This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/qNfYJgeHbp_c1rHvm8vHn-PG4gc.roa File: qNfYJgeHbp_c1rHvm8vHn-PG4gc.roa (raw, json) Hash identifier: 5pBZUrrns9dTwDlF3HoakmH/Se8bTtm/RDN1dGGtBBY= Subject key identifier: A8:D7:D8:26:07:87:6E:9F:DC:D6:B1:EF:9B:CB:C7:9F:E3:C6:E2:07 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C805548A56F587355A7368CC596E9DD Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/qNfYJgeHbp_c1rHvm8vHn-PG4gc.roa Signing time: Fri 02 Jan 2026 02:19:03 +0000 ROA not before: Fri 02 Jan 2026 02:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47204 IP address blocks: 81.25.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:55:48:a5:6f:58:73:55:a7:36:8c:c5:96:e9:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8d7d82607876e9fdcd6b1ef9bcbc79fe3c6e207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cc:9e:55:40:b6:79:72:08:a2:20:a0:19:cb: b7:6e:f8:0a:6a:6b:c2:85:16:1b:d0:df:e0:68:55: 28:d9:2a:58:6b:23:1d:0d:15:00:dd:d8:68:a3:81: 7a:70:73:d6:85:c2:66:82:d1:39:dc:4a:22:2b:06: 75:87:94:b2:68:45:aa:48:c8:8f:e0:44:47:53:8e: 41:ee:5e:3b:18:2e:22:9f:51:d5:72:7b:0d:4e:f1: 9b:04:86:d1:10:45:41:47:e7:31:3c:dc:e9:b9:7e: f9:9a:57:ee:73:5c:b2:aa:24:b5:7f:93:33:24:30: 46:27:2a:6b:d6:dd:9d:da:65:3a:46:38:08:82:c6: 75:cd:fd:cd:39:4b:b3:af:49:ab:ee:a2:9c:d9:df: 64:2b:93:ec:13:63:df:ff:df:0f:4c:51:9a:6d:61: 21:57:0b:2c:97:2c:1e:a3:07:b4:1c:d3:b0:72:ef: 41:12:f3:d5:39:ad:54:01:70:af:fc:a1:fe:5c:3f: 91:0e:ff:bd:e3:bd:01:b9:75:7f:de:35:a7:c1:a0: b6:81:25:d5:f8:55:47:13:53:f6:48:d5:83:7b:ab: 99:5e:69:f4:c4:a4:5d:34:ff:71:b7:b3:41:e5:e3: 9c:34:45:02:0e:97:15:ad:91:bd:75:cb:43:00:db: 68:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D7:D8:26:07:87:6E:9F:DC:D6:B1:EF:9B:CB:C7:9F:E3:C6:E2:07 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/qNfYJgeHbp_c1rHvm8vHn-PG4gc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.25.71.0/24 Signature Algorithm: sha256WithRSAEncryption 74:d0:7a:ae:70:78:eb:24:4c:03:f6:81:d6:1d:d9:67:17:d8: 8e:a9:50:8e:73:93:23:e2:a2:55:04:93:18:be:8d:d0:86:7e: 52:e4:1c:d2:f0:25:28:7f:04:86:98:4b:86:4d:5a:a3:a7:d4: 4f:c9:f7:ac:99:f0:a1:21:a1:53:7e:24:cc:f2:ee:3a:cc:02: 74:dc:e9:3c:f1:62:0c:47:61:f3:12:b1:db:4e:5c:f7:5a:78: e6:ed:00:f5:c9:43:be:1c:95:2e:4d:98:68:ed:20:fe:4b:1e: ed:e7:aa:2a:ee:18:ca:53:2e:67:e5:d4:5a:37:84:b8:e2:5a: f9:97:6f:dd:a1:e1:cf:30:40:87:d4:4b:ad:f3:2f:11:4a:66: c5:b8:82:7f:ec:fe:51:1f:1d:15:ad:1b:f4:f7:e7:94:3c:cf: 4d:f8:9c:68:e5:c6:03:76:4a:5f:ce:38:2b:a5:38:77:e7:11: b1:41:d0:78:31:d7:f5:92:30:61:13:c3:70:6c:96:61:b6:f0: 10:ca:ba:06:79:22:ae:76:05:80:90:fc:eb:de:54:37:9b:e0: ec:9d:b7:b5:c2:b3:41:4b:92:c8:a3:41:3d:e7:a2:9b:ff:83: 85:ba:cf:13:fc:d7:ae:dd:07:6f:25:72:48:53:47:c6:9a:36: 1b:f0:1d:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gFVIpW9Yc1WnNozFlundMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGQ3ZDgyNjA3ODc2ZTlmZGNkNmIxZWY5YmNiYzc5ZmUzYzZlMjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMyeVUC2eXIIoiCgGcu3bvgKamvC hRYb0N/gaFUo2SpYayMdDRUA3dhoo4F6cHPWhcJmgtE53EoiKwZ1h5SyaEWqSMiP 4ERHU45B7l47GC4in1HVcnsNTvGbBIbREEVBR+cxPNzpuX75mlfuc1yyqiS1f5Mz JDBGJypr1t2d2mU6RjgIgsZ1zf3NOUuzr0mr7qKc2d9kK5PsE2Pf/98PTFGabWEh Vwsslyweowe0HNOwcu9BEvPVOa1UAXCv/KH+XD+RDv+9470BuXV/3jWnwaC2gSXV +FVHE1P2SNWDe6uZXmn0xKRdNP9xt7NB5eOcNEUCDpcVrZG9dctDANtodwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKjX2CYHh26f3Nax75vLx5/jxuIHMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvcU5mWUpnZUhicF9jMXJIdm04dkhuLVBHNGdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURlHMA0G CSqGSIb3DQEBCwUAA4IBAQB00HqucHjrJEwD9oHWHdlnF9iOqVCOc5Mj4qJVBJMY vo3Qhn5S5BzS8CUofwSGmEuGTVqjp9RPyfesmfChIaFTfiTM8u46zAJ03Ok88WIM R2HzErHbTlz3Wnjm7QD1yUO+HJUuTZho7SD+Sx7t56oq7hjKUy5n5dRaN4S44lr5 l2/doeHPMECH1Eut8y8RSmbFuIJ/7P5RHx0VrRv09+eUPM9N+Jxo5cYDdkpfzjgr pTh35xGxQdB4Mdf1kjBhE8NwbJZhtvAQyroGeSKudgWAkPzr3lQ3m+Dsnbe1wrNB S5LIo0E956Kb/4OFus8T/Neu3QdvJXJIU0fGmjYb8B3Z -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:47 2026 by rpki-client