This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/QE9MBmAeVXE7PJElnPEsduC0Ogo.roa File: QE9MBmAeVXE7PJElnPEsduC0Ogo.roa (raw, json) Hash identifier: pZBoxnea0g/lP3VZXJkHB1gVpjgzoSrK+ghCrR+vlwc= Subject key identifier: 40:4F:4C:06:60:1E:55:71:3B:3C:91:25:9C:F1:2C:76:E0:B4:3A:0A Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797ECCE4E5815DD616CF12EBA1E3ED10 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/QE9MBmAeVXE7PJElnPEsduC0Ogo.roa Signing time: Thu 01 Jan 2026 12:18:31 +0000 ROA not before: Thu 01 Jan 2026 12:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 81.18.48.0/24 maxlen: 24 109.121.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:cc:e4:e5:81:5d:d6:16:cf:12:eb:a1:e3:ed:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=404f4c06601e55713b3c91259cf12c76e0b43a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d4:d7:c2:d2:96:7a:57:7d:4a:75:3e:3e:de: 18:5d:e0:09:ee:c0:e6:56:bb:bb:e6:9c:88:58:28: 9e:b9:a1:db:e1:54:39:1b:87:7c:bd:53:41:90:cf: a7:11:c0:d2:f8:f8:76:9c:c3:0a:84:f9:a4:ac:d6: dd:4d:ce:4d:97:db:06:39:a7:b6:f5:42:56:2c:10: 42:02:f9:9c:16:f2:a3:02:be:f7:30:df:fd:8c:8f: bc:a2:ac:28:22:09:f0:07:9a:62:f1:b6:e4:80:9e: 14:38:85:df:58:7a:20:44:5c:4a:e4:7a:97:a3:4f: 93:cd:e7:4f:ae:24:80:22:e6:38:e8:4f:bf:07:30: 65:ef:2a:e8:cd:9e:c3:67:93:63:a8:a7:cc:69:fe: 2a:eb:1e:38:58:79:dd:47:76:93:9b:b3:c7:86:88: fe:53:8d:c6:3c:61:63:21:1b:7c:ff:46:5f:1b:6c: 4f:dd:03:6d:ba:4d:10:bb:96:b3:d6:e9:56:39:bc: f8:d9:68:bd:5c:40:5d:e5:29:8e:b9:9e:64:c7:f5: 65:10:4a:1d:a8:53:b2:a7:54:96:35:35:7e:22:0f: 98:30:16:ec:79:69:71:a9:c3:d8:bb:65:d9:ee:34: 96:90:10:ef:a6:95:90:c4:ce:38:df:2f:71:9a:fe: 0b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4F:4C:06:60:1E:55:71:3B:3C:91:25:9C:F1:2C:76:E0:B4:3A:0A X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/QE9MBmAeVXE7PJElnPEsduC0Ogo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.18.48.0/24 109.121.42.0/24 Signature Algorithm: sha256WithRSAEncryption 01:fe:be:6c:f5:d1:c0:38:d8:21:13:fa:84:40:ac:71:d1:d1: b0:1c:87:10:77:23:d6:dd:32:bc:fa:fa:7e:43:18:ab:2f:96: ed:29:07:5f:f0:57:54:97:db:ad:da:c7:33:8e:a0:21:79:94: 00:f4:b3:86:3b:0b:99:c9:27:7a:b0:75:6b:c1:1c:8c:c5:7e: a1:dc:b2:fc:a2:4a:af:f3:fe:5e:ce:3c:12:63:3b:66:49:aa: 93:a4:b4:c5:3a:1d:99:20:7b:c8:ea:5d:a6:af:5a:15:8e:de: ad:d0:3a:1b:e4:60:f4:73:16:ff:c1:23:71:3d:f8:f5:f9:3e: b3:c9:60:d5:4d:f3:ea:47:51:df:54:83:cd:dc:26:e8:4b:41: 6a:4e:fa:8e:c8:38:31:be:ef:4c:62:4e:54:69:63:ac:35:eb: 2c:b0:fc:f4:0f:2e:18:75:2a:ec:b7:53:3e:c3:6d:0d:81:6b: cc:53:b9:0c:86:57:ec:ea:b7:f5:de:ee:e2:06:81:04:91:f2: d5:9a:a1:5e:e4:1b:b3:13:00:bd:54:b2:11:c1:21:dc:60:2d: 9a:af:7f:5a:9e:46:3e:53:13:c6:74:3e:11:c7:0e:9d:a0:fb: b3:f0:6c:6f:fc:10:33:9d:61:d6:e8:ad:1a:1d:39:28:ec:ff: 0e:d3:ab:41 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fszk5YFd1hbPEuuh4+0QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDRmNGMwNjYwMWU1NTcxM2IzYzkxMjU5Y2YxMmM3NmUwYjQzYTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutTXwtKWeld9SnU+Pt4YXeAJ7sDm Vru75pyIWCieuaHb4VQ5G4d8vVNBkM+nEcDS+Ph2nMMKhPmkrNbdTc5Nl9sGOae2 9UJWLBBCAvmcFvKjAr73MN/9jI+8oqwoIgnwB5pi8bbkgJ4UOIXfWHogRFxK5HqX o0+TzedPriSAIuY46E+/BzBl7yrozZ7DZ5NjqKfMaf4q6x44WHndR3aTm7PHhoj+ U43GPGFjIRt8/0ZfG2xP3QNtuk0Qu5az1ulWObz42Wi9XEBd5SmOuZ5kx/VlEEod qFOyp1SWNTV+Ig+YMBbseWlxqcPYu2XZ7jSWkBDvppWQxM443y9xmv4LqQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEBPTAZgHlVxOzyRJZzxLHbgtDoKMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvUUU5TUJtQWVWWEU3UEpFbG5QRXNkdUMwT2dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAURIwAwQA bXkqMA0GCSqGSIb3DQEBCwUAA4IBAQAB/r5s9dHAONghE/qEQKxx0dGwHIcQdyPW 3TK8+vp+QxirL5btKQdf8FdUl9ut2sczjqAheZQA9LOGOwuZySd6sHVrwRyMxX6h 3LL8okqv8/5ezjwSYztmSaqTpLTFOh2ZIHvI6l2mr1oVjt6t0Dob5GD0cxb/wSNx Pfj1+T6zyWDVTfPqR1HfVIPN3CboS0FqTvqOyDgxvu9MYk5UaWOsNesssPz0Dy4Y dSrst1M+w20NgWvMU7kMhlfs6rf13u7iBoEEkfLVmqFe5BuzEwC9VLIRwSHcYC2a r39ankY+UxPGdD4Rxw6doPuz8Gxv/BAznWHW6K0aHTko7P8O06tB -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:27 2026 by rpki-client