This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/Q-FFM01cbkfw_d8UfrmIQr3mDSE.roa File: Q-FFM01cbkfw_d8UfrmIQr3mDSE.roa (raw, json) Hash identifier: SPQggi+U+SwusUS7292cc4kZDqdLk+Y6Fxy1n2N8dxo= Subject key identifier: 43:E1:45:33:4D:5C:6E:47:F0:FD:DF:14:7E:B9:88:42:BD:E6:0D:21 Certificate issuer: /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a Certificate serial: 019B77C6B25574465042312F2C27B0AE417D Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/Q-FFM01cbkfw_d8UfrmIQr3mDSE.roa Signing time: Thu 01 Jan 2026 04:17:49 +0000 ROA not before: Thu 01 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43174 IP address blocks: 131.117.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b2:55:74:46:50:42:31:2f:2c:27:b0:ae:41:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43e145334d5c6e47f0fddf147eb98842bde60d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5e:88:16:16:16:53:48:d0:a8:ac:91:85:cf: a2:6b:80:10:d3:e8:39:d6:7b:2b:21:1a:c9:04:3e: 65:0c:64:df:26:4c:8e:34:2b:75:a9:ab:7d:13:7d: 33:d3:66:03:e9:e7:f4:3c:1c:49:6b:7a:a1:41:2d: 8d:73:cf:97:4d:7b:e3:1f:d7:f9:61:b4:53:bd:ab: 6f:66:31:8a:e4:2b:56:a9:a7:e0:68:1d:50:be:74: 02:9c:c1:a0:d3:54:a4:bf:b2:b9:8c:0a:d0:ad:21: d3:e0:d3:12:6d:c1:b8:1e:a4:19:85:83:f8:14:0d: d1:34:f0:f3:74:e6:24:d0:bc:3b:38:a8:90:58:8f: 5d:d4:c8:10:7a:e9:ae:a1:e5:aa:bd:e2:6b:cc:8c: 54:91:33:68:dd:76:15:6d:fc:a2:1b:a7:60:42:40: 8a:39:99:49:30:4a:53:59:0b:0b:ac:28:84:cc:d6: 6a:d2:52:df:5e:4b:31:8d:72:2c:08:ca:e4:9c:ea: 87:d5:1a:ed:25:97:cc:54:e9:dc:32:c7:da:15:e0: bd:53:84:c7:7e:dc:da:23:cb:55:5f:a4:ab:fc:f0: ec:5e:e6:d7:34:78:a7:b8:93:2e:dc:82:96:67:71: 94:94:68:01:73:9c:bd:5b:5d:0b:77:f5:7d:30:b2: f8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E1:45:33:4D:5C:6E:47:F0:FD:DF:14:7E:B9:88:42:BD:E6:0D:21 X509v3 Authority Key Identifier: keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/Q-FFM01cbkfw_d8UfrmIQr3mDSE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.117.200.0/21 Signature Algorithm: sha256WithRSAEncryption 6c:54:c7:13:a1:13:d5:8d:8b:c7:d7:96:41:a7:21:88:15:61: ae:38:fd:bc:10:d9:32:f5:c6:db:c3:1e:67:a0:6f:bf:9b:97: 44:bf:0e:98:f9:1e:93:17:22:25:bc:a7:4e:b2:be:ac:6f:10: 7f:46:a9:22:49:7d:45:f1:3f:b6:39:63:b2:34:6a:03:18:4b: 00:e7:ab:ef:d3:6a:76:80:50:2c:44:67:04:82:c8:55:4d:8e: b1:d7:22:bf:f2:87:9f:a7:69:c8:21:6d:7f:a4:dc:ac:f0:87: 9a:fa:9c:71:12:fa:54:21:7c:b4:8e:46:9e:3b:de:80:9b:6e: f1:7f:02:a7:15:b9:3b:12:bc:7f:de:d4:17:10:41:46:12:89: 5b:4e:5a:5a:40:68:4e:12:59:f6:5b:34:8d:17:0f:c1:fc:ab: cb:24:ce:35:db:af:11:48:6d:04:31:f7:9d:82:f2:2e:22:e1: bc:e9:5a:31:6c:a8:0f:83:67:fe:e0:e3:33:fb:a2:59:e8:65: f6:68:d4:61:f1:a3:59:b4:2a:b4:92:7b:e9:e9:28:f6:67:0a: 60:02:f2:42:44:43:df:18:11:b4:5a:88:68:df:59:3f:f6:66: 38:dd:e3:66:af:d8:ce:c9:2e:99:ac:f5:3f:5e:a4:0e:08:6b: c1:03:b9:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrJVdEZQQjEvLCewrkF9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYmVlZDZlZGU5ZWIyODViZDJhNmFiYjk4NWFkY2RiZThm Mjc3OWEwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2UxNDUzMzRkNWM2ZTQ3ZjBmZGRmMTQ3ZWI5ODg0MmJkZTYwZDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl6IFhYWU0jQqKyRhc+ia4AQ0+g5 1nsrIRrJBD5lDGTfJkyONCt1qat9E30z02YD6ef0PBxJa3qhQS2Nc8+XTXvjH9f5 YbRTvatvZjGK5CtWqafgaB1QvnQCnMGg01Skv7K5jArQrSHT4NMSbcG4HqQZhYP4 FA3RNPDzdOYk0Lw7OKiQWI9d1MgQeumuoeWqveJrzIxUkTNo3XYVbfyiG6dgQkCK OZlJMEpTWQsLrCiEzNZq0lLfXksxjXIsCMrknOqH1RrtJZfMVOncMsfaFeC9U4TH ftzaI8tVX6Sr/PDsXubXNHinuJMu3IKWZ3GUlGgBc5y9W10Ld/V9MLL4cwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEPhRTNNXG5H8P3fFH65iEK95g0hMB8GA1UdIwQY MBaAFLC+7W7enrKFvSpqu5ha3Nvo8neaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hZDBkNmQtZjk0OS00NmRiLTk4MWYt YjM4ZDdmNzA5ZDcwLzEvUS1GRk0wMWNia2Z3X2Q4VWZybUlRcjNtRFNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hZDBkNmQtZjk0OS00NmRiLTk4MWYtYjM4ZDdmNzA5ZDcw LzEvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg3XIMA0G CSqGSIb3DQEBCwUAA4IBAQBsVMcToRPVjYvH15ZBpyGIFWGuOP28ENky9cbbwx5n oG+/m5dEvw6Y+R6TFyIlvKdOsr6sbxB/RqkiSX1F8T+2OWOyNGoDGEsA56vv02p2 gFAsRGcEgshVTY6x1yK/8oefp2nIIW1/pNys8Iea+pxxEvpUIXy0jkaeO96Am27x fwKnFbk7Erx/3tQXEEFGEolbTlpaQGhOEln2WzSNFw/B/KvLJM41268RSG0EMfed gvIuIuG86VoxbKgPg2f+4OMz+6JZ6GX2aNRh8aNZtCq0knvp6Sj2ZwpgAvJCREPf GBG0Woho31k/9mY43eNmr9jOyS6ZrPU/XqQOCGvBA7nt -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:51 2026 by rpki-client