This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/Qpzdfxddg7sAd9HOkX4hdICsNh8.roa File: Qpzdfxddg7sAd9HOkX4hdICsNh8.roa (raw, json) Hash identifier: 4zKxw2hbsJ7DHleUFCRfkqUEw6l9X5X22tDEvhwM0Q4= Subject key identifier: 42:9C:DD:7F:17:5D:83:BB:00:77:D1:CE:91:7E:21:74:80:AC:36:1F Certificate issuer: /CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c Certificate serial: 019B78355D889520EDC99BABD9FA569E365A Authority key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/Qpzdfxddg7sAd9HOkX4hdICsNh8.roa Signing time: Thu 01 Jan 2026 06:18:41 +0000 ROA not before: Thu 01 Jan 2026 06:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209752 IP address blocks: 77.69.248.0/24 maxlen: 24 2001:1a40:10::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:5d:88:95:20:ed:c9:9b:ab:d9:fa:56:9e:36:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c Validity Not Before: Jan 1 06:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=429cdd7f175d83bb0077d1ce917e217480ac361f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:09:f8:2f:93:8c:3a:4b:29:56:56:38:e3:1d: 41:76:db:55:51:71:f6:8b:bb:48:bd:5e:8b:45:94: 14:2e:2e:a4:72:3f:7b:ec:c2:18:51:6b:08:e4:fc: 67:43:e4:9f:55:e1:fc:ad:03:2b:f3:1d:c4:41:16: 4f:10:f7:5b:49:83:dc:9b:8c:64:d3:85:97:a1:b3: b8:99:3e:37:c2:94:53:b6:d3:34:6f:fe:28:40:59: d2:2d:32:e6:b1:4e:42:59:7b:1b:63:48:f6:fb:4b: 31:c7:5d:5f:b6:95:91:cd:fd:c1:3c:e5:97:18:cc: a9:c1:47:2e:d3:a4:5f:15:7c:f6:07:b2:1d:6a:9c: ae:f1:c4:25:23:7e:ca:c8:1f:a9:46:2b:26:fb:c4: 63:4e:9a:a9:00:da:32:c9:cf:9b:c8:b5:ec:11:e7: 38:18:5b:9d:c4:03:41:2e:ee:42:2a:b1:4f:7c:83: a2:50:3d:da:db:da:aa:f0:ce:bd:d1:15:3d:b4:ca: 40:ab:61:db:16:2d:08:dd:8c:eb:48:8b:5c:7e:a1: 7c:8a:44:d9:a7:16:37:42:84:f2:e9:75:d3:02:04: f6:47:71:33:47:27:81:a4:dd:8b:ff:35:a6:e1:30: 0a:02:3a:9e:0a:32:51:90:4e:df:3f:26:1a:5c:94: bd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9C:DD:7F:17:5D:83:BB:00:77:D1:CE:91:7E:21:74:80:AC:36:1F X509v3 Authority Key Identifier: keyid:E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/Qpzdfxddg7sAd9HOkX4hdICsNh8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.69.248.0/24 IPv6: 2001:1a40:10::/64 Signature Algorithm: sha256WithRSAEncryption 78:f8:c3:13:1d:1f:ed:b9:19:f7:7f:31:4e:fc:0b:ef:2d:71: 4a:d4:2e:49:c7:48:e3:ee:95:29:6f:fc:5d:53:fa:29:e9:f6: 78:f2:cc:e2:66:84:27:7f:da:e7:d6:82:35:a4:8f:4b:3a:7a: 06:bb:46:c5:6c:b9:3e:e2:06:1b:dd:49:e6:8a:96:72:58:ef: 7e:10:e8:33:aa:c2:b1:68:b8:17:e6:83:ad:ec:a2:93:ba:14: 51:a3:18:56:ef:98:6b:93:d8:a3:c9:b5:1d:d4:31:06:f1:d4: 64:d7:68:d5:5b:9e:b6:71:d8:84:ca:a8:20:19:bb:38:e9:c8: e5:3b:4b:1c:33:39:ff:48:75:72:26:cb:a9:f9:5e:54:8a:a4: 3b:c0:81:29:19:1d:a0:6a:2c:f1:e5:d4:96:d0:e2:d3:61:b6: 0e:86:75:55:b8:56:56:3e:72:a0:e0:8f:a8:79:c7:c8:25:d7: b1:b1:e1:84:c0:b8:da:c3:55:93:4d:6a:8a:7f:d0:ab:01:fc: a8:5f:a9:ba:92:73:b0:9b:00:7e:5d:de:eb:8c:5a:6a:b0:cf: 8e:65:67:65:e1:8d:93:9f:68:1b:f0:0d:b2:8c:49:fe:eb:08: b0:fd:bd:fc:3f:7c:5e:db:50:c8:e8:43:10:6c:24:4e:c1:b6: 62:2a:72:bf -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt4NV2IlSDtyZur2fpWnjZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMmJjZDQwYzY3NzQ2NzdkMmMzNzAyZWY1OWVkZjQ5ZDBi MzZjNmMwHhcNMjYwMTAxMDYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjljZGQ3ZjE3NWQ4M2JiMDA3N2QxY2U5MTdlMjE3NDgwYWMzNjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwn4L5OMOkspVlY44x1BdttVUXH2 i7tIvV6LRZQULi6kcj977MIYUWsI5PxnQ+SfVeH8rQMr8x3EQRZPEPdbSYPcm4xk 04WXobO4mT43wpRTttM0b/4oQFnSLTLmsU5CWXsbY0j2+0sxx11ftpWRzf3BPOWX GMypwUcu06RfFXz2B7Idapyu8cQlI37KyB+pRism+8RjTpqpANoyyc+byLXsEec4 GFudxANBLu5CKrFPfIOiUD3a29qq8M690RU9tMpAq2HbFi0I3YzrSItcfqF8ikTZ pxY3QoTy6XXTAgT2R3EzRyeBpN2L/zWm4TAKAjqeCjJRkE7fPyYaXJS9owIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFEKc3X8XXYO7AHfRzpF+IXSArDYfMB8GA1UdIwQY MBaAFOMrzUDGd0Z30sNwLvWe30nQs2xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHl2TlFNWjNSbmZTdzNBdTlaN2ZTZEN6Ykd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80YjdlZjgtODY0My00ZGJiLTkyYWEt MDc0MDExNWI1YTUyLzEvUXB6ZGZ4ZGRnN3NBZDlIT2tYNGhkSUNzTmg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi80YjdlZjgtODY0My00ZGJiLTkyYWEtMDc0MDExNWI1YTUy LzEvNHl2TlFNWjNSbmZTdzNBdTlaN2ZTZEN6Ykd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAMBAIAATAGAwQATUX4MBEE AgACMAsDCQAgARpAABAAADANBgkqhkiG9w0BAQsFAAOCAQEAePjDEx0f7bkZ938x TvwL7y1xStQuScdI4+6VKW/8XVP6Ken2ePLM4maEJ3/a59aCNaSPSzp6BrtGxWy5 PuIGG91J5oqWcljvfhDoM6rCsWi4F+aDreyik7oUUaMYVu+Ya5PYo8m1HdQxBvHU ZNdo1VuetnHYhMqoIBm7OOnI5TtLHDM5/0h1cibLqfleVIqkO8CBKRkdoGos8eXU ltDi02G2DoZ1VbhWVj5yoOCPqHnHyCXXsbHhhMC42sNVk01qin/QqwH8qF+pupJz sJsAfl3e64xaarDPjmVnZeGNk59oG/ANsoxJ/usIsP29/D98XttQyOhDEGwkTsG2 Yipyvw== -----END CERTIFICATE-----Generated at Wed Jan 21 16:15:47 2026 by rpki-client