This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/CqHFUmeacxkZ6inf9g8BWFa6sL0.roa File: CqHFUmeacxkZ6inf9g8BWFa6sL0.roa (raw, json) Hash identifier: aHMc9AbMDBVD3QZb6p/wU6Wi7/qP/dG2rq9Kzqi6NtQ= Subject key identifier: 0A:A1:C5:52:67:9A:73:19:19:EA:29:DF:F6:0F:01:58:56:BA:B0:BD Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E3906A0CB735DC4EC1C49646B29E2CC Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/CqHFUmeacxkZ6inf9g8BWFa6sL0.roa Signing time: Fri 02 Jan 2026 10:20:25 +0000 ROA not before: Fri 02 Jan 2026 10:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31575 IP address blocks: 82.179.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:06:a0:cb:73:5d:c4:ec:1c:49:64:6b:29:e2:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0aa1c552679a731919ea29dff60f015856bab0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:33:b3:02:5e:32:05:68:7e:83:04:fb:37:6f: b2:50:8c:9d:e5:a4:eb:44:c5:33:97:58:23:6a:8c: 6e:ab:31:bc:09:0f:b7:90:e8:2d:c8:db:31:4f:86: 1c:ba:b5:84:ce:4b:e1:ea:0d:ab:bf:93:fc:68:75: fa:4e:dc:74:71:c0:2e:58:d1:29:9b:43:e1:00:99: 78:be:a4:02:a3:68:5f:cc:e9:2e:23:e0:c0:2a:3d: da:fc:9e:85:34:58:ef:4e:2f:ca:55:fc:8a:a8:eb: 2f:35:80:2a:18:d4:4b:1f:ee:58:6b:8a:94:48:a1: d4:36:e9:b8:76:47:98:4d:a0:a1:29:b4:1f:c1:61: f1:86:8d:09:18:f7:fd:62:51:f1:00:20:f4:3d:8f: 79:c2:59:3f:53:9e:0f:9c:a3:fb:43:7f:7f:f0:1d: aa:ca:33:ab:55:82:60:2e:9c:71:59:08:65:94:f2: 9c:17:0f:9a:e5:a9:42:bd:d7:72:e5:88:6a:6d:0d: d5:18:aa:88:a2:20:a7:00:5f:82:1d:8c:06:f1:72: 64:77:d4:a4:52:63:50:d9:64:48:0a:e1:09:98:d1: a9:97:12:6b:86:e4:db:8b:21:aa:e2:db:6c:ef:7c: 5f:6a:00:4a:d2:95:69:60:e0:d7:1a:4b:66:c4:36: ef:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A1:C5:52:67:9A:73:19:19:EA:29:DF:F6:0F:01:58:56:BA:B0:BD X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/CqHFUmeacxkZ6inf9g8BWFa6sL0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.179.176.0/20 Signature Algorithm: sha256WithRSAEncryption 09:3c:47:91:60:e5:e7:ed:aa:6a:d1:cf:61:36:64:2f:c9:2a: a1:d2:d3:79:7c:26:15:35:98:ef:a8:a7:b3:7e:18:50:55:38: 96:e9:3b:60:c6:18:0b:c5:24:80:ef:07:b6:6d:35:0f:0a:9d: 29:4c:bb:48:88:79:5f:64:d3:d4:f9:7f:58:07:a1:33:1d:05: 06:c7:d8:26:88:c5:c3:29:9d:06:6f:f7:ef:5c:e6:38:a9:dc: 9e:51:35:b9:ad:e3:7f:46:92:e0:4b:db:2a:5e:f1:de:46:6b: aa:d4:4d:45:24:65:f9:00:bd:6b:3a:a0:f1:64:89:a8:dd:a3: 94:d9:9b:e2:9c:38:29:14:ac:2e:d9:63:9c:e1:5e:e6:1d:49: 39:24:53:d9:67:49:7c:19:a4:ff:0a:92:11:4b:d5:21:82:91: ed:c2:a1:35:32:4d:b8:ca:aa:7c:6f:e2:b2:2b:06:f5:b2:ab: 54:0c:09:ab:6c:24:fc:31:e2:bd:85:ee:67:c0:b7:9d:aa:0b: c9:16:ea:50:7f:54:eb:8e:df:ae:b9:61:89:1c:74:cc:06:f5: 03:e5:ff:1e:72:51:5f:0d:43:dd:60:5f:98:7e:90:57:ff:ca: 38:62:dd:bc:43:05:7a:ba:0f:f6:d3:72:37:f4:77:ee:4c:d0: 30:04:19:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQagy3NdxOwcSWRrKeLMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWExYzU1MjY3OWE3MzE5MTllYTI5ZGZmNjBmMDE1ODU2YmFiMGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjOzAl4yBWh+gwT7N2+yUIyd5aTr RMUzl1gjaoxuqzG8CQ+3kOgtyNsxT4YcurWEzkvh6g2rv5P8aHX6Ttx0ccAuWNEp m0PhAJl4vqQCo2hfzOkuI+DAKj3a/J6FNFjvTi/KVfyKqOsvNYAqGNRLH+5Ya4qU SKHUNum4dkeYTaChKbQfwWHxho0JGPf9YlHxACD0PY95wlk/U54PnKP7Q39/8B2q yjOrVYJgLpxxWQhllPKcFw+a5alCvddy5YhqbQ3VGKqIoiCnAF+CHYwG8XJkd9Sk UmNQ2WRICuEJmNGplxJrhuTbiyGq4tts73xfagBK0pVpYODXGktmxDbv/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAqhxVJnmnMZGeop3/YPAVhWurC9MB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvQ3FIRlVtZWFjeGtaNmluZjlnOEJXRmE2c0wwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUrOwMA0G CSqGSIb3DQEBCwUAA4IBAQAJPEeRYOXn7apq0c9hNmQvySqh0tN5fCYVNZjvqKez fhhQVTiW6TtgxhgLxSSA7we2bTUPCp0pTLtIiHlfZNPU+X9YB6EzHQUGx9gmiMXD KZ0Gb/fvXOY4qdyeUTW5reN/RpLgS9sqXvHeRmuq1E1FJGX5AL1rOqDxZImo3aOU 2ZvinDgpFKwu2WOc4V7mHUk5JFPZZ0l8GaT/CpIRS9UhgpHtwqE1Mk24yqp8b+Ky Kwb1sqtUDAmrbCT8MeK9he5nwLedqgvJFupQf1Trjt+uuWGJHHTMBvUD5f8eclFf DUPdYF+YfpBX/8o4Yt28QwV6ug/203I39HfuTNAwBBns -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:57 2026 by rpki-client