This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/qJvIvuHxw3BWV9q5PsyFYgxRgY0.roa File: qJvIvuHxw3BWV9q5PsyFYgxRgY0.roa (raw, json) Hash identifier: Eo5bkIIK3HAMHUwIFDretPiZmKVS5rrzcbbJ0Re3lsU= Subject key identifier: A8:9B:C8:BE:E1:F1:C3:70:56:57:DA:B9:3E:CC:85:62:0C:51:81:8D Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82B8726AD9F2B642BBB69739BF8FB3 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/qJvIvuHxw3BWV9q5PsyFYgxRgY0.roa Signing time: Fri 02 Jan 2026 16:20:31 +0000 ROA not before: Fri 02 Jan 2026 16:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30823 IP address blocks: 78.108.216.0/24 maxlen: 24 185.234.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:b8:72:6a:d9:f2:b6:42:bb:b6:97:39:bf:8f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a89bc8bee1f1c3705657dab93ecc85620c51818d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:56:4c:31:c7:7e:28:ac:a3:97:35:87:c0:34: 8f:ad:72:07:ee:1d:9b:f1:0a:23:a0:72:2c:a5:25: 83:c6:a5:c1:7c:ff:6a:4a:da:64:4d:7f:8d:73:8f: 0c:c2:05:46:3a:b5:07:89:81:2f:41:81:b4:c4:ee: f8:52:e2:45:6e:03:4e:11:6b:5c:03:d5:37:68:f2: 78:e1:ad:2b:06:50:aa:97:4c:79:09:a9:05:01:5b: bc:d6:d1:f4:ae:c1:ce:d2:b5:c0:fc:73:6d:97:33: 1c:ad:ae:23:46:6d:50:2c:4f:6d:95:57:ff:5c:69: fc:84:12:7b:6e:28:26:cf:65:3a:9b:94:6e:a8:71: 83:4d:46:d5:c9:09:88:b5:54:e8:b1:ac:73:4b:57: b4:9a:4c:04:e5:e3:a7:30:8c:58:b3:1f:e7:cb:bf: 10:49:71:67:2c:30:06:2a:37:95:d4:ae:a3:c4:12: 11:14:a9:0d:e2:fa:ef:22:96:71:ca:5c:5d:4c:21: ea:91:c4:7c:3f:b6:f2:d1:bf:14:bb:ee:7d:30:79: ef:7f:06:87:c9:d5:85:3c:a4:cf:b5:cc:5e:14:a6: 22:e1:4e:28:f6:3f:2d:a5:ab:7b:1d:48:59:77:17: 15:5a:cb:97:30:ee:3e:58:ac:2c:c1:c6:87:08:ef: 72:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9B:C8:BE:E1:F1:C3:70:56:57:DA:B9:3E:CC:85:62:0C:51:81:8D X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/qJvIvuHxw3BWV9q5PsyFYgxRgY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.216.0/24 185.234.72.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:f6:28:c2:ad:c2:00:b2:64:84:82:75:47:f4:9b:e7:56:f2: ff:bb:36:e2:01:4c:78:2b:85:ad:c3:0c:41:49:d3:ca:35:a5: 67:ce:fd:43:f1:3d:f5:97:9f:7c:11:4d:4c:16:0c:d1:ec:bb: 40:24:54:c5:d0:a0:bb:9c:33:c5:10:99:7d:99:7e:e4:b7:9d: 24:c4:e3:74:b6:b5:da:1b:23:6c:80:bb:91:3a:0c:04:61:e1: 58:71:41:47:05:54:26:17:4a:61:4b:c3:fa:ec:7c:28:e1:d7: c8:eb:c7:20:c6:f8:6d:18:f4:da:8d:00:a6:c2:91:1d:d2:97: 51:de:eb:bf:00:db:8c:f1:09:0d:cb:0a:17:d4:c9:36:71:a9: 53:18:29:51:db:f9:a4:9c:43:5b:2f:23:02:1a:24:a7:25:e7: 1e:21:d2:56:17:f7:55:aa:52:7b:d6:ea:5b:15:ad:d2:94:13: 04:12:e9:72:0e:2e:fb:5c:d6:ca:69:2d:f3:41:be:da:27:61: 7e:65:f6:55:a7:47:09:c2:ed:c0:1f:ce:27:8c:8b:74:c9:57: 74:08:cc:c1:b3:ef:aa:18:8c:c9:a4:f7:22:a2:c3:c7:1d:a3: 08:c7:11:29:c2:f2:37:69:08:ac:29:ce:45:9c:cd:7b:cc:32: ed:43:a1:96 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/grhyatnytkK7tpc5v4+zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODliYzhiZWUxZjFjMzcwNTY1N2RhYjkzZWNjODU2MjBjNTE4MThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41ZMMcd+KKyjlzWHwDSPrXIH7h2b 8QojoHIspSWDxqXBfP9qStpkTX+Nc48MwgVGOrUHiYEvQYG0xO74UuJFbgNOEWtc A9U3aPJ44a0rBlCql0x5CakFAVu81tH0rsHO0rXA/HNtlzMcra4jRm1QLE9tlVf/ XGn8hBJ7bigmz2U6m5RuqHGDTUbVyQmItVTosaxzS1e0mkwE5eOnMIxYsx/ny78Q SXFnLDAGKjeV1K6jxBIRFKkN4vrvIpZxylxdTCHqkcR8P7by0b8Uu+59MHnvfwaH ydWFPKTPtcxeFKYi4U4o9j8tpat7HUhZdxcVWsuXMO4+WKwswcaHCO9yvQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKibyL7h8cNwVlfauT7MhWIMUYGNMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvcUp2SXZ1SHh3M0JXVjlxNVBzeUZZZ3hSZ1kwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATmzYAwQA uepIMA0GCSqGSIb3DQEBCwUAA4IBAQCM9ijCrcIAsmSEgnVH9JvnVvL/uzbiAUx4 K4WtwwxBSdPKNaVnzv1D8T31l598EU1MFgzR7LtAJFTF0KC7nDPFEJl9mX7kt50k xON0trXaGyNsgLuROgwEYeFYcUFHBVQmF0phS8P67Hwo4dfI68cgxvhtGPTajQCm wpEd0pdR3uu/ANuM8QkNywoX1Mk2calTGClR2/mknENbLyMCGiSnJeceIdJWF/dV qlJ71upbFa3SlBMEEulyDi77XNbKaS3zQb7aJ2F+ZfZVp0cJwu3AH84njIt0yVd0 CMzBs++qGIzJpPciosPHHaMIxxEpwvI3aQisKc5FnM17zDLtQ6GW -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:16 2026 by rpki-client