This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/Qjk3TKtSPUctHgo4rsqpoAhhjHQ.roa File: Qjk3TKtSPUctHgo4rsqpoAhhjHQ.roa (raw, json) Hash identifier: +v/ml2xcCnK66GfWnq2Rs0P+BnSU40/q3bgPtxOvz4M= Subject key identifier: 42:39:37:4C:AB:52:3D:47:2D:1E:0A:38:AE:CA:A9:A0:08:61:8C:74 Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c Certificate serial: 019B78A35B02127090627F68FF08CA184D88 Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/Qjk3TKtSPUctHgo4rsqpoAhhjHQ.roa Signing time: Thu 01 Jan 2026 08:18:50 +0000 ROA not before: Thu 01 Jan 2026 08:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.107.46.0/24 maxlen: 24 2a13:7f00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5b:02:12:70:90:62:7f:68:ff:08:ca:18:4d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c Validity Not Before: Jan 1 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4239374cab523d472d1e0a38aecaa9a008618c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b2:10:89:ff:a0:89:30:06:a8:30:26:c7:9b: b3:af:c7:fe:7d:14:7a:48:01:f0:62:75:81:90:9f: 55:57:04:09:49:27:19:73:76:25:18:4b:2b:ac:05: 32:c9:37:8a:a9:67:09:fe:03:a4:52:56:54:a9:8e: 78:05:9b:12:54:68:57:63:06:dd:db:9b:1f:d4:7e: d6:4b:6b:77:24:5d:f1:1c:b1:12:12:dd:91:79:91: aa:96:29:cb:45:fd:36:71:d2:f9:0c:7a:07:22:53: 99:f8:f0:d0:e1:1c:b3:69:b9:52:29:ab:ce:a3:26: d3:ab:2b:de:14:43:df:9f:26:cd:a8:03:73:c0:75: cb:37:82:0f:aa:55:9c:3b:54:3f:df:54:8b:0b:99: ad:7c:c0:a4:73:3f:82:37:67:ed:6d:b0:18:ff:77: 4f:12:60:f3:8d:5b:b3:8d:70:d3:89:7c:ea:3e:c1: 00:39:3d:56:f9:57:a8:83:ee:a1:af:c3:90:a0:7e: f5:01:cb:95:50:30:53:a7:8e:2f:81:a6:b3:7c:4d: de:72:4a:ae:48:35:96:32:4a:6b:79:a5:38:07:86: 8f:b4:75:fb:0d:31:55:6a:40:2d:c8:55:d9:38:36: 15:16:23:1b:98:d9:b2:16:d3:8c:13:9a:1d:ed:5e: ff:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:39:37:4C:AB:52:3D:47:2D:1E:0A:38:AE:CA:A9:A0:08:61:8C:74 X509v3 Authority Key Identifier: keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/Qjk3TKtSPUctHgo4rsqpoAhhjHQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.107.46.0/24 IPv6: 2a13:7f00::/32 Signature Algorithm: sha256WithRSAEncryption 53:62:45:70:b1:92:a1:3e:78:88:b6:ae:72:ef:b6:c9:97:83: f3:1a:f3:62:0b:ee:fc:7f:7f:e8:04:a0:b2:e2:a7:42:91:46: 8f:0e:fc:e4:63:c2:e7:f4:25:01:07:1b:75:82:d5:91:6a:3a: 70:de:50:62:30:0e:45:52:dc:fc:90:52:bf:12:eb:8d:e9:9f: 89:53:eb:db:e3:d1:29:ca:60:eb:b6:57:a5:4a:8b:27:d1:3b: 27:92:7a:57:b9:7c:3c:3f:1e:fe:30:24:ce:26:75:8a:69:8f: 5b:81:85:72:88:5c:4c:fc:64:2a:a2:a8:ff:66:47:a7:c4:48: a1:03:fd:a8:35:0f:51:5a:55:9d:e3:1e:91:93:e4:5f:a8:89: bf:0c:f8:84:c6:f8:83:53:00:34:bf:1d:30:9b:82:47:d3:c5: 59:03:a2:68:a4:b3:8e:99:8f:ba:09:e8:ff:0d:6e:4d:ba:a5: 78:5c:ef:96:fb:33:85:ac:31:75:8e:35:7c:00:2e:9e:86:52: c4:24:2a:f8:11:22:98:89:f8:cd:86:8d:ae:4f:79:ad:9a:61: 71:ad:75:ec:f4:b7:9e:94:5d:c3:1a:34:b3:3d:36:d8:78:6d: 5c:99:3f:6e:eb:58:10:46:6b:8a:4b:a7:ef:62:47:d4:35:64: 49:b1:c4:8d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4o1sCEnCQYn9o/wjKGE2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYWE4ODQwZTUzYmI5NjViZTUxOTJjODViNzQwMzQ1ZTdh MDY1MmMwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjM5Mzc0Y2FiNTIzZDQ3MmQxZTBhMzhhZWNhYTlhMDA4NjE4Yzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rIQif+giTAGqDAmx5uzr8f+fRR6 SAHwYnWBkJ9VVwQJSScZc3YlGEsrrAUyyTeKqWcJ/gOkUlZUqY54BZsSVGhXYwbd 25sf1H7WS2t3JF3xHLESEt2ReZGqlinLRf02cdL5DHoHIlOZ+PDQ4RyzablSKavO oybTqyveFEPfnybNqANzwHXLN4IPqlWcO1Q/31SLC5mtfMCkcz+CN2ftbbAY/3dP EmDzjVuzjXDTiXzqPsEAOT1W+Veog+6hr8OQoH71AcuVUDBTp44vgaazfE3eckqu SDWWMkpreaU4B4aPtHX7DTFVakAtyFXZODYVFiMbmNmyFtOME5od7V7/4wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEI5N0yrUj1HLR4KOK7KqaAIYYx0MB8GA1UdIwQY MBaAFAyqiEDlO7llvlGSyFt0A0XnoGUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3Mzgt YzQ0ZGRmZmE2OWFiLzEvUWprM1RLdFNQVWN0SGdvNHJzcXBvQWhoakhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3MzgtYzQ0ZGRmZmE2OWFi LzEvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwWsuMA0E AgACMAcDBQAqE38AMA0GCSqGSIb3DQEBCwUAA4IBAQBTYkVwsZKhPniItq5y77bJ l4PzGvNiC+78f3/oBKCy4qdCkUaPDvzkY8Ln9CUBBxt1gtWRajpw3lBiMA5FUtz8 kFK/EuuN6Z+JU+vb49EpymDrtlelSosn0TsnknpXuXw8Px7+MCTOJnWKaY9bgYVy iFxM/GQqoqj/ZkenxEihA/2oNQ9RWlWd4x6Rk+RfqIm/DPiExviDUwA0vx0wm4JH 08VZA6JopLOOmY+6Cej/DW5NuqV4XO+W+zOFrDF1jjV8AC6ehlLEJCr4ESKYifjN ho2uT3mtmmFxrXXs9LeelF3DGjSzPTbYeG1cmT9u61gQRmuKS6fvYkfUNWRJscSN -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:07 2026 by rpki-client