This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/qyibzEtDjpKnDnO2ZiEDt3kaXzA.roa File: qyibzEtDjpKnDnO2ZiEDt3kaXzA.roa (raw, json) Hash identifier: 8qTTIASb+Ax4Z41uNrWSSXbwwLoNDBXuy0I+ga8d34I= Subject key identifier: AB:28:9B:CC:4B:43:8E:92:A7:0E:73:B6:66:21:03:B7:79:1A:5F:30 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 019B7F154E8AF50B9B733ADE74F6B8D4E002 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/qyibzEtDjpKnDnO2ZiEDt3kaXzA.roa Signing time: Fri 02 Jan 2026 14:21:01 +0000 ROA not before: Fri 02 Jan 2026 14:21:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5411 IP address blocks: 193.44.76.0/22 maxlen: 22 193.44.76.0/23 maxlen: 23 193.44.78.0/23 maxlen: 23 193.44.172.0/22 maxlen: 22 193.44.172.0/23 maxlen: 23 193.44.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:4e:8a:f5:0b:9b:73:3a:de:74:f6:b8:d4:e0:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Jan 2 14:21:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab289bcc4b438e92a70e73b6662103b7791a5f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3a:f8:19:f9:25:4d:dd:10:f8:57:01:95:09: bb:bb:5d:66:83:05:ad:13:c4:8e:7d:51:82:39:1a: 26:38:77:d5:b6:cc:57:e4:87:c4:ec:7f:b6:d4:ab: f2:f3:38:2b:92:01:f9:eb:4f:22:06:38:fe:5d:13: 90:b1:fa:1e:a0:89:6a:c7:c4:dc:0a:22:f6:ed:ca: ab:37:2f:36:93:54:5e:2b:e2:98:fa:e1:63:ea:53: 53:57:9c:63:8b:02:e1:c6:85:d8:1d:55:74:ba:81: 73:2a:d3:59:5e:7d:bc:46:07:5a:13:59:c9:3f:74: 12:4a:45:02:16:df:4f:01:16:e8:f8:02:8f:f1:07: 47:82:40:dd:a0:0d:6c:d9:b8:0f:05:93:2a:ee:e6: 2f:12:c5:5a:49:76:42:ef:8d:0f:b6:4b:be:20:d0: 32:ba:97:c9:d7:b6:a9:07:74:bc:7a:6c:89:85:00: de:c7:b9:f1:56:a1:3b:7d:d3:5b:b9:b7:e0:d2:03: b5:c2:77:70:b1:45:71:62:5f:d9:02:ed:e1:11:18: 9e:1d:1b:6a:b1:b0:f8:13:d2:0a:15:39:3d:93:2d: 19:5c:a4:85:46:20:30:8a:ab:83:15:b7:15:16:f8: 0c:b2:38:76:dc:21:a2:22:49:20:16:2e:4c:a6:54: 93:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:28:9B:CC:4B:43:8E:92:A7:0E:73:B6:66:21:03:B7:79:1A:5F:30 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/qyibzEtDjpKnDnO2ZiEDt3kaXzA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.44.76.0/22 193.44.172.0/22 Signature Algorithm: sha256WithRSAEncryption 63:c2:c7:92:69:ec:e5:78:bc:06:07:14:82:b1:9e:17:ec:55: ac:d3:03:ff:05:53:95:c5:6f:5b:f7:aa:8b:bf:ce:5e:bf:cd: e4:b6:e8:17:c1:61:30:2e:2f:fb:88:4c:2f:57:ac:ed:34:29: fa:ec:f4:d0:78:95:8a:39:d6:d7:3a:5f:ad:9f:17:f2:20:62: 2f:ed:20:35:d8:26:15:5d:49:75:aa:cd:43:45:a2:ba:15:23: c1:35:b3:75:59:3e:d7:e4:32:03:10:60:79:c1:1d:59:d1:23: 02:a1:cd:83:c1:45:dc:b7:dc:d2:09:21:f8:f9:3e:48:e6:92: 70:cd:94:73:75:66:6d:77:8f:ad:f6:01:5d:01:4a:86:69:25: 55:1b:e8:9c:28:2a:36:7f:12:84:43:29:a6:67:85:14:1e:2c: 3b:d0:cc:41:7b:d2:4f:86:52:e5:c4:d9:86:32:c0:0e:9c:4d: 65:cb:07:fc:e0:ea:d0:bc:dc:c4:b2:32:10:6e:ce:d9:65:86: 7e:6f:f2:90:42:16:d8:6f:46:f4:c9:1e:3c:fa:06:59:33:9e: 2e:c0:86:cf:ab:76:98:13:a9:df:ab:2f:07:69:e3:5d:1e:74: 79:4a:5d:be:d6:00:b4:27:52:00:e6:a1:c4:23:41:17:18:42: d6:6b:be:60 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FU6K9QubczredPa41OACMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjYwMTAyMTQyMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjI4OWJjYzRiNDM4ZTkyYTcwZTczYjY2NjIxMDNiNzc5MWE1ZjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzr4GfklTd0Q+FcBlQm7u11mgwWt E8SOfVGCORomOHfVtsxX5IfE7H+21Kvy8zgrkgH5608iBjj+XROQsfoeoIlqx8Tc CiL27cqrNy82k1ReK+KY+uFj6lNTV5xjiwLhxoXYHVV0uoFzKtNZXn28RgdaE1nJ P3QSSkUCFt9PARbo+AKP8QdHgkDdoA1s2bgPBZMq7uYvEsVaSXZC740Ptku+INAy upfJ17apB3S8emyJhQDex7nxVqE7fdNbubfg0gO1wndwsUVxYl/ZAu3hERieHRtq sbD4E9IKFTk9ky0ZXKSFRiAwiquDFbcVFvgMsjh23CGiIkkgFi5MplSTywIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKsom8xLQ46Spw5ztmYhA7d5Gl8wMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvcXlpYnpFdERqcEtuRG5PMlppRUR0M2thWHpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwSxMAwQC wSysMA0GCSqGSIb3DQEBCwUAA4IBAQBjwseSaezleLwGBxSCsZ4X7FWs0wP/BVOV xW9b96qLv85ev83ktugXwWEwLi/7iEwvV6ztNCn67PTQeJWKOdbXOl+tnxfyIGIv 7SA12CYVXUl1qs1DRaK6FSPBNbN1WT7X5DIDEGB5wR1Z0SMCoc2DwUXct9zSCSH4 +T5I5pJwzZRzdWZtd4+t9gFdAUqGaSVVG+icKCo2fxKEQymmZ4UUHiw70MxBe9JP hlLlxNmGMsAOnE1lywf84OrQvNzEsjIQbs7ZZYZ+b/KQQhbYb0b0yR48+gZZM54u wIbPq3aYE6nfqy8HaeNdHnR5Sl2+1gC0J1IA5qHEI0EXGELWa75g -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:00 2026 by rpki-client