This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/q9b78mhAK09AHOXRuQ1CVZhnZPQ.roa File: q9b78mhAK09AHOXRuQ1CVZhnZPQ.roa (raw, json) Hash identifier: p6FIe/ywSMryeTPTuLflH96Yj9QNG/X6CcvV232N/OA= Subject key identifier: AB:D6:FB:F2:68:40:2B:4F:40:1C:E5:D1:B9:0D:42:55:98:67:64:F4 Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba Certificate serial: 019B7EA663225014CDA32FD5158AD8FABDC5 Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/q9b78mhAK09AHOXRuQ1CVZhnZPQ.roa Signing time: Fri 02 Jan 2026 12:19:52 +0000 ROA not before: Fri 02 Jan 2026 12:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31679 IP address blocks: 213.215.82.0/24 maxlen: 24 213.215.83.0/24 maxlen: 24 213.215.84.0/24 maxlen: 24 213.215.85.0/24 maxlen: 24 213.215.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:63:22:50:14:cd:a3:2f:d5:15:8a:d8:fa:bd:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba Validity Not Before: Jan 2 12:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abd6fbf268402b4f401ce5d1b90d4255986764f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:98:74:4e:0f:79:f3:6f:0e:06:08:30:ec:5e: 6a:bf:c6:a3:6d:1c:ab:22:e3:79:71:f3:95:24:45: 96:da:3a:d0:ca:64:9b:12:ab:cf:93:20:26:c8:6c: df:9a:9c:e2:db:0c:24:ed:fd:ab:9b:32:e0:3f:f6: b0:23:22:51:9e:5a:35:88:3e:69:9b:ba:6c:80:6c: b9:46:c2:db:25:e3:4f:75:fb:36:03:93:6a:2d:64: 1b:27:af:09:08:a3:5f:14:22:c4:02:51:24:64:32: 3c:0d:28:3d:3c:81:7c:b9:86:44:98:37:04:1c:3a: 92:e0:68:d0:a6:0a:68:3c:04:f1:cd:41:66:c3:e7: eb:68:89:53:ba:de:81:e2:3d:c5:5b:d8:aa:ae:a2: e0:40:7e:da:cf:61:5e:32:4e:d6:bf:94:ab:c5:18: 65:48:a9:8a:46:d4:bd:9d:5e:1d:af:b6:99:4a:cb: a2:bb:41:5c:6d:45:a8:99:82:6a:e7:e6:3d:51:10: ff:c7:e2:8b:28:9b:3c:f4:bf:fa:1c:4f:01:39:68: dc:0a:a0:f7:e2:dc:9d:8a:c3:8a:61:73:e5:76:1b: 1f:ec:d4:04:2d:0f:7f:d9:e6:64:dc:3d:29:63:c7: ca:eb:47:b5:34:fa:b1:be:0e:4c:e0:33:95:20:95: f1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D6:FB:F2:68:40:2B:4F:40:1C:E5:D1:B9:0D:42:55:98:67:64:F4 X509v3 Authority Key Identifier: keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/q9b78mhAK09AHOXRuQ1CVZhnZPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.215.82.0-213.215.85.255 213.215.100.0/24 Signature Algorithm: sha256WithRSAEncryption 58:c8:13:26:c4:9f:b5:04:0f:0e:a9:45:ed:a2:ec:a2:d7:27: 23:64:d5:58:06:97:77:81:53:4a:2f:36:76:87:0a:82:62:d5: c3:85:2c:4e:43:67:d9:c7:d9:81:74:07:4e:26:80:14:d2:7e: 79:11:a0:15:90:3a:4f:d2:5a:a6:87:e4:40:df:b2:c6:c3:84: 8c:8b:95:a3:47:e0:32:d1:cb:9b:3a:0b:be:c3:7f:2c:ac:60: a9:bb:a3:14:a3:21:02:5e:aa:85:c0:8c:7a:05:b8:b8:b8:d3: 84:07:87:15:1f:cd:60:10:47:d4:f2:b3:76:65:bc:6b:98:45: 20:29:44:1e:47:80:2c:3a:92:4f:6d:e3:1f:80:d9:23:ef:4d: 7a:51:99:47:0c:34:d7:78:62:69:c4:df:00:e4:47:bb:0a:17: 20:4a:06:41:0f:e6:1d:3a:b4:c2:42:6a:de:0c:61:b2:53:33: 7f:f0:a9:78:72:85:4a:6c:9a:56:af:6b:a9:dd:14:21:23:ed: 03:83:53:5d:6b:a8:10:f0:32:a8:4e:46:09:50:87:13:8a:e2: 9e:46:ab:84:82:aa:c1:0b:aa:46:5e:53:48:5f:d7:12:28:36: 35:b9:51:73:86:7b:e2:9e:d1:6f:b6:7a:81:83:1a:b4:7c:72: 26:e9:e2:ce -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+pmMiUBTNoy/VFYrY+r3FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm MDVkYmEwHhcNMjYwMTAyMTIxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmQ2ZmJmMjY4NDAyYjRmNDAxY2U1ZDFiOTBkNDI1NTk4Njc2NGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35h0Tg95828OBggw7F5qv8ajbRyr IuN5cfOVJEWW2jrQymSbEqvPkyAmyGzfmpzi2wwk7f2rmzLgP/awIyJRnlo1iD5p m7psgGy5RsLbJeNPdfs2A5NqLWQbJ68JCKNfFCLEAlEkZDI8DSg9PIF8uYZEmDcE HDqS4GjQpgpoPATxzUFmw+fraIlTut6B4j3FW9iqrqLgQH7az2FeMk7Wv5SrxRhl SKmKRtS9nV4dr7aZSsuiu0FcbUWomYJq5+Y9URD/x+KLKJs89L/6HE8BOWjcCqD3 4tydisOKYXPldhsf7NQELQ9/2eZk3D0pY8fK60e1NPqxvg5M4DOVIJXxkwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFKvW+/JoQCtPQBzl0bkNQlWYZ2T0MB8GA1UdIwQY MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt ZTJmYmMzYTY4ODAwLzEvcTliNzhtaEFLMDlBSE9YUnVRMUNWWmhuWlBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAHV11ID BAHV11QDBADV12QwDQYJKoZIhvcNAQELBQADggEBAFjIEybEn7UEDw6pRe2i7KLX JyNk1VgGl3eBU0ovNnaHCoJi1cOFLE5DZ9nH2YF0B04mgBTSfnkRoBWQOk/SWqaH 5EDfssbDhIyLlaNH4DLRy5s6C77DfyysYKm7oxSjIQJeqoXAjHoFuLi404QHhxUf zWAQR9Tys3ZlvGuYRSApRB5HgCw6kk9t4x+A2SPvTXpRmUcMNNd4YmnE3wDkR7sK FyBKBkEP5h06tMJCat4MYbJTM3/wqXhyhUpsmlava6ndFCEj7QODU11rqBDwMqhO RglQhxOK4p5Gq4SCqsELqkZeU0hf1xIoNjW5UXOGe+Ke0W+2eoGDGrR8cibp4s4= -----END CERTIFICATE-----Generated at Mon Jan 26 12:18:52 2026 by rpki-client