This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/tqIqzl7hVeEhRTF6xUhqjA4FAAc.roa File: tqIqzl7hVeEhRTF6xUhqjA4FAAc.roa (raw, json) Hash identifier: bvY4/tharyuzDPrRsmC185qxD3sZT9but5rOBl+Adzc= Subject key identifier: B6:A2:2A:CE:5E:E1:55:E1:21:45:31:7A:C5:48:6A:8C:0E:05:00:07 Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D177C2585B4D493E74FBE2593FEDE Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/tqIqzl7hVeEhRTF6xUhqjA4FAAc.roa Signing time: Fri 02 Jan 2026 06:20:11 +0000 ROA not before: Fri 02 Jan 2026 06:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24822 IP address blocks: 217.65.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:17:7c:25:85:b4:d4:93:e7:4f:be:25:93:fe:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6a22ace5ee155e12145317ac5486a8c0e050007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:03:67:01:42:39:93:67:a3:3a:18:2c:20:d3: 44:c4:ea:ef:f9:92:3c:78:c3:18:48:8b:d5:b9:f7: 0b:ec:11:34:26:88:52:29:3a:b6:3f:e5:fd:e4:12: 96:46:a5:64:52:5d:b6:0d:57:ca:26:7f:60:87:03: 02:dd:09:cf:5f:e4:87:25:43:e6:cb:62:5d:72:8c: 1b:e9:c5:4f:3e:fe:53:81:ff:18:a9:d8:cd:d4:0f: 84:d8:0e:a3:a4:f1:b2:93:34:f0:2a:d5:1e:7e:59: af:87:8b:92:af:64:04:4e:4a:d4:1b:d3:92:23:5e: 39:1c:38:a2:57:27:93:5e:1e:95:2a:bc:a6:69:d8: ff:41:0b:ac:4d:58:5b:7d:7c:c9:54:b1:f1:90:6b: f3:a0:01:8d:51:5a:97:0a:ba:8d:8a:4c:2c:88:fb: 44:ac:09:34:38:44:a7:c4:cd:78:dc:c8:d5:26:d5: 6b:f0:f3:42:91:9f:b2:48:e7:46:28:8e:b1:97:c3: 45:bd:66:e4:d0:67:d5:22:d6:14:23:38:0e:90:4a: ba:54:0b:8c:a4:10:b1:19:a8:8f:30:d5:2d:43:3b: 19:7d:47:40:b0:bd:1a:83:67:47:1d:d2:a0:e4:2a: b5:6a:5d:7c:23:05:7e:33:6b:ca:17:66:31:ce:3f: 50:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A2:2A:CE:5E:E1:55:E1:21:45:31:7A:C5:48:6A:8C:0E:05:00:07 X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/tqIqzl7hVeEhRTF6xUhqjA4FAAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.65.109.0/24 Signature Algorithm: sha256WithRSAEncryption 72:16:9c:ab:f4:d1:2c:7c:6b:38:4e:5c:a9:b4:ad:f5:37:08: b9:ed:c4:49:a7:ba:af:48:0f:3c:e1:6f:fc:1d:eb:3c:38:0d: a2:38:e3:d4:1d:70:cf:9c:ca:be:d9:0b:72:35:5d:ee:bd:07: 60:77:fa:9c:db:97:04:67:c0:68:5d:ea:75:20:97:e1:92:1a: ce:56:44:aa:93:5d:3c:89:48:68:32:0d:77:a5:63:e3:b3:d7: 38:bd:31:2d:c5:ae:ab:2c:f7:87:92:38:93:28:8a:b3:e9:07: 08:78:12:ed:4e:dd:03:55:1e:57:cb:54:56:15:cd:50:98:77: ba:2a:a8:bb:c2:be:66:93:e5:91:89:f6:52:18:17:e3:cd:f4: dd:2e:e7:e7:25:69:c8:9a:32:5f:e6:de:23:2d:51:e5:e9:a6: 74:bd:b8:ff:66:08:d5:17:4a:a0:80:36:0b:56:3c:fd:b9:ea: a5:e0:ea:ee:83:de:7c:f0:6f:04:f8:09:2a:41:9e:bf:68:e8: 89:0c:b1:cc:43:b8:5f:4f:70:21:34:4d:f4:5b:89:2d:bc:f8: 70:6a:dc:93:bc:c8:6b:d4:ed:7a:47:11:04:9b:d3:c9:17:56: 1f:b9:93:4e:0b:26:45:da:4f:75:09:5d:ea:77:08:2c:72:f5: f4:2b:79:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XRd8JYW01JPnT74lk/7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmEyMmFjZTVlZTE1NWUxMjE0NTMxN2FjNTQ4NmE4YzBlMDUwMDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywNnAUI5k2ejOhgsINNExOrv+ZI8 eMMYSIvVufcL7BE0JohSKTq2P+X95BKWRqVkUl22DVfKJn9ghwMC3QnPX+SHJUPm y2Jdcowb6cVPPv5Tgf8YqdjN1A+E2A6jpPGykzTwKtUeflmvh4uSr2QETkrUG9OS I145HDiiVyeTXh6VKrymadj/QQusTVhbfXzJVLHxkGvzoAGNUVqXCrqNikwsiPtE rAk0OESnxM143MjVJtVr8PNCkZ+ySOdGKI6xl8NFvWbk0GfVItYUIzgOkEq6VAuM pBCxGaiPMNUtQzsZfUdAsL0ag2dHHdKg5Cq1al18IwV+M2vKF2Yxzj9QXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLaiKs5e4VXhIUUxesVIaowOBQAHMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvdHFJcXpsN2hWZUVoUlRGNnhVaHFqQTRGQUFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2UFtMA0G CSqGSIb3DQEBCwUAA4IBAQByFpyr9NEsfGs4TlyptK31Nwi57cRJp7qvSA884W/8 Hes8OA2iOOPUHXDPnMq+2QtyNV3uvQdgd/qc25cEZ8BoXep1IJfhkhrOVkSqk108 iUhoMg13pWPjs9c4vTEtxa6rLPeHkjiTKIqz6QcIeBLtTt0DVR5Xy1RWFc1QmHe6 Kqi7wr5mk+WRifZSGBfjzfTdLufnJWnImjJf5t4jLVHl6aZ0vbj/ZgjVF0qggDYL Vjz9ueql4Orug9588G8E+AkqQZ6/aOiJDLHMQ7hfT3AhNE30W4ktvPhwatyTvMhr 1O16RxEEm9PJF1YfuZNOCyZF2k91CV3qdwgscvX0K3na -----END CERTIFICATE-----Generated at Sun Jan 25 15:37:55 2026 by rpki-client