This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1-Qna1OrV4cSQMXj31kug13qDXgc.roa File: 1-Qna1OrV4cSQMXj31kug13qDXgc.roa (raw, json) Hash identifier: SyJ0yLwfChAOd2M54e9tXSrpDwGoaCX0kaqehYW2bgA= Subject key identifier: F9:09:DA:D4:EA:D5:E1:C4:90:31:78:F7:D6:4B:A0:D7:7A:83:5E:07 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C13085F0231EFA20901FCF3B6309611 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1-Qna1OrV4cSQMXj31kug13qDXgc.roa Signing time: Fri 02 Jan 2026 00:19:40 +0000 ROA not before: Fri 02 Jan 2026 00:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209880 IP address blocks: 212.243.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:08:5f:02:31:ef:a2:09:01:fc:f3:b6:30:96:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f909dad4ead5e1c4903178f7d64ba0d77a835e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:07:98:7f:57:fd:75:49:b7:fc:9c:a1:02:05: 70:4c:85:74:48:9f:a6:0e:71:1a:e4:c1:47:cb:ea: 8d:b1:fd:34:ea:ee:19:76:3a:c9:7c:08:5d:bf:3b: c9:95:98:ba:e9:ba:0c:f2:48:62:d6:3b:43:be:f0: a5:fb:aa:73:04:d9:1a:19:29:2f:8a:6a:83:7e:82: 9d:cd:77:09:95:c6:c9:38:f8:06:76:a6:5b:82:3e: f2:71:6f:0d:7a:39:9b:8e:14:1f:f6:a0:96:15:36: c8:e9:6b:2c:18:1a:7b:68:04:37:d6:77:f0:c0:17: 75:aa:06:71:72:da:71:d5:e9:f6:47:37:0c:19:7b: 6e:dd:bc:c3:a1:e3:9f:5a:ca:ee:1e:71:5e:12:cd: 6a:90:c4:36:2a:d5:af:67:10:53:25:43:0d:92:12: 63:4c:4a:1a:e7:71:6f:cd:ae:2c:c4:db:97:9d:39: 5b:15:05:7b:47:c7:55:92:21:fc:91:03:64:06:88: 17:89:3b:a6:ae:18:76:09:19:3c:93:71:90:3d:bf: 47:72:b7:03:fb:b1:0b:9f:f0:35:5c:6c:2c:66:c3: fe:50:73:57:c2:ec:79:42:29:11:52:59:94:70:d2: 1d:cf:a7:34:a6:f2:f6:ba:0f:2b:4f:0a:d1:64:d8: 91:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:09:DA:D4:EA:D5:E1:C4:90:31:78:F7:D6:4B:A0:D7:7A:83:5E:07 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1-Qna1OrV4cSQMXj31kug13qDXgc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.243.125.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:1a:ba:5a:6b:2c:52:ee:9c:e8:56:e3:59:7e:42:12:16:76: d0:f9:89:47:ac:d1:cc:49:77:86:b0:5c:14:a7:df:86:4d:94: a4:ac:26:c0:b5:8e:dc:ca:c6:f2:ff:53:7f:bc:1b:50:30:52: 16:c6:4e:bd:60:57:a6:5b:e5:4a:45:01:23:7b:03:8f:d3:45: 55:68:86:86:a4:ff:00:db:69:5e:52:bb:95:6c:71:e6:0b:cb: d4:57:69:3f:19:fa:24:80:3a:36:31:12:be:bf:35:e0:0c:3c: 1d:5d:ae:e7:32:94:69:a2:0a:00:2a:b8:6f:1d:7d:05:e4:70: 85:fd:2a:05:3f:e0:3a:32:33:ec:ce:4e:e8:0a:b5:17:21:1e: 5c:0f:08:e6:1f:f7:cf:46:c7:64:dc:e0:71:2a:c8:8a:42:e4: 1f:36:38:95:bf:f5:7a:5e:f9:8a:4a:97:24:3f:83:7b:03:b5: 41:ca:dc:78:72:2e:c7:fe:8e:96:2f:d0:c7:9e:2c:0c:b4:6c: 60:84:f7:be:c1:23:7b:fd:72:01:19:41:4a:9d:00:0d:42:00: 15:5d:d9:19:9e:9c:1e:54:15:3f:94:0a:78:47:69:b2:e1:60: 6e:b8:c7:fe:57:ac:04:54:b7:84:00:80:fd:93:d4:df:41:05: e2:b7:c0:6c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8EwhfAjHvogkB/PO2MJYRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTA5ZGFkNGVhZDVlMWM0OTAzMTc4ZjdkNjRiYTBkNzdhODM1ZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQeYf1f9dUm3/JyhAgVwTIV0SJ+m DnEa5MFHy+qNsf006u4ZdjrJfAhdvzvJlZi66boM8khi1jtDvvCl+6pzBNkaGSkv imqDfoKdzXcJlcbJOPgGdqZbgj7ycW8NejmbjhQf9qCWFTbI6WssGBp7aAQ31nfw wBd1qgZxctpx1en2RzcMGXtu3bzDoeOfWsruHnFeEs1qkMQ2KtWvZxBTJUMNkhJj TEoa53Fvza4sxNuXnTlbFQV7R8dVkiH8kQNkBogXiTumrhh2CRk8k3GQPb9HcrcD +7ELn/A1XGwsZsP+UHNXwux5QikRUlmUcNIdz6c0pvL2ug8rTwrRZNiRcwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPkJ2tTq1eHEkDF499ZLoNd6g14HMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvMS1RbmExT3JWNGNTUU1YajMxa3VnMTNxRFhnYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjkvYzhjNmY2LTU5NWMtNDViMS1hNzZlLWJkMTkyNjc2Yzli Yi8xL0ptUHoyeFV1QlZyQlJiMjdRcDRCaGxRZ1RJMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANTzfTAN BgkqhkiG9w0BAQsFAAOCAQEAXxq6WmssUu6c6FbjWX5CEhZ20PmJR6zRzEl3hrBc FKffhk2UpKwmwLWO3MrG8v9Tf7wbUDBSFsZOvWBXplvlSkUBI3sDj9NFVWiGhqT/ ANtpXlK7lWxx5gvL1FdpPxn6JIA6NjESvr814Aw8HV2u5zKUaaIKACq4bx19BeRw hf0qBT/gOjIz7M5O6Aq1FyEeXA8I5h/3z0bHZNzgcSrIikLkHzY4lb/1el75ikqX JD+DewO1QcrceHIux/6Oli/Qx54sDLRsYIT3vsEje/1yARlBSp0ADUIAFV3ZGZ6c HlQVP5QKeEdpsuFgbrjH/lesBFS3hACA/ZPU30EF4rfAbA== -----END CERTIFICATE-----Generated at Mon Jan 26 17:46:27 2026 by rpki-client