This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/qJG0Hd7c9EV41M-mzPnawa776Ng.roa File: qJG0Hd7c9EV41M-mzPnawa776Ng.roa (raw, json) Hash identifier: 38xg5etHC6ngVwSZkinLtA2QpEFQUOmcoXPkIJ0ae5Y= Subject key identifier: A8:91:B4:1D:DE:DC:F4:45:78:D4:CF:A6:CC:F9:DA:C1:AE:FB:E8:D8 Certificate issuer: /CN=12c603666719e979bef0921451a2ec264ed01209 Certificate serial: 019B76EB5483C1DF70B0E027011E071728A6 Authority key identifier: 12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/qJG0Hd7c9EV41M-mzPnawa776Ng.roa Signing time: Thu 01 Jan 2026 00:18:12 +0000 ROA not before: Thu 01 Jan 2026 00:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16296 IP address blocks: 80.241.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:54:83:c1:df:70:b0:e0:27:01:1e:07:17:28:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c603666719e979bef0921451a2ec264ed01209 Validity Not Before: Jan 1 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a891b41ddedcf44578d4cfa6ccf9dac1aefbe8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9d:32:76:bb:c1:3d:4b:b4:56:61:85:56:a0: c2:81:ef:e0:0d:16:7e:16:f4:4f:ec:73:0d:ee:35: 4a:91:91:91:e5:9e:70:6f:d4:da:69:71:93:96:7c: 76:fb:a7:28:24:e6:f1:eb:56:0c:e6:d3:62:68:11: 7c:1f:92:c2:f4:bb:06:97:d6:e9:0f:6a:52:de:ea: 18:92:15:9a:82:ba:c1:e3:d9:93:77:79:41:17:75: 6c:ea:5b:c7:f4:12:d6:07:3b:c8:31:87:c0:cc:98: dd:b7:fa:32:42:28:42:da:e2:84:d8:71:90:34:d9: 7c:15:64:5d:23:1c:8a:d8:78:ba:d2:28:4b:fd:d7: 96:04:2b:c7:30:bf:8f:ba:85:06:66:2f:78:9c:77: 04:62:94:37:ed:5c:fb:d4:62:c7:b4:6b:c9:11:8b: 8a:5d:34:c0:60:10:57:6f:f0:5c:d3:10:99:4c:bc: cd:8b:a2:aa:f8:2e:53:9f:53:ed:f8:b5:30:ef:20: 9c:69:a7:6c:27:b4:74:25:28:2b:32:75:2d:0c:ce: d1:9b:0d:d3:2a:9e:41:21:7d:9a:ac:dc:01:a7:19: 79:42:e3:11:c1:cb:09:4f:5a:03:97:ee:45:c1:66: 29:2a:a5:05:c0:96:b8:0a:70:63:ef:47:01:51:73: bb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:91:B4:1D:DE:DC:F4:45:78:D4:CF:A6:CC:F9:DA:C1:AE:FB:E8:D8 X509v3 Authority Key Identifier: keyid:12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/qJG0Hd7c9EV41M-mzPnawa776Ng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.241.128.0/21 Signature Algorithm: sha256WithRSAEncryption 0f:5b:00:fb:ea:9d:82:8f:0f:38:e5:2b:8e:88:d4:47:cd:b3: 98:22:ec:25:b7:99:33:ea:ed:50:40:23:cf:d9:25:8c:f0:c5: da:33:f8:0e:b6:d6:06:47:22:c3:53:58:96:3e:d4:92:b7:74: 34:36:f4:40:c9:66:19:d6:15:23:6e:0a:04:1e:34:11:ac:b0: 8d:df:07:8c:88:75:22:e3:8f:3c:b6:bb:34:9e:bd:7c:90:09: 1f:cc:4c:a1:00:48:61:e0:6e:27:e0:e7:e6:89:12:1b:0e:90: b3:9f:6d:42:03:79:7f:73:c4:45:4c:ba:10:fa:8b:09:68:0c: f9:a2:a0:77:11:98:ae:a3:39:b5:fd:09:f4:98:d9:df:e7:71: 90:3d:3e:85:d8:99:2a:0c:15:ad:40:eb:f2:39:2a:00:8b:ad: 3a:e8:be:ba:29:2e:a6:5b:51:63:75:e9:ac:58:71:e4:dc:5d: b1:6e:de:88:2d:c0:c5:32:fb:60:d7:05:c3:12:42:2b:f6:d4: cd:19:cf:41:fe:7f:72:d7:3d:62:18:6f:ea:d0:70:f3:8f:05: 35:72:6a:a9:33:1e:3b:8d:bc:eb:26:67:a7:f6:9d:0c:69:dc: 3d:74:6b:8f:ad:d4:dc:5f:69:4e:26:5d:57:a4:7f:53:cf:18: de:8a:eb:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt261SDwd9wsOAnAR4HFyimMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzYwMzY2NjcxOWU5NzliZWYwOTIxNDUxYTJlYzI2NGVk MDEyMDkwHhcNMjYwMTAxMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODkxYjQxZGRlZGNmNDQ1NzhkNGNmYTZjY2Y5ZGFjMWFlZmJlOGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0p0ydrvBPUu0VmGFVqDCge/gDRZ+ FvRP7HMN7jVKkZGR5Z5wb9TaaXGTlnx2+6coJObx61YM5tNiaBF8H5LC9LsGl9bp D2pS3uoYkhWagrrB49mTd3lBF3Vs6lvH9BLWBzvIMYfAzJjdt/oyQihC2uKE2HGQ NNl8FWRdIxyK2Hi60ihL/deWBCvHML+PuoUGZi94nHcEYpQ37Vz71GLHtGvJEYuK XTTAYBBXb/Bc0xCZTLzNi6Kq+C5Tn1Pt+LUw7yCcaadsJ7R0JSgrMnUtDM7Rmw3T Kp5BIX2arNwBpxl5QuMRwcsJT1oDl+5FwWYpKqUFwJa4CnBj70cBUXO76wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKiRtB3e3PRFeNTPpsz52sGu++jYMB8GA1UdIwQY MBaAFBLGA2ZnGel5vvCSFFGi7CZO0BIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNZRFptY1o2WG0tOEpJVVVhTHNKazdRRWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jMmQzOTktNGFlOS00NDMxLTkxNjEt NThlZmEwYmVlMDg0LzEvcUpHMEhkN2M5RVY0MU0tbXpQbmF3YTc3Nk5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jMmQzOTktNGFlOS00NDMxLTkxNjEtNThlZmEwYmVlMDg0 LzEvRXNZRFptY1o2WG0tOEpJVVVhTHNKazdRRWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUPGAMA0G CSqGSIb3DQEBCwUAA4IBAQAPWwD76p2Cjw845SuOiNRHzbOYIuwlt5kz6u1QQCPP 2SWM8MXaM/gOttYGRyLDU1iWPtSSt3Q0NvRAyWYZ1hUjbgoEHjQRrLCN3weMiHUi 4488trs0nr18kAkfzEyhAEhh4G4n4OfmiRIbDpCzn21CA3l/c8RFTLoQ+osJaAz5 oqB3EZiuozm1/Qn0mNnf53GQPT6F2JkqDBWtQOvyOSoAi6066L66KS6mW1Fjdems WHHk3F2xbt6ILcDFMvtg1wXDEkIr9tTNGc9B/n9y1z1iGG/q0HDzjwU1cmqpMx47 jbzrJmen9p0Madw9dGuPrdTcX2lOJl1XpH9TzxjeiuvS -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:52 2026 by rpki-client