This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/qCX4Nwq8L2ggxHkmAxf-JA-5ikI.roa File: qCX4Nwq8L2ggxHkmAxf-JA-5ikI.roa (raw, json) Hash identifier: qXduII4d30JtP+adIU7AwrL+p478Kg6zyu4lMAX0zfQ= Subject key identifier: A8:25:F8:37:0A:BC:2F:68:20:C4:79:26:03:17:FE:24:0F:B9:8A:42 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B1AD456CF7590D3DFD21B2EF0486E Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/qCX4Nwq8L2ggxHkmAxf-JA-5ikI.roa Signing time: Fri 02 Jan 2026 06:18:01 +0000 ROA not before: Fri 02 Jan 2026 06:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202309 IP address blocks: 62.68.70.0/24 maxlen: 24 78.128.123.0/24 maxlen: 24 79.124.42.0/23 maxlen: 24 80.72.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:1a:d4:56:cf:75:90:d3:df:d2:1b:2e:f0:48:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a825f8370abc2f6820c479260317fe240fb98a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:18:1b:4e:81:d8:7b:34:2a:49:20:62:34:b9: f9:46:04:13:fd:da:de:50:c8:bd:7c:20:61:aa:5e: f1:6b:76:d3:11:99:d3:10:ee:9e:39:ba:88:d7:e8: 35:ce:f0:06:f1:23:98:2b:3e:78:2b:79:48:94:d8: 05:61:a5:cc:e6:b9:b7:e7:31:22:03:77:a6:e1:7e: f1:06:a2:3e:30:53:70:40:95:ae:5e:e2:b2:61:d6: 46:d3:b8:81:72:5d:c9:e1:04:d0:31:c7:1c:37:62: 7a:d5:15:14:b5:7b:78:6b:9b:1f:e5:08:65:89:db: fd:83:a7:17:65:99:0c:13:45:f4:54:be:58:b7:ab: 8d:29:e0:fb:a8:b5:a0:40:b3:48:df:b7:65:56:29: 38:ce:54:e2:99:3d:b7:a0:b4:37:a6:20:2b:7e:b9: 65:f5:ae:47:f5:ad:70:f2:6a:c0:f6:32:68:f6:34: 65:e8:ed:b2:0b:2e:3f:a1:ea:1b:65:39:92:f0:a8: c1:3a:1b:f6:36:ff:44:02:59:6e:38:be:3e:08:ea: 0c:fb:a1:74:82:8c:1f:d7:15:6e:21:91:1e:dc:54: bf:03:ac:46:29:37:fa:5b:c4:7e:26:80:db:fd:bb: 75:f9:9e:1f:81:52:71:13:e8:ee:d7:0b:77:07:8d: 3f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:25:F8:37:0A:BC:2F:68:20:C4:79:26:03:17:FE:24:0F:B9:8A:42 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/qCX4Nwq8L2ggxHkmAxf-JA-5ikI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.68.70.0/24 78.128.123.0/24 79.124.42.0/23 80.72.78.0/24 Signature Algorithm: sha256WithRSAEncryption c9:8c:62:c3:1b:24:17:4a:00:d3:14:ff:fe:f9:a1:18:90:1e: e7:57:12:49:02:aa:9c:46:b1:de:2d:e6:8b:7b:3b:29:93:50: 3b:50:89:33:c2:23:d3:ed:a4:0d:1e:0a:5f:03:bf:de:c8:ba: 47:75:d3:ce:b8:70:6b:8e:06:4f:3c:fd:a7:ef:28:ba:7d:20: e3:50:7d:5e:13:d7:29:41:35:27:4c:c4:83:0e:fe:c5:03:d1: 64:50:16:b5:4b:cd:60:26:bb:3e:a0:78:63:7f:47:45:b0:9b: ec:1a:76:e5:73:ba:e2:56:4f:dd:92:88:45:9d:37:8f:39:57: 31:61:7f:86:39:65:65:53:e0:bc:c7:f2:bc:0b:b3:51:a1:c8: de:59:05:49:a8:8b:11:fb:55:68:1e:0f:51:fd:bc:3a:ae:a3: d3:69:d1:e0:c2:4e:da:d0:8d:41:77:86:f8:94:16:bc:d8:a8: 73:f4:a7:53:98:4c:b3:bb:cd:8b:53:f1:4c:a9:c3:3b:07:58: 0f:66:41:7e:49:12:71:8b:9f:15:92:0c:3d:4f:52:6d:e3:bd: eb:76:d5:e5:45:25:ab:52:ca:30:8e:f9:5f:f3:1f:35:ce:75: 69:16:b2:33:2f:5c:b4:aa:79:e2:f3:ad:aa:31:18:b9:9e:4f: f9:9d:1f:4a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9WxrUVs91kNPf0hsu8EhuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODI1ZjgzNzBhYmMyZjY4MjBjNDc5MjYwMzE3ZmUyNDBmYjk4YTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRgbToHYezQqSSBiNLn5RgQT/dre UMi9fCBhql7xa3bTEZnTEO6eObqI1+g1zvAG8SOYKz54K3lIlNgFYaXM5rm35zEi A3em4X7xBqI+MFNwQJWuXuKyYdZG07iBcl3J4QTQMcccN2J61RUUtXt4a5sf5Qhl idv9g6cXZZkME0X0VL5Yt6uNKeD7qLWgQLNI37dlVik4zlTimT23oLQ3piArfrll 9a5H9a1w8mrA9jJo9jRl6O2yCy4/oeobZTmS8KjBOhv2Nv9EAlluOL4+COoM+6F0 gowf1xVuIZEe3FS/A6xGKTf6W8R+JoDb/bt1+Z4fgVJxE+ju1wt3B40/YwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKgl+DcKvC9oIMR5JgMX/iQPuYpCMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvcUNYNE53cThMMmdneEhrbUF4Zi1KQS01aWtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPkRGAwQA ToB7AwQBT3wqAwQAUEhOMA0GCSqGSIb3DQEBCwUAA4IBAQDJjGLDGyQXSgDTFP/+ +aEYkB7nVxJJAqqcRrHeLeaLezspk1A7UIkzwiPT7aQNHgpfA7/eyLpHddPOuHBr jgZPPP2n7yi6fSDjUH1eE9cpQTUnTMSDDv7FA9FkUBa1S81gJrs+oHhjf0dFsJvs Gnblc7riVk/dkohFnTePOVcxYX+GOWVlU+C8x/K8C7NRocjeWQVJqIsR+1VoHg9R /bw6rqPTadHgwk7a0I1Bd4b4lBa82Khz9KdTmEyzu82LU/FMqcM7B1gPZkF+SRJx i58Vkgw9T1Jt473rdtXlRSWrUsowjvlf8x81znVpFrIzL1y0qnni862qMRi5nk/5 nR9K -----END CERTIFICATE-----Generated at Fri Jan 23 18:50:57 2026 by rpki-client