This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/nqJ6Q3D61md2LC4-yJPH7bUWU4A.roa File: nqJ6Q3D61md2LC4-yJPH7bUWU4A.roa (raw, json) Hash identifier: sLTLPurFLTwE8YAq+DTkGVZv2q4SAYzP5ZK8/ib+u2M= Subject key identifier: 9E:A2:7A:43:70:FA:D6:67:76:2C:2E:3E:C8:93:C7:ED:B5:16:53:80 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 019B7910F20A42280704E153BF14E0DDCEB7 Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/nqJ6Q3D61md2LC4-yJPH7bUWU4A.roa Signing time: Thu 01 Jan 2026 10:18:32 +0000 ROA not before: Thu 01 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 158.172.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f2:0a:42:28:07:04:e1:53:bf:14:e0:dd:ce:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ea27a4370fad667762c2e3ec893c7edb5165380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:92:b3:45:ad:70:62:b6:34:f4:1f:2c:57:7e: a9:cf:ee:84:b8:ff:0c:95:39:b5:44:8b:44:4b:48: 6e:ee:df:de:56:68:4d:b2:db:ff:f6:69:45:13:3b: ae:21:a8:3b:89:28:ad:fb:ae:7b:90:52:36:ee:6d: 24:1b:9c:ad:a0:c4:c3:52:c3:02:33:2e:b8:12:99: ed:ea:e1:8d:25:16:e9:bf:36:56:55:9a:43:fc:09: a1:ed:fe:17:88:65:b6:fb:5d:c1:82:0b:5c:53:bd: 85:c7:d5:45:c5:59:c3:e7:e7:21:18:3a:89:08:04: da:c3:a3:ac:4d:49:32:38:6d:e4:23:5d:8c:c6:45: 24:ed:ff:af:36:f9:8e:26:0a:43:5f:63:89:fd:70: 46:3a:ad:d7:74:93:0f:2e:df:a2:34:b1:fb:3a:b2: dc:7a:0a:02:aa:f5:38:20:92:51:b1:9b:1a:c6:d8: fa:bb:07:ed:78:30:77:09:ca:f1:ee:d8:1f:8f:d9: 3e:6c:49:43:38:f8:97:5d:16:58:3a:8b:95:11:c4: 1a:c1:3f:81:ef:b8:49:db:0d:e2:e3:2b:05:2c:88: 05:84:f4:3e:61:8a:66:d8:00:c4:ac:c9:c4:e1:7a: 34:10:8f:18:2e:8d:fd:75:9a:d9:e0:d3:9e:05:87: d7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A2:7A:43:70:FA:D6:67:76:2C:2E:3E:C8:93:C7:ED:B5:16:53:80 X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/nqJ6Q3D61md2LC4-yJPH7bUWU4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.172.144.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:0b:2f:9f:a1:d1:19:e2:6d:20:d7:c6:a8:97:31:f5:8e:2e: 49:cb:85:28:16:4a:96:e0:9a:ef:35:39:67:37:88:34:e3:8d: 81:06:af:6b:e7:60:e9:64:64:60:b9:42:ac:85:2f:22:1a:86: e6:16:3d:73:ad:f0:19:90:70:08:7f:dc:6f:e0:95:23:b8:6e: d3:97:49:10:ea:17:eb:7a:63:bb:c5:9c:2d:41:9e:91:6f:d9: 99:86:71:e2:fc:8c:8b:db:0a:b5:9f:c1:fb:31:76:a5:de:7b: a9:fc:be:3e:a8:20:97:f7:89:7e:ea:87:7e:d0:e6:3a:da:af: 72:dc:ce:db:d0:bb:83:5b:2f:2a:21:11:c6:77:56:5e:f5:9c: f9:22:b3:35:c4:30:c5:3d:cb:d9:31:00:01:41:7a:89:ee:2e: d3:d1:77:38:36:d2:1e:c8:a0:50:77:40:1d:f2:5d:fb:aa:f3: 9d:06:61:8c:7b:a5:b0:a9:9b:15:81:01:6e:00:e2:4d:92:d2: 58:e1:e7:a3:26:0a:46:e6:65:28:80:c4:50:8e:54:92:75:c3: 79:3d:c4:96:27:b8:ac:3f:fe:8d:e2:5c:db:a4:95:f4:bc:8d: 59:18:e6:d9:bf:68:21:66:bf:0a:03:c1:63:66:c7:12:bd:14: 57:1b:17:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPIKQigHBOFTvxTg3c63MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWEyN2E0MzcwZmFkNjY3NzYyYzJlM2VjODkzYzdlZGI1MTY1MzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZKzRa1wYrY09B8sV36pz+6EuP8M lTm1RItES0hu7t/eVmhNstv/9mlFEzuuIag7iSit+657kFI27m0kG5ytoMTDUsMC My64Epnt6uGNJRbpvzZWVZpD/Amh7f4XiGW2+13BggtcU72Fx9VFxVnD5+chGDqJ CATaw6OsTUkyOG3kI12MxkUk7f+vNvmOJgpDX2OJ/XBGOq3XdJMPLt+iNLH7OrLc egoCqvU4IJJRsZsaxtj6uwfteDB3Ccrx7tgfj9k+bElDOPiXXRZYOouVEcQawT+B 77hJ2w3i4ysFLIgFhPQ+YYpm2ADErMnE4Xo0EI8YLo39dZrZ4NOeBYfXMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ6iekNw+tZndiwuPsiTx+21FlOAMB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvbnFKNlEzRDYxbWQyTEM0LXlKUEg3YlVXVTRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnqyQMA0G CSqGSIb3DQEBCwUAA4IBAQCbCy+fodEZ4m0g18aolzH1ji5Jy4UoFkqW4JrvNTln N4g0442BBq9r52DpZGRguUKshS8iGobmFj1zrfAZkHAIf9xv4JUjuG7Tl0kQ6hfr emO7xZwtQZ6Rb9mZhnHi/IyL2wq1n8H7MXal3nup/L4+qCCX94l+6od+0OY62q9y 3M7b0LuDWy8qIRHGd1Ze9Zz5IrM1xDDFPcvZMQABQXqJ7i7T0Xc4NtIeyKBQd0Ad 8l37qvOdBmGMe6WwqZsVgQFuAOJNktJY4eejJgpG5mUogMRQjlSSdcN5PcSWJ7is P/6N4lzbpJX0vI1ZGObZv2ghZr8KA8FjZscSvRRXGxd+ -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:33 2026 by rpki-client