This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/QQ_-mRDFJ5DaKfBJN0aPtdhQj3U.roa File: QQ_-mRDFJ5DaKfBJN0aPtdhQj3U.roa (raw, json) Hash identifier: GC0bdPtglGm56NWGSq7xZPXabLclahYiE7s/xN0Dv9E= Subject key identifier: 41:0F:FE:99:10:C5:27:90:DA:29:F0:49:37:46:8F:B5:D8:50:8F:75 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80B214EA1CC3DFB863C96A83ABB4C2 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/QQ_-mRDFJ5DaKfBJN0aPtdhQj3U.roa Signing time: Fri 02 Jan 2026 02:19:27 +0000 ROA not before: Fri 02 Jan 2026 02:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210542 IP address blocks: 84.32.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b2:14:ea:1c:c3:df:b8:63:c9:6a:83:ab:b4:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=410ffe9910c52790da29f04937468fb5d8508f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:75:aa:bf:86:a8:f4:1f:aa:c4:5d:be:dd: f2:46:8f:e5:cf:1f:26:3c:5e:8d:80:4a:8e:70:46: 06:28:98:6c:cd:7a:4e:a3:52:6a:7a:46:ff:d7:2e: dd:2c:c5:30:c6:b7:cd:cb:73:b8:a0:4c:7d:13:31: 39:8d:fc:72:5a:18:5b:8d:e1:ab:cb:4b:55:9f:4a: 2b:3b:a8:d8:98:2b:83:94:b4:c1:9e:16:87:d7:07: c4:b4:84:40:21:3b:a4:ed:6c:76:d2:05:8b:3a:65: b2:37:0f:84:be:2d:c0:11:fa:8e:49:fd:a2:a9:bb: 2f:d9:8e:b7:56:43:84:fc:1a:44:72:1f:98:25:87: 6d:44:94:ee:3b:b2:0f:ae:9a:e0:00:cb:72:e0:d2: 3c:46:83:8d:90:81:30:39:05:0f:a2:56:d9:57:a2: 1e:da:f2:3b:98:5a:7a:8f:8d:f0:d2:08:f5:63:05: 70:83:83:10:01:d6:19:3a:32:61:b0:34:a0:38:2b: 78:63:02:92:70:92:03:2e:e9:03:2c:2e:e5:de:1a: c9:4a:86:a4:f8:0c:6c:9f:78:22:28:3c:9a:7b:49: 00:e6:80:ba:3e:57:44:da:a5:26:8e:10:d2:ac:3e: 3b:47:53:bb:f9:c1:4f:1f:f1:9d:64:eb:4d:8b:93: ac:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0F:FE:99:10:C5:27:90:DA:29:F0:49:37:46:8F:B5:D8:50:8F:75 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/QQ_-mRDFJ5DaKfBJN0aPtdhQj3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.21.0/24 Signature Algorithm: sha256WithRSAEncryption 69:dd:6f:4a:d2:3f:86:aa:c8:3f:5e:6e:92:ec:7a:fb:b0:46: f8:e4:b4:2b:78:4b:0c:9c:c4:65:e1:b6:95:05:5f:70:b9:f8: ae:99:ec:09:c8:a6:e2:50:78:4d:16:61:84:1e:94:e3:44:88: 5d:d9:9e:6f:70:9c:38:6e:a5:2f:ff:33:98:38:46:19:a5:fb: 27:3f:64:3c:bf:67:61:27:d9:92:10:7f:26:e0:6b:51:b2:be: 80:35:61:68:63:1c:22:fd:75:81:c7:b9:8b:88:54:4c:ac:88: 33:17:35:ae:b4:1a:b8:79:11:d4:1e:ca:bf:c4:94:d7:2a:52: d5:61:7a:ae:da:47:06:a1:6a:ad:45:3b:ef:5f:ed:4f:f9:20: 30:78:af:ea:2c:88:4c:dd:c2:0a:1b:8a:ca:0c:f1:5f:ec:0f: 31:11:f9:df:bf:82:e3:85:da:87:1a:24:02:5e:02:41:b2:c4: a9:ed:ae:d6:26:3d:cf:13:db:85:78:58:e5:4c:ca:60:f6:3f: c7:27:2e:84:3b:85:23:3c:35:93:f9:39:44:45:0c:34:5f:0e: 09:ec:38:5a:68:fc:a1:9f:81:d6:52:a7:2c:4c:95:0b:d3:17: 38:58:0c:fb:d8:b5:65:3a:0d:fa:6e:58:0c:dd:44:17:e6:9a: d3:34:09:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gLIU6hzD37hjyWqDq7TCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTBmZmU5OTEwYzUyNzkwZGEyOWYwNDkzNzQ2OGZiNWQ4NTA4Zjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqId1qr+GqPQfqsRdvt3yRo/lzx8m PF6NgEqOcEYGKJhszXpOo1Jqekb/1y7dLMUwxrfNy3O4oEx9EzE5jfxyWhhbjeGr y0tVn0orO6jYmCuDlLTBnhaH1wfEtIRAITuk7Wx20gWLOmWyNw+Evi3AEfqOSf2i qbsv2Y63VkOE/BpEch+YJYdtRJTuO7IPrprgAMty4NI8RoONkIEwOQUPolbZV6Ie 2vI7mFp6j43w0gj1YwVwg4MQAdYZOjJhsDSgOCt4YwKScJIDLukDLC7l3hrJSoak +Axsn3giKDyae0kA5oC6PldE2qUmjhDSrD47R1O7+cFPH/GdZOtNi5OsvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEEP/pkQxSeQ2inwSTdGj7XYUI91MB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvUVFfLW1SREZKNURhS2ZCSk4wYVB0ZGhRajNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCAVMA0G CSqGSIb3DQEBCwUAA4IBAQBp3W9K0j+Gqsg/Xm6S7Hr7sEb45LQreEsMnMRl4baV BV9wufiumewJyKbiUHhNFmGEHpTjRIhd2Z5vcJw4bqUv/zOYOEYZpfsnP2Q8v2dh J9mSEH8m4GtRsr6ANWFoYxwi/XWBx7mLiFRMrIgzFzWutBq4eRHUHsq/xJTXKlLV YXqu2kcGoWqtRTvvX+1P+SAweK/qLIhM3cIKG4rKDPFf7A8xEfnfv4LjhdqHGiQC XgJBssSp7a7WJj3PE9uFeFjlTMpg9j/HJy6EO4UjPDWT+TlERQw0Xw4J7DhaaPyh n4HWUqcsTJUL0xc4WAz72LVlOg36blgM3UQX5prTNAmN -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:27 2026 by rpki-client