This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/wqM2HbHUAexqGRCIytvhP-Jzu4U.roa File: wqM2HbHUAexqGRCIytvhP-Jzu4U.roa (raw, json) Hash identifier: HC7KYLDVfK5o/bx0neagw4IbqR4rFwFVqDH+H7VDweY= Subject key identifier: C2:A3:36:1D:B1:D4:01:EC:6A:19:10:88:CA:DB:E1:3F:E2:73:BB:85 Certificate issuer: /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a Certificate serial: 019B78A37538D7E4936476E20F0DD58E07A7 Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/wqM2HbHUAexqGRCIytvhP-Jzu4U.roa Signing time: Thu 01 Jan 2026 08:18:56 +0000 ROA not before: Thu 01 Jan 2026 08:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41998 IP address blocks: 178.212.90.0/23 maxlen: 23 178.212.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:75:38:d7:e4:93:64:76:e2:0f:0d:d5:8e:07:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2a3361db1d401ec6a191088cadbe13fe273bb85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2d:20:98:65:76:ad:98:f3:97:2e:31:b9:84: 71:5f:8c:58:e8:7d:a7:a8:30:bf:0f:2e:5b:46:1e: 8d:67:13:4c:cb:9f:2d:a0:6e:2c:fb:b6:09:8d:19: f2:d8:2f:80:e9:51:74:ad:a3:99:39:ba:dc:b9:8c: 72:3d:85:4a:e7:e3:4e:42:b8:68:6d:cd:fd:73:47: 20:a1:59:14:58:11:66:27:89:f9:da:eb:fb:05:ab: 8c:49:64:a9:df:2a:58:2c:0f:5c:78:78:79:8e:67: 1a:66:8a:36:5d:bf:f9:9a:ab:f0:61:17:25:08:7b: ff:11:b8:2c:19:2d:55:93:8c:2d:24:3c:8e:89:ae: fe:b1:d7:7a:0f:ae:ea:ba:c1:f3:fb:f7:2e:ca:2e: 68:d1:fb:c9:cc:64:cc:f3:02:b6:57:0c:63:6c:e0: 99:92:4f:ae:cc:6d:04:a2:da:fd:d6:8c:44:67:a8: 19:99:82:40:d8:74:ee:15:7f:83:fd:61:f3:f7:c2: 37:d0:5a:8c:12:1f:d4:2e:f3:0a:22:11:43:f0:ec: 50:d3:b4:b1:cc:55:ce:15:1e:70:b0:98:5a:89:af: a2:81:e5:d6:26:cb:de:f4:d4:31:ab:6c:ed:5e:cc: c3:b2:20:46:64:14:17:78:06:ce:ca:d0:bb:3a:50: 75:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A3:36:1D:B1:D4:01:EC:6A:19:10:88:CA:DB:E1:3F:E2:73:BB:85 X509v3 Authority Key Identifier: keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/wqM2HbHUAexqGRCIytvhP-Jzu4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.212.90.0/23 178.212.94.0/23 Signature Algorithm: sha256WithRSAEncryption 28:c4:d8:28:c8:44:11:3d:4e:55:bb:15:62:00:44:e7:d2:2f: 26:d8:86:71:76:4f:db:90:43:3c:15:64:73:0c:31:38:5b:b2: ee:fb:57:e1:f2:b6:dc:f1:e4:d7:a4:38:1c:fd:81:70:ff:67: 3b:4b:9e:b7:94:7c:58:f4:88:cf:48:81:4b:d6:f0:2c:b0:0e: dc:b7:c3:d5:c8:91:b9:40:2f:f0:34:db:c1:12:2e:dd:16:41: 7e:b8:5b:10:1c:ba:a5:22:eb:52:7c:b9:bb:ad:39:17:a6:80: 53:2a:02:de:95:8a:df:1d:90:61:8b:df:df:6b:cf:a0:fd:ff: c0:4d:8f:44:00:e9:33:a3:bf:4e:f9:ef:c8:91:dc:af:47:b5: 93:5b:88:83:b2:f8:09:b5:7d:09:f9:b4:db:59:0c:48:6d:56: 38:f1:7b:1a:b5:17:66:13:5b:9c:71:96:70:b8:c7:5a:47:54: a6:2d:bc:aa:2b:72:b2:ad:88:01:53:91:2f:80:63:23:47:51: 23:7b:f5:16:07:03:e8:e9:f4:e9:db:09:a7:cd:a6:0c:67:ea: 61:45:e4:54:e9:59:ff:c3:52:2d:d5:90:59:16:44:26:d7:d1: 47:c1:c1:d2:1e:78:b1:f7:5c:ee:2a:22:ed:f9:62:4c:10:5d: b5:51:46:1c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o3U41+STZHbiDw3VjgenMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1OWRhNGE4NjM4ZGJkZDZmYTQzYzI3ZDNhYzZlYzhkOWFj Yzg3OGEwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmEzMzYxZGIxZDQwMWVjNmExOTEwODhjYWRiZTEzZmUyNzNiYjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2y0gmGV2rZjzly4xuYRxX4xY6H2n qDC/Dy5bRh6NZxNMy58toG4s+7YJjRny2C+A6VF0raOZObrcuYxyPYVK5+NOQrho bc39c0cgoVkUWBFmJ4n52uv7BauMSWSp3ypYLA9ceHh5jmcaZoo2Xb/5mqvwYRcl CHv/EbgsGS1Vk4wtJDyOia7+sdd6D67qusHz+/cuyi5o0fvJzGTM8wK2VwxjbOCZ kk+uzG0Eotr91oxEZ6gZmYJA2HTuFX+D/WHz98I30FqMEh/ULvMKIhFD8OxQ07Sx zFXOFR5wsJhaia+igeXWJsve9NQxq2ztXszDsiBGZBQXeAbOytC7OlB1hQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMKjNh2x1AHsahkQiMrb4T/ic7uFMB8GA1UdIwQY MBaAFKWdpKhjjb3W+kPCfTrG7I2azIeKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzIt MGY2OGU1YmZmYzdkLzEvd3FNMkhiSFVBZXhxR1JDSXl0dmhQLUp6dTRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzItMGY2OGU1YmZmYzdk LzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBstRaAwQB stReMA0GCSqGSIb3DQEBCwUAA4IBAQAoxNgoyEQRPU5VuxViAETn0i8m2IZxdk/b kEM8FWRzDDE4W7Lu+1fh8rbc8eTXpDgc/YFw/2c7S563lHxY9IjPSIFL1vAssA7c t8PVyJG5QC/wNNvBEi7dFkF+uFsQHLqlIutSfLm7rTkXpoBTKgLelYrfHZBhi9/f a8+g/f/ATY9EAOkzo79O+e/IkdyvR7WTW4iDsvgJtX0J+bTbWQxIbVY48XsatRdm E1uccZZwuMdaR1SmLbyqK3KyrYgBU5EvgGMjR1Eje/UWBwPo6fTp2wmnzaYMZ+ph ReRU6Vn/w1It1ZBZFkQm19FHwcHSHnix91zuKiLt+WJMEF21UUYc -----END CERTIFICATE-----Generated at Sat Jan 10 21:11:08 2026 by rpki-client