This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/r_qY6TIFDc-2C46p1mCYOq9l7j4.roa File: r_qY6TIFDc-2C46p1mCYOq9l7j4.roa (raw, json) Hash identifier: eoGRneGgUw90MpEMiAODUHzFCL/oN3PFTCCGwv4cx5g= Subject key identifier: AF:FA:98:E9:32:05:0D:CF:B6:0B:8E:A9:D6:60:98:3A:AF:65:EE:3E Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1 Certificate serial: 019B76EB1ACBA0C2A7314854D96B6056A6DE Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/r_qY6TIFDc-2C46p1mCYOq9l7j4.roa Signing time: Thu 01 Jan 2026 00:17:57 +0000 ROA not before: Thu 01 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200325 IP address blocks: 91.200.176.0/24 maxlen: 24 107.150.176.0/24 maxlen: 24 109.104.146.0/23 maxlen: 24 109.224.228.0/22 maxlen: 24 193.162.131.0/24 maxlen: 24 212.104.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1a:cb:a0:c2:a7:31:48:54:d9:6b:60:56:a6:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=affa98e932050dcfb60b8ea9d660983aaf65ee3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:54:52:0b:11:b7:51:f9:e6:ff:ba:23:8a: 14:6d:be:fb:7c:29:a3:d0:61:ad:f1:e9:f6:32:d2: 98:8c:5d:fe:c4:19:fc:cb:3c:8c:72:4a:b5:bd:39: cf:f4:bb:80:73:17:a5:08:86:9f:99:ac:0b:3b:63: 4b:96:5a:66:22:58:16:f4:5a:58:e8:17:89:0c:fe: 46:50:9f:46:54:9a:7f:de:d8:de:f7:85:59:94:7c: eb:1f:73:ea:dd:1e:10:0e:99:db:37:19:aa:eb:00: af:59:48:c5:b4:96:f0:ee:76:4e:30:92:66:7a:3d: fc:91:a2:98:d7:18:62:58:50:21:84:eb:af:bd:86: 93:e3:24:43:44:75:9e:55:9d:19:58:3a:08:c7:d7: 9c:d6:49:94:f4:0d:d0:76:dd:b7:c8:48:3a:db:52: 09:9e:2c:d9:cd:da:c6:a6:28:65:cd:c2:8b:6d:6d: 1b:5f:63:2f:2f:63:88:c0:3f:df:ba:ba:8c:d2:6d: 0a:50:e0:b8:3a:0c:90:d3:7a:1d:33:78:75:08:7b: 23:90:fb:e9:e8:c8:ca:9b:3b:d2:3a:62:28:a6:ec: 92:a4:c3:b6:b6:10:df:d1:43:92:c9:93:bd:fd:65: fd:48:5b:c7:40:0a:ae:2d:44:5e:45:07:b9:53:03: 1d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FA:98:E9:32:05:0D:CF:B6:0B:8E:A9:D6:60:98:3A:AF:65:EE:3E X509v3 Authority Key Identifier: keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/r_qY6TIFDc-2C46p1mCYOq9l7j4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.176.0/24 107.150.176.0/24 109.104.146.0/23 109.224.228.0/22 193.162.131.0/24 212.104.158.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:5c:70:8d:20:26:61:b1:3e:2a:1b:a8:dd:6e:97:cd:19:f6: 01:d5:57:70:9d:20:a3:08:5b:79:1d:fa:70:85:09:e9:e6:dc: 82:88:d6:32:d1:ae:67:ad:ee:e2:fe:03:58:79:21:94:3f:82: 2e:49:ee:8f:b3:38:81:55:64:0f:45:63:57:0c:b5:12:65:00: 05:00:50:a7:08:34:3c:92:f3:94:7b:5d:56:dd:85:24:40:31: 9c:24:20:f6:ee:56:48:bc:9c:ae:66:0c:36:04:8f:8e:99:ca: df:c9:2c:f4:fb:34:4c:9f:b7:6e:17:18:36:3d:c7:ba:ef:fa: b0:36:90:a6:d6:00:87:ef:9d:20:b9:8e:d9:b8:5a:7b:b1:24: 74:7c:e4:5b:2b:84:5d:df:31:55:10:27:a2:66:14:48:c4:94: 32:12:b0:0d:ed:5f:b0:88:f4:66:4d:bc:7d:15:83:83:16:6f: 48:28:c5:b3:88:03:12:23:f1:6f:a8:e0:60:24:48:30:2e:e3: 92:8b:0c:09:b6:91:1c:99:4c:74:c2:4e:a0:5f:8d:c4:f1:a0: aa:03:e8:d6:e4:5e:97:76:aa:02:4b:97:ad:78:18:d3:29:2e: 94:53:cc:aa:1e:12:9c:1c:85:51:13:0a:97:4f:a8:4e:0e:e7: 3a:90:56:35 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt26xrLoMKnMUhU2WtgVqbeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNzAyYTYxNmMwNDk0MWUyYzlmMDcxNjUxZTQ5YzVkZjNh ZWQwYjEwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmZhOThlOTMyMDUwZGNmYjYwYjhlYTlkNjYwOTgzYWFmNjVlZTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwftUUgsRt1H55v+6I4oUbb77fCmj 0GGt8en2MtKYjF3+xBn8yzyMckq1vTnP9LuAcxelCIafmawLO2NLllpmIlgW9FpY 6BeJDP5GUJ9GVJp/3tje94VZlHzrH3Pq3R4QDpnbNxmq6wCvWUjFtJbw7nZOMJJm ej38kaKY1xhiWFAhhOuvvYaT4yRDRHWeVZ0ZWDoIx9ec1kmU9A3Qdt23yEg621IJ nizZzdrGpihlzcKLbW0bX2MvL2OIwD/furqM0m0KUOC4OgyQ03odM3h1CHsjkPvp 6MjKmzvSOmIopuySpMO2thDf0UOSyZO9/WX9SFvHQAquLUReRQe5UwMdWwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFK/6mOkyBQ3PtguOqdZgmDqvZe4+MB8GA1UdIwQY MBaAFI5wKmFsBJQeLJ8HFlHknF3zrtCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yYjg4NzctZTUyMy00ZTljLTlmYzMt Y2Q2MGM4OTEwMDFiLzEvcl9xWTZUSUZEYy0yQzQ2cDFtQ1lPcTlsN2o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8yYjg4NzctZTUyMy00ZTljLTlmYzMtY2Q2MGM4OTEwMDFi LzEvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAW8iwAwQA a5awAwQBbWiSAwQCbeDkAwQAwaKDAwQA1GieMA0GCSqGSIb3DQEBCwUAA4IBAQBO XHCNICZhsT4qG6jdbpfNGfYB1VdwnSCjCFt5HfpwhQnp5tyCiNYy0a5nre7i/gNY eSGUP4IuSe6PsziBVWQPRWNXDLUSZQAFAFCnCDQ8kvOUe11W3YUkQDGcJCD27lZI vJyuZgw2BI+OmcrfySz0+zRMn7duFxg2Pce67/qwNpCm1gCH750guY7ZuFp7sSR0 fORbK4Rd3zFVECeiZhRIxJQyErAN7V+wiPRmTbx9FYODFm9IKMWziAMSI/FvqOBg JEgwLuOSiwwJtpEcmUx0wk6gX43E8aCqA+jW5F6XdqoCS5eteBjTKS6UU8yqHhKc HIVREwqXT6hODuc6kFY1 -----END CERTIFICATE-----Generated at Sun Jan 25 16:36:24 2026 by rpki-client