This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Q38sXaWWLfagPI_Qke-lbTpDzFw.roa File: Q38sXaWWLfagPI_Qke-lbTpDzFw.roa (raw, json) Hash identifier: +ypJObzL8u9TDaz5oU6/8iMIO89HK2Y/XTP+oMP+OUA= Subject key identifier: 43:7F:2C:5D:A5:96:2D:F6:A0:3C:8F:D0:91:EF:A5:6D:3A:43:CC:5C Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797ED5E05A4216CA1677EC5A53ED5ABD Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Q38sXaWWLfagPI_Qke-lbTpDzFw.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203312 IP address blocks: 78.83.211.0/24 maxlen: 24 82.103.79.0/24 maxlen: 24 151.251.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d5:e0:5a:42:16:ca:16:77:ec:5a:53:ed:5a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=437f2c5da5962df6a03c8fd091efa56d3a43cc5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8f:5c:a2:9c:f7:f8:44:53:11:ca:20:e0:30: 2c:98:a2:98:5a:68:ce:0f:6a:86:1e:6a:13:65:f2: 0e:fc:34:5c:86:9d:78:9c:e5:a5:da:79:e7:6f:34: 7f:96:1e:ce:17:7b:99:29:ea:11:67:44:a1:e8:c9: 52:80:c8:f4:d0:f0:75:e8:9a:06:25:d9:f7:ef:b9: 70:32:84:7e:c4:a4:3a:16:5f:7a:0c:6a:df:66:5e: ea:32:66:45:dd:62:8e:7a:96:4d:7b:a0:01:dd:82: e9:d3:db:cb:dc:3b:1f:ac:91:f9:8a:54:6d:66:6f: 04:cc:00:e4:b9:13:87:31:15:74:c2:e1:e7:a6:71: 7c:b3:14:36:5b:d0:4e:83:37:a5:dd:4c:9b:ea:29: 48:3a:18:3b:95:7b:5a:05:d5:b0:62:cc:f8:fb:d6: 61:36:ab:02:1b:bc:15:2c:fc:30:0c:e4:59:12:df: bc:b4:da:a3:8f:d7:af:38:ec:3b:82:d9:15:e6:0a: e6:2a:e6:e0:a5:9e:f9:c1:ea:68:39:63:24:b7:cd: ca:61:09:fd:11:d2:e6:02:f0:5c:da:27:95:91:49: 4d:6a:7d:95:ab:b0:2b:a5:91:8e:8e:b0:9a:75:96: 4b:c2:31:bb:49:27:06:11:6f:6e:00:37:ca:2c:54: 12:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7F:2C:5D:A5:96:2D:F6:A0:3C:8F:D0:91:EF:A5:6D:3A:43:CC:5C X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Q38sXaWWLfagPI_Qke-lbTpDzFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.83.211.0/24 82.103.79.0/24 151.251.61.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:30:ed:f5:36:cc:ff:c7:fe:64:11:70:5b:5e:72:9e:8e:21: 43:1d:fa:a7:a8:fe:99:82:07:6a:85:f6:e4:b8:0b:fc:b2:22: 1f:57:43:1c:58:f9:5c:fa:e2:07:7e:54:3d:7d:a5:49:54:51: be:25:59:77:32:49:83:3f:32:fc:4e:80:c4:71:20:17:7f:95: f0:6b:b7:6b:18:22:de:a7:2e:94:e3:85:18:88:ac:b8:88:0c: b2:2b:59:11:c6:00:45:fd:6b:de:7e:15:81:cf:0d:65:31:0f: 34:65:9c:f7:b7:b6:b9:4e:ab:3f:45:f3:36:bc:ed:da:6a:d2: 5f:15:63:15:5e:69:fa:30:10:b0:a2:a9:29:6b:20:31:65:b6: 50:e7:e3:be:a8:5f:10:86:ab:0b:04:08:8b:b4:98:0a:00:2a: 5b:65:7e:03:28:43:f7:c9:0d:6f:d7:d4:c7:54:36:97:83:2c: cd:34:a8:f4:49:2b:d9:fc:a2:ff:9b:8a:f3:e3:50:c4:05:0b: f4:15:45:04:98:78:57:c0:09:5b:af:6a:56:cd:98:28:dd:1e: 95:44:f6:27:24:f0:2f:fc:5f:78:e2:88:4c:91:33:1f:29:da: 13:7d:af:87:e7:11:01:9b:ea:fb:92:45:06:5b:14:85:10:30: 05:4b:78:3e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5ftXgWkIWyhZ37FpT7Vq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzdmMmM1ZGE1OTYyZGY2YTAzYzhmZDA5MWVmYTU2ZDNhNDNjYzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo9copz3+ERTEcog4DAsmKKYWmjO D2qGHmoTZfIO/DRchp14nOWl2nnnbzR/lh7OF3uZKeoRZ0Sh6MlSgMj00PB16JoG Jdn377lwMoR+xKQ6Fl96DGrfZl7qMmZF3WKOepZNe6AB3YLp09vL3DsfrJH5ilRt Zm8EzADkuROHMRV0wuHnpnF8sxQ2W9BOgzel3Uyb6ilIOhg7lXtaBdWwYsz4+9Zh NqsCG7wVLPwwDORZEt+8tNqjj9evOOw7gtkV5grmKubgpZ75wepoOWMkt83KYQn9 EdLmAvBc2ieVkUlNan2Vq7ArpZGOjrCadZZLwjG7SScGEW9uADfKLFQS6QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEN/LF2lli32oDyP0JHvpW06Q8xcMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvUTM4c1hhV1dMZmFnUElfUWtlLWxiVHBEekZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATlPTAwQA UmdPAwQAl/s9MA0GCSqGSIb3DQEBCwUAA4IBAQAOMO31Nsz/x/5kEXBbXnKejiFD HfqnqP6ZggdqhfbkuAv8siIfV0McWPlc+uIHflQ9faVJVFG+JVl3MkmDPzL8ToDE cSAXf5Xwa7drGCLepy6U44UYiKy4iAyyK1kRxgBF/WvefhWBzw1lMQ80ZZz3t7a5 Tqs/RfM2vO3aatJfFWMVXmn6MBCwoqkpayAxZbZQ5+O+qF8QhqsLBAiLtJgKACpb ZX4DKEP3yQ1v19THVDaXgyzNNKj0SSvZ/KL/m4rz41DEBQv0FUUEmHhXwAlbr2pW zZgo3R6VRPYnJPAv/F944ohMkTMfKdoTfa+H5xEBm+r7kkUGWxSFEDAFS3g+ -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:26 2026 by rpki-client