This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/QaDdxTDIKujsHj1_R2vhxiuywYo.roa File: QaDdxTDIKujsHj1_R2vhxiuywYo.roa (raw, json) Hash identifier: cYzKZHRBZg4cQMpG2FirPav999wiYn13B4xqmO7W52M= Subject key identifier: 41:A0:DD:C5:30:C8:2A:E8:EC:1E:3D:7F:47:6B:E1:C6:2B:B2:C1:8A Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019B79ED1B8E38052B25B79DC00E8F72DCEB Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/QaDdxTDIKujsHj1_R2vhxiuywYo.roa Signing time: Thu 01 Jan 2026 14:19:00 +0000 ROA not before: Thu 01 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196802 IP address blocks: 148.81.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1b:8e:38:05:2b:25:b7:9d:c0:0e:8f:72:dc:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Jan 1 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41a0ddc530c82ae8ec1e3d7f476be1c62bb2c18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:55:5a:dc:82:d8:b6:c9:50:78:86:bb:d4:ac: 5e:b9:33:58:fa:46:40:0a:68:ca:65:7e:62:14:e5: 0c:e7:bb:1c:f2:22:56:ad:ae:3c:72:a7:b7:20:68: 55:15:48:2b:3a:4f:14:3e:bf:b9:40:7b:4d:ef:12: 8c:f3:e1:4f:59:13:73:95:7d:34:a2:90:0a:15:a6: 22:e1:d2:79:3b:97:06:5a:f0:d2:04:9f:1a:90:3b: a5:8b:cf:9a:11:d6:e7:cf:da:24:72:9e:a8:cd:68: f0:88:6d:91:cf:23:a1:4b:c4:aa:e9:25:27:5e:c5: 14:06:45:a6:91:fa:9a:3d:7d:e2:79:1f:a9:1d:ac: 42:23:af:ed:96:04:9d:33:91:da:83:c4:75:c3:22: eb:a9:3c:bf:09:9e:e3:b7:29:45:0e:6f:48:9b:ad: 5f:5a:ef:61:a4:d9:7c:e9:c9:41:ec:ae:7b:3b:23: 9c:b8:b0:bb:53:0d:f6:aa:5e:a3:75:84:38:c0:fd: 25:6a:be:c4:72:48:d1:1f:ae:1b:7e:bf:c5:ab:e5: 01:5b:86:5b:1b:9d:c8:72:80:93:d6:94:ad:ee:fb: 77:5c:ef:b8:82:30:d1:c8:19:2c:22:93:6d:92:40: 3c:4c:a5:d6:6b:1d:15:9b:2d:1b:94:ce:9a:a9:62: bc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A0:DD:C5:30:C8:2A:E8:EC:1E:3D:7F:47:6B:E1:C6:2B:B2:C1:8A X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/QaDdxTDIKujsHj1_R2vhxiuywYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.81.117.0/24 Signature Algorithm: sha256WithRSAEncryption 29:2f:6f:86:f5:38:f2:46:46:9e:30:2f:8c:2c:81:a8:df:52: ac:7b:81:12:1b:f8:74:58:fa:5e:5f:2b:6f:4e:7c:a4:46:33: e1:da:f2:7d:34:8e:f7:4f:1d:b8:8d:d3:b0:b2:a2:ca:89:fe: 70:34:8d:cf:26:78:9a:26:29:88:a5:a8:c7:57:f6:18:51:62: a3:1c:98:42:61:10:9a:35:a7:f9:9e:19:0b:22:ce:59:a9:be: 50:3a:4a:de:4b:2b:1b:73:d0:03:6e:0f:53:75:7c:1e:cf:69: 21:d8:18:92:c8:14:1f:2d:66:56:90:d9:cf:2e:c8:c9:97:fa: 20:5e:93:5d:be:28:e6:75:65:26:8a:60:83:1f:f2:69:cd:c1: b7:95:53:cb:2a:cb:9e:af:bf:82:a8:7a:9b:25:49:d3:90:08: fb:6e:f2:ec:ab:5d:f9:c6:e7:5b:00:e8:95:32:65:06:a7:ac: 33:96:78:c4:66:65:be:fc:57:86:38:04:fd:44:36:31:90:25: 43:63:30:b6:5c:f0:08:ae:88:88:37:04:15:db:35:a4:a9:97: ea:15:61:17:2b:be:d1:40:6f:10:f0:fd:87:dc:89:e4:67:04: 07:24:b3:ff:5c:02:e8:4c:55:03:e9:d8:8d:a3:32:ea:9e:3d: 2d:f3:1e:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57RuOOAUrJbedwA6PctzrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjYwMTAxMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWEwZGRjNTMwYzgyYWU4ZWMxZTNkN2Y0NzZiZTFjNjJiYjJjMThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lVa3ILYtslQeIa71KxeuTNY+kZA CmjKZX5iFOUM57sc8iJWra48cqe3IGhVFUgrOk8UPr+5QHtN7xKM8+FPWRNzlX00 opAKFaYi4dJ5O5cGWvDSBJ8akDuli8+aEdbnz9okcp6ozWjwiG2RzyOhS8Sq6SUn XsUUBkWmkfqaPX3ieR+pHaxCI6/tlgSdM5Hag8R1wyLrqTy/CZ7jtylFDm9Im61f Wu9hpNl86clB7K57OyOcuLC7Uw32ql6jdYQ4wP0lar7EckjRH64bfr/Fq+UBW4Zb G53IcoCT1pSt7vt3XO+4gjDRyBksIpNtkkA8TKXWax0Vmy0blM6aqWK8ewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEGg3cUwyCro7B49f0dr4cYrssGKMB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEvUWFEZHhURElLdWpzSGoxX1Iydmh4aXV5d1lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlFF1MA0G CSqGSIb3DQEBCwUAA4IBAQApL2+G9TjyRkaeMC+MLIGo31Kse4ESG/h0WPpeXytv TnykRjPh2vJ9NI73Tx24jdOwsqLKif5wNI3PJniaJimIpajHV/YYUWKjHJhCYRCa Naf5nhkLIs5Zqb5QOkreSysbc9ADbg9TdXwez2kh2BiSyBQfLWZWkNnPLsjJl/og XpNdvijmdWUmimCDH/JpzcG3lVPLKsuer7+CqHqbJUnTkAj7bvLsq135xudbAOiV MmUGp6wzlnjEZmW+/FeGOAT9RDYxkCVDYzC2XPAIroiINwQV2zWkqZfqFWEXK77R QG8Q8P2H3InkZwQHJLP/XALoTFUD6diNozLqnj0t8x4u -----END CERTIFICATE-----Generated at Mon Jan 26 23:21:25 2026 by rpki-client