This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/qPyrPHOcj4AsJ76uDNoQbJBu-3A.roa File: qPyrPHOcj4AsJ76uDNoQbJBu-3A.roa (raw, json) Hash identifier: icQiWI2POs5a9KmLU/wFkbzLvsrXEhv8Owk5IzrA7+Q= Subject key identifier: A8:FC:AB:3C:73:9C:8F:80:2C:27:BE:AE:0C:DA:10:6C:90:6E:FB:70 Certificate issuer: /CN=60325c21d2fafe743398dc1e5574433280110469 Certificate serial: 019B7A5AC0CB441EEC266F194D07947DF007 Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/qPyrPHOcj4AsJ76uDNoQbJBu-3A.roa Signing time: Thu 01 Jan 2026 16:18:46 +0000 ROA not before: Thu 01 Jan 2026 16:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 195.10.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c0:cb:44:1e:ec:26:6f:19:4d:07:94:7d:f0:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60325c21d2fafe743398dc1e5574433280110469 Validity Not Before: Jan 1 16:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8fcab3c739c8f802c27beae0cda106c906efb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:76:ec:93:e7:b2:be:37:6c:96:ad:4b:52:61: 39:5a:73:c5:14:04:07:76:29:f5:b4:ed:f4:7b:af: 28:39:f3:7a:86:a8:b3:ce:20:b9:6a:af:79:2b:48: af:02:25:6b:d5:61:f3:c2:5b:ff:dd:94:3f:4a:fc: 49:39:60:23:e2:06:a8:01:d9:e5:9a:ee:f9:31:e8: 67:59:5a:64:32:c2:d3:53:5e:fc:93:3e:86:21:6e: 72:dd:64:4d:c3:d8:b2:2b:87:d0:10:ae:11:2a:f6: 5f:ee:0c:03:a5:c4:e7:70:7f:bc:cc:2f:c2:89:21: 43:78:cb:76:9b:8a:1f:f0:7f:3b:49:17:82:f8:b5: c4:e6:64:e9:08:11:a8:af:ac:89:28:27:7f:43:93: ed:a9:d2:89:48:ae:b7:1f:57:33:55:7d:7c:be:35: 5d:34:39:05:c8:a5:d1:92:84:53:61:03:6f:71:1e: 40:c3:a7:02:1b:9b:0e:1c:1f:e8:62:cc:32:0f:63: cd:3e:d0:db:64:b6:70:cc:7b:96:93:41:35:ba:53: ee:97:8a:e9:69:a7:da:25:60:62:cd:7a:a2:f7:51: 32:02:64:f0:8b:a2:cb:5e:81:c0:c6:fc:5c:24:d4: 0c:7a:9c:18:ff:6e:90:85:fd:fc:a2:ab:64:17:c8: 0d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FC:AB:3C:73:9C:8F:80:2C:27:BE:AE:0C:DA:10:6C:90:6E:FB:70 X509v3 Authority Key Identifier: keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/qPyrPHOcj4AsJ76uDNoQbJBu-3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.10.217.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:98:26:eb:08:4c:dc:5f:0c:6b:54:6a:91:29:32:9c:38:8c: 9e:5d:8b:c8:f7:6a:36:73:cf:35:7e:96:48:03:4b:b0:78:e7: 50:30:c2:98:74:75:92:50:9a:5e:15:15:29:20:42:0f:1f:6d: b2:cf:f6:32:4e:51:88:38:c6:6e:08:67:0d:2b:5d:25:5d:e2: 6f:f0:dd:88:29:0d:be:8a:1f:e2:01:94:c9:cb:42:5d:66:e1: 7e:5e:f2:8b:9e:eb:aa:5c:d1:97:00:85:62:af:ab:13:21:86: 40:ab:ee:9c:93:a9:e8:7f:38:ee:b6:52:e7:dc:6e:56:41:b2: 49:af:7b:a4:3d:22:b7:88:25:c0:83:50:aa:b2:9f:c5:fd:fb: e2:e1:2c:0e:4f:38:d3:34:2c:6d:af:c9:af:b3:5f:b7:f1:ab: 78:c7:4c:c9:02:d9:6e:e5:58:72:9a:da:de:ce:f2:13:5a:e9: 34:40:49:2a:d4:c1:93:28:36:cd:45:a3:d6:0a:69:7e:cb:0a: ca:d5:50:ea:05:10:1d:c2:25:34:4d:ba:94:1c:eb:af:55:35: 36:3d:a2:fa:07:a2:b6:6d:8f:83:77:88:56:fa:53:12:d3:ad: cb:8d:0e:93:41:fe:54:da:36:27:ad:46:7e:f9:ae:eb:b2:d7: b0:94:49:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WsDLRB7sJm8ZTQeUffAHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMzI1YzIxZDJmYWZlNzQzMzk4ZGMxZTU1NzQ0MzMyODAx MTA0NjkwHhcNMjYwMTAxMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGZjYWIzYzczOWM4ZjgwMmMyN2JlYWUwY2RhMTA2YzkwNmVmYjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXbsk+eyvjdslq1LUmE5WnPFFAQH din1tO30e68oOfN6hqizziC5aq95K0ivAiVr1WHzwlv/3ZQ/SvxJOWAj4gaoAdnl mu75MehnWVpkMsLTU178kz6GIW5y3WRNw9iyK4fQEK4RKvZf7gwDpcTncH+8zC/C iSFDeMt2m4of8H87SReC+LXE5mTpCBGor6yJKCd/Q5PtqdKJSK63H1czVX18vjVd NDkFyKXRkoRTYQNvcR5Aw6cCG5sOHB/oYswyD2PNPtDbZLZwzHuWk0E1ulPul4rp aafaJWBizXqi91EyAmTwi6LLXoHAxvxcJNQMepwY/26Qhf38oqtkF8gNhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKj8qzxznI+ALCe+rgzaEGyQbvtwMB8GA1UdIwQY MBaAFGAyXCHS+v50M5jcHlV0QzKAEQRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWURKY0lkTDZfblF6bU53ZVZYUkRNb0FSQkdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mMjc3MGItZGExOS00NzkwLWE0OTQt YzU4ZTk1Y2Q0Mjc3LzEvcVB5clBIT2NqNEFzSjc2dUROb1FiSkJ1LTNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mMjc3MGItZGExOS00NzkwLWE0OTQtYzU4ZTk1Y2Q0Mjc3 LzEvWURKY0lkTDZfblF6bU53ZVZYUkRNb0FSQkdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwrZMA0G CSqGSIb3DQEBCwUAA4IBAQAbmCbrCEzcXwxrVGqRKTKcOIyeXYvI92o2c881fpZI A0uweOdQMMKYdHWSUJpeFRUpIEIPH22yz/YyTlGIOMZuCGcNK10lXeJv8N2IKQ2+ ih/iAZTJy0JdZuF+XvKLnuuqXNGXAIVir6sTIYZAq+6ck6nofzjutlLn3G5WQbJJ r3ukPSK3iCXAg1Cqsp/F/fvi4SwOTzjTNCxtr8mvs1+38at4x0zJAtlu5Vhymtre zvITWuk0QEkq1MGTKDbNRaPWCml+ywrK1VDqBRAdwiU0TbqUHOuvVTU2PaL6B6K2 bY+Dd4hW+lMS063LjQ6TQf5U2jYnrUZ++a7rstewlEma -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:11 2026 by rpki-client