This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/QCLNg4PNOl11XDmyCY2IfSAv4u4.roa File: QCLNg4PNOl11XDmyCY2IfSAv4u4.roa (raw, json) Hash identifier: jT4JDY6Kk9V6/J+VGMgmAaLrU2fWlyxRaRtTYMCcfOY= Subject key identifier: 40:22:CD:83:83:CD:3A:5D:75:5C:39:B2:09:8D:88:7D:20:2F:E2:EE Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922 Certificate serial: 019B77C67F25979FB6BBC6DE94FA8461EBA7 Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/QCLNg4PNOl11XDmyCY2IfSAv4u4.roa Signing time: Thu 01 Jan 2026 04:17:35 +0000 ROA not before: Thu 01 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39707 IP address blocks: 92.39.96.0/21 maxlen: 21 92.39.96.0/24 maxlen: 24 92.39.97.0/24 maxlen: 24 92.39.98.0/24 maxlen: 24 92.39.99.0/24 maxlen: 24 92.39.100.0/24 maxlen: 24 92.39.101.0/24 maxlen: 24 92.39.102.0/24 maxlen: 24 92.39.103.0/24 maxlen: 24 213.234.23.0/24 maxlen: 24 213.234.24.0/21 maxlen: 21 213.234.24.0/24 maxlen: 24 213.234.25.0/24 maxlen: 24 213.234.26.0/24 maxlen: 24 213.234.27.0/24 maxlen: 24 213.234.28.0/24 maxlen: 24 213.234.29.0/24 maxlen: 24 213.234.30.0/24 maxlen: 24 213.234.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7f:25:97:9f:b6:bb:c6:de:94:fa:84:61:eb:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922 Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4022cd8383cd3a5d755c39b2098d887d202fe2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:86:05:2a:1d:53:d9:69:09:cc:82:0c:0c:d8: 8d:af:53:35:81:94:87:96:a2:08:3e:62:ec:31:d5: a1:27:39:40:c1:e6:6b:54:d1:14:60:b4:1e:90:a2: 5e:99:fa:27:21:fc:2c:3b:2e:f6:ba:3c:f6:6a:92: 67:d4:b4:a9:29:9a:60:36:3c:c2:c7:26:e8:d1:dc: 32:d0:a9:7b:e1:24:14:b0:38:1e:32:84:74:b9:a7: a5:ac:d2:1f:ef:b0:1e:91:9f:72:7e:02:39:b9:9f: af:37:43:88:e7:dd:b8:20:9a:99:54:83:56:60:10: 34:a4:4f:de:fb:57:77:1c:95:ea:4c:5c:4a:29:7a: a9:c8:4b:d8:84:a8:b1:22:a4:72:38:e6:e0:aa:21: cc:6a:e9:9b:ae:fa:87:1e:9a:4d:96:69:87:0f:a9: c3:78:6b:64:bb:38:d9:8d:28:cd:38:89:bf:a2:5f: 66:73:cc:66:4b:5c:f7:5f:d0:5d:e5:38:74:ba:e9: 33:93:3a:88:61:4b:37:94:ee:9d:32:e8:e8:9e:68: e8:a0:a9:c1:07:83:e8:ff:5f:94:1c:4d:d8:7f:74: 4d:27:e7:90:50:b7:40:39:fa:bb:ef:8e:b4:a0:f1: d9:29:40:cd:ee:fd:e1:af:d6:5c:88:11:24:02:01: a9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:22:CD:83:83:CD:3A:5D:75:5C:39:B2:09:8D:88:7D:20:2F:E2:EE X509v3 Authority Key Identifier: keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/QCLNg4PNOl11XDmyCY2IfSAv4u4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.39.96.0/21 213.234.23.0-213.234.31.255 Signature Algorithm: sha256WithRSAEncryption 64:c1:b0:99:9d:6d:f0:32:d3:ac:fd:63:23:83:2c:97:21:18: ae:b6:ff:95:b3:50:ec:43:a9:be:55:27:c6:7b:09:9b:d4:b9: 9d:4e:fc:6a:56:50:32:1a:da:d2:1f:73:10:1c:3b:cb:13:ff: 8b:2a:79:62:cb:a5:6e:f5:a1:3e:71:5e:fa:2f:02:b9:1a:46: a0:58:3e:73:e3:bb:0b:03:76:9e:54:c7:38:ea:86:44:b8:a7: c9:a1:cf:5d:58:94:54:ac:8b:5e:70:15:f7:e5:6b:b4:6b:c4: d6:d2:b7:5b:06:23:2d:bd:50:cc:88:d0:cf:c1:f1:d2:78:71: 10:6f:0d:2d:14:4f:23:56:61:3c:bb:df:5b:d6:19:c4:11:aa: 51:2c:27:a4:e1:05:e3:cb:af:2a:68:e5:4d:de:e6:43:20:41: e8:ef:30:af:bb:6b:f5:57:8d:a6:c2:ae:d2:12:f9:b9:25:79: d3:14:16:60:7e:6c:59:71:16:2c:ac:85:8f:08:e8:57:1e:b1: 6d:75:92:d8:63:bd:ac:5e:a1:11:62:1f:29:a1:eb:1d:c4:26: b8:6c:50:6a:35:19:b0:a8:2a:eb:eb:60:62:56:b6:15:4d:8b: 63:14:f0:5e:be:d8:1a:79:40:89:25:a0:45:1e:97:88:76:b0: 13:3f:08:70 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3xn8ll5+2u8belPqEYeunMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YjgxMzk5OTNiZTY2NWYzYjVkMGY2OTA5ZWYwNThmYThm OTc5MjIwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDIyY2Q4MzgzY2QzYTVkNzU1YzM5YjIwOThkODg3ZDIwMmZlMmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooYFKh1T2WkJzIIMDNiNr1M1gZSH lqIIPmLsMdWhJzlAweZrVNEUYLQekKJemfonIfwsOy72ujz2apJn1LSpKZpgNjzC xybo0dwy0Kl74SQUsDgeMoR0uaelrNIf77AekZ9yfgI5uZ+vN0OI5924IJqZVINW YBA0pE/e+1d3HJXqTFxKKXqpyEvYhKixIqRyOObgqiHMaumbrvqHHppNlmmHD6nD eGtkuzjZjSjNOIm/ol9mc8xmS1z3X9Bd5Th0uukzkzqIYUs3lO6dMujonmjooKnB B4Po/1+UHE3Yf3RNJ+eQULdAOfq77460oPHZKUDN7v3hr9ZciBEkAgGpYQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFEAizYODzTpddVw5sgmNiH0gL+LuMB8GA1UdIwQY MBaAFLm4E5mTvmZfO10PaQnvBY+o+XkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEt N2JjNzNlZWUxNDQ3LzEvUUNMTmc0UE5PbDExWERteUNZMklmU0F2NHU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEtN2JjNzNlZWUxNDQ3 LzEvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDXCdgMAwD BADV6hcDBAXV6gAwDQYJKoZIhvcNAQELBQADggEBAGTBsJmdbfAy06z9YyODLJch GK62/5WzUOxDqb5VJ8Z7CZvUuZ1O/GpWUDIa2tIfcxAcO8sT/4sqeWLLpW71oT5x XvovArkaRqBYPnPjuwsDdp5UxzjqhkS4p8mhz11YlFSsi15wFffla7RrxNbSt1sG Iy29UMyI0M/B8dJ4cRBvDS0UTyNWYTy731vWGcQRqlEsJ6ThBePLrypo5U3e5kMg QejvMK+7a/VXjabCrtIS+bkledMUFmB+bFlxFiyshY8I6FcesW11kthjvaxeoRFi Hymh6x3EJrhsUGo1GbCoKuvrYGJWthVNi2MU8F6+2Bp5QIkloEUel4h2sBM/CHA= -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:26 2026 by rpki-client