This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/QuyUt55UAebExyg0PWaYXgzIoJI.roa File: QuyUt55UAebExyg0PWaYXgzIoJI.roa (raw, json) Hash identifier: nlOvHosn2r+hDQfrsoWTrGhtp9GLnbqvIhH+Wg7q0o4= Subject key identifier: 42:EC:94:B7:9E:54:01:E6:C4:C7:28:34:3D:66:98:5E:0C:C8:A0:92 Certificate issuer: /CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9 Certificate serial: 019B7BA4BE412416F40BDC8B39F68EE6C928 Authority key identifier: 13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/QuyUt55UAebExyg0PWaYXgzIoJI.roa Signing time: Thu 01 Jan 2026 22:19:12 +0000 ROA not before: Thu 01 Jan 2026 22:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8678 IP address blocks: 161.9.152.0/21 maxlen: 21 161.9.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.mft rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:be:41:24:16:f4:0b:dc:8b:39:f6:8e:e6:c9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9 Validity Not Before: Jan 1 22:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42ec94b79e5401e6c4c728343d66985e0cc8a092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:12:aa:29:94:e7:98:4b:d3:0d:4f:8b:43:b9: c6:3d:ef:7a:a4:b6:92:5f:d6:10:36:f2:58:9e:79: 8c:2c:bc:d2:87:2e:59:9d:5a:80:09:8a:27:6e:35: d9:8f:61:18:43:17:b3:a0:7a:0a:34:1e:83:df:ea: ba:ee:8b:56:19:a7:39:fc:c5:02:b2:d2:6e:66:77: 78:bb:c4:a1:2f:2a:7b:00:0e:e1:59:91:4a:84:af: 46:07:17:8a:5e:a4:c9:23:53:b8:3d:cf:e9:47:be: d3:a9:f2:a2:79:04:c8:93:52:cd:70:ff:be:72:56: 8a:85:a6:b3:bf:8e:fe:b3:a8:34:8b:a5:a0:ae:32: 43:ba:e8:07:ea:2c:41:e8:81:05:24:8d:63:28:84: 25:c9:a4:32:12:57:a0:ab:dc:67:20:04:6a:b1:e0: e8:4b:83:6f:ef:fd:f1:22:05:3a:93:a0:8c:e9:0b: 82:44:d8:2f:52:ac:f9:15:71:02:b0:10:a8:2f:6e: e8:ed:aa:92:35:c2:5e:42:3b:ca:f5:79:7e:5b:0a: 61:11:3a:0a:99:98:d0:36:f5:28:9b:0f:1b:b0:65: fb:ac:02:f6:97:3a:9b:2a:d7:72:54:ec:9c:94:f5: 6a:59:1f:0a:a3:d2:58:48:02:96:dd:89:d1:85:55: 53:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EC:94:B7:9E:54:01:E6:C4:C7:28:34:3D:66:98:5E:0C:C8:A0:92 X509v3 Authority Key Identifier: keyid:13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/QuyUt55UAebExyg0PWaYXgzIoJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.9.152.0/21 161.9.180.0/22 Signature Algorithm: sha256WithRSAEncryption 47:95:a9:14:66:5d:97:2d:e8:61:a1:27:6a:4a:34:68:44:20: 7c:9b:78:b9:3f:96:2c:24:d7:ac:80:ec:73:a0:d5:9a:f5:a4: 20:7d:3b:f5:76:22:cb:db:15:ed:ae:25:91:50:3b:aa:91:a5: bf:c9:9c:e7:cf:24:f2:c3:b1:a1:1c:31:2e:a5:43:2b:0b:e7: 06:65:2b:7c:a5:9c:61:f2:68:d3:f1:00:13:a4:0f:71:f8:19: 56:5a:a6:1f:fc:55:32:ca:bc:df:20:cb:ad:fe:f1:82:57:e7: bc:20:f8:99:f8:06:d0:e9:9d:9b:36:fe:89:c3:ee:fb:20:e1: c5:cc:91:75:02:57:30:35:fa:26:de:22:3f:6b:1f:ca:d7:f6: f1:3c:8d:97:45:86:e2:92:6f:aa:ac:f0:1d:00:76:16:14:74: 81:dd:08:0d:e5:7a:d2:78:1d:3e:8f:ed:62:f7:51:5e:c5:85: e8:07:fd:1d:6b:55:64:3e:43:02:cb:13:18:00:d7:80:7f:3e: 80:10:91:ad:22:e0:01:ea:6a:c6:f3:47:f1:65:70:a8:64:e4: 28:3f:d0:c8:33:a1:b6:65:06:da:2e:9e:b5:13:a0:a5:53:0e: c8:aa:60:39:01:fd:cb:a7:bd:18:30:bc:9c:2d:e6:a3:8e:a0: e8:df:f4:a6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pL5BJBb0C9yLOfaO5skoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZWE3OGIyOGYwNTRmNzJmNTIyNmFlM2VjNDU0OTgwZWQy YTEwYzkwHhcNMjYwMTAxMjIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmVjOTRiNzllNTQwMWU2YzRjNzI4MzQzZDY2OTg1ZTBjYzhhMDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBKqKZTnmEvTDU+LQ7nGPe96pLaS X9YQNvJYnnmMLLzShy5ZnVqACYonbjXZj2EYQxezoHoKNB6D3+q67otWGac5/MUC stJuZnd4u8ShLyp7AA7hWZFKhK9GBxeKXqTJI1O4Pc/pR77TqfKieQTIk1LNcP++ claKhaazv47+s6g0i6WgrjJDuugH6ixB6IEFJI1jKIQlyaQyElegq9xnIARqseDo S4Nv7/3xIgU6k6CM6QuCRNgvUqz5FXECsBCoL27o7aqSNcJeQjvK9Xl+WwphEToK mZjQNvUomw8bsGX7rAL2lzqbKtdyVOyclPVqWR8Ko9JYSAKW3YnRhVVT9QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFELslLeeVAHmxMcoND1mmF4MyKCSMB8GA1UdIwQY MBaAFBPqeLKPBU9y9SJq4+xFSYDtKhDJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS1wNHNvOEZUM0wxSW1yajdFVkpnTzBxRU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9iOTcyOTQtMjgwMi00ZDA1LTkxNTUt MTA5OGQ2ZDg4ZGU4LzEvUXV5VXQ1NVVBZWJFeHlnMFBXYVlYZ3pJb0pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9iOTcyOTQtMjgwMi00ZDA1LTkxNTUtMTA5OGQ2ZDg4ZGU4 LzEvRS1wNHNvOEZUM0wxSW1yajdFVkpnTzBxRU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDoQmYAwQC oQm0MA0GCSqGSIb3DQEBCwUAA4IBAQBHlakUZl2XLehhoSdqSjRoRCB8m3i5P5Ys JNesgOxzoNWa9aQgfTv1diLL2xXtriWRUDuqkaW/yZznzyTyw7GhHDEupUMrC+cG ZSt8pZxh8mjT8QATpA9x+BlWWqYf/FUyyrzfIMut/vGCV+e8IPiZ+AbQ6Z2bNv6J w+77IOHFzJF1AlcwNfom3iI/ax/K1/bxPI2XRYbikm+qrPAdAHYWFHSB3QgN5XrS eB0+j+1i91FexYXoB/0da1VkPkMCyxMYANeAfz6AEJGtIuAB6mrG80fxZXCoZOQo P9DIM6G2ZQbaLp61E6ClUw7IqmA5Af3Lp70YMLycLeajjqDo3/Sm -----END CERTIFICATE-----Generated at Mon Jan 26 14:00:50 2026 by rpki-client