This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/qZN1iGc-Xf3cp5urtHVXBZqoF5M.roa File: qZN1iGc-Xf3cp5urtHVXBZqoF5M.roa (raw, json) Hash identifier: zbowHekheKN7KuV9DnFXvdpM7KjV51/aW8mu77VaWX4= Subject key identifier: A9:93:75:88:67:3E:5D:FD:DC:A7:9B:AB:B4:75:57:05:9A:A8:17:93 Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Certificate serial: 019B7758EF6478B75F4C261876608BAEFFA6 Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/qZN1iGc-Xf3cp5urtHVXBZqoF5M.roa Signing time: Thu 01 Jan 2026 02:17:55 +0000 ROA not before: Thu 01 Jan 2026 02:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57206 IP address blocks: 217.113.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ef:64:78:b7:5f:4c:26:18:76:60:8b:ae:ff:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Validity Not Before: Jan 1 02:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9937588673e5dfddca79babb47557059aa81793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:22:8d:b9:1d:03:20:6c:9f:f6:01:27:36:2e: 26:07:47:8e:ba:82:94:e4:33:ef:42:b3:18:46:de: c6:c7:f0:9f:06:86:1e:0a:86:f3:19:98:2d:22:91: 8b:6d:8c:c7:6c:65:05:4d:19:73:fc:b7:5d:e5:3f: d8:dd:d3:57:c5:15:af:be:27:4c:a8:c3:eb:b3:f9: d3:a0:55:0e:90:37:f4:cb:3f:fb:de:5b:fe:ba:00: 05:12:22:43:3a:62:fa:74:5b:25:20:4a:fd:5a:46: 85:d1:2e:d4:21:59:aa:b3:35:d0:ed:b6:de:f7:46: 57:bb:69:a3:d9:69:ad:bb:04:96:8e:65:85:0e:01: 0b:ee:fd:f9:49:00:65:98:a1:9b:02:8f:f9:cd:81: 98:7d:42:4d:6a:70:06:68:11:bf:90:e7:a8:66:5c: bf:83:d3:54:26:72:5e:7e:87:08:d9:d8:bb:fd:17: 38:df:4e:3e:67:0e:a2:fb:81:1f:f8:28:9c:2e:cd: 98:a3:db:01:36:c0:82:75:54:92:24:83:1f:c6:a9: b6:7c:d3:07:4e:a5:dc:68:cd:a4:cd:28:8b:2e:44: 4e:53:f1:58:f1:60:dc:b2:29:0a:b4:14:69:9b:7e: db:81:b9:ca:63:a6:b8:cb:50:f1:0a:d9:cb:ce:05: bb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:93:75:88:67:3E:5D:FD:DC:A7:9B:AB:B4:75:57:05:9A:A8:17:93 X509v3 Authority Key Identifier: keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/qZN1iGc-Xf3cp5urtHVXBZqoF5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.113.8.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:d2:4c:a5:d1:5e:e5:7e:86:79:bd:a4:6b:b9:2f:7a:80:83: 74:39:b0:6f:ab:f9:e9:d9:87:dd:6e:b8:fe:ef:62:d7:22:f8: 21:b4:ab:63:ea:a8:7a:6a:b3:cd:dd:1d:3d:d1:7d:c4:dd:f6: 5a:65:fa:2b:ae:bb:36:61:d5:5e:f1:a7:27:56:29:a4:23:75: ad:0c:64:37:69:44:72:17:b2:bd:8f:8a:eb:01:fd:b4:04:b6: 6b:b9:33:09:e0:0e:37:b1:f4:36:7a:9d:c5:6c:8d:e5:7a:8e: aa:22:e1:95:ae:f6:d7:46:ce:9e:89:6a:b0:18:68:05:0c:ce: 2a:d5:da:95:6d:f3:1a:e0:e2:c9:06:39:37:c4:77:1f:82:10: f5:db:3a:24:e6:63:0d:d9:0d:7c:f3:5a:a9:2f:f2:66:2b:c8: 94:69:ba:6b:bb:a0:78:da:82:0b:dc:e4:89:c1:6b:cf:69:4f: 2d:e6:27:ff:42:9e:7d:54:df:be:25:f2:5d:aa:05:ac:90:90: df:28:f9:48:95:fa:95:da:c3:69:e5:84:11:1e:5c:7e:4b:ea: 1f:cb:84:9b:a2:da:52:dc:22:da:3d:b7:d3:0e:9c:41:d5:9d: 36:52:65:5f:e4:c7:f4:7f:2d:73:67:39:08:c3:80:9b:c2:94: 88:6d:81:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WO9keLdfTCYYdmCLrv+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1 ZjU2NzQwHhcNMjYwMTAxMDIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTkzNzU4ODY3M2U1ZGZkZGNhNzliYWJiNDc1NTcwNTlhYTgxNzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCKNuR0DIGyf9gEnNi4mB0eOuoKU 5DPvQrMYRt7Gx/CfBoYeCobzGZgtIpGLbYzHbGUFTRlz/Ldd5T/Y3dNXxRWvvidM qMPrs/nToFUOkDf0yz/73lv+ugAFEiJDOmL6dFslIEr9WkaF0S7UIVmqszXQ7bbe 90ZXu2mj2WmtuwSWjmWFDgEL7v35SQBlmKGbAo/5zYGYfUJNanAGaBG/kOeoZly/ g9NUJnJefocI2di7/Rc4304+Zw6i+4Ef+CicLs2Yo9sBNsCCdVSSJIMfxqm2fNMH TqXcaM2kzSiLLkROU/FY8WDcsikKtBRpm37bgbnKY6a4y1DxCtnLzgW7+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKmTdYhnPl393Kebq7R1VwWaqBeTMB8GA1UdIwQY MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt MWZjMTllYTczYTJhLzEvcVpOMWlHYy1YZjNjcDV1cnRIVlhCWnFvRjVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XEIMA0G CSqGSIb3DQEBCwUAA4IBAQBb0kyl0V7lfoZ5vaRruS96gIN0ObBvq/np2Yfdbrj+ 72LXIvghtKtj6qh6arPN3R090X3E3fZaZforrrs2YdVe8acnVimkI3WtDGQ3aURy F7K9j4rrAf20BLZruTMJ4A43sfQ2ep3FbI3leo6qIuGVrvbXRs6eiWqwGGgFDM4q 1dqVbfMa4OLJBjk3xHcfghD12zok5mMN2Q1881qpL/JmK8iUabpru6B42oIL3OSJ wWvPaU8t5if/Qp59VN++JfJdqgWskJDfKPlIlfqV2sNp5YQRHlx+S+ofy4SbotpS 3CLaPbfTDpxB1Z02UmVf5Mf0fy1zZzkIw4CbwpSIbYFs -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:44 2026 by rpki-client