This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/qYcaFh5k_WFgYNOOfWChkSb45-A.roa File: qYcaFh5k_WFgYNOOfWChkSb45-A.roa (raw, json) Hash identifier: SGuMC52Sw1yR7jo31UVDgHPa5SFl4NAmO7Lfy91dnrg= Subject key identifier: A9:87:1A:16:1E:64:FD:61:60:60:D3:8E:7D:60:A1:91:26:F8:E7:E0 Certificate issuer: /CN=a016588bd1ccb2dd221c6f87838567475d7ef29b Certificate serial: 019B79107D0F6FDB052FF704A25E7D980B71 Authority key identifier: A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/qYcaFh5k_WFgYNOOfWChkSb45-A.roa Signing time: Thu 01 Jan 2026 10:18:02 +0000 ROA not before: Thu 01 Jan 2026 10:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57670 IP address blocks: 176.105.160.0/19 maxlen: 19 176.105.161.0/24 maxlen: 24 176.105.162.0/24 maxlen: 24 176.105.164.0/24 maxlen: 24 176.105.166.0/24 maxlen: 24 176.105.168.0/24 maxlen: 24 176.105.169.0/24 maxlen: 24 176.105.170.0/24 maxlen: 24 176.105.171.0/24 maxlen: 24 176.105.172.0/24 maxlen: 24 176.105.173.0/24 maxlen: 24 176.105.174.0/24 maxlen: 24 176.105.175.0/24 maxlen: 24 176.105.176.0/24 maxlen: 24 176.105.177.0/24 maxlen: 24 176.105.178.0/24 maxlen: 24 176.105.179.0/24 maxlen: 24 176.105.180.0/24 maxlen: 24 176.105.181.0/24 maxlen: 24 176.105.182.0/24 maxlen: 24 176.105.183.0/24 maxlen: 24 176.105.184.0/24 maxlen: 24 176.105.185.0/24 maxlen: 24 176.105.186.0/24 maxlen: 24 176.105.187.0/24 maxlen: 24 176.105.188.0/24 maxlen: 24 176.105.190.0/24 maxlen: 24 176.105.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.mft rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:7d:0f:6f:db:05:2f:f7:04:a2:5e:7d:98:0b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a016588bd1ccb2dd221c6f87838567475d7ef29b Validity Not Before: Jan 1 10:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9871a161e64fd616060d38e7d60a19126f8e7e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e0:9e:6a:15:5c:99:76:90:a5:b6:8f:0e:ab: 57:5e:2e:25:27:a3:6b:d3:e6:de:e7:18:98:b9:4b: d5:86:77:bc:a0:39:1f:e4:16:75:43:99:b8:6d:8b: 02:37:4d:d3:b7:2e:aa:2e:eb:f9:f9:5d:39:8e:3d: f4:48:76:01:73:14:f1:ef:84:24:eb:6d:06:ac:e8: 56:0b:8c:34:16:cc:d3:40:a6:09:e9:9c:e7:ba:9f: 14:e3:83:18:ac:41:48:f3:24:e4:18:3d:6c:89:dd: 10:ba:dc:a8:57:a7:38:5a:44:fa:6a:41:8a:71:0b: 2a:66:e9:65:12:44:0a:e1:50:b9:b1:cf:f3:58:d5: f0:2e:67:6e:06:2f:01:a3:b6:f7:6c:35:07:e8:d0: 75:26:e3:cf:4b:00:f2:7b:ab:6d:e0:63:04:ff:2d: d0:5b:47:88:d2:82:36:a1:0f:a1:33:11:08:8a:31: 44:89:95:f4:27:84:a7:2c:9c:68:69:79:2e:af:c4: b7:1f:44:03:31:77:b1:01:55:ef:0c:2a:4a:f0:4e: 4f:ae:ef:f7:79:4e:47:69:4f:05:27:b9:f5:7f:49: 65:96:d6:be:0d:c1:2d:93:5b:b8:4c:6e:92:22:00: 90:54:18:5b:e7:92:85:9b:46:6f:9f:bf:aa:e9:2b: 1f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:87:1A:16:1E:64:FD:61:60:60:D3:8E:7D:60:A1:91:26:F8:E7:E0 X509v3 Authority Key Identifier: keyid:A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/qYcaFh5k_WFgYNOOfWChkSb45-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.105.160.0/19 Signature Algorithm: sha256WithRSAEncryption 15:a4:4a:cc:59:7d:60:de:b3:76:48:73:4d:eb:95:a9:62:8b: 3d:3c:8b:3e:dd:c0:fc:5f:ba:2c:f0:c3:f3:6e:a0:2a:6d:06: 4c:0d:ff:57:bb:ca:7d:44:6a:56:f2:ed:44:69:86:e7:02:b5: 50:6d:3f:37:ac:3f:82:89:07:e8:a2:e9:d8:2a:eb:6b:e0:6a: 73:96:97:8c:8b:8d:a7:08:1a:81:ba:4f:a6:2f:89:23:49:a2: 35:b6:89:88:29:ba:a0:3f:66:ce:58:9c:e2:84:a4:73:43:e2: 7c:1b:c8:98:8a:ec:9d:51:d0:cd:7e:f0:ac:64:c4:2d:26:43: c7:cf:15:74:fd:2e:fb:e5:0b:f1:28:14:41:73:1e:28:98:4c: ad:72:a7:b2:be:0c:24:f1:55:14:ac:47:43:43:b0:c7:98:82: 6e:cf:a8:c7:a6:52:cd:fe:89:73:da:cb:0a:e0:c2:36:32:1f: f0:fd:35:a0:26:df:3f:42:24:3e:42:48:c7:cc:19:34:d0:46: 18:c6:9c:dd:94:8a:84:0e:f4:22:8a:7f:00:21:f1:24:fa:f9: 70:39:39:51:a9:4a:78:1c:bf:88:0f:1f:51:48:20:bf:cd:8e: 1f:08:2e:9f:54:d8:a7:1f:eb:8c:78:14:f0:97:79:5b:59:4a: ae:aa:cf:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EH0Pb9sFL/cEol59mAtxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMTY1ODhiZDFjY2IyZGQyMjFjNmY4NzgzODU2NzQ3NWQ3 ZWYyOWIwHhcNMjYwMTAxMTAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTg3MWExNjFlNjRmZDYxNjA2MGQzOGU3ZDYwYTE5MTI2ZjhlN2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOCeahVcmXaQpbaPDqtXXi4lJ6Nr 0+be5xiYuUvVhne8oDkf5BZ1Q5m4bYsCN03Tty6qLuv5+V05jj30SHYBcxTx74Qk 620GrOhWC4w0FszTQKYJ6Zznup8U44MYrEFI8yTkGD1sid0QutyoV6c4WkT6akGK cQsqZullEkQK4VC5sc/zWNXwLmduBi8Bo7b3bDUH6NB1JuPPSwDye6tt4GME/y3Q W0eI0oI2oQ+hMxEIijFEiZX0J4SnLJxoaXkur8S3H0QDMXexAVXvDCpK8E5Pru/3 eU5HaU8FJ7n1f0lllta+DcEtk1u4TG6SIgCQVBhb55KFm0Zvn7+q6SsftQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKmHGhYeZP1hYGDTjn1goZEm+OfgMB8GA1UdIwQY MBaAFKAWWIvRzLLdIhxvh4OFZ0ddfvKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0JaWWk5SE1zdDBpSEctSGc0Vm5SMTEtOHBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80ZWM1NjktOGNhZi00MTk4LWJhZTEt NzczMTIwZmY3YzBmLzEvcVljYUZoNWtfV0ZnWU5PT2ZXQ2hrU2I0NS1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi80ZWM1NjktOGNhZi00MTk4LWJhZTEtNzczMTIwZmY3YzBm LzEvb0JaWWk5SE1zdDBpSEctSGc0Vm5SMTEtOHBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFsGmgMA0G CSqGSIb3DQEBCwUAA4IBAQAVpErMWX1g3rN2SHNN65WpYos9PIs+3cD8X7os8MPz bqAqbQZMDf9Xu8p9RGpW8u1EaYbnArVQbT83rD+CiQfoounYKutr4GpzlpeMi42n CBqBuk+mL4kjSaI1tomIKbqgP2bOWJzihKRzQ+J8G8iYiuydUdDNfvCsZMQtJkPH zxV0/S775QvxKBRBcx4omEytcqeyvgwk8VUUrEdDQ7DHmIJuz6jHplLN/olz2ssK 4MI2Mh/w/TWgJt8/QiQ+QkjHzBk00EYYxpzdlIqEDvQiin8AIfEk+vlwOTlRqUp4 HL+IDx9RSCC/zY4fCC6fVNinH+uMeBTwl3lbWUquqs+u -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:57 2026 by rpki-client