This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/QGfcSBUGzLQb4SyeZopBV9W3h_Y.roa File: QGfcSBUGzLQb4SyeZopBV9W3h_Y.roa (raw, json) Hash identifier: Se8X87fnlsQ0jSr5BHgV/YmjxoXoJdb5PZSQdKSye9w= Subject key identifier: 40:67:DC:48:15:06:CC:B4:1B:E1:2C:9E:66:8A:41:57:D5:B7:87:F6 Certificate issuer: /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f Certificate serial: 019B7E380D4C0A31508414ECEDA7E8388C9E Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/QGfcSBUGzLQb4SyeZopBV9W3h_Y.roa Signing time: Fri 02 Jan 2026 10:19:21 +0000 ROA not before: Fri 02 Jan 2026 10:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48728 IP address blocks: 213.178.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0d:4c:0a:31:50:84:14:ec:ed:a7:e8:38:8c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f Validity Not Before: Jan 2 10:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4067dc481506ccb41be12c9e668a4157d5b787f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:be:fd:a6:36:cc:14:58:b7:bf:76:9b:35:80: b2:c6:06:e7:90:b4:ef:42:29:3b:2f:a2:0a:e5:6e: 78:33:c2:50:94:1f:23:0f:82:84:46:94:8d:1a:7b: c8:53:23:78:f0:9e:cb:89:0d:79:94:ec:f1:f0:31: fa:ff:90:d2:26:69:14:b3:b6:95:06:3a:6c:fd:fe: 60:11:84:11:12:12:cc:4e:27:dc:58:c0:ef:07:43: 0f:33:4f:0d:de:8d:bc:62:3b:61:4e:ab:7f:b2:22: e4:27:d2:5a:79:49:0d:fb:2b:41:1f:d7:de:e4:11: e4:d3:cf:47:ae:86:e4:e2:9b:15:12:27:2f:68:0e: e0:cb:0a:fd:84:59:9b:42:6a:f9:a9:be:2e:bf:ad: f2:d7:89:3b:15:c3:67:76:e6:23:0b:ae:89:aa:a8: 22:90:40:ce:73:04:24:e7:2b:3b:fb:6e:f5:c3:b2: 4a:a2:a1:7f:7e:bf:af:c4:98:c4:81:6f:09:38:f8: 82:1f:38:d0:00:d8:db:4b:a4:af:cc:8d:8d:4f:20: 99:cb:dd:b3:d6:d3:9d:75:ee:13:97:5c:84:83:5a: 8a:f1:3c:6c:81:1d:3f:11:2b:23:49:f7:ff:7a:08: 14:ff:e2:56:fe:63:3a:1a:51:57:0e:1f:57:f5:df: c3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:67:DC:48:15:06:CC:B4:1B:E1:2C:9E:66:8A:41:57:D5:B7:87:F6 X509v3 Authority Key Identifier: keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/QGfcSBUGzLQb4SyeZopBV9W3h_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.178.136.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:4a:16:23:8c:79:74:03:e7:c5:5e:62:e2:c9:85:90:23:ec: 21:0d:a4:eb:d9:00:9f:a5:d5:c3:64:60:11:6f:9f:48:bc:96: 49:a2:15:14:41:95:51:83:16:45:cd:89:f7:cc:45:79:b3:30: 3b:4e:d3:4a:04:97:86:34:a0:02:f7:9c:52:8d:27:25:16:e4: f2:c0:1f:34:48:99:d6:23:ec:cf:f0:20:1a:34:99:f3:93:a9: 21:09:70:ca:2f:aa:f5:f1:50:43:5f:35:0b:b5:35:73:12:f8: 9a:99:c5:d6:d3:9e:8a:fd:41:b7:e5:e6:11:6a:21:00:90:6d: 9c:b2:15:2b:16:76:e5:dd:d3:54:3d:49:6e:07:d2:07:59:48: 94:81:df:13:8b:06:ce:67:a6:94:e2:11:23:ea:86:f6:66:c2: 23:d1:fe:fe:aa:f3:a8:0f:a2:c7:35:4a:8f:9f:d7:88:aa:b9: 39:97:c7:68:57:f7:d4:e7:9e:5f:6d:02:2b:8f:01:4e:71:ae: 4d:71:6a:84:53:57:0a:26:87:17:36:bc:da:3a:92:02:4f:4d: 52:9d:d7:9c:61:54:37:1b:78:24:2e:a9:8f:02:57:99:c5:56: 87:37:85:9e:89:d5:fb:37:b0:44:95:3e:c0:ba:dd:e5:51:16: b5:bd:d5:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OA1MCjFQhBTs7afoOIyeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDQxY2MxMjFlMGNiNjBhM2E5OGRiZjcyYmE0ZGJkNjNl ZWJlOWYwHhcNMjYwMTAyMTAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDY3ZGM0ODE1MDZjY2I0MWJlMTJjOWU2NjhhNDE1N2Q1Yjc4N2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp779pjbMFFi3v3abNYCyxgbnkLTv Qik7L6IK5W54M8JQlB8jD4KERpSNGnvIUyN48J7LiQ15lOzx8DH6/5DSJmkUs7aV Bjps/f5gEYQREhLMTifcWMDvB0MPM08N3o28YjthTqt/siLkJ9JaeUkN+ytBH9fe 5BHk089Hrobk4psVEicvaA7gywr9hFmbQmr5qb4uv63y14k7FcNnduYjC66Jqqgi kEDOcwQk5ys7+271w7JKoqF/fr+vxJjEgW8JOPiCHzjQANjbS6SvzI2NTyCZy92z 1tOdde4Tl1yEg1qK8TxsgR0/ESsjSff/eggU/+JW/mM6GlFXDh9X9d/D6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEBn3EgVBsy0G+EsnmaKQVfVt4f2MB8GA1UdIwQY MBaAFMvUHMEh4Mtgo6mNv3K6Tb1j7r6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlRY3dTSGd5MkNqcVkyX2NycE52V1B1dnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83ZWI0ZTgtYmNiMS00OWVmLWI5NDQt NTNhNWFmNzY1MzQzLzEvUUdmY1NCVUd6TFFiNFN5ZVpvcEJWOVczaF9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny83ZWI0ZTgtYmNiMS00OWVmLWI5NDQtNTNhNWFmNzY1MzQz LzEveTlRY3dTSGd5MkNqcVkyX2NycE52V1B1dnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1bKIMA0G CSqGSIb3DQEBCwUAA4IBAQB/ShYjjHl0A+fFXmLiyYWQI+whDaTr2QCfpdXDZGAR b59IvJZJohUUQZVRgxZFzYn3zEV5szA7TtNKBJeGNKAC95xSjSclFuTywB80SJnW I+zP8CAaNJnzk6khCXDKL6r18VBDXzULtTVzEviamcXW056K/UG35eYRaiEAkG2c shUrFnbl3dNUPUluB9IHWUiUgd8TiwbOZ6aU4hEj6ob2ZsIj0f7+qvOoD6LHNUqP n9eIqrk5l8doV/fU555fbQIrjwFOca5NcWqEU1cKJocXNrzaOpICT01SndecYVQ3 G3gkLqmPAleZxVaHN4WeidX7N7BElT7Aut3lURa1vdVu -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:00 2026 by rpki-client