This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/QlBIuHXJV34-HRgZJecpCSsUU10.roa File: QlBIuHXJV34-HRgZJecpCSsUU10.roa (raw, json) Hash identifier: 4zPQ9GZzH+rReoGUvyDkVlboTCPsAVjyxr06dsvIUCc= Subject key identifier: 42:50:48:B8:75:C9:57:7E:3E:1D:18:19:25:E7:29:09:2B:14:53:5D Certificate issuer: /CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713 Certificate serial: 019B77C7662CD70A0792988BA2C4DF695F5C Authority key identifier: 1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/QlBIuHXJV34-HRgZJecpCSsUU10.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 77.95.81.0/24 maxlen: 24 217.64.228.0/24 maxlen: 24 217.64.239.0/24 maxlen: 24 217.147.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:66:2c:d7:0a:07:92:98:8b:a2:c4:df:69:5f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713 Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=425048b875c9577e3e1d181925e729092b14535d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:71:ab:0f:0f:ef:17:c6:19:83:7d:04:fa: 48:6b:d2:84:bf:d0:1e:9d:c5:3b:19:a4:09:2f:3d: 67:17:63:62:a2:01:9d:56:b4:9f:17:7c:05:e5:b0: f1:39:14:83:f3:73:72:57:aa:21:6c:bf:29:17:88: bd:33:b0:a6:20:52:9f:23:15:0d:43:9d:8f:d1:a8: 87:40:9a:f3:f0:2b:f3:cf:4f:a8:5e:da:bb:d2:63: c9:87:23:ed:c8:d9:7f:d7:ae:06:4b:f0:4c:f5:9b: 31:37:8b:a3:69:45:37:4e:de:0d:66:ec:a7:d2:e7: 5b:07:2d:08:e8:7b:17:36:0e:94:20:15:dd:43:04: 20:ed:cc:db:21:9d:e4:84:2f:b8:64:64:2b:f8:20: 45:d3:f2:f5:73:b6:dd:84:d1:8d:84:30:75:3a:fe: 98:e7:f7:fb:e9:9c:e0:b7:dd:ad:0f:e0:9c:eb:0b: 9e:ba:7b:04:1b:47:a4:a8:4b:6a:15:31:07:77:f1: 02:f1:a6:e6:cd:6f:55:ee:6d:c1:8e:56:93:4f:88: bc:53:6d:dc:d9:d0:f2:29:0e:2d:47:29:b2:fc:c0: 7a:c6:e9:b4:92:b5:af:d9:4b:d7:4d:f6:eb:a5:ad: cc:9c:6f:08:13:5a:9a:03:0d:12:bd:c4:4a:11:87: 84:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:50:48:B8:75:C9:57:7E:3E:1D:18:19:25:E7:29:09:2B:14:53:5D X509v3 Authority Key Identifier: keyid:1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/QlBIuHXJV34-HRgZJecpCSsUU10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.81.0/24 217.64.228.0/24 217.64.239.0/24 217.147.71.0/24 Signature Algorithm: sha256WithRSAEncryption 37:d8:3c:b3:5d:34:1c:1f:0b:68:11:7a:42:58:1b:44:28:e5: cb:a0:f6:15:d2:7f:c8:83:38:1b:44:ee:5c:2a:2d:ce:38:85: 50:6d:38:b9:31:98:b2:97:1f:58:91:40:51:eb:54:e5:7c:87: 2b:2b:95:de:0c:75:e0:5b:cc:5b:57:01:76:fe:f3:3a:b8:25: bb:03:76:98:a4:ed:06:76:dd:b3:66:1c:bb:96:52:97:c0:36: e5:0f:a4:38:70:d1:f9:1d:cb:46:bf:60:e2:14:68:67:1f:2a: ae:78:5b:d8:dd:99:6e:dc:e3:19:54:19:d6:e9:c4:a0:49:a0: 60:d7:de:34:b6:c8:81:14:71:10:13:00:ae:89:42:87:5a:52: 07:48:a1:97:b6:5f:04:17:db:77:cc:91:db:81:52:51:cc:b9: 56:36:d8:33:2c:51:58:81:ce:fa:30:f0:65:6d:34:3a:36:e2: 12:2c:6e:85:ef:5a:2c:bd:8a:34:7f:c6:74:e2:04:6b:a9:bf: b9:e5:8e:50:c8:07:7b:fe:a2:5f:c2:fe:16:71:d6:03:0c:27: f4:95:4b:9c:cf:a3:45:f4:3e:ef:8b:40:60:25:6a:f3:d4:72: f8:bc:0f:6b:4b:36:2a:34:66:3a:8c:47:16:90:fc:f0:a6:18: d3:c4:d3:bc -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3x2Ys1woHkpiLosTfaV9cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlY2I5YmQ1ZWQ5NmU2OWRkYThmYzJhMWZlMDIxNDdhZGFl OGY3MTMwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjUwNDhiODc1Yzk1NzdlM2UxZDE4MTkyNWU3MjkwOTJiMTQ1MzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEJxqw8P7xfGGYN9BPpIa9KEv9Ae ncU7GaQJLz1nF2NiogGdVrSfF3wF5bDxORSD83NyV6ohbL8pF4i9M7CmIFKfIxUN Q52P0aiHQJrz8Cvzz0+oXtq70mPJhyPtyNl/164GS/BM9ZsxN4ujaUU3Tt4NZuyn 0udbBy0I6HsXNg6UIBXdQwQg7czbIZ3khC+4ZGQr+CBF0/L1c7bdhNGNhDB1Ov6Y 5/f76Zzgt92tD+Cc6wueunsEG0ekqEtqFTEHd/EC8abmzW9V7m3BjlaTT4i8U23c 2dDyKQ4tRymy/MB6xum0krWv2UvXTfbrpa3MnG8IE1qaAw0SvcRKEYeE8QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEJQSLh1yVd+Ph0YGSXnKQkrFFNdMB8GA1UdIwQY MBaAFB7Lm9Xtluad2o/Cof4CFHra6PcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHN1YjFlMlc1cDNhajhLaF9nSVVldHJvOXhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jMzQxNTAtNTkxMi00OTBjLWIzNWIt ZjU0ZmJmNjkxN2JjLzEvUWxCSXVIWEpWMzQtSFJnWkplY3BDU3NVVTEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9jMzQxNTAtNTkxMi00OTBjLWIzNWItZjU0ZmJmNjkxN2Jj LzEvSHN1YjFlMlc1cDNhajhLaF9nSVVldHJvOXhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATV9RAwQA 2UDkAwQA2UDvAwQA2ZNHMA0GCSqGSIb3DQEBCwUAA4IBAQA32DyzXTQcHwtoEXpC WBtEKOXLoPYV0n/IgzgbRO5cKi3OOIVQbTi5MZiylx9YkUBR61TlfIcrK5XeDHXg W8xbVwF2/vM6uCW7A3aYpO0Gdt2zZhy7llKXwDblD6Q4cNH5HctGv2DiFGhnHyqu eFvY3Zlu3OMZVBnW6cSgSaBg1940tsiBFHEQEwCuiUKHWlIHSKGXtl8EF9t3zJHb gVJRzLlWNtgzLFFYgc76MPBlbTQ6NuISLG6F71osvYo0f8Z04gRrqb+55Y5QyAd7 /qJfwv4WcdYDDCf0lUucz6NF9D7vi0BgJWrz1HL4vA9rSzYqNGY6jEcWkPzwphjT xNO8 -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:26 2026 by rpki-client