This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rQTNRcNQoBIZz6TxqruIdI0qEPQ.roa File: rQTNRcNQoBIZz6TxqruIdI0qEPQ.roa (raw, json) Hash identifier: nv+kXC1KM1qFXHIc+Bx/AvHHSYx+jQ37vVYtIJBYIuU= Subject key identifier: AD:04:CD:45:C3:50:A0:12:19:CF:A4:F1:AA:BB:88:74:8D:2A:10:F4 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C75D65DC6A4902E59207B9C139FDC4 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rQTNRcNQoBIZz6TxqruIdI0qEPQ.roa Signing time: Thu 01 Jan 2026 04:18:32 +0000 ROA not before: Thu 01 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8263 IP address blocks: 178.176.224.0/24 maxlen: 24 178.176.225.0/24 maxlen: 24 178.176.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5d:65:dc:6a:49:02:e5:92:07:b9:c1:39:fd:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad04cd45c350a01219cfa4f1aabb88748d2a10f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ed:a2:b1:75:f2:01:cf:e3:91:65:b0:4e:91: 0e:f9:9b:e2:1f:4b:f6:23:70:90:b6:15:d6:19:a1: 28:32:1b:fb:4d:3c:d2:33:41:f1:72:01:74:06:7a: 3e:11:c4:37:00:c6:99:d2:84:df:d1:31:97:fc:d4: 6c:ed:1c:f4:e3:79:46:be:3f:b8:d8:ea:78:1d:b5: df:86:02:f7:9c:69:38:e2:55:5d:e1:41:e4:b1:d7: fb:95:85:05:23:20:7a:d8:75:ec:0e:c9:8b:75:f1: 8d:66:bf:08:4f:24:64:e4:ea:1d:3d:83:71:1c:b8: ee:43:3c:e8:68:f6:3e:75:66:e8:47:ca:12:aa:16: ca:bb:42:41:46:54:e7:32:d7:31:db:e6:5e:d8:f6: 96:33:40:46:d2:a8:c3:e3:94:cf:ad:43:0c:1f:38: 1f:1e:83:5c:47:b5:14:d3:0c:63:79:32:94:d4:be: 13:ef:f5:cf:d2:86:be:ef:cf:e0:e0:af:c1:15:55: f7:5d:f1:9a:33:4d:f1:4a:3b:51:ff:7a:32:3e:a5: 32:45:18:76:75:0a:c9:a4:6d:a3:91:8c:d3:c6:ee: 8f:a9:b0:52:38:aa:03:dc:1a:a8:2f:d7:c2:c7:43: b4:b8:15:bc:34:07:d6:3b:47:f7:44:92:0e:71:5b: 12:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:04:CD:45:C3:50:A0:12:19:CF:A4:F1:AA:BB:88:74:8D:2A:10:F4 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rQTNRcNQoBIZz6TxqruIdI0qEPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.176.224.0-178.176.226.255 Signature Algorithm: sha256WithRSAEncryption 98:62:bc:ee:c2:85:23:11:99:19:ac:20:60:52:d0:ad:cd:8d: f3:4f:c0:1a:d1:49:c1:99:3e:c8:92:3e:5f:38:76:d3:cf:ed: 68:30:11:a8:fe:d8:d6:92:de:a4:5e:79:ca:78:c1:06:eb:5c: 2c:26:e4:29:c8:fd:8d:f6:65:e6:ef:e0:5d:65:27:da:f6:ac: 41:c3:e4:4a:48:b6:08:ed:fa:64:c4:3e:30:ae:36:18:36:fa: 2f:51:00:17:08:20:0a:c1:d0:4a:94:e8:68:e3:28:1f:cb:05: d4:8d:c6:f6:70:05:ef:35:30:42:00:27:1e:6d:7b:b3:c2:44: 50:23:6b:f7:c8:46:59:fb:c9:b3:e2:30:01:ac:83:e8:dc:9c: 33:b8:39:52:70:7b:3d:84:2e:c0:b6:e1:03:68:2d:4e:aa:37: 37:8b:4a:b1:3c:e8:45:5c:ff:91:fc:e5:37:51:9c:99:6b:53: b7:e0:fb:47:f3:d3:7f:92:22:36:da:5f:1f:96:d4:73:6a:d4: 1b:2e:20:d8:f9:71:f2:7e:93:16:93:52:a3:e9:d4:01:fd:27: 90:e1:ca:09:58:37:1a:80:53:5b:23:22:94:ce:74:89:61:b8: 05:3b:de:ed:58:c4:92:63:03:ea:37:e1:1f:84:f7:7a:fc:a7: 90:ad:ff:80 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3x11l3GpJAuWSB7nBOf3EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDA0Y2Q0NWMzNTBhMDEyMTljZmE0ZjFhYWJiODg3NDhkMmExMGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu2isXXyAc/jkWWwTpEO+ZviH0v2 I3CQthXWGaEoMhv7TTzSM0HxcgF0Bno+EcQ3AMaZ0oTf0TGX/NRs7Rz043lGvj+4 2Op4HbXfhgL3nGk44lVd4UHksdf7lYUFIyB62HXsDsmLdfGNZr8ITyRk5OodPYNx HLjuQzzoaPY+dWboR8oSqhbKu0JBRlTnMtcx2+Ze2PaWM0BG0qjD45TPrUMMHzgf HoNcR7UU0wxjeTKU1L4T7/XP0oa+78/g4K/BFVX3XfGaM03xSjtR/3oyPqUyRRh2 dQrJpG2jkYzTxu6PqbBSOKoD3BqoL9fCx0O0uBW8NAfWO0f3RJIOcVsS4wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFK0EzUXDUKASGc+k8aq7iHSNKhD0MB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvclFUTlJjTlFvQklaejZUeHFydUlkSTBxRVBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWysOAD BACysOIwDQYJKoZIhvcNAQELBQADggEBAJhivO7ChSMRmRmsIGBS0K3NjfNPwBrR ScGZPsiSPl84dtPP7WgwEaj+2NaS3qReecp4wQbrXCwm5CnI/Y32Zebv4F1lJ9r2 rEHD5EpItgjt+mTEPjCuNhg2+i9RABcIIArB0EqU6GjjKB/LBdSNxvZwBe81MEIA Jx5te7PCRFAja/fIRln7ybPiMAGsg+jcnDO4OVJwez2ELsC24QNoLU6qNzeLSrE8 6EVc/5H85TdRnJlrU7fg+0fz03+SIjbaXx+W1HNq1BsuINj5cfJ+kxaTUqPp1AH9 J5DhyglYNxqAU1sjIpTOdIlhuAU73u1YxJJjA+o34R+E93r8p5Ct/4A= -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:20 2026 by rpki-client