This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/qJfYvUGvncZwCFwsu8Rm102u7Iw.roa File: qJfYvUGvncZwCFwsu8Rm102u7Iw.roa (raw, json) Hash identifier: 89pHj3FKa2cbytktSzaX9xTbeqe909o1UsEL9H14rvA= Subject key identifier: A8:97:D8:BD:41:AF:9D:C6:70:08:5C:2C:BB:C4:66:D7:4D:AE:EC:8C Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E6C114603AF3035DC5F950F1BBA72 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/qJfYvUGvncZwCFwsu8Rm102u7Iw.roa Signing time: Thu 01 Jan 2026 12:18:06 +0000 ROA not before: Thu 01 Jan 2026 12:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 45.149.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:6c:11:46:03:af:30:35:dc:5f:95:0f:1b:ba:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a897d8bd41af9dc670085c2cbbc466d74daeec8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2c:38:f7:85:36:bf:aa:81:bc:51:9b:21:ef: 79:54:e3:ca:02:fc:71:f3:df:bd:18:e2:a0:09:c3: c7:42:ba:39:9e:9c:39:27:b7:be:64:61:e1:cd:f8: 11:ac:1d:3b:bd:32:c1:3d:76:34:cb:e9:1c:34:5e: 43:7a:ab:9e:ea:59:13:fb:ad:3f:20:5e:ea:72:78: e6:ad:35:31:67:9e:b6:09:39:87:84:71:0b:3d:85: 78:97:e3:41:f9:20:95:88:a2:8b:51:cf:df:4a:94: 79:68:f8:59:76:df:b3:9e:03:23:c3:f5:7e:a6:b0: 55:74:ee:ad:10:d9:ff:af:90:7b:47:06:a7:c0:c0: 24:db:fe:af:c9:81:9f:0a:0d:c2:ab:5f:ec:ab:ba: 64:b8:58:a9:89:25:ed:ec:8f:88:6a:6e:13:96:f6: 33:11:03:0c:cd:20:05:aa:98:bf:c4:78:98:17:35: bd:79:5f:6e:a8:26:e8:7b:1c:c4:d2:51:a7:69:2a: 32:95:6e:69:92:d6:b6:7b:01:bc:4b:3b:fd:3a:3a: c7:e7:ba:c2:c4:e9:4c:df:53:4d:fc:ca:b6:04:83: 80:05:6e:db:69:a7:1e:30:07:04:41:e3:e7:37:83: 07:43:62:66:58:8a:f5:93:16:33:7b:b3:7d:78:31: 52:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:97:D8:BD:41:AF:9D:C6:70:08:5C:2C:BB:C4:66:D7:4D:AE:EC:8C X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/qJfYvUGvncZwCFwsu8Rm102u7Iw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.25.0/24 Signature Algorithm: sha256WithRSAEncryption 27:39:a6:59:f1:f9:c6:57:34:dc:27:16:18:d4:e0:31:5a:1e: 07:e4:f0:18:42:b2:3d:94:76:ea:98:14:15:f8:42:72:78:de: d0:58:b0:18:d6:1a:ca:64:8e:be:1d:4a:7f:08:db:de:da:da: 15:df:b0:c2:4c:40:a0:a8:a8:38:d8:0d:36:c8:d7:e2:32:8f: fa:3b:ed:29:dc:87:b3:94:98:72:22:d8:3b:af:0e:70:9a:29: 5d:78:38:25:03:67:12:99:cf:7c:62:46:eb:de:30:df:4a:4e: 87:94:f8:a0:2b:fb:d6:a1:c4:00:fd:ec:6c:d0:d7:78:45:f0: 94:90:e6:4d:86:b6:08:d3:59:b7:4f:5c:73:77:d1:85:3a:d9: 40:93:77:b9:e7:f6:24:d8:4e:6c:6b:cb:3c:4d:40:49:ae:d7: 17:a1:8f:18:cd:68:80:89:c0:82:e6:1b:4d:ec:86:c6:87:cf: 5d:f6:16:cd:43:7b:53:17:e0:69:28:ef:bf:b1:a5:88:73:17: 22:72:3b:82:89:51:e9:7e:7d:9c:ba:20:bf:fe:ec:f7:3d:dc: 7b:a8:88:4d:0f:71:f4:2e:b9:da:12:d2:49:b7:f4:ad:fb:f9: 1a:e6:0d:37:1a:b2:0d:47:b1:6d:07:0a:1b:a1:e3:f7:fc:74: 36:2d:0c:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fmwRRgOvMDXcX5UPG7pyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODk3ZDhiZDQxYWY5ZGM2NzAwODVjMmNiYmM0NjZkNzRkYWVlYzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyw494U2v6qBvFGbIe95VOPKAvxx 89+9GOKgCcPHQro5npw5J7e+ZGHhzfgRrB07vTLBPXY0y+kcNF5Deque6lkT+60/ IF7qcnjmrTUxZ562CTmHhHELPYV4l+NB+SCViKKLUc/fSpR5aPhZdt+zngMjw/V+ prBVdO6tENn/r5B7RwanwMAk2/6vyYGfCg3Cq1/sq7pkuFipiSXt7I+Iam4TlvYz EQMMzSAFqpi/xHiYFzW9eV9uqCboexzE0lGnaSoylW5pkta2ewG8Szv9OjrH57rC xOlM31NN/Mq2BIOABW7baaceMAcEQePnN4MHQ2JmWIr1kxYze7N9eDFSrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKiX2L1Br53GcAhcLLvEZtdNruyMMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvcUpmWXZVR3ZuY1p3Q0Z3c3U4Um0xMDJ1N0l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZUZMA0G CSqGSIb3DQEBCwUAA4IBAQAnOaZZ8fnGVzTcJxYY1OAxWh4H5PAYQrI9lHbqmBQV +EJyeN7QWLAY1hrKZI6+HUp/CNve2toV37DCTECgqKg42A02yNfiMo/6O+0p3Iez lJhyItg7rw5wmildeDglA2cSmc98Ykbr3jDfSk6HlPigK/vWocQA/exs0Nd4RfCU kOZNhrYI01m3T1xzd9GFOtlAk3e55/Yk2E5sa8s8TUBJrtcXoY8YzWiAicCC5htN 7IbGh89d9hbNQ3tTF+BpKO+/saWIcxcicjuCiVHpfn2cuiC//uz3Pdx7qIhND3H0 LrnaEtJJt/St+/ka5g03GrINR7FtBwoboeP3/HQ2LQxP -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:12 2026 by rpki-client