This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/87qglnJlHU1mklZMJqXISVtrAXY.roa File: 87qglnJlHU1mklZMJqXISVtrAXY.roa (raw, json) Hash identifier: 96OWnRouaOKTaFrhl29Fg3Xk/wwnyW2ZpqGWVyPVGkY= Subject key identifier: F3:BA:A0:96:72:65:1D:4D:66:92:56:4C:26:A5:C8:49:5B:6B:01:76 Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Certificate serial: 019BEBD346CD5FEA815AD2939D675680538A Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/87qglnJlHU1mklZMJqXISVtrAXY.roa Signing time: Fri 23 Jan 2026 17:07:30 +0000 ROA not before: Fri 23 Jan 2026 17:07:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 984 IP address blocks: 116.204.164.0/24 maxlen: 24 222.167.226.0/24 maxlen: 24 222.167.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:d3:46:cd:5f:ea:81:5a:d2:93:9d:67:56:80:53:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Validity Not Before: Jan 23 17:07:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3baa09672651d4d6692564c26a5c8495b6b0176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5b:b5:c0:b6:4f:83:e5:2f:00:ed:0c:81:63: 7c:b9:98:19:e9:d0:db:9f:7a:f3:27:f3:6d:1a:ba: 06:c0:f4:d1:e4:84:d3:b4:34:8f:11:c8:23:9f:0e: fa:10:a4:bc:58:77:5f:5a:af:9f:2c:5a:11:85:2d: dc:dc:d2:c7:6e:49:fa:4a:12:27:c9:64:2a:b8:54: 20:72:b4:68:95:1d:eb:6a:02:70:0d:d5:22:38:04: 4f:65:94:3b:67:a6:53:d5:6d:ec:c6:c0:96:75:fc: 1d:37:c9:a1:02:94:50:19:1e:c7:4c:14:2a:9e:e3: 2c:27:0a:c6:24:85:30:94:42:79:f6:fe:28:27:31: 14:36:3d:f1:7f:95:35:f3:81:4d:32:c6:ec:ee:0f: a6:2e:0f:5f:7d:6a:0a:bb:57:77:15:8f:80:0e:95: f2:01:75:43:18:cc:0f:30:46:0b:bb:20:37:86:82: 65:bf:26:20:17:0b:c2:70:1b:07:e8:2a:fb:43:fc: a8:7b:d8:82:9a:77:e3:67:99:09:1c:a8:df:f7:1a: ef:1c:d7:fd:29:0f:f7:e7:90:a8:41:36:14:90:9a: 13:7d:e3:83:69:ad:5d:0c:7c:3b:99:28:f9:2b:72: 8a:92:7f:ac:14:da:7a:65:5a:f2:79:64:14:b0:ed: b3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BA:A0:96:72:65:1D:4D:66:92:56:4C:26:A5:C8:49:5B:6B:01:76 X509v3 Authority Key Identifier: keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/87qglnJlHU1mklZMJqXISVtrAXY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.204.164.0/24 222.167.226.0/24 222.167.253.0/24 Signature Algorithm: sha256WithRSAEncryption 51:db:b0:98:1c:09:b4:69:16:bb:6c:2c:5d:14:37:0e:5e:83: 78:35:93:e2:f1:12:65:5a:4d:19:0e:88:f8:05:0c:ef:d4:63: e7:a2:12:af:86:d2:91:75:cd:b2:ba:19:c0:b7:e8:73:58:f2: 47:1e:d2:18:f2:fa:e9:f4:d8:44:05:78:e9:2c:bb:70:de:4b: 2b:50:4d:86:51:56:87:a0:84:ae:17:86:07:8a:6a:9b:a1:2f: bf:9a:33:ad:86:8c:ec:5c:54:15:df:60:07:8f:b5:77:95:cb: 97:4c:a6:bd:d8:6d:9a:31:92:4a:1c:a5:fb:0a:50:7e:96:3f: 5f:f3:b1:2f:0a:d0:4f:b1:89:fe:0c:5e:f0:af:c5:bc:71:cd: 2e:a6:43:ad:dd:55:ab:35:23:a0:81:02:65:00:81:ed:c6:d4: 2b:af:44:37:1e:6d:cb:4f:e5:ee:bd:52:48:8c:a3:87:da:08: ab:a4:77:3e:53:8a:c6:a5:00:ff:15:4d:e6:ce:fc:49:27:36: 72:9a:c3:85:3d:09:e1:10:b3:3d:7c:53:a4:b5:68:d6:0b:66: 57:26:3d:3d:03:02:91:7b:b8:90:e1:fd:63:41:7f:94:c9:93: 89:7f:69:54:32:cc:38:07:cd:fe:20:5f:e8:20:bb:13:19:c7: 4a:e4:32:25 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvr00bNX+qBWtKTnWdWgFOKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1 YTkyOTQwHhcNMjYwMTIzMTcwNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2JhYTA5NjcyNjUxZDRkNjY5MjU2NGMyNmE1Yzg0OTViNmIwMTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlu1wLZPg+UvAO0MgWN8uZgZ6dDb n3rzJ/NtGroGwPTR5ITTtDSPEcgjnw76EKS8WHdfWq+fLFoRhS3c3NLHbkn6ShIn yWQquFQgcrRolR3ragJwDdUiOARPZZQ7Z6ZT1W3sxsCWdfwdN8mhApRQGR7HTBQq nuMsJwrGJIUwlEJ59v4oJzEUNj3xf5U184FNMsbs7g+mLg9ffWoKu1d3FY+ADpXy AXVDGMwPMEYLuyA3hoJlvyYgFwvCcBsH6Cr7Q/yoe9iCmnfjZ5kJHKjf9xrvHNf9 KQ/355CoQTYUkJoTfeODaa1dDHw7mSj5K3KKkn+sFNp6ZVryeWQUsO2z1wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPO6oJZyZR1NZpJWTCalyElbawF2MB8GA1UdIwQY MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt NGEzNDhlN2JlNDQxLzEvODdxZ2xuSmxIVTFta2xaTUpxWElTVnRyQVhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAdMykAwQA 3qfiAwQA3qf9MA0GCSqGSIb3DQEBCwUAA4IBAQBR27CYHAm0aRa7bCxdFDcOXoN4 NZPi8RJlWk0ZDoj4BQzv1GPnohKvhtKRdc2yuhnAt+hzWPJHHtIY8vrp9NhEBXjp LLtw3ksrUE2GUVaHoISuF4YHimqboS+/mjOthozsXFQV32AHj7V3lcuXTKa92G2a MZJKHKX7ClB+lj9f87EvCtBPsYn+DF7wr8W8cc0upkOt3VWrNSOggQJlAIHtxtQr r0Q3Hm3LT+XuvVJIjKOH2girpHc+U4rGpQD/FU3mzvxJJzZymsOFPQnhELM9fFOk tWjWC2ZXJj09AwKRe7iQ4f1jQX+UyZOJf2lUMsw4B83+IF/oILsTGcdK5DIl -----END CERTIFICATE-----Generated at Sun Jan 25 11:43:19 2026 by rpki-client