This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/QanxQFNXzm9WZ4FLagQm8rqjYVg.roa File: QanxQFNXzm9WZ4FLagQm8rqjYVg.roa (raw, json) Hash identifier: z/pk9haxpoiUwaj9wllu1rSy4e1+a+aVccYlUM/WIn8= Subject key identifier: 41:A9:F1:40:53:57:CE:6F:56:67:81:4B:6A:04:26:F2:BA:A3:61:58 Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489 Certificate serial: 019B7F82F5FC6A0C8C3FF45F08F1EC041CA1 Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/QanxQFNXzm9WZ4FLagQm8rqjYVg.roa Signing time: Fri 02 Jan 2026 16:20:47 +0000 ROA not before: Fri 02 Jan 2026 16:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4913 IP address blocks: 212.39.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:f5:fc:6a:0c:8c:3f:f4:5f:08:f1:ec:04:1c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489 Validity Not Before: Jan 2 16:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41a9f1405357ce6f5667814b6a0426f2baa36158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a6:4d:69:1e:75:03:0c:d5:20:e2:27:c9:10: 26:72:99:0b:7c:68:ea:84:2a:0c:50:e0:5a:71:58: 8f:5d:37:81:59:de:a7:d3:b4:4f:f7:36:d6:7b:a0: 09:d3:be:f6:7a:a7:55:6a:8c:3b:b5:4b:4f:d5:eb: 4f:be:32:4a:5b:5e:3c:3c:cf:bb:e9:0c:cc:b5:3b: dc:db:cf:56:93:58:ce:30:ba:c3:d5:f4:f3:e2:20: b4:92:c8:4a:07:70:b2:fa:55:0d:91:54:02:92:92: 8f:ac:2d:2f:59:96:6c:de:49:55:57:28:1e:2a:1e: 2d:32:7e:78:64:61:29:58:3b:9f:2c:69:de:a5:6a: c6:8b:01:05:40:4b:4d:c4:82:3b:66:b9:5d:c9:dc: 1d:f8:c5:30:e8:35:db:61:fe:f8:e3:4a:cd:3d:66: 5f:60:18:b3:bb:e2:41:5e:4c:91:1e:81:93:92:b7: da:1a:53:49:a1:b0:3b:33:d3:53:e1:42:bb:b1:a0: 0d:25:b0:97:72:92:05:54:fd:f6:84:80:25:ed:92: 19:b4:13:a7:81:8f:a5:15:c5:b9:29:f4:de:91:b0: cb:aa:a5:3d:e6:8f:a7:99:e1:57:86:17:6b:4a:22: cc:74:03:8e:fc:16:99:de:d8:dd:52:92:c4:79:ed: cd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A9:F1:40:53:57:CE:6F:56:67:81:4B:6A:04:26:F2:BA:A3:61:58 X509v3 Authority Key Identifier: keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/QanxQFNXzm9WZ4FLagQm8rqjYVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.39.160.0/19 Signature Algorithm: sha256WithRSAEncryption 2a:05:3e:a4:d8:4c:bb:7b:7f:69:ed:51:14:43:d3:e8:5c:3d: a0:ab:a6:5b:49:a0:33:25:cc:e2:e6:a8:87:bf:55:28:c8:b9: b0:29:b2:c0:2f:2f:4b:0a:da:9e:e9:46:de:3d:18:8c:46:56: f5:f2:9b:50:9a:49:fa:8e:75:03:57:8b:e8:d8:c1:77:f6:a1: 45:10:84:c1:24:07:f5:18:35:58:bc:e0:4c:c9:08:fd:d4:28: 82:15:50:30:1c:cf:98:b3:78:c3:aa:93:53:c9:a0:99:e7:48: 27:20:81:3e:bf:8b:26:8f:ba:fb:a0:a4:22:0d:e6:a5:5f:ff: ea:b0:aa:1f:f4:b9:b5:5f:12:c0:44:42:53:70:93:45:b3:bd: 24:60:f2:03:f8:8c:84:84:1f:ff:ca:fe:12:72:5a:e0:8a:eb: 51:6a:ac:36:30:fd:a3:ae:27:24:c7:22:37:4a:f1:50:e5:43: 6d:7b:52:0a:0b:0f:72:59:0a:61:0c:8e:b3:d4:41:63:64:6f: fc:bb:0a:ea:33:41:39:c0:eb:6f:28:1a:ce:ee:b2:51:78:3f: 53:8f:bb:1e:56:71:e6:18:db:1d:f3:51:e1:24:38:20:be:d4: ad:f9:f4:fb:1b:cc:6d:6d:d0:23:16:0c:93:7e:f4:66:cc:eb: b2:ce:71:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gvX8agyMP/RfCPHsBByhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYmQyYjI4NzFjMDZlNWUyMWRmY2QwMTYwMzA3NTgxNmJk MTQ0ODkwHhcNMjYwMTAyMTYyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWE5ZjE0MDUzNTdjZTZmNTY2NzgxNGI2YTA0MjZmMmJhYTM2MTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6ZNaR51AwzVIOInyRAmcpkLfGjq hCoMUOBacViPXTeBWd6n07RP9zbWe6AJ0772eqdVaow7tUtP1etPvjJKW148PM+7 6QzMtTvc289Wk1jOMLrD1fTz4iC0kshKB3Cy+lUNkVQCkpKPrC0vWZZs3klVVyge Kh4tMn54ZGEpWDufLGnepWrGiwEFQEtNxII7Zrldydwd+MUw6DXbYf7440rNPWZf YBizu+JBXkyRHoGTkrfaGlNJobA7M9NT4UK7saANJbCXcpIFVP32hIAl7ZIZtBOn gY+lFcW5KfTekbDLqqU95o+nmeFXhhdrSiLMdAOO/BaZ3tjdUpLEee3N3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEGp8UBTV85vVmeBS2oEJvK6o2FYMB8GA1UdIwQY MBaAFO29KyhxwG5eId/NAWAwdYFr0USJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wZTRkZDMtOWRlNy00MzZlLWFiYTkt ZGU2YTljMDE3ZjdiLzEvUWFueFFGTlh6bTlXWjRGTGFnUW04cnFqWVZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wZTRkZDMtOWRlNy00MzZlLWFiYTktZGU2YTljMDE3Zjdi LzEvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1CegMA0G CSqGSIb3DQEBCwUAA4IBAQAqBT6k2Ey7e39p7VEUQ9PoXD2gq6ZbSaAzJczi5qiH v1UoyLmwKbLALy9LCtqe6UbePRiMRlb18ptQmkn6jnUDV4vo2MF39qFFEITBJAf1 GDVYvOBMyQj91CiCFVAwHM+Ys3jDqpNTyaCZ50gnIIE+v4smj7r7oKQiDealX//q sKof9Lm1XxLAREJTcJNFs70kYPID+IyEhB//yv4SclrgiutRaqw2MP2jrickxyI3 SvFQ5UNte1IKCw9yWQphDI6z1EFjZG/8uwrqM0E5wOtvKBrO7rJReD9Tj7seVnHm GNsd81HhJDggvtSt+fT7G8xtbdAjFgyTfvRmzOuyznGH -----END CERTIFICATE-----Generated at Tue Jan 20 14:37:57 2026 by rpki-client