This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Qoy1UzxA3Gk7TLLb4HkFUZ3ycvM.roa File: Qoy1UzxA3Gk7TLLb4HkFUZ3ycvM.roa (raw, json) Hash identifier: gFbsUQR+ewA7ijvGwdQJREU7gxfm7eslG9/7sen7uMU= Subject key identifier: 42:8C:B5:53:3C:40:DC:69:3B:4C:B2:DB:E0:79:05:51:9D:F2:72:F3 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A352DB86730BC430E9CE96E0BDD099 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Qoy1UzxA3Gk7TLLb4HkFUZ3ycvM.roa Signing time: Thu 01 Jan 2026 08:18:48 +0000 ROA not before: Thu 01 Jan 2026 08:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215730 IP address blocks: 2.59.253.0/24 maxlen: 24 81.31.192.0/24 maxlen: 24 87.120.93.0/24 maxlen: 24 87.120.126.0/24 maxlen: 24 94.156.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:52:db:86:73:0b:c4:30:e9:ce:96:e0:bd:d0:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=428cb5533c40dc693b4cb2dbe07905519df272f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:99:a9:bf:8a:48:9b:96:c5:f3:7b:20:54:cd: d4:d5:80:a6:3a:6d:04:0d:45:43:e0:b2:73:e5:2c: 8f:0e:27:49:1d:d6:21:b7:9f:20:eb:05:c9:12:d4: b8:4f:23:75:36:b2:6f:ed:fc:25:20:d9:b5:b7:eb: a5:55:aa:c7:3a:13:b6:85:21:29:21:a0:cd:f3:c2: 35:7e:c1:1e:bd:49:0f:6f:ec:db:5f:a8:fb:36:41: 3a:aa:30:95:fb:d4:08:4a:3b:a6:fa:b1:f9:74:8d: 1b:a8:fc:9d:8a:1b:af:59:27:23:90:77:76:a0:45: 05:99:3f:b5:3a:50:82:25:db:1f:63:b9:c8:94:7c: fc:9c:e2:a4:77:11:0f:00:15:57:f7:ac:8c:3d:b1: 13:ab:78:d8:f8:af:b4:a2:28:4b:2e:9e:ed:13:fe: 98:6d:43:f5:3f:3e:63:ce:80:a4:db:cc:fe:3e:e8: 87:98:c7:fa:ad:29:a9:2e:fd:73:db:aa:9f:a5:46: e1:23:dc:70:30:7a:3c:68:fa:08:46:56:4c:6f:26: 08:4b:f6:41:af:1a:61:b6:0a:fa:b2:8a:5e:e1:1e: 82:5a:a9:00:0c:f1:b1:28:2a:5c:ac:b8:e3:80:20: 48:e8:03:96:9b:5b:72:2b:28:ae:f7:43:d6:af:30: 6b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8C:B5:53:3C:40:DC:69:3B:4C:B2:DB:E0:79:05:51:9D:F2:72:F3 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Qoy1UzxA3Gk7TLLb4HkFUZ3ycvM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.253.0/24 81.31.192.0/24 87.120.93.0/24 87.120.126.0/24 94.156.232.0/24 Signature Algorithm: sha256WithRSAEncryption 25:10:e4:ce:78:99:94:19:d7:35:18:05:75:af:5c:bb:e9:d1: a7:7c:34:f7:94:5b:20:dc:58:c1:1d:ce:15:b5:43:ba:86:52: 1a:ec:fa:4c:fd:91:7e:b6:a8:05:c1:e0:1e:89:5b:7a:ed:f7: 06:93:8e:12:e5:e2:0b:f0:44:82:15:8b:f8:39:9c:3d:3f:00: e6:e1:dc:51:3f:51:78:78:5b:99:99:f8:6c:e0:3c:62:9f:ef: 9b:df:50:b1:89:2a:58:36:b8:30:a3:e5:2e:bb:c2:44:f4:20: 4e:b4:7f:ad:77:35:c3:61:c1:76:b9:ee:c8:9d:83:4f:c5:1d: 4c:83:f4:4e:6e:30:ac:a9:c4:2e:23:01:39:8c:13:73:6c:b7: 72:4b:ed:4f:27:95:e6:16:56:45:2b:2e:68:9f:dc:0f:87:b4: 15:27:8c:f4:d0:af:da:fe:02:1a:d6:21:81:ff:72:f9:95:ef: bc:99:ee:92:aa:d6:94:40:76:01:fc:f9:e0:44:8e:92:05:96: dd:43:6d:b1:29:9d:30:eb:3c:09:3c:15:30:79:c7:7d:af:14: 7d:e8:54:76:01:b7:a6:6f:de:76:c7:3b:b6:d4:a2:40:08:2c: 86:dd:1e:aa:d6:0b:93:6f:0b:16:59:45:b6:4b:91:e6:e3:7f: 44:98:06:f9 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4o1LbhnMLxDDpzpbgvdCZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjhjYjU1MzNjNDBkYzY5M2I0Y2IyZGJlMDc5MDU1MTlkZjI3MmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupmpv4pIm5bF83sgVM3U1YCmOm0E DUVD4LJz5SyPDidJHdYht58g6wXJEtS4TyN1NrJv7fwlINm1t+ulVarHOhO2hSEp IaDN88I1fsEevUkPb+zbX6j7NkE6qjCV+9QISjum+rH5dI0bqPydihuvWScjkHd2 oEUFmT+1OlCCJdsfY7nIlHz8nOKkdxEPABVX96yMPbETq3jY+K+0oihLLp7tE/6Y bUP1Pz5jzoCk28z+PuiHmMf6rSmpLv1z26qfpUbhI9xwMHo8aPoIRlZMbyYIS/ZB rxphtgr6sope4R6CWqkADPGxKCpcrLjjgCBI6AOWm1tyKyiu90PWrzBrWwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFEKMtVM8QNxpO0yy2+B5BVGd8nLzMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvUW95MVV6eEEzR2s3VExMYjRIa0ZVWjN5Y3ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAAjv9AwQA UR/AAwQAV3hdAwQAV3h+AwQAXpzoMA0GCSqGSIb3DQEBCwUAA4IBAQAlEOTOeJmU Gdc1GAV1r1y76dGnfDT3lFsg3FjBHc4VtUO6hlIa7PpM/ZF+tqgFweAeiVt67fcG k44S5eIL8ESCFYv4OZw9PwDm4dxRP1F4eFuZmfhs4Dxin++b31CxiSpYNrgwo+Uu u8JE9CBOtH+tdzXDYcF2ue7InYNPxR1Mg/RObjCsqcQuIwE5jBNzbLdyS+1PJ5Xm FlZFKy5on9wPh7QVJ4z00K/a/gIa1iGB/3L5le+8me6SqtaUQHYB/PngRI6SBZbd Q22xKZ0w6zwJPBUwecd9rxR96FR2Abemb952xzu21KJACCyG3R6q1guTbwsWWUW2 S5Hm439EmAb5 -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:58 2026 by rpki-client