This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/qoYEAqhri4bUdYVpI1skjqF8iFo.roa File: qoYEAqhri4bUdYVpI1skjqF8iFo.roa (raw, json) Hash identifier: XRgJrR2oLoLBzNI7/ZXQmYkUAt4y3ZosqwuZaOVv078= Subject key identifier: AA:86:04:02:A8:6B:8B:86:D4:75:85:69:23:5B:24:8E:A1:7C:88:5A Certificate issuer: /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9 Certificate serial: 019B79110FF7C13B60FD6448086DBFAD6854 Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/qoYEAqhri4bUdYVpI1skjqF8iFo.roa Signing time: Thu 01 Jan 2026 10:18:39 +0000 ROA not before: Thu 01 Jan 2026 10:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200868 IP address blocks: 213.181.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:0f:f7:c1:3b:60:fd:64:48:08:6d:bf:ad:68:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9 Validity Not Before: Jan 1 10:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa860402a86b8b86d4758569235b248ea17c885a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:21:fb:5d:f0:72:4f:d4:33:7e:df:4f:43:c2: 61:c0:12:fc:50:f7:65:3e:e5:52:9c:88:0e:cc:33: de:6c:3b:a4:1d:c5:a1:8a:00:45:55:47:35:47:77: ff:01:a9:49:4d:e2:54:e8:41:0d:ac:b4:a5:d0:6d: ba:4c:ec:b9:17:26:1d:c7:e4:0e:30:46:34:95:35: 1f:4a:85:09:d1:e1:94:19:df:c0:d2:b9:fa:6e:f7: 1a:84:f3:26:78:d8:19:55:1a:f5:28:14:1f:d2:1a: 42:83:40:3d:ee:69:da:35:d6:5d:b9:d7:85:df:18: e0:d8:58:f7:b1:ba:0e:3e:84:be:35:f8:f7:b5:3b: 66:c8:0b:ad:5f:2e:f8:8d:e8:4c:90:a1:c2:ba:2a: 1e:24:b7:d9:04:65:59:c4:5c:1d:c6:01:b3:8a:0c: 1f:b3:a2:dd:66:11:c3:78:94:bb:7f:70:3c:97:c6: 6f:33:3d:d5:b0:34:01:58:69:17:29:d0:c2:19:ef: 14:5b:89:2d:28:03:eb:a9:38:9c:f1:53:3c:8a:3f: aa:2b:da:bb:43:44:7e:d5:06:82:e9:af:51:40:29: ab:6f:a6:f2:93:2d:8f:d7:47:38:3f:2b:17:ac:bb: ec:23:75:bd:09:f5:72:85:99:ea:26:a4:f8:38:36: f8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:86:04:02:A8:6B:8B:86:D4:75:85:69:23:5B:24:8E:A1:7C:88:5A X509v3 Authority Key Identifier: keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/qoYEAqhri4bUdYVpI1skjqF8iFo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.181.126.0/23 Signature Algorithm: sha256WithRSAEncryption a1:9f:e3:f7:f6:03:85:04:17:69:29:69:d3:a7:19:78:9a:7a: 96:3a:ea:7d:a0:5d:c6:dd:25:b0:58:04:7a:a5:b7:5e:d4:cb: 90:a8:c8:46:8a:0c:51:bb:06:bd:28:36:0b:29:28:b1:30:22: 39:8d:e8:6e:db:9b:62:91:cb:03:f7:a9:be:f7:a7:8a:13:88: b7:2e:cd:46:dd:a3:34:e1:90:67:3b:f2:f8:e1:69:fd:52:07: 3b:d8:f5:b3:e7:ea:b6:38:98:8b:f3:66:22:79:24:c3:1a:6d: 90:93:1f:8e:c2:94:be:29:51:ae:d0:8c:05:4e:3b:6f:8c:55: 72:ca:11:a8:00:2f:bc:08:d2:b4:af:14:04:d9:65:78:0e:f7: 9e:2a:37:bd:8d:71:9b:09:31:ce:d3:be:82:2a:75:7c:dd:b0: b3:24:9b:1d:64:91:da:38:ec:1b:20:65:d0:0c:98:2c:0e:51: e3:d8:b3:3a:87:ca:17:32:25:f5:92:e2:6b:3c:51:86:ed:b2: 72:b8:49:3e:be:f4:bf:ca:2a:87:dc:49:59:fd:c4:cf:f1:eb: 84:e7:ea:3d:4f:77:63:44:16:a2:01:4e:f0:ab:38:54:61:cc: fd:3c:98:28:0d:7f:3b:4f:9a:df:c5:8c:ae:68:b4:42:d3:bc: fb:84:16:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EQ/3wTtg/WRICG2/rWhUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYTc5NTE2N2QyZDlmYjQyMDk0MWYxNzI4N2JkZjNjNWVl ZDhkZjkwHhcNMjYwMTAxMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTg2MDQwMmE4NmI4Yjg2ZDQ3NTg1NjkyMzViMjQ4ZWExN2M4ODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCH7XfByT9Qzft9PQ8JhwBL8UPdl PuVSnIgOzDPebDukHcWhigBFVUc1R3f/AalJTeJU6EENrLSl0G26TOy5FyYdx+QO MEY0lTUfSoUJ0eGUGd/A0rn6bvcahPMmeNgZVRr1KBQf0hpCg0A97mnaNdZdudeF 3xjg2Fj3sboOPoS+Nfj3tTtmyAutXy74jehMkKHCuioeJLfZBGVZxFwdxgGzigwf s6LdZhHDeJS7f3A8l8ZvMz3VsDQBWGkXKdDCGe8UW4ktKAPrqTic8VM8ij+qK9q7 Q0R+1QaC6a9RQCmrb6byky2P10c4PysXrLvsI3W9CfVyhZnqJqT4ODb4ZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKqGBAKoa4uG1HWFaSNbJI6hfIhaMB8GA1UdIwQY MBaAFB+nlRZ9LZ+0IJQfFyh73zxe7Y35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDZlVkZuMHRuN1FnbEI4WEtIdmZQRjd0amZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MzUzNWEtZTFiZC00ZmI3LTlmMDkt N2I3ZTk3NmM4NDEyLzEvcW9ZRUFxaHJpNGJVZFlWcEkxc2tqcUY4aUZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84MzUzNWEtZTFiZC00ZmI3LTlmMDktN2I3ZTk3NmM4NDEy LzEvSDZlVkZuMHRuN1FnbEI4WEtIdmZQRjd0amZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1bV+MA0G CSqGSIb3DQEBCwUAA4IBAQChn+P39gOFBBdpKWnTpxl4mnqWOup9oF3G3SWwWAR6 pbde1MuQqMhGigxRuwa9KDYLKSixMCI5jehu25tikcsD96m+96eKE4i3Ls1G3aM0 4ZBnO/L44Wn9Ugc72PWz5+q2OJiL82YieSTDGm2Qkx+OwpS+KVGu0IwFTjtvjFVy yhGoAC+8CNK0rxQE2WV4DveeKje9jXGbCTHO076CKnV83bCzJJsdZJHaOOwbIGXQ DJgsDlHj2LM6h8oXMiX1kuJrPFGG7bJyuEk+vvS/yiqH3ElZ/cTP8euE5+o9T3dj RBaiAU7wqzhUYcz9PJgoDX87T5rfxYyuaLRC07z7hBaT -----END CERTIFICATE-----Generated at Mon Jan 26 10:16:10 2026 by rpki-client