58a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:60:7e:09:f9:9e:f1:44:fb:c7:11:06:57:fc: 91:77:d9:8e:52:f3:89:2b:6a:97:a3:0c:c8:51:61: ff:68:52:74:d8:11:16:7e:4d:b3:1b:cb:83:41:48: b2:e8:17:72:b3:e9:f9:fe:0f:c3:ee:cc:5f:1d:1e: 4c:4b:a8:9f:ca:9e:55:22:be:48:66:82:01:6e:4d: aa:07:5f:0d:70:87:32:2e:d9:48:99:c9:60:99:01: 88:ee:61:bf:62:35:d5:16:31:19:66:f0:47:79:b2: 13:c6:45:33:a9:c1:c4:61:02:4c:ec:7e:8e:54:d1: d0:3a:be:36:78:31:6b:65:d4:9b:ae:2b:45:44:75: fb:3c:ad:6b:72:b2:b3:c8:8d:b0:89:35:a3:1a:23: dc:3a:2f:ef:7c:25:5e:0a:16:f2:cb:cc:7c:9f:15: de:95:cd:86:c3:78:c1:1d:d1:50:6b:91:e5:e5:fb: 13:07:d0:59:90:b6:6a:fa:88:63:ec:a9:c5:c4:75: 38:d1:ed:37:61:24:c3:eb:81:65:18:fc:ff:c1:7a: 9c:d9:19:2e:04:1e:cc:c2:c2:44:3d:7f:3a:85:ea: 29:cb:02:8e:9d:35:14:96:83:8e:92:e1:d9:d0:2c: ae:69:fb:7e:8d:30:e6:6f:2a:c5:ad:8a:f4:38:c1: 37:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F7:1C:33:FD:CD:B1:FD:D8:22:A4:6F:4B:1C:29:EE:3D:BC:58:A0 X509v3 Authority Key Identifier: keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/q_ccM_3Nsf3YIqRvSxwp7j28WKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.206.160.0-88.206.179.255 Signature Algorithm: sha256WithRSAEncryption 04:43:4c:c8:1e:30:39:25:3b:f7:0b:fe:31:4a:b2:2e:da:06: c2:6b:40:20:1a:8e:ef:bb:bc:d2:0c:a7:21:74:49:85:f2:eb: 87:bd:16:2a:bf:e9:ad:7d:95:d2:d0:fc:99:16:e3:38:f4:e1: 18:bf:0a:3a:8d:8a:a4:34:43:7e:71:ad:7f:d2:65:91:bc:cc: 01:5e:59:d1:24:d1:cd:89:fe:90:d4:c4:11:37:59:bc:27:66: 0e:e5:1e:d0:aa:01:01:11:a9:a9:8c:9e:d0:8e:25:fe:e5:13: 68:28:4f:0a:0d:16:b7:9a:69:06:33:0e:90:c9:3e:6d:68:17: ca:d0:d6:d7:59:01:d2:f6:7c:4d:1a:d6:11:ba:6f:53:9c:7d: fb:45:85:c9:0b:82:46:9d:1c:25:06:36:0b:0d:84:78:ce:d7: d9:17:28:3f:5e:a3:94:78:eb:49:47:a7:4b:20:ab:47:de:b0: 50:db:b7:25:3a:ff:6b:bc:00:66:63:c9:b6:46:8e:85:61:92: 57:5c:80:50:4e:5b:1b:27:23:c6:ea:91:4b:00:de:f3:36:3e: 2a:af:0b:3a:01:9b:e8:e7:63:f4:09:7f:99:c6:20:29:bc:61: ce:88:09:ec:b9:a5:12:23:38:6b:b5:26:32:74:7a:25:8a:f4: df:33:53:b5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt6Wlyiu1WR3ITHuoiaAOufMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZDgzZWZkZDk5OTZmOGM3NWU3ZjQxMTRlNDY2ZWJmODM2 OTY4ZWEwHhcNMjYwMTAxMTYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmY3MWMzM2ZkY2RiMWZkZDgyMmE0NmY0YjFjMjllZTNkYmM1OGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32B+Cfme8UT7xxEGV/yRd9mOUvOJ K2qXowzIUWH/aFJ02BEWfk2zG8uDQUiy6Bdys+n5/g/D7sxfHR5MS6ifyp5VIr5I ZoIBbk2qB18NcIcyLtlImclgmQGI7mG/YjXVFjEZZvBHebITxkUzqcHEYQJM7H6O VNHQOr42eDFrZdSbritFRHX7PK1rcrKzyI2wiTWjGiPcOi/vfCVeChbyy8x8nxXe lc2Gw3jBHdFQa5Hl5fsTB9BZkLZq+ohj7KnFxHU40e03YSTD64FlGPz/wXqc2Rku BB7MwsJEPX86heopywKOnTUUloOOkuHZ0Cyuaft+jTDmbyrFrYr0OME3rwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFKv3HDP9zbH92CKkb0scKe49vFigMB8GA1UdIwQY MBaAFPvYPv3ZmW+Mdef0EU5Gbr+DaWjqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS05Zy1fZG1aYjR4MTVfUVJUa1p1djROcGFPby5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvYWEwNmE1LTdlZjYtNGJjOS1iMGEw LTJmYTgzOTAxN2Q3NS8xL3FfY2NNXzNOc2YzWUlxUnZTeHdwN2oyOFdLQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmMvYWEwNmE1LTdlZjYtNGJjOS1iMGEwLTJmYTgzOTAxN2Q3 NS8xLzEtOWctX2RtWmI0eDE1X1FSVGtadXY0TnBhT28uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4wDAMEBVjO oAMEAljOsDANBgkqhkiG9w0BAQsFAAOCAQEABENMyB4wOSU79wv+MUqyLtoGwmtA IBqO77u80gynIXRJhfLrh70WKr/prX2V0tD8mRbjOPThGL8KOo2KpDRDfnGtf9Jl kbzMAV5Z0STRzYn+kNTEETdZvCdmDuUe0KoBARGpqYye0I4l/uUTaChPCg0Wt5pp BjMOkMk+bWgXytDW11kB0vZ8TRrWEbpvU5x9+0WFyQuCRp0cJQY2Cw2EeM7X2Rco P16jlHjrSUenSyCrR96wUNu3JTr/a7wAZmPJtkaOhWGSV1yAUE5bGycjxuqRSwDe 8zY+Kq8LOgGb6Odj9Al/mcYgKbxhzogJ7LmlEiM4a7UmMnR6JYr03zNTtQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:59:49 2026 by rpki-client