This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QZI1VwqV_RiWAs1rh4n6OgKS2mU.roa File: QZI1VwqV_RiWAs1rh4n6OgKS2mU.roa (raw, json) Hash identifier: fJidOQes+/elOXbv0mxvbfmE07xFtHBQskiS2AosY6k= Subject key identifier: 41:92:35:57:0A:95:FD:18:96:02:CD:6B:87:89:FA:3A:02:92:DA:65 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A34985C0DB6E8E42EC3D0C57AFDAEB Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QZI1VwqV_RiWAs1rh4n6OgKS2mU.roa Signing time: Thu 01 Jan 2026 08:18:45 +0000 ROA not before: Thu 01 Jan 2026 08:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214339 IP address blocks: 94.156.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:49:85:c0:db:6e:8e:42:ec:3d:0c:57:af:da:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=419235570a95fd189602cd6b8789fa3a0292da65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:26:2c:6e:a1:5e:4c:5e:1c:88:59:70:89:6a: 62:1d:e6:f0:eb:87:1b:ab:ff:b9:52:95:c5:1d:d5: 0e:ce:25:2f:b2:61:47:2f:76:93:1e:67:4c:8f:43: 48:ed:ce:ea:a8:53:55:cd:46:76:41:ce:17:65:04: 85:9a:3d:b7:e5:78:1d:5c:56:0a:d0:69:75:d1:e6: 79:e7:4a:91:53:61:fe:ad:13:3d:00:0f:2d:0d:46: d2:7c:15:72:9c:0d:bc:98:de:a3:6d:45:9e:cb:3b: 3e:9e:53:70:61:1e:aa:33:c9:28:67:6c:af:94:2c: 74:92:af:a3:82:57:4d:e3:11:34:a7:1b:94:4d:33: 02:80:14:2e:6b:30:4f:31:cc:66:20:82:6f:99:59: dc:1b:18:89:54:13:3b:5b:d7:6c:c9:85:42:b4:9e: e3:43:b4:1a:d6:11:33:c6:a5:0d:4f:19:eb:c8:b9: c1:84:4c:8c:57:56:bc:ae:c2:53:de:89:b7:5d:47: f3:00:8b:31:d8:db:25:56:cb:4c:7e:1f:fc:f6:63: 7b:2e:46:a5:88:2c:b1:4b:ed:91:3f:75:40:5a:25: 17:d3:86:81:45:fe:85:db:c9:41:be:b0:5f:44:32: 31:cb:07:27:08:f1:c4:54:46:43:c9:43:2c:6c:f2: e4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:92:35:57:0A:95:FD:18:96:02:CD:6B:87:89:FA:3A:02:92:DA:65 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QZI1VwqV_RiWAs1rh4n6OgKS2mU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.156.61.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:ee:81:21:47:e4:d2:a0:7e:7a:27:0a:ec:24:1c:51:06:22: 60:de:d2:7d:3d:b8:f5:da:98:00:3d:c4:54:23:43:8e:6b:b6: bf:a3:68:bd:04:29:0e:00:69:a4:00:35:34:67:b8:46:3c:e2: 5a:70:41:17:5f:45:c1:8a:4b:da:8e:e6:86:38:a0:01:e0:b7: d6:cc:5f:09:06:14:d0:0b:74:b3:e3:e4:7a:ba:de:d9:d3:7a: 90:81:d9:b1:a6:c4:b8:88:4b:45:ac:95:52:fd:79:51:fb:1c: 27:c4:ce:92:a5:a3:5b:90:68:b3:1a:41:da:d8:23:cc:85:02: f1:74:6e:59:ea:98:08:19:35:31:10:e4:2f:c5:f5:f3:a3:b7: 94:4a:4d:9d:f3:42:c1:74:8c:c2:a1:65:2d:d6:29:0d:5a:c9: e4:a3:ea:48:86:17:4f:7a:d9:c1:d4:68:84:80:b1:0c:04:72: 51:3c:90:12:c2:3d:5f:48:18:f3:f8:3d:08:e5:38:6d:89:72: 86:d9:a3:9b:4a:4d:bf:52:75:6a:a2:08:e9:b8:a1:55:a2:2b: d0:84:58:eb:6d:87:06:51:75:4b:c5:f2:5c:6e:65:ba:5e:bf: 57:18:17:1d:1d:75:fb:8e:92:27:32:42:98:eb:23:62:ac:92: f9:a7:d1:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0mFwNtujkLsPQxXr9rrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTkyMzU1NzBhOTVmZDE4OTYwMmNkNmI4Nzg5ZmEzYTAyOTJkYTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziYsbqFeTF4ciFlwiWpiHebw64cb q/+5UpXFHdUOziUvsmFHL3aTHmdMj0NI7c7qqFNVzUZ2Qc4XZQSFmj235XgdXFYK 0Gl10eZ550qRU2H+rRM9AA8tDUbSfBVynA28mN6jbUWeyzs+nlNwYR6qM8koZ2yv lCx0kq+jgldN4xE0pxuUTTMCgBQuazBPMcxmIIJvmVncGxiJVBM7W9dsyYVCtJ7j Q7Qa1hEzxqUNTxnryLnBhEyMV1a8rsJT3om3XUfzAIsx2NslVstMfh/89mN7Lkal iCyxS+2RP3VAWiUX04aBRf6F28lBvrBfRDIxywcnCPHEVEZDyUMsbPLkHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEGSNVcKlf0YlgLNa4eJ+joCktplMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvUVpJMVZ3cVZfUmlXQXMxcmg0bjZPZ0tTMm1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpw9MA0G CSqGSIb3DQEBCwUAA4IBAQAe7oEhR+TSoH56JwrsJBxRBiJg3tJ9Pbj12pgAPcRU I0OOa7a/o2i9BCkOAGmkADU0Z7hGPOJacEEXX0XBikvajuaGOKAB4LfWzF8JBhTQ C3Sz4+R6ut7Z03qQgdmxpsS4iEtFrJVS/XlR+xwnxM6SpaNbkGizGkHa2CPMhQLx dG5Z6pgIGTUxEOQvxfXzo7eUSk2d80LBdIzCoWUt1ikNWsnko+pIhhdPetnB1GiE gLEMBHJRPJASwj1fSBjz+D0I5ThtiXKG2aObSk2/UnVqogjpuKFVoivQhFjrbYcG UXVLxfJcbmW6Xr9XGBcdHXX7jpInMkKY6yNirJL5p9EI -----END CERTIFICATE-----Generated at Fri Jan 2 12:09:36 2026 by rpki-client