This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/QTmw8uEPwuAkxGYCsMNGpU-6Oac.roa File: QTmw8uEPwuAkxGYCsMNGpU-6Oac.roa (raw, json) Hash identifier: 6PDHzv/9LD0lrrNjY1ZXcqP0IHHg2T+Zii3a8r1VOpM= Subject key identifier: 41:39:B0:F2:E1:0F:C2:E0:24:C4:66:02:B0:C3:46:A5:4F:BA:39:A7 Certificate issuer: /CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc Certificate serial: 019B7E3799377D5AC8AC330C693DF5AA727A Authority key identifier: C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/QTmw8uEPwuAkxGYCsMNGpU-6Oac.roa Signing time: Fri 02 Jan 2026 10:18:51 +0000 ROA not before: Fri 02 Jan 2026 10:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205978 IP address blocks: 37.203.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:99:37:7d:5a:c8:ac:33:0c:69:3d:f5:aa:72:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc Validity Not Before: Jan 2 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4139b0f2e10fc2e024c46602b0c346a54fba39a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:f0:8e:4b:a1:7d:2a:13:87:21:07:e0:86: f8:4b:44:6a:42:6d:c1:83:52:7e:da:53:2b:ef:87: a6:21:2c:b2:7f:3d:c2:0c:b9:c5:17:d5:70:f0:40: df:9b:73:b7:5b:5e:0a:1b:1f:65:40:0d:66:1e:ed: e2:78:7b:8f:cd:d0:5a:ed:86:34:47:59:6d:51:a1: 88:3f:2c:4b:f3:5b:ee:60:87:a6:de:90:02:cf:7b: be:2e:8f:d4:e5:52:09:1b:3e:c7:cb:a8:ca:1f:10: a2:2d:2d:06:a8:8e:f6:a9:01:97:63:37:49:ca:98: 32:b1:56:f9:4a:6a:55:3f:25:0b:f8:03:3f:cb:2c: 59:96:01:31:84:a2:e4:ec:22:18:a9:a9:b0:50:3d: c6:01:c9:e0:84:3a:6c:ef:c3:ae:ff:4b:70:c4:21: 61:3c:55:bf:15:41:bb:bb:26:cf:a3:ac:86:a4:dc: 53:86:35:f3:31:19:c7:ba:65:68:ae:bb:93:f3:05: da:2f:c6:95:0f:c0:b9:74:be:88:76:74:e3:98:b3: b5:2d:04:56:27:62:ca:b6:21:2e:ad:c0:d3:1f:59: 69:c1:e4:20:c2:db:48:50:d2:91:5d:4e:b7:01:de: c0:d5:7c:db:c3:bc:52:6e:f1:9c:ec:7f:e7:07:b2: d8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:39:B0:F2:E1:0F:C2:E0:24:C4:66:02:B0:C3:46:A5:4F:BA:39:A7 X509v3 Authority Key Identifier: keyid:C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/QTmw8uEPwuAkxGYCsMNGpU-6Oac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.203.244.0/24 Signature Algorithm: sha256WithRSAEncryption bb:47:43:a5:00:9b:a9:40:2a:04:e6:b6:5e:ca:e3:2e:3c:03: b2:fe:b6:ad:1c:70:9a:9f:d4:ef:6a:f1:de:1e:0d:74:74:da: 98:b3:a2:93:5e:8d:8e:d3:cc:2e:98:66:4d:f7:18:d3:a0:60: 69:61:06:b1:ad:8e:d0:fa:86:3a:05:5f:c0:06:6b:60:9f:61: eb:b7:03:7b:ce:c1:43:5d:65:87:c7:39:69:54:2b:41:88:94: 71:6b:5a:a9:5d:56:96:e6:32:11:b0:b1:5a:3d:f9:30:50:14: 57:a7:f3:0d:62:80:8f:16:15:e2:fd:51:a8:68:1a:dd:35:ea: 81:e0:84:e2:e0:89:ec:62:80:14:d6:11:1e:4f:7c:6f:bf:06: 77:a8:05:40:8c:79:63:4f:9a:85:d3:b7:61:56:b2:08:4a:cb: 07:f2:0c:b3:1a:5b:2b:67:1b:12:75:6a:75:63:2f:38:a1:d0: 7f:fc:5c:8b:01:56:36:e8:03:5b:cd:5b:0e:4a:1c:b3:d4:db: b3:d2:4c:c9:38:70:99:c8:c9:d4:f0:cf:1c:33:dd:80:d2:f1: d7:b2:7e:31:76:c5:70:3d:22:1a:40:e1:e2:3d:b3:c9:32:e7: c5:b5:ff:ec:ed:24:4d:1f:4f:5d:85:a7:49:43:09:f9:4f:12: 70:d3:66:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N5k3fVrIrDMMaT31qnJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYWIyNDdjNjM2YWQzODliZjlmOGM1MDc0YzgyMjAyMzBl OGVkY2MwHhcNMjYwMTAyMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTM5YjBmMmUxMGZjMmUwMjRjNDY2MDJiMGMzNDZhNTRmYmEzOWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstvwjkuhfSoThyEH4Ib4S0RqQm3B g1J+2lMr74emISyyfz3CDLnFF9Vw8EDfm3O3W14KGx9lQA1mHu3ieHuPzdBa7YY0 R1ltUaGIPyxL81vuYIem3pACz3u+Lo/U5VIJGz7Hy6jKHxCiLS0GqI72qQGXYzdJ ypgysVb5SmpVPyUL+AM/yyxZlgExhKLk7CIYqamwUD3GAcnghDps78Ou/0twxCFh PFW/FUG7uybPo6yGpNxThjXzMRnHumVorruT8wXaL8aVD8C5dL6IdnTjmLO1LQRW J2LKtiEurcDTH1lpweQgwttIUNKRXU63Ad7A1Xzbw7xSbvGc7H/nB7LYVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEE5sPLhD8LgJMRmArDDRqVPujmnMB8GA1UdIwQY MBaAFMGrJHxjatOJv5+MUHTIIgIw6O3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2Fza2ZHTnEwNG1fbjR4UWRNZ2lBakRvN2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81NjY5MzgtZTJhOC00OGIzLTgxNmIt MjdiMTEzY2ZmNTNiLzEvUVRtdzh1RVB3dUFreEdZQ3NNTkdwVS02T2FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81NjY5MzgtZTJhOC00OGIzLTgxNmItMjdiMTEzY2ZmNTNi LzEvd2Fza2ZHTnEwNG1fbjR4UWRNZ2lBakRvN2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJcv0MA0G CSqGSIb3DQEBCwUAA4IBAQC7R0OlAJupQCoE5rZeyuMuPAOy/ratHHCan9TvavHe Hg10dNqYs6KTXo2O08wumGZN9xjToGBpYQaxrY7Q+oY6BV/ABmtgn2HrtwN7zsFD XWWHxzlpVCtBiJRxa1qpXVaW5jIRsLFaPfkwUBRXp/MNYoCPFhXi/VGoaBrdNeqB 4ITi4InsYoAU1hEeT3xvvwZ3qAVAjHljT5qF07dhVrIISssH8gyzGlsrZxsSdWp1 Yy84odB//FyLAVY26ANbzVsOShyz1Nuz0kzJOHCZyMnU8M8cM92A0vHXsn4xdsVw PSIaQOHiPbPJMufFtf/s7SRNH09dhadJQwn5TxJw02bM -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:13 2026 by rpki-client