This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/QPupw3rP2f5Jivi4SxaBbGE6eqM.roa File: QPupw3rP2f5Jivi4SxaBbGE6eqM.roa (raw, json) Hash identifier: KP++DGfsZGB7GL9ySK3Y6Xgm2FRgB01XieKkXEEpykk= Subject key identifier: 40:FB:A9:C3:7A:CF:D9:FE:49:8A:F8:B8:4B:16:81:6C:61:3A:7A:A3 Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Certificate serial: 019B7C11F0A0A99CFA852AE394115C7B3A55 Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/QPupw3rP2f5Jivi4SxaBbGE6eqM.roa Signing time: Fri 02 Jan 2026 00:18:29 +0000 ROA not before: Fri 02 Jan 2026 00:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64447 IP address blocks: 188.119.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:f0:a0:a9:9c:fa:85:2a:e3:94:11:5c:7b:3a:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Validity Not Before: Jan 2 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40fba9c37acfd9fe498af8b84b16816c613a7aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f9:9b:c2:e5:12:48:6e:83:02:f4:1d:ca:8c: e0:f9:0f:94:d7:93:7e:7d:65:15:72:7e:e7:ed:fc: f4:d3:24:1d:8d:f7:88:44:bc:c9:e8:be:ff:c5:c0: 81:35:b9:8e:13:85:7d:dd:82:c9:93:69:11:92:71: 3e:9a:18:c5:6a:ca:6f:37:2d:6f:12:10:aa:2b:8f: 06:98:41:01:22:eb:af:49:c4:93:60:e5:ac:21:79: b5:90:b4:3b:56:6f:fa:23:fe:2b:9d:b9:bd:39:27: 51:4d:44:67:06:84:4e:ca:58:25:d7:99:b4:71:5c: 2a:53:5b:ab:99:c7:6b:be:36:29:de:88:74:65:62: a9:71:ef:10:01:68:1e:e3:a1:ba:21:c5:14:66:bf: 09:65:22:55:4f:35:7b:31:7d:4a:0f:e9:d4:d0:32: 6d:28:de:2d:3a:09:3b:91:fb:37:19:d9:df:65:08: fe:61:28:da:cb:ae:d8:5a:b3:b4:98:93:80:74:8a: 29:df:27:8c:3f:3c:8f:7e:0b:ef:41:02:e6:de:d4: 20:cf:63:1c:e0:2d:ea:b9:11:1f:8a:d2:89:92:9d: 4f:25:ea:dc:aa:80:b2:87:ff:d9:93:d2:bb:2b:be: 0f:16:f5:a7:76:18:f3:00:be:68:a0:8a:20:19:c1: 67:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FB:A9:C3:7A:CF:D9:FE:49:8A:F8:B8:4B:16:81:6C:61:3A:7A:A3 X509v3 Authority Key Identifier: keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/QPupw3rP2f5Jivi4SxaBbGE6eqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.119.29.0/24 Signature Algorithm: sha256WithRSAEncryption 45:b2:e9:3c:59:ba:37:f2:ff:bc:f2:9f:eb:49:7c:9c:cd:85: 21:5b:d5:48:c3:b9:ab:80:d8:bd:92:61:8a:13:73:4e:97:ae: 3a:c8:ab:a5:d5:6a:0f:1b:3b:57:06:1b:b5:2d:63:b2:48:bf: 3b:a9:5c:48:1c:59:7c:bb:ac:aa:5a:66:3b:27:5e:e7:e9:bb: 85:a4:b8:ae:54:eb:d4:0a:3c:8a:ad:18:5b:65:83:7b:b4:c8: de:aa:49:89:cd:f8:36:bc:83:ec:19:45:be:9a:34:16:fd:98: 55:18:54:c8:1a:a7:84:7f:cb:80:c0:a2:5b:78:e9:f5:7e:d2: ca:82:cd:17:18:8d:dc:d6:e4:0f:77:58:20:0e:71:dc:90:e1: f0:2b:00:b9:66:1b:d1:27:5c:9f:b9:7c:3e:89:d3:70:aa:9f: 1b:92:8d:d5:a7:81:0b:d3:5f:a1:9f:a3:84:d4:fd:b8:9a:6f: fd:dd:ad:c3:8e:7a:9d:71:a7:aa:de:4e:05:4a:80:fa:14:65: 1b:d4:e9:62:f5:70:c2:17:22:f7:85:66:34:55:bf:f8:ed:28: da:20:8c:e0:68:76:26:20:71:79:0f:e1:76:97:83:0b:b7:85: a8:af:db:39:1d:77:91:53:1a:f2:72:fe:fa:4f:a8:91:55:d2: e1:ab:8c:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EfCgqZz6hSrjlBFcezpVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMGQ1YzI5YTM0Mzk3MDNkODliNWFiZjAzYTc1ZDg2MTc3 MWJlZjQwHhcNMjYwMTAyMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGZiYTljMzdhY2ZkOWZlNDk4YWY4Yjg0YjE2ODE2YzYxM2E3YWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPmbwuUSSG6DAvQdyozg+Q+U15N+ fWUVcn7n7fz00yQdjfeIRLzJ6L7/xcCBNbmOE4V93YLJk2kRknE+mhjFaspvNy1v EhCqK48GmEEBIuuvScSTYOWsIXm1kLQ7Vm/6I/4rnbm9OSdRTURnBoROylgl15m0 cVwqU1urmcdrvjYp3oh0ZWKpce8QAWge46G6IcUUZr8JZSJVTzV7MX1KD+nU0DJt KN4tOgk7kfs3GdnfZQj+YSjay67YWrO0mJOAdIop3yeMPzyPfgvvQQLm3tQgz2Mc 4C3quREfitKJkp1PJercqoCyh//Zk9K7K74PFvWndhjzAL5ooIogGcFnfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFED7qcN6z9n+SYr4uEsWgWxhOnqjMB8GA1UdIwQY MBaAFOENXCmjQ5cD2JtavwOnXYYXcb70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWIt ZTQyYTU4MDY0YTYzLzEvUVB1cHczclAyZjVKaXZpNFN4YUJiR0U2ZXFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWItZTQyYTU4MDY0YTYz LzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvHcdMA0G CSqGSIb3DQEBCwUAA4IBAQBFsuk8Wbo38v+88p/rSXyczYUhW9VIw7mrgNi9kmGK E3NOl646yKul1WoPGztXBhu1LWOySL87qVxIHFl8u6yqWmY7J17n6buFpLiuVOvU CjyKrRhbZYN7tMjeqkmJzfg2vIPsGUW+mjQW/ZhVGFTIGqeEf8uAwKJbeOn1ftLK gs0XGI3c1uQPd1ggDnHckOHwKwC5ZhvRJ1yfuXw+idNwqp8bko3Vp4EL01+hn6OE 1P24mm/93a3Djnqdcaeq3k4FSoD6FGUb1Oli9XDCFyL3hWY0Vb/47SjaIIzgaHYm IHF5D+F2l4MLt4Wor9s5HXeRUxrycv76T6iRVdLhq4zn -----END CERTIFICATE-----Generated at Mon Jan 26 14:17:29 2026 by rpki-client