This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/QwNY_gWYb7HjugQ_MNSu1LV5CP0.roa File: QwNY_gWYb7HjugQ_MNSu1LV5CP0.roa (raw, json) Hash identifier: W3MxzNBENzKeYyFLmM1/FOT24G17nWvs+8ycrfJQys0= Subject key identifier: 43:03:58:FE:05:98:6F:B1:E3:BA:04:3F:30:D4:AE:D4:B5:79:08:FD Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B0CFADEA1D2D581E4BBC8B660D818 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/QwNY_gWYb7HjugQ_MNSu1LV5CP0.roa Signing time: Fri 02 Jan 2026 06:17:57 +0000 ROA not before: Fri 02 Jan 2026 06:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45007 IP address blocks: 77.76.1.0/24 maxlen: 24 82.118.248.0/21 maxlen: 24 91.148.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:0c:fa:de:a1:d2:d5:81:e4:bb:c8:b6:60:d8:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=430358fe05986fb1e3ba043f30d4aed4b57908fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0c:49:bc:6e:15:3c:a4:a6:0f:66:a2:3e:42: 47:9e:12:b6:8b:ff:62:de:ce:40:2a:8d:41:cf:d7: c4:6f:c7:ea:97:73:9e:68:88:a8:ae:23:87:b1:60: b3:54:50:fc:5f:ad:e7:93:a0:20:e4:56:44:92:f9: 57:0c:82:b5:5a:0b:de:48:b2:35:26:11:df:7f:79: 13:87:f0:46:5a:49:fe:06:0b:34:00:4e:6b:d1:bb: 21:f4:12:36:e2:b6:92:74:ef:85:5e:39:fe:94:8e: 40:be:47:9c:5c:ab:cb:b3:b4:9a:d6:3d:88:1c:23: ce:06:0d:19:89:3a:ce:48:41:4b:03:f0:d5:95:34: d0:20:74:ac:b2:1a:2f:a2:6e:11:49:47:36:ec:2f: a8:1a:d9:52:f1:ee:45:d5:20:4d:fa:47:9d:98:61: 56:b8:bd:46:4f:97:e1:db:eb:ca:c2:26:eb:2a:a9: 87:20:df:bb:ef:30:04:19:74:84:d8:d8:7d:f8:fc: 7b:e1:ff:eb:da:b2:e3:bd:0f:e6:ac:e2:03:ce:d7: f3:30:31:8d:c7:ce:26:04:f6:b2:f0:8d:d1:95:6b: ec:ae:ba:bb:3d:89:99:93:06:5d:8f:7d:7f:32:1f: df:11:49:0c:9f:5a:15:13:a1:b6:c3:77:cb:70:60: 08:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:03:58:FE:05:98:6F:B1:E3:BA:04:3F:30:D4:AE:D4:B5:79:08:FD X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/QwNY_gWYb7HjugQ_MNSu1LV5CP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.76.1.0/24 82.118.248.0/21 91.148.144.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:3d:d5:ad:07:25:a1:63:76:51:ef:2b:ed:dc:a2:d8:30:46: 8e:b3:f5:4a:b2:31:2f:99:b7:38:c7:80:7e:75:55:e4:01:5c: 3c:67:93:61:0e:0b:e3:7b:08:df:27:71:33:24:71:6f:9e:69: fc:25:0b:19:7c:20:d1:18:d1:35:e5:df:cf:70:eb:bf:45:b8: 77:6f:83:2d:6e:8f:a2:c4:bf:77:01:92:9f:ac:9d:e7:79:a4: 9d:87:e2:9e:5e:17:68:78:94:dc:3d:35:ce:b3:2e:dc:9b:36: 17:8b:3c:7b:b6:b1:0c:11:b4:dc:c3:e0:5f:5a:1a:a6:2c:7a: 50:0c:a5:ef:0d:76:85:e5:56:dc:a4:55:92:93:3e:6c:f8:15: 18:67:51:16:f9:fb:82:41:e5:82:d8:b4:ee:fb:40:5b:c2:05: 90:79:b0:45:e9:e2:0d:d6:38:9b:a8:a5:2c:3c:3c:b6:59:26: ef:6b:a2:e9:04:e0:71:a7:9c:55:b2:4f:6a:34:46:6d:04:ef: 8c:11:61:10:7d:cb:74:c4:4e:55:c4:c8:eb:0f:2f:66:a4:b5: 2b:a3:15:cd:99:76:4e:ea:63:40:74:e5:fc:db:d8:de:24:56: 8c:bd:7f:a9:34:41:20:bf:29:c6:b0:a2:f4:fb:69:bf:17:0c: 06:73:b3:a2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9Wwz63qHS1YHku8i2YNgYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzAzNThmZTA1OTg2ZmIxZTNiYTA0M2YzMGQ0YWVkNGI1NzkwOGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAxJvG4VPKSmD2aiPkJHnhK2i/9i 3s5AKo1Bz9fEb8fql3OeaIioriOHsWCzVFD8X63nk6Ag5FZEkvlXDIK1WgveSLI1 JhHff3kTh/BGWkn+Bgs0AE5r0bsh9BI24raSdO+FXjn+lI5AvkecXKvLs7Sa1j2I HCPOBg0ZiTrOSEFLA/DVlTTQIHSsshovom4RSUc27C+oGtlS8e5F1SBN+kedmGFW uL1GT5fh2+vKwibrKqmHIN+77zAEGXSE2Nh9+Px74f/r2rLjvQ/mrOIDztfzMDGN x84mBPay8I3RlWvsrrq7PYmZkwZdj31/Mh/fEUkMn1oVE6G2w3fLcGAI0wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEMDWP4FmG+x47oEPzDUrtS1eQj9MB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvUXdOWV9nV1liN0hqdWdRX01OU3UxTFY1Q1AwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATUwBAwQD Unb4AwQCW5SQMA0GCSqGSIb3DQEBCwUAA4IBAQB6PdWtByWhY3ZR7yvt3KLYMEaO s/VKsjEvmbc4x4B+dVXkAVw8Z5NhDgvjewjfJ3EzJHFvnmn8JQsZfCDRGNE15d/P cOu/Rbh3b4Mtbo+ixL93AZKfrJ3neaSdh+KeXhdoeJTcPTXOsy7cmzYXizx7trEM EbTcw+BfWhqmLHpQDKXvDXaF5VbcpFWSkz5s+BUYZ1EW+fuCQeWC2LTu+0BbwgWQ ebBF6eIN1jibqKUsPDy2WSbva6LpBOBxp5xVsk9qNEZtBO+MEWEQfct0xE5VxMjr Dy9mpLUroxXNmXZO6mNAdOX829jeJFaMvX+pNEEgvynGsKL0+2m/FwwGc7Oi -----END CERTIFICATE-----Generated at Fri Jan 23 18:49:55 2026 by rpki-client