This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/QgnGVYDtjT7Xiv9bSXAiMYcOfC4.roa File: QgnGVYDtjT7Xiv9bSXAiMYcOfC4.roa (raw, json) Hash identifier: 7jyRblRC2U+uJRMS8zI6UzI2pyhKabixPwkdu8GGav8= Subject key identifier: 42:09:C6:55:80:ED:8D:3E:D7:8A:FF:5B:49:70:22:31:87:0E:7C:2E Certificate issuer: /CN=68383ffa9f20bf021c090262994212d71667ed02 Certificate serial: 019B7758FFD7C7436F9DE344BF2572AFEC3B Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/QgnGVYDtjT7Xiv9bSXAiMYcOfC4.roa Signing time: Thu 01 Jan 2026 02:17:59 +0000 ROA not before: Thu 01 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 81.90.143.0/24 maxlen: 24 2a00:e20:143::/48 maxlen: 48 2a00:e20:150::/44 maxlen: 48 2a00:e27:143::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ff:d7:c7:43:6f:9d:e3:44:bf:25:72:af:ec:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02 Validity Not Before: Jan 1 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4209c65580ed8d3ed78aff5b49702231870e7c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:b6:1e:86:bc:72:9a:a2:ad:d2:b4:cd:48: 09:f6:60:5d:7c:96:82:2e:a9:25:08:4c:7b:01:a6: ac:48:1f:ac:15:3e:91:79:13:f9:06:a1:1a:0a:e9: 1e:5a:45:4e:52:50:74:ed:19:7c:01:a6:9f:c0:a7: 9f:2a:bc:a7:bb:b6:83:75:09:35:e8:27:ee:1a:40: d9:64:d6:43:37:94:1d:dd:1a:e2:97:1d:07:ee:83: 14:1e:ab:16:20:49:61:12:1a:b2:a0:2f:66:32:16: e9:c9:50:7f:ec:88:67:43:db:17:85:61:1a:54:aa: 43:19:c9:a0:59:22:69:f0:02:69:a5:3a:d6:98:83: 67:1c:f0:b5:f7:70:77:e8:80:1d:e1:e6:59:90:95: b9:d1:01:62:f2:0c:85:c6:bc:fe:53:5c:33:e4:76: 3d:86:39:a5:bd:8c:45:89:a4:8e:43:cb:16:00:78: 8e:c8:d8:ab:64:00:c0:39:38:cc:af:50:78:ca:41: 05:8d:0b:6d:ac:a5:dd:39:51:96:66:ab:cf:3d:d3: be:51:8d:ce:e9:25:b9:3a:8c:6c:74:91:78:ee:45: 22:3c:6a:3d:ff:3b:15:d3:09:08:0d:5a:8d:0d:45: b3:a6:bb:6f:54:63:17:e5:79:b0:bd:b1:03:3f:a0: 9b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:09:C6:55:80:ED:8D:3E:D7:8A:FF:5B:49:70:22:31:87:0E:7C:2E X509v3 Authority Key Identifier: keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/QgnGVYDtjT7Xiv9bSXAiMYcOfC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.90.143.0/24 IPv6: 2a00:e20:143::/48 2a00:e20:150::/44 2a00:e27:143::/48 Signature Algorithm: sha256WithRSAEncryption 43:08:36:2b:78:b4:5a:82:40:24:85:bb:62:12:68:e0:c4:b7: 31:25:2c:6b:4d:a9:6a:4b:c6:d1:aa:bc:9d:21:a5:d1:20:20: c5:4a:27:b8:89:cd:e7:0f:85:ac:ae:04:60:9b:8e:71:88:6f: bb:38:41:6c:63:3c:2d:1d:71:fb:6f:6a:03:0d:fb:bb:b6:34: 3c:f6:5e:48:2e:d2:cc:b2:be:d2:4c:91:45:4b:3a:2e:f3:2a: 56:e5:49:0e:74:2f:b8:86:4b:00:72:39:cb:07:12:69:23:ad: 8f:b4:6f:a4:a0:e3:e1:e4:3d:27:88:92:9c:64:10:20:dc:30: fa:ff:3a:be:63:8b:cc:c0:81:f6:78:a6:3b:4a:bb:5d:69:d0: 12:29:f9:37:a1:25:2e:9a:fb:c7:59:c3:8c:f1:9a:1f:12:3e: 2f:a0:a2:f3:b1:25:1d:4c:af:cf:9b:8c:1c:90:cb:72:f0:54: 9b:b6:5e:b8:3b:25:37:b9:47:b2:77:e4:b0:40:35:cd:c1:8e: cf:3b:b1:37:49:df:a3:99:34:41:df:a4:ab:86:d7:6f:ce:a2: 30:84:0b:c9:82:75:c2:de:04:ca:07:c9:05:cd:c0:26:e5:70: 96:f8:17:3c:16:c5:94:b1:41:b5:9e:f8:33:a1:14:4d:9a:dd: 6e:86:e0:dd -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt3WP/Xx0NvneNEvyVyr+w7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MzgzZmZhOWYyMGJmMDIxYzA5MDI2Mjk5NDIxMmQ3MTY2 N2VkMDIwHhcNMjYwMTAxMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjA5YzY1NTgwZWQ4ZDNlZDc4YWZmNWI0OTcwMjIzMTg3MGU3YzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1e2Hoa8cpqirdK0zUgJ9mBdfJaC LqklCEx7AaasSB+sFT6ReRP5BqEaCukeWkVOUlB07Rl8AaafwKefKrynu7aDdQk1 6CfuGkDZZNZDN5Qd3Rrilx0H7oMUHqsWIElhEhqyoC9mMhbpyVB/7IhnQ9sXhWEa VKpDGcmgWSJp8AJppTrWmINnHPC193B36IAd4eZZkJW50QFi8gyFxrz+U1wz5HY9 hjmlvYxFiaSOQ8sWAHiOyNirZADAOTjMr1B4ykEFjQttrKXdOVGWZqvPPdO+UY3O 6SW5OoxsdJF47kUiPGo9/zsV0wkIDVqNDUWzprtvVGMX5XmwvbEDP6CbsQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFEIJxlWA7Y0+14r/W0lwIjGHDnwuMB8GA1UdIwQY MBaAFGg4P/qfIL8CHAkCYplCEtcWZ+0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYt NDA2MGU5ZWVlYjllLzEvUWduR1ZZRHRqVDdYaXY5YlNYQWlNWWNPZkM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYtNDA2MGU5ZWVlYjll LzEvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAUVqPMCEE AgACMBsDBwAqAA4gAUMDBwQqAA4gAVADBwAqAA4nAUMwDQYJKoZIhvcNAQELBQAD ggEBAEMINit4tFqCQCSFu2ISaODEtzElLGtNqWpLxtGqvJ0hpdEgIMVKJ7iJzecP hayuBGCbjnGIb7s4QWxjPC0dcftvagMN+7u2NDz2Xkgu0syyvtJMkUVLOi7zKlbl SQ50L7iGSwByOcsHEmkjrY+0b6Sg4+HkPSeIkpxkECDcMPr/Or5ji8zAgfZ4pjtK u11p0BIp+TehJS6a+8dZw4zxmh8SPi+govOxJR1Mr8+bjByQy3LwVJu2Xrg7JTe5 R7J35LBANc3Bjs87sTdJ36OZNEHfpKuG12/OojCEC8mCdcLeBMoHyQXNwCblcJb4 FzwWxZSxQbWe+DOhFE2a3W6G4N0= -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:46 2026 by rpki-client