This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/QflYXaUD-g3LCXBxznlLEgMwObc.roa File: QflYXaUD-g3LCXBxznlLEgMwObc.roa (raw, json) Hash identifier: E6ybarhG9tgTOGHd0xcidG1Ick+pqOPemAPKimSqF/s= Subject key identifier: 41:F9:58:5D:A5:03:FA:0D:CB:09:70:71:CE:79:4B:12:03:30:39:B7 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B1685C5B3796EAB1F8A92B0D9AEF3 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/QflYXaUD-g3LCXBxznlLEgMwObc.roa Signing time: Fri 02 Jan 2026 06:18:00 +0000 ROA not before: Fri 02 Jan 2026 06:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197897 IP address blocks: 78.142.22.0/23 maxlen: 24 79.124.80.0/23 maxlen: 24 91.92.59.0/24 maxlen: 24 91.148.150.0/23 maxlen: 24 91.148.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:16:85:c5:b3:79:6e:ab:1f:8a:92:b0:d9:ae:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41f9585da503fa0dcb097071ce794b12033039b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:26:f4:df:9d:f1:02:32:a5:9c:87:7c:85:2c: c5:1d:80:6d:d2:9e:69:9a:b6:ee:d2:9b:db:8d:a4: 97:e1:e7:c7:c3:85:57:2a:4e:63:8f:26:dd:4e:32: 6a:d6:00:f6:7f:a2:b4:d6:39:09:4a:39:c0:1b:c0: 48:ba:b3:8a:d4:88:f2:22:b3:ab:b0:85:70:d1:fc: a2:d0:7f:3d:c4:d2:85:97:5c:16:93:0e:47:e7:37: d5:d3:8b:6c:e9:bf:2c:cf:08:53:52:59:7c:81:70: 53:2b:dc:6d:1a:05:e4:88:1f:3b:d3:17:55:24:26: 16:7f:94:e9:a6:25:9b:49:89:71:96:42:44:0a:8d: a6:67:b2:1d:33:fc:46:6c:15:f9:7b:35:58:42:c2: 6d:92:16:6e:a1:19:af:8e:35:01:d5:85:59:6a:cd: f3:d3:fa:04:83:2e:49:f3:7a:cb:6d:52:79:6a:68: 73:b6:16:9b:b6:6a:88:ed:ed:b8:7d:db:bb:7a:97: ce:f7:4d:d6:39:89:11:1f:2a:61:dc:17:e8:70:7c: 37:3f:3a:5b:cc:6d:1c:d4:d6:25:e0:64:ba:1b:d5: 89:ea:60:91:24:9d:39:78:14:96:52:11:27:ba:85: b6:1e:aa:11:2b:f4:01:73:63:4a:65:8f:7f:74:f0: f5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F9:58:5D:A5:03:FA:0D:CB:09:70:71:CE:79:4B:12:03:30:39:B7 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/QflYXaUD-g3LCXBxznlLEgMwObc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.142.22.0/23 79.124.80.0/23 91.92.59.0/24 91.148.150.0-91.148.159.255 Signature Algorithm: sha256WithRSAEncryption 51:5f:2c:aa:86:1c:cd:13:a1:99:fa:89:2f:e5:6d:ec:ca:ae: 77:81:07:83:f5:75:18:73:f1:5f:d1:85:02:83:9d:99:71:65: 86:2f:f3:eb:1c:a2:90:2f:96:d9:44:26:9c:85:ac:f0:b6:aa: 17:2f:3d:ab:3d:7d:e1:8d:77:d9:a5:c2:8e:b7:8c:43:45:a2: f2:27:4b:51:4a:1d:ea:2e:3f:31:cf:23:2b:d6:de:67:2a:96: 6e:47:1a:d4:49:32:04:49:5c:dc:3f:5b:ff:14:12:3d:a2:3e: 4f:1e:50:21:fd:a3:39:51:fc:3c:95:40:dc:17:08:a2:4b:4c: ee:87:e7:5b:6e:3e:98:99:41:5c:79:0d:16:42:e8:e7:ee:3e: 6a:65:31:c9:e5:ac:1a:9f:f0:ea:a9:d0:9c:ee:73:58:de:83: 75:05:4f:3a:02:f8:54:1d:e6:51:7d:43:c6:bf:f6:9f:d3:6f: 32:a0:f8:93:7b:f3:3e:0a:8c:ee:e0:68:c0:4e:38:bc:c7:55: f4:47:41:f0:c6:b7:dd:b5:19:1e:4c:9a:6a:06:d0:7a:26:c9: 42:48:04:54:4d:c0:c8:e0:57:28:29:f6:0f:41:99:6d:0c:6a: 15:ae:6f:b7:98:30:6a:7a:8e:fa:77:34:24:4a:f8:50:ac:de: 1d:49:3d:78 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt9WxaFxbN5bqsfipKw2a7zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWY5NTg1ZGE1MDNmYTBkY2IwOTcwNzFjZTc5NGIxMjAzMzAzOWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyb0353xAjKlnId8hSzFHYBt0p5p mrbu0pvbjaSX4efHw4VXKk5jjybdTjJq1gD2f6K01jkJSjnAG8BIurOK1IjyIrOr sIVw0fyi0H89xNKFl1wWkw5H5zfV04ts6b8szwhTUll8gXBTK9xtGgXkiB870xdV JCYWf5TppiWbSYlxlkJECo2mZ7IdM/xGbBX5ezVYQsJtkhZuoRmvjjUB1YVZas3z 0/oEgy5J83rLbVJ5amhzthabtmqI7e24fdu7epfO903WOYkRHyph3BfocHw3Pzpb zG0c1NYl4GS6G9WJ6mCRJJ05eBSWUhEnuoW2HqoRK/QBc2NKZY9/dPD1vQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFEH5WF2lA/oNywlwcc55SxIDMDm3MB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvUWZsWVhhVUQtZzNMQ1hCeHpubExFZ013T2JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBTo4WAwQB T3xQAwQAW1w7MAwDBAFblJYDBAVblIAwDQYJKoZIhvcNAQELBQADggEBAFFfLKqG HM0ToZn6iS/lbezKrneBB4P1dRhz8V/RhQKDnZlxZYYv8+scopAvltlEJpyFrPC2 qhcvPas9feGNd9mlwo63jENFovInS1FKHeouPzHPIyvW3mcqlm5HGtRJMgRJXNw/ W/8UEj2iPk8eUCH9ozlR/DyVQNwXCKJLTO6H51tuPpiZQVx5DRZC6OfuPmplMcnl rBqf8Oqp0Jzuc1jeg3UFTzoC+FQd5lF9Q8a/9p/TbzKg+JN78z4KjO7gaMBOOLzH VfRHQfDGt921GR5MmmoG0HomyUJIBFRNwMjgVygp9g9BmW0MahWub7eYMGp6jvp3 NCRK+FCs3h1JPXg= -----END CERTIFICATE-----Generated at Fri Jan 23 18:49:10 2026 by rpki-client