This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/QimJZyg_5Yfg1zb4CAZqCQiArVo.roa File: QimJZyg_5Yfg1zb4CAZqCQiArVo.roa (raw, json) Hash identifier: Z7/KTdUBdl9nRIlHCoXi0enigEky+0AXzlP7afwwRuk= Subject key identifier: 42:29:89:67:28:3F:E5:87:E0:D7:36:F8:08:06:6A:09:08:80:AD:5A Certificate issuer: /CN=4534cab4450404862b201fe733f2c70a6bf52924 Certificate serial: 019B7835303E924C8B0F2AB603193AE06111 Authority key identifier: 45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/QimJZyg_5Yfg1zb4CAZqCQiArVo.roa Signing time: Thu 01 Jan 2026 06:18:30 +0000 ROA not before: Thu 01 Jan 2026 06:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209418 IP address blocks: 193.17.80.0/22 maxlen: 23 2a0c:7d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:30:3e:92:4c:8b:0f:2a:b6:03:19:3a:e0:61:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4534cab4450404862b201fe733f2c70a6bf52924 Validity Not Before: Jan 1 06:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42298967283fe587e0d736f808066a090880ad5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9b:74:a9:0b:92:d1:01:7f:c0:3c:95:13:a2: e6:e6:ed:4e:14:50:97:29:7b:67:13:e6:07:f9:4a: c3:ac:3c:70:1c:82:fe:f4:36:0b:13:38:4e:ef:c3: 57:c8:a3:a9:80:34:67:af:3d:84:89:5b:69:52:ad: b5:d2:aa:a0:e7:3d:0f:66:e9:45:ba:b9:f6:e0:31: 9c:db:d2:e7:8f:a8:7e:9f:80:48:d1:d5:40:e6:10: 31:3d:fe:bf:f1:c8:42:77:f9:58:b9:2e:14:b8:cf: c7:36:8c:ff:31:23:83:a5:7b:1f:0b:e2:fc:c2:9d: 58:ae:ec:f5:44:fc:fb:cd:ff:1a:3e:bd:8b:18:f2: bb:d1:ff:fd:16:f2:a4:1c:c5:f0:3c:a1:9b:8e:0d: 2e:a7:70:fd:ec:49:c5:a3:1f:06:ea:ef:47:7d:48: ee:7d:08:58:71:42:b8:fe:e2:1a:64:f8:9b:a5:75: 6f:0f:81:80:f8:56:05:bf:8b:a7:11:41:d0:7d:8f: b3:d3:e4:43:f2:e4:81:36:09:f4:62:1b:6c:31:30: f9:f0:c4:07:06:77:aa:8f:da:0e:8b:15:a1:4a:89: f9:fd:3b:85:b9:98:98:ac:63:96:8d:99:b8:05:e8: cc:46:80:e7:c7:77:1f:90:3c:2d:ff:98:84:fb:f1: ca:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:29:89:67:28:3F:E5:87:E0:D7:36:F8:08:06:6A:09:08:80:AD:5A X509v3 Authority Key Identifier: keyid:45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/QimJZyg_5Yfg1zb4CAZqCQiArVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.80.0/22 IPv6: 2a0c:7d40::/32 Signature Algorithm: sha256WithRSAEncryption 4c:60:2a:66:bd:12:c1:45:1e:90:9f:7e:3a:a0:96:14:3e:81: 85:99:ed:2b:3c:78:4c:03:bf:a6:00:ba:0a:db:38:67:4c:79: 09:f7:0c:26:79:a5:45:96:94:71:7d:1f:66:c9:82:bb:ae:e9: 8d:a3:e6:55:b2:a7:b0:da:cf:07:d2:ea:99:75:32:cb:26:28: 47:c0:e3:cf:29:0d:af:16:5d:f2:7f:5c:1a:eb:43:b5:30:42: 71:42:5a:b3:5a:2b:31:6e:86:1a:24:ce:f7:12:f0:62:c1:f4: 3f:22:9f:90:21:c1:a5:77:70:49:d7:1d:e9:f7:ba:9b:40:46: 4a:97:34:07:46:84:f1:29:4a:af:e8:dd:f0:97:c3:e5:d0:94: 38:ab:60:6b:76:c7:72:40:3a:a0:cd:23:6a:40:3a:8b:88:54: 7e:d9:c2:c2:dd:5c:39:92:dc:89:07:1c:97:2d:b4:d4:92:8f: 9d:ba:8c:31:50:32:ad:34:fc:fe:22:82:81:15:35:0f:06:52: 4d:93:28:6f:a0:28:2c:61:fd:9d:d1:89:9b:ff:4e:ba:9e:6a: 48:0f:7e:20:1b:d7:b3:37:04:93:46:5d:87:13:e9:df:b1:b5: 2b:19:65:5c:da:44:8e:60:1f:9f:79:45:40:57:b4:02:b0:a5: e8:bf:4e:46 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NTA+kkyLDyq2Axk64GERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MzRjYWI0NDUwNDA0ODYyYjIwMWZlNzMzZjJjNzBhNmJm NTI5MjQwHhcNMjYwMTAxMDYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjI5ODk2NzI4M2ZlNTg3ZTBkNzM2ZjgwODA2NmEwOTA4ODBhZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5t0qQuS0QF/wDyVE6Lm5u1OFFCX KXtnE+YH+UrDrDxwHIL+9DYLEzhO78NXyKOpgDRnrz2EiVtpUq210qqg5z0PZulF urn24DGc29Lnj6h+n4BI0dVA5hAxPf6/8chCd/lYuS4UuM/HNoz/MSODpXsfC+L8 wp1Yruz1RPz7zf8aPr2LGPK70f/9FvKkHMXwPKGbjg0up3D97EnFox8G6u9HfUju fQhYcUK4/uIaZPibpXVvD4GA+FYFv4unEUHQfY+z0+RD8uSBNgn0YhtsMTD58MQH Bneqj9oOixWhSon5/TuFuZiYrGOWjZm4BejMRoDnx3cfkDwt/5iE+/HKwQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEIpiWcoP+WH4Nc2+AgGagkIgK1aMB8GA1UdIwQY MBaAFEU0yrRFBASGKyAf5zPyxwpr9SkkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlRUS3RFVUVCSVlySUJfbk1fTEhDbXYxS1NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81ZDQ2NzgtNDk3Yy00NzQwLTk0MGYt NmIwODRlYTk5OTNmLzEvUWltSlp5Z181WWZnMXpiNENBWnFDUWlBclZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC81ZDQ2NzgtNDk3Yy00NzQwLTk0MGYtNmIwODRlYTk5OTNm LzEvUlRUS3RFVUVCSVlySUJfbk1fTEhDbXYxS1NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwRFQMA0E AgACMAcDBQAqDH1AMA0GCSqGSIb3DQEBCwUAA4IBAQBMYCpmvRLBRR6Qn346oJYU PoGFme0rPHhMA7+mALoK2zhnTHkJ9wwmeaVFlpRxfR9myYK7rumNo+ZVsqew2s8H 0uqZdTLLJihHwOPPKQ2vFl3yf1wa60O1MEJxQlqzWisxboYaJM73EvBiwfQ/Ip+Q IcGld3BJ1x3p97qbQEZKlzQHRoTxKUqv6N3wl8Pl0JQ4q2BrdsdyQDqgzSNqQDqL iFR+2cLC3Vw5ktyJBxyXLbTUko+duowxUDKtNPz+IoKBFTUPBlJNkyhvoCgsYf2d 0Ymb/066nmpID34gG9ezNwSTRl2HE+nfsbUrGWVc2kSOYB+feUVAV7QCsKXov05G -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:23 2026 by rpki-client