This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/qTufF1I1BOXhSMjKIz2OrC_cFPA.roa File: qTufF1I1BOXhSMjKIz2OrC_cFPA.roa (raw, json) Hash identifier: bI+hBb0vOYHBwJkdeHrx6aFxmMSPnXb1OZ+8VCX+R+M= Subject key identifier: A9:3B:9F:17:52:35:04:E5:E1:48:C8:CA:23:3D:8E:AC:2F:DC:14:F0 Certificate issuer: /CN=b6380000fb7e45f8976261a698d418f08e8d67c7 Certificate serial: 019B77C70A9368CF7F829B7195BFC0555132 Authority key identifier: B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/qTufF1I1BOXhSMjKIz2OrC_cFPA.roa Signing time: Thu 01 Jan 2026 04:18:11 +0000 ROA not before: Thu 01 Jan 2026 04:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50517 IP address blocks: 212.57.192.0/19 maxlen: 19 212.57.192.0/24 maxlen: 24 212.57.193.0/24 maxlen: 24 212.57.194.0/24 maxlen: 24 212.57.195.0/24 maxlen: 24 212.57.196.0/24 maxlen: 24 212.57.197.0/24 maxlen: 24 212.57.211.0/24 maxlen: 24 212.57.212.0/24 maxlen: 24 212.57.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0a:93:68:cf:7f:82:9b:71:95:bf:c0:55:51:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6380000fb7e45f8976261a698d418f08e8d67c7 Validity Not Before: Jan 1 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a93b9f17523504e5e148c8ca233d8eac2fdc14f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6a:89:9e:de:e7:77:31:38:6b:e9:65:30:b6: 56:07:d7:6d:b4:95:93:9f:1b:f3:45:0a:9d:86:b6: 6f:d1:a7:96:b8:09:fd:52:d6:a4:e4:17:f9:86:d7: 59:e9:3e:9c:68:25:75:75:6b:20:8a:a1:bb:d6:6a: 86:f7:50:57:7d:a5:3c:58:9b:07:6c:14:47:5b:a7: 5a:0b:bd:c3:b1:e6:db:04:32:1a:e9:1d:34:5f:1d: c6:36:32:6e:cd:13:90:20:91:74:ba:36:7b:d1:84: 8d:cd:5e:6c:9c:58:58:48:71:06:1d:61:63:84:9a: 58:87:08:eb:ec:1d:e1:29:cb:e8:a2:68:25:3b:63: e7:66:5b:e4:43:ad:02:7d:71:54:9f:1a:29:dc:fe: 20:72:12:58:bb:3d:82:7a:56:ca:c7:f1:f7:57:29: ff:07:46:e1:96:43:bc:b6:71:93:20:a5:bb:0d:17: 7f:8c:a8:27:f8:60:bb:df:1a:07:f2:0b:39:31:65: 6b:1d:4a:36:3d:9a:b9:10:e4:e7:94:c2:a4:4c:89: e0:0c:53:6d:10:b5:07:32:b0:0d:df:b8:dc:e3:b2: 4c:06:2d:65:84:94:18:3a:6a:af:29:4d:2c:28:e8: e0:f7:5a:e5:56:74:1e:18:34:d9:3d:47:bf:7a:6c: 86:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3B:9F:17:52:35:04:E5:E1:48:C8:CA:23:3D:8E:AC:2F:DC:14:F0 X509v3 Authority Key Identifier: keyid:B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/qTufF1I1BOXhSMjKIz2OrC_cFPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.57.192.0/19 Signature Algorithm: sha256WithRSAEncryption 01:7a:95:2f:40:ff:5e:12:44:c2:3f:15:df:81:1d:fd:00:ad: fd:73:2e:3f:d3:c9:e4:45:e7:ad:33:34:8a:9c:2e:39:80:68: 53:c1:ec:7e:56:f3:e3:45:a6:87:e3:4d:bb:01:b4:bc:51:85: fa:0a:95:d4:4a:ac:f1:d7:e7:6d:fe:2f:e0:f9:20:f8:a4:d0: 44:73:99:45:19:a3:0a:cb:49:bf:35:86:3b:cb:ae:19:cf:1d: 2a:15:23:f1:8b:7a:25:c1:6a:c7:32:c9:b4:79:1a:ea:e4:23: 8e:fc:6a:1d:31:51:9c:f6:9a:22:a9:55:f2:9d:d7:10:ca:a9: 21:2d:59:2d:b5:43:21:8c:a1:01:06:6e:1d:78:c3:4e:07:6f: 4e:32:94:85:8e:eb:92:17:3c:5d:9e:ec:dc:b5:39:1b:7e:f0: a2:f4:d7:6e:6d:5f:24:71:fb:bb:00:fe:9d:d2:ec:45:6e:b4: 7c:9d:3a:50:34:48:c5:10:52:d5:f5:a4:bf:63:b7:b4:ab:7f: f6:18:b4:10:f4:9e:17:1f:3b:07:c8:e5:cb:8d:51:72:f0:98: de:b4:52:f3:f4:c0:16:17:b5:20:89:1e:3b:81:4f:26:ab:18: dc:d4:51:04:e8:7b:52:42:89:42:5c:bc:c6:e7:85:a5:57:37: b4:67:b6:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xwqTaM9/gptxlb/AVVEyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MzgwMDAwZmI3ZTQ1Zjg5NzYyNjFhNjk4ZDQxOGYwOGU4 ZDY3YzcwHhcNMjYwMTAxMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTNiOWYxNzUyMzUwNGU1ZTE0OGM4Y2EyMzNkOGVhYzJmZGMxNGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WqJnt7ndzE4a+llMLZWB9dttJWT nxvzRQqdhrZv0aeWuAn9Utak5Bf5htdZ6T6caCV1dWsgiqG71mqG91BXfaU8WJsH bBRHW6daC73DsebbBDIa6R00Xx3GNjJuzROQIJF0ujZ70YSNzV5snFhYSHEGHWFj hJpYhwjr7B3hKcvoomglO2PnZlvkQ60CfXFUnxop3P4gchJYuz2CelbKx/H3Vyn/ B0bhlkO8tnGTIKW7DRd/jKgn+GC73xoH8gs5MWVrHUo2PZq5EOTnlMKkTIngDFNt ELUHMrAN37jc47JMBi1lhJQYOmqvKU0sKOjg91rlVnQeGDTZPUe/emyGywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKk7nxdSNQTl4UjIyiM9jqwv3BTwMB8GA1UdIwQY MBaAFLY4AAD7fkX4l2JhppjUGPCOjWfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGpnQUFQdC1SZmlYWW1HbW1OUVk4STZOWjhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82ZTRlNjgtODdhYS00NzhjLThlNWYt ZTA2MTc2YWIyNGZiLzEvcVR1ZkYxSTFCT1hoU01qS0l6Mk9yQ19jRlBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi82ZTRlNjgtODdhYS00NzhjLThlNWYtZTA2MTc2YWIyNGZi LzEvdGpnQUFQdC1SZmlYWW1HbW1OUVk4STZOWjhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1DnAMA0G CSqGSIb3DQEBCwUAA4IBAQABepUvQP9eEkTCPxXfgR39AK39cy4/08nkReetMzSK nC45gGhTwex+VvPjRaaH4027AbS8UYX6CpXUSqzx1+dt/i/g+SD4pNBEc5lFGaMK y0m/NYY7y64Zzx0qFSPxi3olwWrHMsm0eRrq5COO/GodMVGc9poiqVXyndcQyqkh LVkttUMhjKEBBm4deMNOB29OMpSFjuuSFzxdnuzctTkbfvCi9NdubV8kcfu7AP6d 0uxFbrR8nTpQNEjFEFLV9aS/Y7e0q3/2GLQQ9J4XHzsHyOXLjVFy8JjetFLz9MAW F7UgiR47gU8mqxjc1FEE6HtSQolCXLzG54WlVze0Z7bs -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:44 2026 by rpki-client