This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/qFZ7lh8M_-7BVtcvqO7osX3FgC4.roa File: qFZ7lh8M_-7BVtcvqO7osX3FgC4.roa (raw, json) Hash identifier: yh2XXW5ZPxb8ONMOAy9MOsAXO8sXA77efW4ZZFy3j/U= Subject key identifier: A8:56:7B:96:1F:0C:FF:EE:C1:56:D7:2F:A8:EE:E8:B1:7D:C5:80:2E Certificate issuer: /CN=a016588bd1ccb2dd221c6f87838567475d7ef29b Certificate serial: 019B79107B80AFBAC4F29DAE4EF1047FCB17 Authority key identifier: A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/qFZ7lh8M_-7BVtcvqO7osX3FgC4.roa Signing time: Thu 01 Jan 2026 10:18:01 +0000 ROA not before: Thu 01 Jan 2026 10:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31388 IP address blocks: 176.105.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.mft rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:7b:80:af:ba:c4:f2:9d:ae:4e:f1:04:7f:cb:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a016588bd1ccb2dd221c6f87838567475d7ef29b Validity Not Before: Jan 1 10:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8567b961f0cffeec156d72fa8eee8b17dc5802e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3e:a5:63:9c:2b:57:f8:1d:15:55:54:3d:de: 35:d8:29:e1:d3:3c:a5:1e:3b:88:be:68:05:0e:16: 29:0e:f0:47:30:15:05:20:9d:60:d2:b7:66:f2:8f: 44:85:10:50:ed:61:61:78:5b:6e:d3:c2:67:00:93: fa:10:f6:29:39:17:00:35:48:85:5e:5f:c6:e8:81: 57:f1:70:0d:54:8a:aa:42:18:aa:90:31:c5:6f:d7: 68:9a:e8:14:25:b5:e7:32:dd:c8:1b:23:32:57:67: 45:15:40:89:dc:94:5f:05:0f:5a:72:4d:27:e9:90: 78:f9:26:98:9d:f5:c2:6e:70:a3:a2:9d:33:b4:85: dd:02:d9:ca:e6:d6:31:2a:67:06:68:a8:70:4b:c2: dd:cc:be:69:41:cd:3a:0c:e9:a7:ef:6c:f1:54:78: 6a:e0:20:61:79:5b:2e:3c:ae:b4:d3:f3:12:df:67: fe:0e:12:13:03:d5:bd:f4:03:31:56:1f:b7:ac:3f: f3:53:a6:c7:8d:43:31:3f:72:6d:84:dc:f6:df:44: f5:19:5b:30:9e:fa:20:4f:73:c6:67:bb:eb:6b:55: 30:6e:e8:eb:67:2b:d8:eb:3b:07:bb:7a:6d:fd:f0: 13:91:5b:ae:9f:f9:05:46:16:96:0d:97:2f:e0:10: d2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:56:7B:96:1F:0C:FF:EE:C1:56:D7:2F:A8:EE:E8:B1:7D:C5:80:2E X509v3 Authority Key Identifier: keyid:A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/qFZ7lh8M_-7BVtcvqO7osX3FgC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.105.166.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:f8:35:60:0f:91:bc:c4:ee:b4:c3:e6:c8:89:66:a1:13:ab: d0:a3:2b:30:f4:e9:c1:7d:bf:f7:46:b6:4a:76:90:ed:16:aa: 26:eb:90:f9:74:bc:2a:42:cb:96:5f:ff:aa:8a:3f:7e:ed:32: 2f:5b:cd:43:61:cd:fd:2c:49:9f:7e:09:11:e2:35:d3:91:68: fd:09:20:d4:f4:98:b3:5b:c7:50:7f:e2:ee:c5:37:f5:88:0f: 9e:8b:55:5b:bb:d0:62:43:84:65:d7:e2:2e:fd:1b:42:4a:32: c6:5f:d0:e3:bf:75:59:52:92:ec:8b:20:ac:28:4e:4f:40:c8: a6:75:1d:9e:ba:df:fe:9a:b9:f6:d0:fc:26:d0:22:dc:57:59: 50:fe:5b:49:d0:6e:b8:2f:41:42:45:1d:c6:2d:e8:31:d1:11: 4b:00:c9:29:dc:e0:f6:3d:72:04:25:a7:53:d5:c0:c8:81:f6: c7:8c:42:ca:17:5b:1f:95:91:73:43:2a:41:b1:37:2b:d2:d3: da:4a:ab:df:4a:7d:71:ef:39:86:b3:69:40:c1:c1:eb:9c:23: 47:a0:6b:24:6c:8e:43:93:d1:81:6a:ec:33:63:b7:6f:01:d3: b0:36:6e:5f:0c:95:ec:74:35:06:c9:7c:4f:77:da:45:05:6b: 2c:6b:29:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHuAr7rE8p2uTvEEf8sXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMTY1ODhiZDFjY2IyZGQyMjFjNmY4NzgzODU2NzQ3NWQ3 ZWYyOWIwHhcNMjYwMTAxMTAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODU2N2I5NjFmMGNmZmVlYzE1NmQ3MmZhOGVlZThiMTdkYzU4MDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj6lY5wrV/gdFVVUPd412Cnh0zyl HjuIvmgFDhYpDvBHMBUFIJ1g0rdm8o9EhRBQ7WFheFtu08JnAJP6EPYpORcANUiF Xl/G6IFX8XANVIqqQhiqkDHFb9domugUJbXnMt3IGyMyV2dFFUCJ3JRfBQ9ack0n 6ZB4+SaYnfXCbnCjop0ztIXdAtnK5tYxKmcGaKhwS8LdzL5pQc06DOmn72zxVHhq 4CBheVsuPK600/MS32f+DhITA9W99AMxVh+3rD/zU6bHjUMxP3JthNz230T1GVsw nvogT3PGZ7vra1UwbujrZyvY6zsHu3pt/fATkVuun/kFRhaWDZcv4BDSTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKhWe5YfDP/uwVbXL6ju6LF9xYAuMB8GA1UdIwQY MBaAFKAWWIvRzLLdIhxvh4OFZ0ddfvKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0JaWWk5SE1zdDBpSEctSGc0Vm5SMTEtOHBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80ZWM1NjktOGNhZi00MTk4LWJhZTEt NzczMTIwZmY3YzBmLzEvcUZaN2xoOE1fLTdCVnRjdnFPN29zWDNGZ0M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi80ZWM1NjktOGNhZi00MTk4LWJhZTEtNzczMTIwZmY3YzBm LzEvb0JaWWk5SE1zdDBpSEctSGc0Vm5SMTEtOHBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGmmMA0G CSqGSIb3DQEBCwUAA4IBAQBq+DVgD5G8xO60w+bIiWahE6vQoysw9OnBfb/3RrZK dpDtFqom65D5dLwqQsuWX/+qij9+7TIvW81DYc39LEmffgkR4jXTkWj9CSDU9Jiz W8dQf+LuxTf1iA+ei1Vbu9BiQ4Rl1+Iu/RtCSjLGX9Djv3VZUpLsiyCsKE5PQMim dR2eut/+mrn20Pwm0CLcV1lQ/ltJ0G64L0FCRR3GLegx0RFLAMkp3OD2PXIEJadT 1cDIgfbHjELKF1sflZFzQypBsTcr0tPaSqvfSn1x7zmGs2lAwcHrnCNHoGskbI5D k9GBauwzY7dvAdOwNm5fDJXsdDUGyXxPd9pFBWssaylB -----END CERTIFICATE-----Generated at Mon Jan 26 05:54:52 2026 by rpki-client