This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/qff7q2HzSGSSyiMg2SYgZicp8RA.roa File: qff7q2HzSGSSyiMg2SYgZicp8RA.roa (raw, json) Hash identifier: she65TZNRufZfodlMnGAteeu8BxuGXHft9ScMacnGLI= Subject key identifier: A9:F7:FB:AB:61:F3:48:64:92:CA:23:20:D9:26:20:66:27:29:F1:10 Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 019B7B36B1BABEFA1AD98FAF13A1C7E17171 Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/qff7q2HzSGSSyiMg2SYgZicp8RA.roa Signing time: Thu 01 Jan 2026 20:19:00 +0000 ROA not before: Thu 01 Jan 2026 20:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204582 IP address blocks: 62.76.248.0/24 maxlen: 24 62.76.249.0/24 maxlen: 24 62.76.250.0/24 maxlen: 24 62.76.251.0/24 maxlen: 24 62.76.252.0/24 maxlen: 24 62.76.255.0/24 maxlen: 24 194.85.31.0/24 maxlen: 24 194.85.77.0/24 maxlen: 24 194.85.78.0/24 maxlen: 24 194.85.79.0/24 maxlen: 24 212.193.116.0/24 maxlen: 24 212.193.117.0/24 maxlen: 24 212.193.118.0/24 maxlen: 24 212.193.119.0/24 maxlen: 24 212.193.120.0/24 maxlen: 24 212.193.121.0/24 maxlen: 24 212.193.122.0/24 maxlen: 24 212.193.123.0/24 maxlen: 24 212.193.124.0/24 maxlen: 24 212.193.125.0/24 maxlen: 24 212.193.126.0/24 maxlen: 24 212.193.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b1:ba:be:fa:1a:d9:8f:af:13:a1:c7:e1:71:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Jan 1 20:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9f7fbab61f3486492ca2320d92620662729f110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d4:63:9e:b9:24:e3:53:97:ab:ba:b8:cc:21: 12:a8:8b:be:df:8f:be:18:38:f0:e2:7f:c9:87:d0: ac:ab:8f:36:cf:95:4b:a1:50:f4:d9:07:f0:b5:4e: 36:b9:c9:a9:e2:69:bf:c0:7c:2c:f4:eb:a2:0d:78: 35:10:3f:b2:30:42:4b:7c:f6:3d:15:46:0f:61:67: ff:1a:70:07:8c:33:54:9f:9d:fe:12:ee:af:90:72: 31:65:73:96:99:f9:b7:7a:04:64:6d:cc:8c:de:05: 15:06:01:06:7a:20:25:71:07:cc:f3:ac:7f:c8:ba: e8:55:af:0c:c8:d8:33:ca:ba:98:7d:8a:4c:6e:86: 3a:ac:51:3d:1f:22:b9:b0:de:87:f3:6f:75:f5:be: e5:bb:13:ee:06:77:b2:c6:18:89:d8:fe:59:f2:d6: 29:96:46:78:e7:90:4c:07:c6:c7:ab:e5:c9:7a:eb: 8e:15:b4:ee:41:c5:65:42:40:f3:59:58:20:71:94: e0:6c:ef:59:e8:2c:61:31:b6:1f:29:59:02:24:d8: 6b:e9:aa:bb:17:d0:7f:2f:06:d0:1b:be:b1:37:52: 93:a9:65:44:f1:2d:0b:56:d3:57:6f:a8:eb:49:e2: 14:33:88:bf:e2:f1:a9:c4:9d:93:27:75:dd:16:55: 6a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F7:FB:AB:61:F3:48:64:92:CA:23:20:D9:26:20:66:27:29:F1:10 X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/qff7q2HzSGSSyiMg2SYgZicp8RA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.248.0-62.76.252.255 62.76.255.0/24 194.85.31.0/24 194.85.77.0-194.85.79.255 212.193.116.0-212.193.127.255 Signature Algorithm: sha256WithRSAEncryption bc:1c:d2:81:de:fb:5b:da:1c:63:3f:08:ad:6a:65:d6:bb:c7: 55:17:bf:18:c2:8f:86:67:2c:32:8a:52:1e:d5:a3:74:1e:fd: 7b:77:ae:51:d8:bd:0a:44:b8:08:48:a6:b1:4b:35:74:40:2f: 44:db:1a:3f:fd:8a:0d:37:f4:ad:2a:a0:0d:a4:f9:7d:67:60: 1f:68:2a:8b:c6:f1:a3:99:e3:cb:a9:92:9c:ac:1a:cf:6f:53: a3:a4:29:79:62:a4:26:7d:35:49:6b:2d:1d:b3:a1:21:ac:40: 72:2b:ab:f7:71:09:8b:8f:79:51:06:1e:a1:9a:5b:ed:d9:2a: 7d:08:1c:4f:9e:db:7c:87:b6:15:f8:b1:95:63:b6:0b:6a:99: 09:8e:23:56:c1:c1:64:a5:d7:b9:5b:41:77:85:f7:5a:1f:15: 3c:88:6f:ec:a7:1f:dd:33:40:8d:36:1d:70:58:bf:6d:38:01: fa:66:83:87:bd:6a:d8:b0:21:f7:ea:21:54:13:bd:cb:00:41: 84:b0:2d:96:f5:91:f2:90:c7:e5:db:c8:31:f4:37:07:04:66: 57:e3:5b:82:b1:7b:9b:6e:b3:ba:63:3e:51:24:24:69:37:f3: 4d:33:a8:a6:09:40:be:0c:35:77:0b:09:e1:81:df:0a:98:7c: b9:f7:ab:b9 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt7NrG6vvoa2Y+vE6HH4XFxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjYwMTAxMjAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWY3ZmJhYjYxZjM0ODY0OTJjYTIzMjBkOTI2MjA2NjI3MjlmMTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttRjnrkk41OXq7q4zCESqIu+34++ GDjw4n/Jh9Csq482z5VLoVD02QfwtU42ucmp4mm/wHws9OuiDXg1ED+yMEJLfPY9 FUYPYWf/GnAHjDNUn53+Eu6vkHIxZXOWmfm3egRkbcyM3gUVBgEGeiAlcQfM86x/ yLroVa8MyNgzyrqYfYpMboY6rFE9HyK5sN6H82919b7luxPuBneyxhiJ2P5Z8tYp lkZ455BMB8bHq+XJeuuOFbTuQcVlQkDzWVggcZTgbO9Z6CxhMbYfKVkCJNhr6aq7 F9B/LwbQG76xN1KTqWVE8S0LVtNXb6jrSeIUM4i/4vGpxJ2TJ3XdFlVqtQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFKn3+6th80hkksojINkmIGYnKfEQMB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvcWZmN3EySHpTR1NTeWlNZzJTWWdaaWNwOFJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2MAwDBAM+TPgD BAA+TPwDBAA+TP8DBADCVR8wDAMEAMJVTQMEBMJVQDAMAwQC1MF0AwQH1MEAMA0G CSqGSIb3DQEBCwUAA4IBAQC8HNKB3vtb2hxjPwitamXWu8dVF78Ywo+GZywyilIe 1aN0Hv17d65R2L0KRLgISKaxSzV0QC9E2xo//YoNN/StKqANpPl9Z2AfaCqLxvGj mePLqZKcrBrPb1OjpCl5YqQmfTVJay0ds6EhrEByK6v3cQmLj3lRBh6hmlvt2Sp9 CBxPntt8h7YV+LGVY7YLapkJjiNWwcFkpde5W0F3hfdaHxU8iG/spx/dM0CNNh1w WL9tOAH6ZoOHvWrYsCH36iFUE73LAEGEsC2W9ZHykMfl28gx9DcHBGZX41uCsXub brO6Yz5RJCRpN/NNM6imCUC+DDV3Cwnhgd8KmHy596u5 -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:52 2026 by rpki-client