This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/Qx0ddBKlSvnACpzjugQJrfWkEs4.roa File: Qx0ddBKlSvnACpzjugQJrfWkEs4.roa (raw, json) Hash identifier: aJD4jYhJCqk7+8Q4F//sAqddVJklJ5JHNsKetWjBmH4= Subject key identifier: 43:1D:1D:74:12:A5:4A:F9:C0:0A:9C:E3:BA:04:09:AD:F5:A4:12:CE Certificate issuer: /CN=8d8740799c91c2630a8092178db824f3a889a75f Certificate serial: 019B7A5B1640D0D83153F7CEC619DB544AE5 Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/Qx0ddBKlSvnACpzjugQJrfWkEs4.roa Signing time: Thu 01 Jan 2026 16:19:08 +0000 ROA not before: Thu 01 Jan 2026 16:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8649 IP address blocks: 176.96.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:16:40:d0:d8:31:53:f7:ce:c6:19:db:54:4a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f Validity Not Before: Jan 1 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=431d1d7412a54af9c00a9ce3ba0409adf5a412ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:9b:10:68:1c:64:82:fc:8b:75:c3:01:42: 5b:25:d8:3a:65:0b:be:0e:cd:76:17:98:a7:a6:11: 6d:83:0a:45:49:58:25:f7:d2:31:be:29:24:18:ea: 46:41:84:6e:d9:95:85:8a:77:83:92:42:e4:9d:2b: 2f:2e:61:41:a4:28:f1:e9:ce:fa:5c:7e:7e:a7:ca: cd:9e:dc:e7:c1:2b:5f:e5:4f:3f:5b:ec:7e:a3:16: 50:98:f6:d5:a3:c6:74:b1:6b:4f:2c:50:79:19:2c: e0:e0:f5:b0:72:4a:90:73:2b:e4:1e:2d:20:70:e4: 48:7e:42:e3:c4:19:bd:70:fa:f2:ce:86:ca:e0:98: 2d:13:7d:09:3f:02:e3:a2:e7:91:9d:4b:1d:24:6f: 33:b6:d5:cb:71:be:d1:1c:0c:59:dd:58:66:69:cb: 20:e3:1c:cc:73:b4:dd:cf:17:11:71:07:ab:3e:fa: 30:8d:97:ad:16:05:e5:7c:15:ee:07:75:78:0f:42: 99:0a:31:b9:7a:52:6f:4f:6c:c0:3c:19:27:d2:c1: a5:0c:16:54:df:7c:45:14:e5:2a:15:ee:d4:94:27: a5:69:13:44:c0:d7:b4:3e:36:4b:0d:92:f5:73:ea: d8:3b:83:c7:4f:5c:8c:7b:9c:74:6b:f0:d0:97:7c: 41:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1D:1D:74:12:A5:4A:F9:C0:0A:9C:E3:BA:04:09:AD:F5:A4:12:CE X509v3 Authority Key Identifier: keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/Qx0ddBKlSvnACpzjugQJrfWkEs4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.96.96.0/19 Signature Algorithm: sha256WithRSAEncryption 71:90:15:d8:d9:37:3c:03:68:6d:3f:b3:0a:11:5c:98:bf:b1: ad:71:9c:79:f5:ea:08:ca:bd:cc:dc:2f:bc:67:a1:b8:48:a3: a5:74:dc:a8:42:63:aa:c2:b3:49:16:5a:83:1f:4a:4a:92:de: d5:5e:22:39:fd:5e:36:0c:7b:94:8f:5b:0c:ad:17:70:10:d0: 67:f1:87:d3:03:db:1e:e2:5f:cd:67:25:bb:d0:15:13:aa:c7: 07:e9:50:5b:69:b8:e4:b7:58:16:b9:c2:f5:f4:e3:6f:05:c7: b4:74:ed:86:14:01:82:0c:3c:51:cd:4e:a5:a9:ed:7e:fa:96: ac:d0:48:3d:8d:af:d1:2e:ca:cf:e6:fe:57:97:45:09:de:21: aa:08:30:96:c2:03:ab:c0:05:02:b1:6b:90:44:48:d9:16:58: 63:28:b1:55:32:28:84:e4:c0:fc:1d:77:87:69:2a:74:96:f6: ac:f7:4c:ec:ed:d9:14:70:f1:6a:f4:f2:01:a8:bf:7b:28:f6: 30:75:8e:32:d0:bf:96:cf:16:c7:fd:63:c2:06:2f:73:9f:79: e8:b4:a6:dc:fc:13:43:44:6e:2d:06:ef:49:7d:41:01:fc:80: 13:33:6b:99:ef:f0:2c:58:62:4b:a2:98:ea:9f:5f:3c:83:31: e5:ac:02:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WxZA0NgxU/fOxhnbVErlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODc0MDc5OWM5MWMyNjMwYTgwOTIxNzhkYjgyNGYzYTg4 OWE3NWYwHhcNMjYwMTAxMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzFkMWQ3NDEyYTU0YWY5YzAwYTljZTNiYTA0MDlhZGY1YTQxMmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7ubEGgcZIL8i3XDAUJbJdg6ZQu+ Ds12F5inphFtgwpFSVgl99IxvikkGOpGQYRu2ZWFineDkkLknSsvLmFBpCjx6c76 XH5+p8rNntznwStf5U8/W+x+oxZQmPbVo8Z0sWtPLFB5GSzg4PWwckqQcyvkHi0g cORIfkLjxBm9cPryzobK4JgtE30JPwLjoueRnUsdJG8zttXLcb7RHAxZ3Vhmacsg 4xzMc7TdzxcRcQerPvowjZetFgXlfBXuB3V4D0KZCjG5elJvT2zAPBkn0sGlDBZU 33xFFOUqFe7UlCelaRNEwNe0PjZLDZL1c+rYO4PHT1yMe5x0a/DQl3xBOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEMdHXQSpUr5wAqc47oECa31pBLOMB8GA1UdIwQY MBaAFI2HQHmckcJjCoCSF424JPOoiadfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallkQWVaeVJ3bU1LZ0pJWGpiZ2s4NmlKcDE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YjdjOTQtYTYwZC00Mzk5LTk4Mjkt NTJiODE2NjgyOWQ3LzEvUXgwZGRCS2xTdm5BQ3B6anVnUUpyZldrRXM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy81YjdjOTQtYTYwZC00Mzk5LTk4MjktNTJiODE2NjgyOWQ3 LzEvallkQWVaeVJ3bU1LZ0pJWGpiZ2s4NmlKcDE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFsGBgMA0G CSqGSIb3DQEBCwUAA4IBAQBxkBXY2Tc8A2htP7MKEVyYv7GtcZx59eoIyr3M3C+8 Z6G4SKOldNyoQmOqwrNJFlqDH0pKkt7VXiI5/V42DHuUj1sMrRdwENBn8YfTA9se 4l/NZyW70BUTqscH6VBbabjkt1gWucL19ONvBce0dO2GFAGCDDxRzU6lqe1++pas 0Eg9ja/RLsrP5v5Xl0UJ3iGqCDCWwgOrwAUCsWuQREjZFlhjKLFVMiiE5MD8HXeH aSp0lvas90zs7dkUcPFq9PIBqL97KPYwdY4y0L+WzxbH/WPCBi9zn3notKbc/BND RG4tBu9JfUEB/IATM2uZ7/AsWGJLopjqn188gzHlrALH -----END CERTIFICATE-----Generated at Fri Jan 2 11:29:02 2026 by rpki-client