This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/qzbooROia3uha6MXEYAOH0kdxME.roa File: qzbooROia3uha6MXEYAOH0kdxME.roa (raw, json) Hash identifier: sG5D3DtzJ44qf5MrHONxM+rqszXmU4s08MlnXC6jiiw= Subject key identifier: AB:36:E8:A1:13:A2:6B:7B:A1:6B:A3:17:11:80:0E:1F:49:1D:C4:C1 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C1346B393596E608BF2F8B65F8EBE48 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/qzbooROia3uha6MXEYAOH0kdxME.roa Signing time: Fri 02 Jan 2026 00:19:56 +0000 ROA not before: Fri 02 Jan 2026 00:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273221 IP address blocks: 77.247.120.0/24 maxlen: 24 77.247.121.0/24 maxlen: 24 77.247.122.0/24 maxlen: 24 77.247.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:46:b3:93:59:6e:60:8b:f2:f8:b6:5f:8e:be:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab36e8a113a26b7ba16ba31711800e1f491dc4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:87:d2:b7:21:0a:60:f6:a2:b2:35:3e:21:0d: 19:98:c6:d9:7a:0a:13:0f:b6:b1:aa:80:7f:b6:48: db:c3:ee:f1:95:61:01:4a:e6:d0:8f:e9:d9:54:b1: 68:4d:90:14:4a:01:68:5d:7d:98:ce:5a:d9:da:64: e2:a3:2a:1e:f0:ca:c3:f6:08:fd:2a:98:b0:3d:a1: 03:99:d2:8d:7d:67:41:14:61:05:ca:8d:ce:47:ea: 17:9d:0a:77:77:7d:7c:27:70:49:3d:83:12:7b:1a: 49:8b:63:72:5c:98:97:7d:96:81:5b:65:9a:94:86: 2b:4e:5e:08:49:93:45:bc:46:90:d2:86:69:35:e1: 3e:1b:d1:a7:29:37:af:43:14:3d:86:cc:33:a3:ec: a7:37:c9:6a:01:96:50:e2:a4:d9:9e:bb:ec:73:fb: 0f:cd:92:4e:f5:6c:7b:10:7d:26:d6:ac:e9:17:c9: b6:8f:80:e2:07:95:8a:4b:a0:42:e1:fa:75:21:c7: e0:29:23:b4:54:19:5c:f6:23:f3:ed:07:94:75:68: e8:ce:67:e6:61:33:08:c1:26:e5:38:25:e2:64:ee: 6b:ba:5e:fa:ee:57:01:f6:b7:51:a0:b2:8a:7a:bc: 5a:ad:60:0c:5c:d8:66:98:6e:c9:2b:a2:75:43:32: c1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:36:E8:A1:13:A2:6B:7B:A1:6B:A3:17:11:80:0E:1F:49:1D:C4:C1 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/qzbooROia3uha6MXEYAOH0kdxME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.247.120.0/22 Signature Algorithm: sha256WithRSAEncryption a7:e6:ba:56:1a:38:83:13:f6:f1:f3:f2:ae:3b:54:f7:fd:25: 16:5b:cb:69:b1:f7:63:cc:0d:d0:89:be:a5:61:dd:84:8e:aa: 1c:3f:f1:a8:4b:55:e8:9f:22:76:35:9c:a5:6b:c9:ac:a5:85: 38:23:fe:6b:9e:af:77:ac:95:a9:20:56:65:f2:80:f1:eb:40: cb:07:86:de:08:15:90:7c:9a:ed:55:cc:d0:ed:3b:c5:15:89: 44:7f:a2:04:a0:e4:ec:73:75:a2:92:ec:a5:47:d4:05:b0:cf: 33:35:fe:98:a9:6d:27:b5:f4:94:84:c3:c4:0b:4c:3d:57:58: 7b:08:86:c9:3b:8f:b5:c7:8b:68:6d:f3:8b:f5:6f:51:98:6d: ab:28:1e:b9:bc:a5:cc:34:03:72:ce:72:ef:ae:30:3b:5b:7c: 78:1a:6c:3e:71:00:b1:15:8b:37:01:f6:be:09:f8:5e:d1:96: 09:46:3a:b5:97:c5:dc:1e:e1:e8:55:3b:76:c8:2b:40:62:16: cf:b4:d5:84:d3:0e:c7:d9:3a:b7:66:fa:84:01:e3:06:f0:20: 33:29:2f:9c:fd:39:bb:fe:af:c6:7f:f7:77:d5:d6:6e:bb:9d: 7e:96:a1:5b:3f:6a:1b:f0:40:c1:f3:6e:92:6c:93:60:13:b5: 92:fb:22:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0azk1luYIvy+LZfjr5IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjM2ZThhMTEzYTI2YjdiYTE2YmEzMTcxMTgwMGUxZjQ5MWRjNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ofStyEKYPaisjU+IQ0ZmMbZegoT D7axqoB/tkjbw+7xlWEBSubQj+nZVLFoTZAUSgFoXX2YzlrZ2mTioyoe8MrD9gj9 KpiwPaEDmdKNfWdBFGEFyo3OR+oXnQp3d318J3BJPYMSexpJi2NyXJiXfZaBW2Wa lIYrTl4ISZNFvEaQ0oZpNeE+G9GnKTevQxQ9hswzo+ynN8lqAZZQ4qTZnrvsc/sP zZJO9Wx7EH0m1qzpF8m2j4DiB5WKS6BC4fp1IcfgKSO0VBlc9iPz7QeUdWjozmfm YTMIwSblOCXiZO5rul767lcB9rdRoLKKerxarWAMXNhmmG7JK6J1QzLBHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKs26KETomt7oWujFxGADh9JHcTBMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvcXpib29ST2lhM3VoYTZNWEVZQU9IMGtkeE1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTfd4MA0G CSqGSIb3DQEBCwUAA4IBAQCn5rpWGjiDE/bx8/KuO1T3/SUWW8tpsfdjzA3Qib6l Yd2EjqocP/GoS1XonyJ2NZyla8mspYU4I/5rnq93rJWpIFZl8oDx60DLB4beCBWQ fJrtVczQ7TvFFYlEf6IEoOTsc3WikuylR9QFsM8zNf6YqW0ntfSUhMPEC0w9V1h7 CIbJO4+1x4tobfOL9W9RmG2rKB65vKXMNANyznLvrjA7W3x4Gmw+cQCxFYs3Afa+ Cfhe0ZYJRjq1l8XcHuHoVTt2yCtAYhbPtNWE0w7H2Tq3ZvqEAeMG8CAzKS+c/Tm7 /q/Gf/d31dZuu51+lqFbP2ob8EDB826SbJNgE7WS+yLP -----END CERTIFICATE-----Generated at Tue Jan 13 05:46:15 2026 by rpki-client