This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QoJM6R-76E6fgJyVUg1OKJoUTZk.roa File: QoJM6R-76E6fgJyVUg1OKJoUTZk.roa (raw, json) Hash identifier: 0WY0hjq776UfrVIajRrhgpDeiHmjr9skiidTgzyLdwY= Subject key identifier: 42:82:4C:E9:1F:BB:E8:4E:9F:80:9C:95:52:0D:4E:28:9A:14:4D:99 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A34C2D295CC201FE724B25D5181D0A Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QoJM6R-76E6fgJyVUg1OKJoUTZk.roa Signing time: Thu 01 Jan 2026 08:18:46 +0000 ROA not before: Thu 01 Jan 2026 08:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215292 IP address blocks: 81.161.239.0/24 maxlen: 24 193.25.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4c:2d:29:5c:c2:01:fe:72:4b:25:d5:18:1d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42824ce91fbbe84e9f809c95520d4e289a144d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:14:7a:7f:3d:fa:01:85:f5:c1:43:3c:f8:4f: 2e:45:a7:7c:cc:24:b7:5b:ad:02:2a:d8:9a:0c:8f: fc:75:40:72:29:cd:78:d6:6c:e9:f9:4e:c5:9d:af: 5c:50:f8:f9:1c:c9:44:46:42:b7:2e:78:c9:4e:dc: 5e:63:c7:71:bf:45:0e:94:87:75:2a:5c:d1:7b:18: 3f:80:e0:9b:85:e6:e2:6b:2b:21:e0:d4:ad:7c:44: 3e:4f:9f:25:58:db:ad:d0:57:9e:52:f4:68:9f:77: 64:ed:c3:ab:09:dc:63:5c:d0:0c:4d:90:68:3c:11: be:4e:fa:8f:1c:b1:57:29:fc:ae:08:18:ad:26:c2: cf:2e:20:37:48:1a:a5:ee:a9:16:6a:89:6c:8a:97: 45:73:cf:0b:b9:50:63:65:9a:e2:9f:74:80:b0:52: cf:96:6b:bd:0b:c9:87:d0:9d:ce:77:9a:93:32:b3: b0:1b:a2:46:10:83:79:04:ea:40:d5:1b:2f:cc:e6: e5:8a:3e:7c:a0:20:c5:5e:f2:b6:99:96:d5:bf:c3: ed:5e:48:74:27:a3:7a:39:55:7a:5b:3f:10:7c:89: 5a:af:1c:95:2e:86:0e:3f:c5:5a:50:fa:89:62:86: f5:b9:d9:6f:04:86:95:26:ac:d3:ba:cb:f0:0e:24: 6b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:82:4C:E9:1F:BB:E8:4E:9F:80:9C:95:52:0D:4E:28:9A:14:4D:99 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QoJM6R-76E6fgJyVUg1OKJoUTZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.239.0/24 193.25.217.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:27:83:d3:72:5a:6a:ec:13:88:cc:5c:92:3c:50:04:c7:00: e1:00:fd:e7:e0:7e:aa:05:35:44:91:28:53:2e:42:38:70:9d: a5:8f:11:1e:f2:62:8d:76:14:4b:2b:93:e4:25:75:ce:5f:d3: 14:6e:b3:ad:6e:2d:73:04:f6:91:5e:7e:f0:98:a0:7f:9d:de: 19:ed:43:cc:b2:97:81:61:ca:85:63:ef:b1:b2:65:e3:ce:9c: 03:8c:de:cb:e5:a3:55:59:12:5f:8e:1a:25:0c:3b:e8:71:e6: e1:15:a3:71:96:c1:db:83:56:4a:14:ce:b8:f5:5e:72:f8:86: 8c:0e:43:32:ad:a5:6a:cc:ba:ea:c0:97:14:40:d5:c3:78:89: 05:bc:95:c5:e5:ea:cb:03:1d:df:bc:4c:93:22:3e:25:18:ea: 56:77:fc:01:12:51:ba:0e:9d:e3:57:92:2a:9e:01:00:07:e0: 73:96:c6:69:3b:06:bc:f4:32:0d:de:a0:15:20:59:8a:06:6a: d0:fb:95:22:cb:93:4d:44:e4:28:20:95:19:5a:be:a9:24:0c: 5f:1a:af:31:93:b0:f9:13:ab:8b:35:f2:41:ea:82:4f:b2:44: 77:1e:c4:a9:49:66:69:28:b9:6c:bb:18:83:48:6a:e4:fd:d3: 2d:ad:a2:d1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o0wtKVzCAf5ySyXVGB0KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjgyNGNlOTFmYmJlODRlOWY4MDljOTU1MjBkNGUyODlhMTQ0ZDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxR6fz36AYX1wUM8+E8uRad8zCS3 W60CKtiaDI/8dUByKc141mzp+U7Fna9cUPj5HMlERkK3LnjJTtxeY8dxv0UOlId1 KlzRexg/gOCbhebiaysh4NStfEQ+T58lWNut0FeeUvRon3dk7cOrCdxjXNAMTZBo PBG+TvqPHLFXKfyuCBitJsLPLiA3SBql7qkWaolsipdFc88LuVBjZZrin3SAsFLP lmu9C8mH0J3Od5qTMrOwG6JGEIN5BOpA1RsvzOblij58oCDFXvK2mZbVv8PtXkh0 J6N6OVV6Wz8QfIlarxyVLoYOP8VaUPqJYob1udlvBIaVJqzTusvwDiRrLQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEKCTOkfu+hOn4CclVINTiiaFE2ZMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvUW9KTTZSLTc2RTZmZ0p5VlVnMU9LSm9VVFprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUaHvAwQA wRnZMA0GCSqGSIb3DQEBCwUAA4IBAQAKJ4PTclpq7BOIzFySPFAExwDhAP3n4H6q BTVEkShTLkI4cJ2ljxEe8mKNdhRLK5PkJXXOX9MUbrOtbi1zBPaRXn7wmKB/nd4Z 7UPMspeBYcqFY++xsmXjzpwDjN7L5aNVWRJfjholDDvocebhFaNxlsHbg1ZKFM64 9V5y+IaMDkMyraVqzLrqwJcUQNXDeIkFvJXF5erLAx3fvEyTIj4lGOpWd/wBElG6 Dp3jV5IqngEAB+BzlsZpOwa89DIN3qAVIFmKBmrQ+5Uiy5NNROQoIJUZWr6pJAxf Gq8xk7D5E6uLNfJB6oJPskR3HsSpSWZpKLlsuxiDSGrk/dMtraLR -----END CERTIFICATE-----Generated at Fri Jan 2 12:08:22 2026 by rpki-client