This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/QNgMd55aywiMLZtsj9Z58IeKCj0.roa File: QNgMd55aywiMLZtsj9Z58IeKCj0.roa (raw, json) Hash identifier: eixq1ArtMYwW26hEsDnfya3+meCjclSqR3FpkWEnQTg= Subject key identifier: 40:D8:0C:77:9E:5A:CB:08:8C:2D:9B:6C:8F:D6:79:F0:87:8A:0A:3D Certificate issuer: /CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503 Certificate serial: 019B77C70F7E108BD43D9C99DEFFAED31E0D Authority key identifier: 53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/QNgMd55aywiMLZtsj9Z58IeKCj0.roa Signing time: Thu 01 Jan 2026 04:18:12 +0000 ROA not before: Thu 01 Jan 2026 04:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197047 IP address blocks: 178.212.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0f:7e:10:8b:d4:3d:9c:99:de:ff:ae:d3:1e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503 Validity Not Before: Jan 1 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40d80c779e5acb088c2d9b6c8fd679f0878a0a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:be:26:8d:d5:f1:08:46:f0:bd:15:e0:b6:c2: d8:b4:17:fe:7d:3b:00:d3:4b:d9:d1:f4:c6:55:66: 60:31:24:99:ea:a5:3a:1f:f6:5c:1e:d9:1c:c2:cd: 0b:f0:8d:9c:3a:3a:dd:5f:1a:00:1c:ff:4b:05:46: 34:35:df:0b:45:44:ed:42:3c:4c:79:55:95:f8:36: db:3c:0b:86:61:ef:53:12:ba:8d:0b:70:03:c8:40: 82:6c:2c:f1:96:15:7e:e6:93:c0:10:4a:fd:7d:0a: 94:c0:aa:d7:1b:5a:34:8b:78:e8:f0:12:95:8f:75: 05:dd:30:cd:c6:63:7e:96:fb:68:8d:4b:16:df:e9: 57:64:0d:70:13:b2:4c:62:9d:4d:40:14:6a:56:78: 70:90:52:73:ac:cd:8b:db:15:14:40:8b:d2:f8:76: 07:e7:e2:7d:70:93:65:3b:00:fb:58:09:fd:2b:25: fc:f2:0e:59:a4:0d:78:b4:fc:a1:d6:ce:06:4b:6e: 6a:08:f8:26:c5:be:a2:d3:d2:f4:2b:49:df:84:74: 6f:2e:43:46:b0:d6:b0:b2:56:c9:1a:4e:6f:4c:a4: bd:5b:bc:6b:c8:1f:85:b1:c2:3f:6c:e8:47:2c:b5: 40:cd:8f:d7:65:b4:33:b7:5d:b0:35:9f:90:59:8a: ad:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D8:0C:77:9E:5A:CB:08:8C:2D:9B:6C:8F:D6:79:F0:87:8A:0A:3D X509v3 Authority Key Identifier: keyid:53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/QNgMd55aywiMLZtsj9Z58IeKCj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.212.16.0/21 Signature Algorithm: sha256WithRSAEncryption 4d:ef:72:17:ef:21:ac:ae:a9:34:b8:60:63:3f:fc:4a:58:62: 42:af:99:02:f4:7a:58:1a:73:90:b9:b3:0e:ee:78:58:c2:22: e0:e8:df:b7:4f:8d:02:f2:03:d5:7f:bf:e8:ee:fa:c9:21:b9: a7:85:ce:7e:78:fb:31:b5:93:4a:77:cc:63:93:a7:f0:b9:00: 1a:10:aa:f7:8c:1f:de:45:37:b4:15:9e:11:8c:18:f9:42:a5: ab:af:27:3e:f2:e0:ed:86:83:63:c9:5f:e5:ec:2a:f4:63:3c: 2b:c4:c9:64:f4:ce:49:1c:a3:56:8e:c9:3e:d3:b3:88:ee:37: 10:d9:fe:98:71:6d:e8:ff:68:30:e5:c2:25:12:74:01:af:e6: 9f:6b:7f:8b:5b:61:8e:cd:45:a1:0d:29:fc:8d:fd:86:f3:41: 1f:b2:3f:f4:e9:c9:09:83:9c:be:51:c3:84:a5:35:bd:a2:3c: a4:c7:3c:09:ae:42:de:d2:40:4c:5b:a5:49:a0:9d:a6:95:3e: 7f:4c:0c:4b:60:f4:7f:a1:41:d0:18:77:2f:2a:6b:51:bf:c1: bf:9a:b2:7b:3f:75:17:4f:80:fe:2f:c7:ab:74:92:16:ed:cf: 19:d7:7b:b0:2b:b9:38:b8:f7:e7:88:d4:fb:96:f0:2a:0c:83: 30:e8:93:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xw9+EIvUPZyZ3v+u0x4NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzE2NmUzZjcwOWZiM2JhY2E5YWU3OWFjYmVjNmNhMWQw ZmM1MDMwHhcNMjYwMTAxMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGQ4MGM3NzllNWFjYjA4OGMyZDliNmM4ZmQ2NzlmMDg3OGEwYTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL4mjdXxCEbwvRXgtsLYtBf+fTsA 00vZ0fTGVWZgMSSZ6qU6H/ZcHtkcws0L8I2cOjrdXxoAHP9LBUY0Nd8LRUTtQjxM eVWV+DbbPAuGYe9TErqNC3ADyECCbCzxlhV+5pPAEEr9fQqUwKrXG1o0i3jo8BKV j3UF3TDNxmN+lvtojUsW3+lXZA1wE7JMYp1NQBRqVnhwkFJzrM2L2xUUQIvS+HYH 5+J9cJNlOwD7WAn9KyX88g5ZpA14tPyh1s4GS25qCPgmxb6i09L0K0nfhHRvLkNG sNawslbJGk5vTKS9W7xryB+FscI/bOhHLLVAzY/XZbQzt12wNZ+QWYqtwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEDYDHeeWssIjC2bbI/WefCHigo9MB8GA1UdIwQY MBaAFFMxZuP3Cfs7rKmueay+xsodD8UDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXpGbTRfY0otenVzcWE1NXJMN0d5aDBQeFFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wOTE5MTEtMDZkOC00NWM4LWIwNWQt ZTRiYmY0YzBkYjU5LzEvUU5nTWQ1NWF5d2lNTFp0c2o5WjU4SWVLQ2owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8wOTE5MTEtMDZkOC00NWM4LWIwNWQtZTRiYmY0YzBkYjU5 LzEvVXpGbTRfY0otenVzcWE1NXJMN0d5aDBQeFFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstQQMA0G CSqGSIb3DQEBCwUAA4IBAQBN73IX7yGsrqk0uGBjP/xKWGJCr5kC9HpYGnOQubMO 7nhYwiLg6N+3T40C8gPVf7/o7vrJIbmnhc5+ePsxtZNKd8xjk6fwuQAaEKr3jB/e RTe0FZ4RjBj5QqWrryc+8uDthoNjyV/l7Cr0YzwrxMlk9M5JHKNWjsk+07OI7jcQ 2f6YcW3o/2gw5cIlEnQBr+afa3+LW2GOzUWhDSn8jf2G80Efsj/06ckJg5y+UcOE pTW9ojykxzwJrkLe0kBMW6VJoJ2mlT5/TAxLYPR/oUHQGHcvKmtRv8G/mrJ7P3UX T4D+L8erdJIW7c8Z13uwK7k4uPfniNT7lvAqDIMw6JM0 -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:37 2026 by rpki-client