This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/qyuH8NgRhRZdTsIxcPjney8uG5Y.roa File: qyuH8NgRhRZdTsIxcPjney8uG5Y.roa (raw, json) Hash identifier: n0uUMyMPIGkKTSZ3n9g1M0rkf82uD6ttedakSVtd8tQ= Subject key identifier: AB:2B:87:F0:D8:11:85:16:5D:4E:C2:31:70:F8:E7:7B:2F:2E:1B:96 Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea Certificate serial: 019B7C12A14DC73F4FBAA450AEB2A5C4B13C Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/qyuH8NgRhRZdTsIxcPjney8uG5Y.roa Signing time: Fri 02 Jan 2026 00:19:14 +0000 ROA not before: Fri 02 Jan 2026 00:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60121 IP address blocks: 212.59.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a1:4d:c7:3f:4f:ba:a4:50:ae:b2:a5:c4:b1:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea Validity Not Before: Jan 2 00:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab2b87f0d81185165d4ec23170f8e77b2f2e1b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2e:4a:a2:60:07:65:5a:5c:5c:57:14:f5:bf: 03:f4:6d:6a:cd:22:27:b1:93:f2:e3:3d:e1:b7:6a: f6:e4:21:d7:b9:25:75:03:24:ef:68:c8:d8:b2:0b: 11:b7:77:9c:df:32:69:35:d1:7a:7c:c0:f7:b2:b2: 1d:f9:6d:4c:dd:49:45:a9:ce:6c:81:21:78:0d:bd: 34:30:05:1d:18:ee:5f:23:dc:4b:76:6f:77:7b:28: 60:b0:ae:e2:67:a0:41:c9:53:53:7d:91:65:36:d2: 04:26:2c:a0:b3:69:05:bd:cd:95:3b:25:94:cd:fe: 89:a4:08:62:35:56:6a:1f:06:7e:f1:dc:61:5a:83: 94:52:a4:0b:7c:00:6a:44:c4:71:32:23:a4:ca:e1: 83:1c:fd:ee:97:82:25:01:f9:14:8c:58:6c:da:b8: a3:4e:f8:f9:82:5e:42:4a:ce:22:66:88:4f:a6:2e: 1f:b4:e5:31:43:24:1a:8b:e7:5f:46:5a:76:26:cd: fc:2d:96:b6:0f:e0:df:ca:d8:78:8f:7e:44:3b:a3: 48:0c:52:98:be:9a:6e:34:3b:57:55:43:64:98:90: c2:9a:53:e8:d3:f1:b2:8e:cf:66:8a:32:e9:e9:56: a3:fa:b1:59:fc:ed:18:77:a7:88:fa:05:7b:e0:6c: 81:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2B:87:F0:D8:11:85:16:5D:4E:C2:31:70:F8:E7:7B:2F:2E:1B:96 X509v3 Authority Key Identifier: keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/qyuH8NgRhRZdTsIxcPjney8uG5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.59.16.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:39:87:f4:6d:c1:53:2e:83:1b:c3:09:e6:cf:80:77:ff:9a: 2f:46:c6:cf:91:2c:f4:da:d2:e5:4c:7d:95:ee:dd:03:48:a1: fe:65:ae:a4:90:06:e0:56:09:df:86:7b:3a:a9:5e:17:4e:4c: 20:88:ab:e4:30:10:a5:d0:79:58:6c:a0:f8:20:bd:c7:85:9e: 5d:1b:52:5b:92:80:02:69:83:ad:00:05:f2:e5:4a:37:65:73: c8:ac:a1:7b:2c:57:db:90:3b:43:87:70:30:9d:d6:1b:5b:e7: c8:95:ed:09:80:70:07:fe:8c:78:02:55:cf:a3:47:fa:67:8a: 3d:af:9e:37:c1:01:9b:6d:f9:6a:7c:75:76:2f:1c:b8:ee:5a: 14:2a:bd:6b:69:5a:96:14:b9:e5:df:19:ea:e7:64:84:23:d9: 46:c1:4b:5d:bd:10:36:75:2e:41:05:45:c3:d9:90:9f:03:ed: 14:9a:95:0f:7a:1f:95:a4:74:35:6c:f4:cb:3e:21:a8:94:c8: 46:90:5b:1b:04:a9:ce:22:f3:34:72:22:80:f0:0e:36:38:be: f4:09:cb:97:c1:12:6d:06:46:ac:6e:01:25:aa:a2:d8:00:cb: fe:dd:bb:0f:93:6e:16:75:34:4a:3d:fb:36:97:f9:01:f7:5a: 0f:a0:3e:18 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8EqFNxz9PuqRQrrKlxLE8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm NDYyZWEwHhcNMjYwMTAyMDAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjJiODdmMGQ4MTE4NTE2NWQ0ZWMyMzE3MGY4ZTc3YjJmMmUxYjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2i5KomAHZVpcXFcU9b8D9G1qzSIn sZPy4z3ht2r25CHXuSV1AyTvaMjYsgsRt3ec3zJpNdF6fMD3srId+W1M3UlFqc5s gSF4Db00MAUdGO5fI9xLdm93eyhgsK7iZ6BByVNTfZFlNtIEJiygs2kFvc2VOyWU zf6JpAhiNVZqHwZ+8dxhWoOUUqQLfABqRMRxMiOkyuGDHP3ul4IlAfkUjFhs2rij Tvj5gl5CSs4iZohPpi4ftOUxQyQai+dfRlp2Js38LZa2D+Dfyth4j35EO6NIDFKY vppuNDtXVUNkmJDCmlPo0/Gyjs9mijLp6Vaj+rFZ/O0Yd6eI+gV74GyBTQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKsrh/DYEYUWXU7CMXD453svLhuWMB8GA1UdIwQY MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw LWJlNTgzMmQ1ZjdhYS8xL3F5dUg4TmdSaFJaZFRzSXhjUGpuZXk4dUc1WS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAwLWJlNTgzMmQ1Zjdh YS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADUOxAw DQYJKoZIhvcNAQELBQADggEBAG45h/RtwVMugxvDCebPgHf/mi9Gxs+RLPTa0uVM fZXu3QNIof5lrqSQBuBWCd+GezqpXhdOTCCIq+QwEKXQeVhsoPggvceFnl0bUluS gAJpg60ABfLlSjdlc8isoXssV9uQO0OHcDCd1htb58iV7QmAcAf+jHgCVc+jR/pn ij2vnjfBAZtt+Wp8dXYvHLjuWhQqvWtpWpYUueXfGernZIQj2UbBS129EDZ1LkEF RcPZkJ8D7RSalQ96H5WkdDVs9Ms+IaiUyEaQWxsEqc4i8zRyIoDwDjY4vvQJy5fB Em0GRqxuASWqotgAy/7duw+TbhZ1NEo9+zaX+QH3Wg+gPhg= -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:37 2026 by rpki-client