This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/QihhibEPB5qBqDDL6gcnigScDv4.roa File: QihhibEPB5qBqDDL6gcnigScDv4.roa (raw, json) Hash identifier: N2raya6LVsxTexeCuwvK4jCueOUDvTQXZAxYtw1gUJA= Subject key identifier: 42:28:61:89:B1:0F:07:9A:81:A8:30:CB:EA:07:27:8A:04:9C:0E:FE Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B7DCA27457DA82FC748C8F3B5D291219E Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/QihhibEPB5qBqDDL6gcnigScDv4.roa Signing time: Fri 02 Jan 2026 08:19:18 +0000 ROA not before: Fri 02 Jan 2026 08:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49453 IP address blocks: 178.20.29.0/24 maxlen: 24 178.20.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:27:45:7d:a8:2f:c7:48:c8:f3:b5:d2:91:21:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 2 08:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42286189b10f079a81a830cbea07278a049c0efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:59:73:13:c2:2b:f7:ec:c3:22:42:37:c5:9f: e3:07:23:b4:0a:b3:52:0d:30:00:e4:64:7c:8f:fe: 9c:3f:9e:d2:f7:bd:6e:79:ad:29:6a:2f:07:76:89: a3:2d:ff:58:0e:9d:31:db:fa:76:8a:e6:00:cc:7c: c1:65:e1:ab:44:8a:e3:1e:f0:f8:1a:2d:83:9c:49: 04:3e:87:49:65:f1:8d:39:8b:dc:9a:12:8a:66:d6: f5:53:b4:5a:40:30:8e:31:d3:8a:8f:fa:0a:86:16: 01:27:59:79:43:95:38:06:92:22:bc:39:6f:43:09: 9d:26:a5:17:a5:95:b4:2e:92:da:06:9b:85:1e:7a: e2:cc:d0:fe:97:01:c9:6b:f5:8c:df:9a:bb:0c:2d: eb:ec:fd:b3:a5:71:f9:99:5a:aa:dc:02:3c:06:c7: 88:1d:f1:10:85:87:06:9a:f7:9d:14:42:b7:d3:84: 34:1a:c8:7d:69:9b:5e:6c:26:e4:48:18:a0:fa:72: fe:b9:74:9b:d6:19:f6:05:18:4d:33:6e:ab:fd:f8: 91:b2:8c:76:5c:16:0a:74:5d:73:a4:28:a7:34:02: cf:02:4b:cc:79:31:54:7d:6d:e0:9c:c8:3f:1f:eb: fd:ca:1b:6a:5d:1b:00:e7:b1:8b:53:da:1a:ef:4f: 99:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:28:61:89:B1:0F:07:9A:81:A8:30:CB:EA:07:27:8A:04:9C:0E:FE X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/QihhibEPB5qBqDDL6gcnigScDv4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.20.29.0/24 178.20.31.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:00:47:1a:38:a8:77:b0:c9:43:93:e9:77:8e:3c:b2:cd:ac: 5d:12:2f:fb:90:e3:94:5f:2c:15:ab:ea:3b:18:4c:9e:8c:e4: e9:90:d6:5f:89:a1:84:02:44:2f:75:93:94:74:f7:b5:24:f9: 37:b1:16:42:67:a2:a0:4d:7c:13:15:17:fa:52:db:31:f2:d0: 27:1a:ea:95:cd:c5:a2:dd:09:30:15:1b:57:d0:b8:31:78:11: 55:ef:4f:2f:78:fd:10:ac:41:51:22:e5:32:0b:b9:cc:db:ba: 11:4c:06:63:c3:58:18:72:0d:77:65:58:39:b6:97:75:ff:50: d9:cc:f8:ff:80:b2:be:3a:15:ef:83:99:39:b0:f6:9e:9d:b8: 56:9c:84:c5:e1:91:70:07:8e:6b:79:5c:6d:f8:4f:61:2e:17: 9c:75:14:64:74:91:09:0b:cc:8e:24:fd:b0:02:e5:b0:28:e7: b1:7d:91:dd:2f:29:ae:92:04:37:56:2f:58:22:91:9a:23:40: 6d:ab:d9:bc:76:0f:6d:e0:cf:06:c9:7e:82:4b:12:80:80:6e: 81:e2:d7:fa:63:51:41:07:57:9c:11:a1:a3:e6:cf:95:6b:b1: 69:f2:0d:c7:e4:1d:9e:ed:be:60:9a:99:08:ad:b2:ed:16:ce: b6:28:17:58 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yidFfagvx0jI87XSkSGeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTAyMDgxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjI4NjE4OWIxMGYwNzlhODFhODMwY2JlYTA3Mjc4YTA0OWMwZWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1lzE8Ir9+zDIkI3xZ/jByO0CrNS DTAA5GR8j/6cP57S971uea0pai8HdomjLf9YDp0x2/p2iuYAzHzBZeGrRIrjHvD4 Gi2DnEkEPodJZfGNOYvcmhKKZtb1U7RaQDCOMdOKj/oKhhYBJ1l5Q5U4BpIivDlv QwmdJqUXpZW0LpLaBpuFHnrizND+lwHJa/WM35q7DC3r7P2zpXH5mVqq3AI8BseI HfEQhYcGmvedFEK304Q0Gsh9aZtebCbkSBig+nL+uXSb1hn2BRhNM26r/fiRsox2 XBYKdF1zpCinNALPAkvMeTFUfW3gnMg/H+v9yhtqXRsA57GLU9oa70+ZXQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEIoYYmxDweagagwy+oHJ4oEnA7+MB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvUWloaGliRVBCNXFCcURETDZnY25pZ1NjRHY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAshQdAwQA shQfMA0GCSqGSIb3DQEBCwUAA4IBAQAtAEcaOKh3sMlDk+l3jjyyzaxdEi/7kOOU XywVq+o7GEyejOTpkNZfiaGEAkQvdZOUdPe1JPk3sRZCZ6KgTXwTFRf6Utsx8tAn GuqVzcWi3QkwFRtX0LgxeBFV708veP0QrEFRIuUyC7nM27oRTAZjw1gYcg13ZVg5 tpd1/1DZzPj/gLK+OhXvg5k5sPaenbhWnITF4ZFwB45reVxt+E9hLhecdRRkdJEJ C8yOJP2wAuWwKOexfZHdLymukgQ3Vi9YIpGaI0Btq9m8dg9t4M8GyX6CSxKAgG6B 4tf6Y1FBB1ecEaGj5s+Va7Fp8g3H5B2e7b5gmpkIrbLtFs62KBdY -----END CERTIFICATE-----Generated at Mon Jan 19 21:25:54 2026 by rpki-client