This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/QGZRCDSwJghAruwpHp5AZqQ40Jc.roa File: QGZRCDSwJghAruwpHp5AZqQ40Jc.roa (raw, json) Hash identifier: 5nKFsY9VRLC/UWBcPkGTvymLXYZi+vDPWqFl/w6W8ns= Subject key identifier: 40:66:51:08:34:B0:26:08:40:AE:EC:29:1E:9E:40:66:A4:38:D0:97 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B14E405473DE0E90CB0E052C33F4B Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/QGZRCDSwJghAruwpHp5AZqQ40Jc.roa Signing time: Fri 02 Jan 2026 06:17:59 +0000 ROA not before: Fri 02 Jan 2026 06:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60447 IP address blocks: 78.142.9.0/24 maxlen: 24 185.81.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:14:e4:05:47:3d:e0:e9:0c:b0:e0:52:c3:3f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4066510834b0260840aeec291e9e4066a438d097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6f:25:80:83:77:08:d7:ef:70:06:94:6a:10: 92:e8:3e:1e:3b:07:ac:79:f8:79:d5:10:b1:2d:98: 6b:c9:68:61:94:8f:a0:12:42:9f:ee:8f:be:b7:dc: f8:6f:31:c3:32:7d:62:11:65:28:c6:ea:a3:7c:b9: 12:3d:78:04:6e:ee:d7:f4:2c:ba:2b:0b:3d:5f:73: b6:03:f1:50:b6:73:73:bb:0d:9e:e7:21:e0:b6:3a: 7c:36:3a:10:af:ed:e2:8d:cf:98:95:e9:b1:62:8c: 8b:92:d4:08:05:0a:db:9b:f3:3e:d1:08:92:e3:96: bb:7e:4f:ba:a9:ac:8d:ec:21:d9:86:92:e4:9c:5b: 18:84:de:cf:01:0c:5d:a6:54:48:bd:67:39:94:7c: eb:5e:d1:cc:74:fd:a7:b6:a6:d6:9c:5d:04:b1:b3: 7a:a6:4f:d3:41:e7:09:08:60:e8:59:80:57:27:eb: 71:6f:62:be:5d:a3:de:75:77:e1:3b:cb:7b:df:2e: 75:a3:52:10:ec:ef:54:b7:36:f5:f5:ef:95:3d:a0: 4e:9b:9d:33:8b:c0:54:a9:13:d3:83:e3:93:ad:11: 83:30:4b:12:d5:2b:ed:41:7a:16:e8:3d:e2:80:ea: a3:9f:75:32:c6:63:2f:ee:f4:83:95:cf:bc:c6:8c: ae:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:66:51:08:34:B0:26:08:40:AE:EC:29:1E:9E:40:66:A4:38:D0:97 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/QGZRCDSwJghAruwpHp5AZqQ40Jc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.142.9.0/24 185.81.123.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:f4:de:b3:16:97:9f:69:83:24:cc:67:bb:6f:72:97:5d:29: bd:4b:5e:5e:5f:09:56:38:61:86:c9:66:f3:13:95:02:c5:e2: bb:ee:9a:18:25:2b:31:30:a7:05:bc:45:2a:80:1e:ee:c4:f2: 4d:01:14:eb:cd:7a:bf:df:ff:ca:79:71:80:e6:e8:e0:f1:b9: 59:3e:1d:58:15:56:54:09:88:81:41:06:c6:3e:ed:ef:48:36: 30:aa:7b:d3:fc:8c:2a:e5:4e:cb:cc:84:2a:1e:36:c4:02:45: 85:d5:25:5f:6d:44:17:59:a8:60:d4:0c:f5:6b:63:94:e8:58: 8f:4a:9a:af:f9:0e:7b:f1:79:56:fa:7f:96:5a:ea:d3:73:59: 3a:0a:14:43:5a:91:43:d8:d9:09:ba:5d:3c:f3:60:8c:d3:57: a4:45:f2:85:58:37:20:8f:e0:bb:b6:ba:54:41:64:4e:44:7a: 15:0a:e7:22:36:d3:6b:f1:b6:d4:58:ce:d2:7e:0e:bb:9d:47: a2:09:9d:c9:b9:ff:07:6c:e5:1d:2c:7e:16:f1:e6:1c:30:02: ce:74:3c:d5:4d:12:b0:7c:ce:3a:f5:eb:c4:14:2c:93:80:c4: 7d:0e:cf:e7:43:77:fd:c7:27:27:b9:3b:10:20:a0:6e:5a:f7: ce:d4:dc:d8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9WxTkBUc94OkMsOBSwz9LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDY2NTEwODM0YjAyNjA4NDBhZWVjMjkxZTllNDA2NmE0MzhkMDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm8lgIN3CNfvcAaUahCS6D4eOwes efh51RCxLZhryWhhlI+gEkKf7o++t9z4bzHDMn1iEWUoxuqjfLkSPXgEbu7X9Cy6 Kws9X3O2A/FQtnNzuw2e5yHgtjp8NjoQr+3ijc+YlemxYoyLktQIBQrbm/M+0QiS 45a7fk+6qayN7CHZhpLknFsYhN7PAQxdplRIvWc5lHzrXtHMdP2ntqbWnF0EsbN6 pk/TQecJCGDoWYBXJ+txb2K+XaPedXfhO8t73y51o1IQ7O9Utzb19e+VPaBOm50z i8BUqRPTg+OTrRGDMEsS1SvtQXoW6D3igOqjn3UyxmMv7vSDlc+8xoyuzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEBmUQg0sCYIQK7sKR6eQGakONCXMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvUUdaUkNEU3dKZ2hBcnV3cEhwNUFacVE0MEpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATo4JAwQA uVF7MA0GCSqGSIb3DQEBCwUAA4IBAQBd9N6zFpefaYMkzGe7b3KXXSm9S15eXwlW OGGGyWbzE5UCxeK77poYJSsxMKcFvEUqgB7uxPJNARTrzXq/3//KeXGA5ujg8blZ Ph1YFVZUCYiBQQbGPu3vSDYwqnvT/Iwq5U7LzIQqHjbEAkWF1SVfbUQXWahg1Az1 a2OU6FiPSpqv+Q578XlW+n+WWurTc1k6ChRDWpFD2NkJul0882CM01ekRfKFWDcg j+C7trpUQWRORHoVCuciNtNr8bbUWM7Sfg67nUeiCZ3Juf8HbOUdLH4W8eYcMALO dDzVTRKwfM469evEFCyTgMR9Ds/nQ3f9xycnuTsQIKBuWvfO1NzY -----END CERTIFICATE-----Generated at Fri Jan 23 18:49:08 2026 by rpki-client