This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/QMJnhj9eUtot273579TURTBZh0I.roa File: QMJnhj9eUtot273579TURTBZh0I.roa (raw, json) Hash identifier: +DvyZkkKcp4VyvLUj2MDatf/EjxdGh2Y9geHq22gBBc= Subject key identifier: 40:C2:67:86:3F:5E:52:DA:2D:DB:BD:F9:EF:D4:D4:45:30:59:87:42 Certificate issuer: /CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6 Certificate serial: 019B7C1234344C90B09412D3A02714AFA6EC Authority key identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/QMJnhj9eUtot273579TURTBZh0I.roa Signing time: Fri 02 Jan 2026 00:18:46 +0000 ROA not before: Fri 02 Jan 2026 00:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47526 IP address blocks: 78.138.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:34:34:4c:90:b0:94:12:d3:a0:27:14:af:a6:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6 Validity Not Before: Jan 2 00:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40c267863f5e52da2ddbbdf9efd4d44530598742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:34:ea:70:5e:4f:bf:2a:1d:62:a7:61:47:4d: 0e:a9:aa:b5:99:bb:1b:da:18:00:6e:38:4c:e1:f0: 62:7d:68:b4:ca:4e:33:d9:cc:7b:2f:c9:14:3e:7e: 0d:16:d3:da:9c:3d:ed:86:3a:42:c2:1d:3d:f9:57: a5:ec:81:7b:39:e8:c5:f9:18:51:65:f4:68:0b:a1: 98:ee:b1:ce:de:aa:ff:c8:5e:73:b8:39:33:90:5a: 92:c1:3f:1d:a0:07:67:bf:fc:89:d6:ac:4d:35:f0: 7c:f0:83:ba:8d:d2:6b:d2:36:4a:ce:bf:1a:0c:d5: 10:83:ff:28:fb:af:78:da:8e:29:99:3a:c5:2a:5f: bf:1f:2a:f2:6c:41:c8:bf:3c:5d:47:60:17:28:a6: 65:1d:4f:28:3d:65:38:af:c2:ba:13:42:af:47:c1: f4:46:3b:89:a0:d1:56:77:9e:ee:15:2b:07:89:c0: aa:60:82:da:7f:b3:cd:79:2b:4a:a9:7e:48:a1:29: 1a:99:24:f3:46:f4:35:97:d6:bf:36:c1:a7:ff:09: be:94:05:14:90:b0:bb:d5:68:0a:28:92:01:fe:14: 6a:05:3c:cd:d8:ed:fd:7a:2d:44:45:0a:dd:5c:dd: e8:65:0f:01:c6:91:45:de:80:12:87:05:e8:99:56: 74:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C2:67:86:3F:5E:52:DA:2D:DB:BD:F9:EF:D4:D4:45:30:59:87:42 X509v3 Authority Key Identifier: keyid:04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/QMJnhj9eUtot273579TURTBZh0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.138.61.0/24 Signature Algorithm: sha256WithRSAEncryption 94:f0:f9:39:9e:91:1e:ac:a8:03:8a:aa:34:3c:d3:d2:30:31: e2:a9:c5:f3:bb:4b:da:5b:24:70:da:99:33:96:f2:11:1d:a1: c0:54:81:c3:b8:2e:c3:10:0e:12:ac:c6:6e:bf:ef:7b:eb:52: c7:c6:6c:95:79:32:4d:db:98:21:67:f9:6d:70:8e:ba:4f:5b: de:0d:a5:8c:50:ea:b9:3c:d0:79:18:73:2d:5f:64:aa:8b:ac: 23:8e:8d:bc:4c:4b:61:56:01:52:37:97:1d:4c:af:a8:67:b2: 42:c8:98:a1:a2:88:7a:e0:27:d8:11:c8:1e:20:2e:b7:68:44: 88:64:6c:f2:4c:51:49:d0:b2:4d:d3:b2:b4:72:02:49:b5:41: 42:67:c4:72:0a:be:13:6e:bc:ae:9c:fe:33:36:4f:bd:a6:c8: 42:42:03:66:06:09:f8:54:d1:e6:74:72:cc:ad:77:16:40:52: d5:d8:b7:7e:ef:d7:61:c3:ac:80:cf:28:7b:80:6b:b9:8f:60: 06:78:6e:99:bd:bb:0f:59:b6:4b:5d:b0:3c:d2:61:63:82:87: 68:ca:07:b8:69:d5:62:d5:25:aa:6d:bf:1a:f2:48:96:23:2b: 5b:d8:cd:09:d1:66:c4:a7:0b:2c:20:f7:8d:ff:bf:03:55:2a: bd:b1:5d:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EjQ0TJCwlBLToCcUr6bsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NDg4OTZhMWM0YWM5ZDgwMWJmMWQ2YjIwYmRlZjU5NzRk NWI0ZjYwHhcNMjYwMTAyMDAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGMyNjc4NjNmNWU1MmRhMmRkYmJkZjllZmQ0ZDQ0NTMwNTk4NzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTTqcF5PvyodYqdhR00Oqaq1mbsb 2hgAbjhM4fBifWi0yk4z2cx7L8kUPn4NFtPanD3thjpCwh09+Vel7IF7OejF+RhR ZfRoC6GY7rHO3qr/yF5zuDkzkFqSwT8doAdnv/yJ1qxNNfB88IO6jdJr0jZKzr8a DNUQg/8o+6942o4pmTrFKl+/HyrybEHIvzxdR2AXKKZlHU8oPWU4r8K6E0KvR8H0 RjuJoNFWd57uFSsHicCqYILaf7PNeStKqX5IoSkamSTzRvQ1l9a/NsGn/wm+lAUU kLC71WgKKJIB/hRqBTzN2O39ei1ERQrdXN3oZQ8BxpFF3oAShwXomVZ0AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEDCZ4Y/XlLaLdu9+e/U1EUwWYdCMB8GA1UdIwQY MBaAFARIiWocSsnYAb8dayC971l01bT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kNDQyNmItYWQyNS00NGYxLTk4YWYt YmNkZDEzNDk1MjkxLzEvUU1KbmhqOWVVdG90MjczNTc5VFVSVEJaaDBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9kNDQyNmItYWQyNS00NGYxLTk4YWYtYmNkZDEzNDk1Mjkx LzEvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAToo9MA0G CSqGSIb3DQEBCwUAA4IBAQCU8Pk5npEerKgDiqo0PNPSMDHiqcXzu0vaWyRw2pkz lvIRHaHAVIHDuC7DEA4SrMZuv+9761LHxmyVeTJN25ghZ/ltcI66T1veDaWMUOq5 PNB5GHMtX2Sqi6wjjo28TEthVgFSN5cdTK+oZ7JCyJihooh64CfYEcgeIC63aESI ZGzyTFFJ0LJN07K0cgJJtUFCZ8RyCr4TbryunP4zNk+9pshCQgNmBgn4VNHmdHLM rXcWQFLV2Ld+79dhw6yAzyh7gGu5j2AGeG6ZvbsPWbZLXbA80mFjgodoyge4adVi 1SWqbb8a8kiWIytb2M0J0WbEpwssIPeN/78DVSq9sV3E -----END CERTIFICATE-----Generated at Sun Jan 11 20:03:19 2026 by rpki-client