This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/qpk34mDsd5v7Y0ubOH3sgnCu1k0.roa File: qpk34mDsd5v7Y0ubOH3sgnCu1k0.roa (raw, json) Hash identifier: LvqNvv2Lz5h35XZCPQSi3qS3WQmqRhS1RNsSXCHnV38= Subject key identifier: AA:99:37:E2:60:EC:77:9B:FB:63:4B:9B:38:7D:EC:82:70:AE:D6:4D Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B775951818D670A1EAC6099CAA1B2DA9C Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/qpk34mDsd5v7Y0ubOH3sgnCu1k0.roa Signing time: Thu 01 Jan 2026 02:18:20 +0000 ROA not before: Thu 01 Jan 2026 02:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48556 IP address blocks: 188.241.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 02:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:51:81:8d:67:0a:1e:ac:60:99:ca:a1:b2:da:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa9937e260ec779bfb634b9b387dec8270aed64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cc:01:83:76:0c:5e:c8:46:3b:37:44:58:ac: f0:47:40:46:ca:d3:b8:35:48:4b:0d:02:cf:d4:85: ae:dc:2f:6d:a5:10:c9:4e:c4:e3:8b:fd:b5:76:c9: 97:10:92:88:ca:98:c2:0b:07:e6:d4:b3:aa:80:c4: 6c:f2:cb:f9:b5:b2:a8:e9:cd:c6:cf:de:55:b5:a9: e3:df:99:a6:97:9f:2b:58:c3:6c:7a:9f:aa:cb:46: 42:fe:59:39:6f:ab:41:9c:22:05:53:da:4b:45:1b: 58:fa:5d:78:df:3f:7d:55:d8:34:3c:62:bf:09:fa: 2e:e8:4d:9a:fc:0e:04:f9:f9:59:54:8f:1d:d7:63: ba:bb:a9:1a:c6:c4:70:a3:0e:82:d2:62:ae:fc:c0: eb:36:85:8e:e9:de:85:94:6f:78:1e:90:cb:3f:13: 81:b3:ea:84:cb:91:5b:39:c1:6a:b5:db:90:14:5c: 0e:28:28:9f:c0:a5:4e:30:8c:47:4c:92:d0:ae:e9: 5e:fc:2b:89:e8:0c:40:17:9e:ea:76:31:21:63:2b: 33:32:54:f4:dd:14:23:42:a4:4e:a3:35:b0:b9:ed: e9:96:08:ce:b8:1e:46:2e:1c:09:05:22:57:fb:22: 95:21:f1:f0:f6:80:9e:04:58:47:a1:40:c5:c4:d5: 73:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:99:37:E2:60:EC:77:9B:FB:63:4B:9B:38:7D:EC:82:70:AE:D6:4D X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/qpk34mDsd5v7Y0ubOH3sgnCu1k0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.241.109.0/24 Signature Algorithm: sha256WithRSAEncryption 81:cc:69:c1:cc:33:be:ef:f2:2a:90:44:c2:3d:cd:2c:ab:ed: 62:8f:58:1b:f0:3f:47:84:9f:73:0e:54:d8:84:d8:56:12:a8: 03:7a:d3:eb:63:ac:02:44:3e:38:d9:d3:f8:b6:22:07:4d:4d: ec:05:62:1a:b5:3f:cc:26:67:f5:a2:20:b9:66:23:99:d5:53: e2:04:ad:67:6a:74:42:21:87:f3:d3:f9:6a:08:df:f8:db:7a: a9:63:52:72:45:5e:c1:d2:96:70:8c:66:ee:07:97:b2:a9:a9: 9e:94:20:d6:84:be:b7:c2:97:62:30:c2:f3:3f:ee:b2:5b:3f: d1:5a:19:87:a7:8c:1e:d8:cb:cf:6e:00:b4:88:36:a1:76:15: 1f:4c:b3:4b:69:4c:61:24:14:19:79:df:17:98:b5:a2:50:16: a8:51:55:43:55:3a:c0:6f:b6:56:80:98:5f:bc:b1:9b:21:e8: 74:e5:7e:c6:e6:db:23:ad:db:77:11:d3:00:ce:96:ac:6e:e8: 59:c0:4e:ea:8b:82:ba:c6:31:e1:46:aa:b8:48:40:fb:eb:56: fe:cf:2a:a3:9f:a4:29:95:f6:3e:b1:dd:50:5b:fb:a2:2a:57: b9:97:ec:37:f8:7e:87:ce:e1:26:72:bf:78:4f:42:af:dd:b9: 21:54:36:fd -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WVGBjWcKHqxgmcqhstqcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTk5MzdlMjYwZWM3NzliZmI2MzRiOWIzODdkZWM4MjcwYWVkNjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMwBg3YMXshGOzdEWKzwR0BGytO4 NUhLDQLP1IWu3C9tpRDJTsTji/21dsmXEJKIypjCCwfm1LOqgMRs8sv5tbKo6c3G z95Vtanj35mml58rWMNsep+qy0ZC/lk5b6tBnCIFU9pLRRtY+l143z99Vdg0PGK/ Cfou6E2a/A4E+flZVI8d12O6u6kaxsRwow6C0mKu/MDrNoWO6d6FlG94HpDLPxOB s+qEy5FbOcFqtduQFFwOKCifwKVOMIxHTJLQrule/CuJ6AxAF57qdjEhYyszMlT0 3RQjQqROozWwue3plgjOuB5GLhwJBSJX+yKVIfHw9oCeBFhHoUDFxNVz9QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKqZN+Jg7Heb+2NLmzh97IJwrtZNMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL3FwazM0bURzZDV2N1kwdWJPSDNzZ25DdTFrMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC88W0w DQYJKoZIhvcNAQELBQADggEBAIHMacHMM77v8iqQRMI9zSyr7WKPWBvwP0eEn3MO VNiE2FYSqAN60+tjrAJEPjjZ0/i2IgdNTewFYhq1P8wmZ/WiILlmI5nVU+IErWdq dEIhh/PT+WoI3/jbeqljUnJFXsHSlnCMZu4Hl7KpqZ6UINaEvrfCl2IwwvM/7rJb P9FaGYenjB7Yy89uALSINqF2FR9Ms0tpTGEkFBl53xeYtaJQFqhRVUNVOsBvtlaA mF+8sZsh6HTlfsbm2yOt23cR0wDOlqxu6FnATuqLgrrGMeFGqrhIQPvrVv7PKqOf pCmV9j6x3VBb+6IqV7mX7Df4fofO4SZyv3hPQq/duSFUNv0= -----END CERTIFICATE-----Generated at Tue Jan 13 12:37:25 2026 by rpki-client