This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/QWGsJlARLoXD3dTifaZvCAad7X4.roa File: QWGsJlARLoXD3dTifaZvCAad7X4.roa (raw, json) Hash identifier: Qzx6/bGY/9F07uNBPAulRDJPcAim/44VXRU8uq17XTM= Subject key identifier: 41:61:AC:26:50:11:2E:85:C3:DD:D4:E2:7D:A6:6F:08:06:9D:ED:7E Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Certificate serial: 019C08F52937A4223F0882B2FC4B4417C23B Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/QWGsJlARLoXD3dTifaZvCAad7X4.roa Signing time: Thu 29 Jan 2026 08:53:30 +0000 ROA not before: Thu 29 Jan 2026 08:53:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21840 IP address blocks: 213.178.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 18:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:08:f5:29:37:a4:22:3f:08:82:b2:fc:4b:44:17:c2:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Validity Not Before: Jan 29 08:53:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4161ac2650112e85c3ddd4e27da66f08069ded7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2c:d5:5a:97:72:29:81:ac:1e:62:e6:61:e8: e9:3e:46:1f:c0:d2:4f:55:50:2c:aa:8a:b4:64:52: 14:83:4e:4f:19:f6:bf:f9:ef:82:4a:cc:ed:a8:1f: ff:6e:78:5b:69:c9:06:21:f1:58:1c:7d:0f:67:13: 09:fd:d9:f5:8f:3e:0e:71:23:64:93:43:38:c6:38: 59:d8:96:19:8f:b2:e6:a0:f2:e2:9b:82:99:ec:43: f1:cc:33:3b:b1:6d:c6:80:ef:88:79:56:16:15:28: 68:ff:36:e2:48:01:8e:9a:a5:43:bc:3b:6c:b4:65: e5:a8:d5:f6:f5:49:85:fd:56:54:21:99:2f:e6:ad: 10:6e:3e:ad:25:99:c2:c1:c5:25:f8:62:cc:a4:e3: 25:2a:3a:b0:3c:05:8f:fa:bb:31:80:32:83:6e:e4: 13:11:b9:7d:76:6d:a4:91:7c:f1:37:d6:a6:ba:f9: 72:50:4e:35:c3:c8:2b:79:76:db:5d:4a:4b:c3:75: 19:2b:c9:8b:66:35:e9:ea:54:f0:a6:5f:ee:58:48: 49:5c:26:a2:db:86:1d:00:41:7f:48:20:d2:35:5a: ab:b6:d5:a8:e2:4f:69:3d:1d:62:09:d9:28:cb:8a: ab:21:d1:8b:90:4c:20:c0:91:c4:dc:6a:58:7e:2c: 46:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:61:AC:26:50:11:2E:85:C3:DD:D4:E2:7D:A6:6F:08:06:9D:ED:7E X509v3 Authority Key Identifier: keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/QWGsJlARLoXD3dTifaZvCAad7X4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.178.140.0/24 Signature Algorithm: sha256WithRSAEncryption ad:cd:34:e8:15:af:0b:11:d3:47:b7:8d:29:46:62:9a:96:d9: 1e:78:fa:b0:11:f8:3e:2f:8e:87:7b:84:41:c3:df:8a:a5:97: f5:38:39:0e:80:d3:c4:99:a0:2a:b5:98:07:1f:63:57:95:cb: 76:64:74:a2:cc:7c:58:0e:fe:50:34:47:f7:7e:f4:cd:82:d6: 44:c0:a0:48:49:11:0f:c4:82:0a:00:05:12:a7:df:26:29:8f: 0f:1a:2b:90:c0:6d:1a:44:99:ea:32:98:70:55:07:92:49:fb: 24:6f:cd:66:9e:95:ba:5f:75:98:d7:e4:b2:71:18:7c:de:b8: 2d:e5:97:b9:9f:65:6f:64:a6:b7:0a:67:e0:31:e5:d7:a9:ec: 73:99:f8:82:c9:09:bb:e4:7b:f2:a7:33:f1:70:62:c5:fe:71: f3:5f:c4:45:90:5c:d9:d9:08:85:2f:c7:71:a7:f5:03:64:91: 60:c2:f0:52:6c:39:66:e9:44:84:72:a2:1c:50:37:8e:46:9e: d9:bb:fc:13:5c:e0:56:16:86:7b:d5:fc:7a:f3:ed:d6:95:8f: 63:d3:f1:d7:1a:91:b8:14:7f:de:9f:61:d2:5d:dc:aa:ca:8b: 5f:27:df:9a:62:dc:30:0c:9d:1d:fb:bc:d1:e9:ea:0d:e1:fe: e3:fb:e3:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwI9Sk3pCI/CIKy/EtEF8I7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm OWRlNTYwHhcNMjYwMTI5MDg1MzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTYxYWMyNjUwMTEyZTg1YzNkZGQ0ZTI3ZGE2NmYwODA2OWRlZDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSzVWpdyKYGsHmLmYejpPkYfwNJP VVAsqoq0ZFIUg05PGfa/+e+CSsztqB//bnhbackGIfFYHH0PZxMJ/dn1jz4OcSNk k0M4xjhZ2JYZj7LmoPLim4KZ7EPxzDM7sW3GgO+IeVYWFSho/zbiSAGOmqVDvDts tGXlqNX29UmF/VZUIZkv5q0Qbj6tJZnCwcUl+GLMpOMlKjqwPAWP+rsxgDKDbuQT Ebl9dm2kkXzxN9amuvlyUE41w8greXbbXUpLw3UZK8mLZjXp6lTwpl/uWEhJXCai 24YdAEF/SCDSNVqrttWo4k9pPR1iCdkoy4qrIdGLkEwgwJHE3GpYfixGTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEFhrCZQES6Fw93U4n2mbwgGne1+MB8GA1UdIwQY MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt ZDkzMzdkYjM5ZDFmLzEvUVdHc0psQVJMb1hEM2RUaWZhWnZDQWFkN1g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bKMMA0G CSqGSIb3DQEBCwUAA4IBAQCtzTToFa8LEdNHt40pRmKaltkeePqwEfg+L46He4RB w9+KpZf1ODkOgNPEmaAqtZgHH2NXlct2ZHSizHxYDv5QNEf3fvTNgtZEwKBISREP xIIKAAUSp98mKY8PGiuQwG0aRJnqMphwVQeSSfskb81mnpW6X3WY1+SycRh83rgt 5Ze5n2VvZKa3CmfgMeXXqexzmfiCyQm75HvypzPxcGLF/nHzX8RFkFzZ2QiFL8dx p/UDZJFgwvBSbDlm6USEcqIcUDeORp7Zu/wTXOBWFoZ71fx68+3WlY9j0/HXGpG4 FH/en2HSXdyqyotfJ9+aYtwwDJ0d+7zR6eoN4f7j++Pc -----END CERTIFICATE-----Generated at Wed Feb 4 03:43:48 2026 by rpki-client