This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/QyIrj4KBT2VQqHgbFbL2BDxfgr0.roa File: QyIrj4KBT2VQqHgbFbL2BDxfgr0.roa (raw, json) Hash identifier: kp1CwaLzqr/s/iouj0Yw+AzVZxO6+NVySzklWCo6UCs= Subject key identifier: 43:22:2B:8F:82:81:4F:65:50:A8:78:1B:15:B2:F6:04:3C:5F:82:BD Certificate issuer: /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b Certificate serial: 019B7CEDCD780BF1B3A2B8B0E142D29ACAD6 Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/QyIrj4KBT2VQqHgbFbL2BDxfgr0.roa Signing time: Fri 02 Jan 2026 04:18:38 +0000 ROA not before: Fri 02 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47843 IP address blocks: 194.33.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:cd:78:0b:f1:b3:a2:b8:b0:e1:42:d2:9a:ca:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b Validity Not Before: Jan 2 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43222b8f82814f6550a8781b15b2f6043c5f82bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8c:29:49:50:ae:91:04:e6:b4:75:76:81:d8: c8:c9:8a:34:7a:88:28:97:0d:40:03:3d:be:0b:38: 68:dc:b1:dd:75:30:a2:f1:d5:61:45:9f:8e:6e:a6: 91:48:f6:65:6d:60:68:10:15:26:23:0f:52:7c:95: 4c:da:28:f2:44:5d:ee:25:42:bb:c9:c7:14:2a:eb: f2:31:a5:c3:50:4e:b4:86:51:d5:b0:42:9b:12:93: cb:ef:92:2c:9e:ee:51:ff:35:7b:3f:71:12:e3:ff: ce:39:e5:34:79:d0:0d:ff:32:03:dc:e1:dc:65:2c: 5d:62:64:d9:57:37:ac:e1:48:ff:2f:86:15:a2:ac: 0e:d8:65:e4:41:54:84:06:32:46:c9:86:c7:77:1b: ad:ea:d7:a4:1f:48:d0:00:0d:d4:d9:5e:0a:d2:5d: 48:ce:df:5a:74:e3:12:29:3c:4f:b9:b8:1a:a3:f7: 51:94:33:49:f6:7a:3d:d0:7d:a4:44:5b:cd:bf:79: 92:e2:3e:d7:33:80:56:89:16:cd:c0:60:c4:c8:10: 15:77:20:97:65:ed:04:06:d5:d6:2f:5c:6f:0a:ad: 3a:e1:20:54:e5:93:3e:1e:48:c0:45:f7:cb:6d:2a: fd:e5:88:05:f2:ef:08:33:3b:af:28:57:b1:05:00: af:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:22:2B:8F:82:81:4F:65:50:A8:78:1B:15:B2:F6:04:3C:5F:82:BD X509v3 Authority Key Identifier: keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/QyIrj4KBT2VQqHgbFbL2BDxfgr0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.107.0/24 Signature Algorithm: sha256WithRSAEncryption 72:9f:54:38:ff:53:d6:95:1c:d5:12:6d:5f:0f:56:c5:83:e7: bd:c3:ec:4c:59:60:44:e1:bf:4a:c2:5f:5d:87:8c:8c:5c:60: 50:db:ce:b1:3e:93:09:93:b4:20:f0:6a:fe:4f:c8:90:5c:b5: 02:a7:f5:79:8e:38:87:e9:ff:99:c1:c0:24:c8:22:8b:24:e7: a4:97:6f:16:ba:ea:37:9f:9d:57:6d:52:99:96:2b:2e:11:1a: 4c:59:98:52:b5:dc:b2:13:58:a5:07:e1:e9:3b:e7:76:6c:ef: e1:e1:ef:ce:4d:2a:88:80:33:cb:e1:b4:8c:c3:b7:18:fb:cc: 0a:af:1b:64:16:52:93:1b:10:08:13:39:93:86:66:11:f3:0a: aa:8e:89:ee:12:1e:41:fc:3e:0a:38:70:7d:63:dd:61:62:03: 1d:f3:23:50:45:a9:56:e9:40:f6:54:ac:4d:c1:ee:3b:e3:2a: 1b:b3:83:21:f8:02:6e:f0:39:41:fb:6f:2e:1a:2e:09:0f:d8: 3f:b5:71:91:20:05:b8:cf:13:ae:e8:63:50:8a:e8:41:61:33: 12:73:77:39:4f:45:8e:f9:d4:ad:52:c3:78:6a:a9:39:9f:7d: a8:86:b3:b6:a7:a6:31:4d:69:f2:38:9c:76:01:4b:ee:23:3d: 18:31:02:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87c14C/Gzoriw4ULSmsrWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNDdlZTczYzI4NzgwYjEyZjE1MmNmYTI1OWFkZTNkOGFl MGQxM2IwHhcNMjYwMTAyMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzIyMmI4ZjgyODE0ZjY1NTBhODc4MWIxNWIyZjYwNDNjNWY4MmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04wpSVCukQTmtHV2gdjIyYo0eogo lw1AAz2+Czho3LHddTCi8dVhRZ+ObqaRSPZlbWBoEBUmIw9SfJVM2ijyRF3uJUK7 yccUKuvyMaXDUE60hlHVsEKbEpPL75Isnu5R/zV7P3ES4//OOeU0edAN/zID3OHc ZSxdYmTZVzes4Uj/L4YVoqwO2GXkQVSEBjJGyYbHdxut6tekH0jQAA3U2V4K0l1I zt9adOMSKTxPubgao/dRlDNJ9no90H2kRFvNv3mS4j7XM4BWiRbNwGDEyBAVdyCX Ze0EBtXWL1xvCq064SBU5ZM+HkjARffLbSr95YgF8u8IMzuvKFexBQCv3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEMiK4+CgU9lUKh4GxWy9gQ8X4K9MB8GA1UdIwQY MBaAFJxH7nPCh4CxLxUs+iWa3j2K4NE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkVmdWM4S0hnTEV2RlN6NkpacmVQWXJnMFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jN2M1MWQtNGY5MC00MDg3LWExM2Et ZjNjMWE5YTExZDczLzEvUXlJcmo0S0JUMlZRcUhnYkZiTDJCRHhmZ3IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9jN2M1MWQtNGY5MC00MDg3LWExM2EtZjNjMWE5YTExZDcz LzEvbkVmdWM4S0hnTEV2RlN6NkpacmVQWXJnMFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiFrMA0G CSqGSIb3DQEBCwUAA4IBAQByn1Q4/1PWlRzVEm1fD1bFg+e9w+xMWWBE4b9Kwl9d h4yMXGBQ286xPpMJk7Qg8Gr+T8iQXLUCp/V5jjiH6f+ZwcAkyCKLJOekl28Wuuo3 n51XbVKZlisuERpMWZhStdyyE1ilB+HpO+d2bO/h4e/OTSqIgDPL4bSMw7cY+8wK rxtkFlKTGxAIEzmThmYR8wqqjonuEh5B/D4KOHB9Y91hYgMd8yNQRalW6UD2VKxN we474yobs4Mh+AJu8DlB+28uGi4JD9g/tXGRIAW4zxOu6GNQiuhBYTMSc3c5T0WO +dStUsN4aqk5n32ohrO2p6YxTWnyOJx2AUvuIz0YMQLv -----END CERTIFICATE-----Generated at Mon Jan 26 23:24:15 2026 by rpki-client