This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/qLbWT3bB3iBT0TukjMBJAvhaDQM.roa File: qLbWT3bB3iBT0TukjMBJAvhaDQM.roa (raw, json) Hash identifier: 8q/NtwWEs+6Q/29xk+gdVzq969Ht7BEuC13rSHEA0yU= Subject key identifier: A8:B6:D6:4F:76:C1:DE:20:53:D1:3B:A4:8C:C0:49:02:F8:5A:0D:03 Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4 Certificate serial: 019B92BD9D98834CADD615649FA6D988FEBF Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/qLbWT3bB3iBT0TukjMBJAvhaDQM.roa Signing time: Tue 06 Jan 2026 09:57:38 +0000 ROA not before: Tue 06 Jan 2026 09:57:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48954 IP address blocks: 212.196.217.0/24 maxlen: 24 212.196.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:92:bd:9d:98:83:4c:ad:d6:15:64:9f:a6:d9:88:fe:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=321ec194107843848cd36330232b5f6a43791db4 Validity Not Before: Jan 6 09:57:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8b6d64f76c1de2053d13ba48cc04902f85a0d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:20:73:3b:c0:9a:5f:ae:94:22:1a:d6:d2:c4: af:07:cc:0d:2a:80:74:b1:fd:ed:be:d6:d7:05:ad: 04:34:bd:01:48:9e:26:bf:17:71:cf:a2:96:db:db: 07:2f:b9:e3:0f:82:e4:67:93:e9:43:fa:85:1e:d9: bc:e0:b1:1a:77:61:03:9b:b8:85:10:60:a3:47:29: 11:c0:f3:e5:62:a5:37:db:51:48:bf:37:8b:3b:af: b2:74:a6:ff:e9:af:9c:77:59:f2:18:2d:68:22:b0: 74:b0:de:9e:10:9c:42:d0:95:58:71:a3:bf:62:da: 7f:da:ff:89:5f:4a:96:1f:0f:ec:6f:cf:a2:3b:12: 5d:78:d9:4c:ec:be:3f:7b:c7:fc:42:7a:53:23:ab: 77:9d:af:ce:90:ee:17:5c:22:9f:9e:6e:22:00:88: 41:03:39:9d:aa:b9:23:e5:f2:3d:cc:03:a5:df:46: bd:39:aa:f2:4e:66:90:72:47:e9:40:18:0b:3e:c4: 30:9e:68:f0:84:b4:9e:9f:25:95:0e:20:cd:d8:d0: b6:c8:de:fb:6e:66:8b:cd:7a:48:e5:86:ae:02:22: 03:82:a5:97:88:ca:b1:f0:2d:90:5c:ea:1a:d6:0f: 8c:bb:bc:f5:44:20:f6:ea:e3:90:2c:5e:85:00:ce: 61:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B6:D6:4F:76:C1:DE:20:53:D1:3B:A4:8C:C0:49:02:F8:5A:0D:03 X509v3 Authority Key Identifier: keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/qLbWT3bB3iBT0TukjMBJAvhaDQM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.196.217.0-212.196.218.255 Signature Algorithm: sha256WithRSAEncryption 5d:93:27:94:f6:00:d5:13:45:95:20:36:18:68:e2:59:21:4a: 56:80:8f:66:9d:bd:d7:b4:11:96:b1:f0:fb:38:e8:d5:07:1d: 7c:f7:db:4a:d8:81:40:d8:04:0f:d2:e9:aa:ee:6d:c7:06:47: 2e:00:a9:47:ed:e7:df:51:4e:21:60:83:95:0d:b5:aa:5c:ce: a6:ab:67:08:ff:62:f1:64:6e:ae:05:33:0c:00:0f:02:f3:3a: df:48:3b:34:bb:9c:7e:01:25:e4:49:2d:02:c2:51:0b:7f:60: 8f:6f:a7:69:c5:11:2c:4e:f5:81:9a:b2:c4:69:49:2e:63:c6: fe:12:14:98:8f:18:cb:d8:48:7f:05:6a:85:6f:fd:6d:3f:54: 51:8b:90:69:6c:fe:d3:5d:51:ff:60:e1:57:d1:86:42:75:5e: fe:5c:93:b2:e7:5d:88:d9:89:ee:da:e8:2b:0e:ac:60:25:c3: 91:d7:f2:d9:f7:61:f2:fc:89:60:95:fc:cb:3e:7b:19:37:62: c7:5b:2f:33:05:98:80:ee:4e:02:f4:f7:71:1f:a8:ca:d8:3d: 68:ba:65:93:01:40:ff:24:78:f8:ec:d7:53:ab:ef:cd:1e:bb: 9b:cc:9f:b6:ed:81:03:a2:a1:31:17:66:f0:ad:c1:c2:6c:e1: a1:93:25:e4 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZuSvZ2Yg0yt1hVkn6bZiP6/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMWVjMTk0MTA3ODQzODQ4Y2QzNjMzMDIzMmI1ZjZhNDM3 OTFkYjQwHhcNMjYwMTA2MDk1NzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGI2ZDY0Zjc2YzFkZTIwNTNkMTNiYTQ4Y2MwNDkwMmY4NWEwZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCBzO8CaX66UIhrW0sSvB8wNKoB0 sf3tvtbXBa0ENL0BSJ4mvxdxz6KW29sHL7njD4LkZ5PpQ/qFHtm84LEad2EDm7iF EGCjRykRwPPlYqU321FIvzeLO6+ydKb/6a+cd1nyGC1oIrB0sN6eEJxC0JVYcaO/ Ytp/2v+JX0qWHw/sb8+iOxJdeNlM7L4/e8f8QnpTI6t3na/OkO4XXCKfnm4iAIhB Azmdqrkj5fI9zAOl30a9OaryTmaQckfpQBgLPsQwnmjwhLSenyWVDiDN2NC2yN77 bmaLzXpI5YauAiIDgqWXiMqx8C2QXOoa1g+Mu7z1RCD26uOQLF6FAM5hNQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKi21k92wd4gU9E7pIzASQL4Wg0DMB8GA1UdIwQY MBaAFDIewZQQeEOEjNNjMCMrX2pDeR20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgt M2E2MTFjMDkzYTJjLzEvcUxiV1QzYkIzaUJUMFR1a2pNQkpBdmhhRFFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgtM2E2MTFjMDkzYTJj LzEvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADUxNkD BADUxNowDQYJKoZIhvcNAQELBQADggEBAF2TJ5T2ANUTRZUgNhho4lkhSlaAj2ad vde0EZax8Ps46NUHHXz320rYgUDYBA/S6arubccGRy4AqUft599RTiFgg5UNtapc zqarZwj/YvFkbq4FMwwADwLzOt9IOzS7nH4BJeRJLQLCUQt/YI9vp2nFESxO9YGa ssRpSS5jxv4SFJiPGMvYSH8FaoVv/W0/VFGLkGls/tNdUf9g4VfRhkJ1Xv5ck7Ln XYjZie7a6CsOrGAlw5HX8tn3YfL8iWCV/Ms+exk3YsdbLzMFmIDuTgL093EfqMrY PWi6ZZMBQP8kePjs11Or780eu5vMn7btgQOioTEXZvCtwcJs4aGTJeQ= -----END CERTIFICATE-----Generated at Sun Jan 25 14:59:32 2026 by rpki-client