This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/QdRrKIrH4mGJmO4pGdzpank3gew.roa File: QdRrKIrH4mGJmO4pGdzpank3gew.roa (raw, json) Hash identifier: uL5ZvBd0SOggdi3Ll3eXsAHR4s6R5DvUqu2sa+EiNtI= Subject key identifier: 41:D4:6B:28:8A:C7:E2:61:89:98:EE:29:19:DC:E9:6A:79:37:81:EC Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83 Certificate serial: 019B7EA55A2B12D7CF4C89B6C350A2BC7A0C Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/QdRrKIrH4mGJmO4pGdzpank3gew.roa Signing time: Fri 02 Jan 2026 12:18:44 +0000 ROA not before: Fri 02 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33387 IP address blocks: 93.113.44.0/24 maxlen: 24 93.113.130.0/24 maxlen: 24 94.176.109.0/24 maxlen: 24 94.177.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 03:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:5a:2b:12:d7:cf:4c:89:b6:c3:50:a2:bc:7a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83 Validity Not Before: Jan 2 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41d46b288ac7e2618998ee2919dce96a793781ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6b:71:02:4c:6f:f7:4d:69:c1:38:6f:20:a9: f5:1d:2d:15:16:00:e3:3c:06:fe:9d:16:d4:60:ca: a6:7f:26:84:7a:85:a0:98:6b:74:2d:2c:0e:40:e6: 3f:0d:35:2b:a8:5f:26:3e:7b:75:d3:58:33:9c:d8: f7:db:e2:80:76:02:0e:f7:e6:05:19:33:ee:71:43: 1a:ad:18:c8:35:7b:50:3f:5c:f4:5b:0d:8f:91:21: 55:5b:3a:be:e8:d0:92:73:c5:f7:5e:8e:d4:86:e0: e2:1c:71:29:e5:d2:bc:19:e5:a1:81:db:99:d0:98: 90:11:00:ec:b0:e9:c5:a4:72:fa:bf:07:99:19:c2: d1:16:e2:d7:ac:59:13:29:5f:b2:e4:4a:e6:1f:3c: 36:48:46:f3:68:28:57:74:5d:9b:4d:9c:b3:1c:72: 66:34:22:33:f7:1c:71:e1:75:9a:c0:3e:10:ce:4b: 79:6c:7e:27:e4:10:6e:b3:5c:0f:cb:c1:49:76:1d: da:a7:9b:04:e1:c6:ee:a6:f3:6d:bc:67:41:23:df: 33:cf:22:70:2d:cd:ae:14:90:f3:40:f3:7f:8e:79: 89:12:25:56:67:88:83:42:23:f0:fc:9f:1b:d8:c8: f0:53:d6:ad:50:c2:5f:ca:2e:79:2d:53:c1:c1:2b: 0f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D4:6B:28:8A:C7:E2:61:89:98:EE:29:19:DC:E9:6A:79:37:81:EC X509v3 Authority Key Identifier: keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/QdRrKIrH4mGJmO4pGdzpank3gew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.113.44.0/24 93.113.130.0/24 94.176.109.0/24 94.177.67.0/24 Signature Algorithm: sha256WithRSAEncryption 07:4e:86:13:12:80:d8:2d:2f:26:e8:e9:52:9c:af:96:e8:fb: 04:e8:e8:df:76:5e:86:2e:ff:c0:32:d0:a9:d6:9d:de:c0:3c: cc:5b:19:ee:74:4c:86:46:c2:da:e6:29:b1:76:48:cc:96:e1: c3:2e:b8:76:84:6c:45:e4:bf:55:1c:fe:c8:97:72:f2:be:55: 6b:68:ec:6d:0c:1e:5b:1a:a1:50:40:fa:b9:ba:d8:30:62:c9: f8:15:a0:48:cb:3d:18:39:f0:fe:da:0d:47:c1:29:9e:e7:28: 3b:ae:cd:c0:14:87:4a:e5:0e:3d:a0:5e:27:00:6e:f0:79:2f: ed:2f:8f:9d:61:ce:78:d7:ae:9e:73:9b:13:50:93:5e:9b:2d: fe:e3:e3:11:0b:29:74:1b:81:b2:c0:07:62:fb:8e:c4:4a:2e: 5d:f6:c9:53:d1:5c:4a:12:dc:9b:97:29:ad:16:78:9b:20:9b: 56:62:15:2a:92:e9:7a:23:34:ea:37:ab:9f:35:19:74:5d:a8: 2a:b5:11:a2:ea:17:07:9e:cb:ac:a5:10:f6:62:ef:00:08:f9: eb:65:0a:84:5e:e2:03:0d:a4:7c:53:eb:55:ff:a0:28:27:58: b0:ee:81:20:6a:6f:07:2c:e8:e9:44:c6:b8:0f:8a:ff:ff:46: 92:26:14:76 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+pVorEtfPTIm2w1CivHoMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMmM0NTg1YmQ4OGZiMjdjYWRmMjllZTViYjk1ZDY1NzVm Y2VmODMwHhcNMjYwMTAyMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWQ0NmIyODhhYzdlMjYxODk5OGVlMjkxOWRjZTk2YTc5Mzc4MWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGtxAkxv901pwThvIKn1HS0VFgDj PAb+nRbUYMqmfyaEeoWgmGt0LSwOQOY/DTUrqF8mPnt101gznNj32+KAdgIO9+YF GTPucUMarRjINXtQP1z0Ww2PkSFVWzq+6NCSc8X3Xo7UhuDiHHEp5dK8GeWhgduZ 0JiQEQDssOnFpHL6vweZGcLRFuLXrFkTKV+y5ErmHzw2SEbzaChXdF2bTZyzHHJm NCIz9xxx4XWawD4Qzkt5bH4n5BBus1wPy8FJdh3ap5sE4cbupvNtvGdBI98zzyJw Lc2uFJDzQPN/jnmJEiVWZ4iDQiPw/J8b2MjwU9atUMJfyi55LVPBwSsPdwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEHUayiKx+JhiZjuKRnc6Wp5N4HsMB8GA1UdIwQY MBaAFCIsRYW9iPsnyt8p7lu5XWV1/O+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUt YzY0N2E4YzFkZGZhLzEvUWRScktJckg0bUdKbU80cEdkenBhbmszZ2V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUtYzY0N2E4YzFkZGZh LzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAXXEsAwQA XXGCAwQAXrBtAwQAXrFDMA0GCSqGSIb3DQEBCwUAA4IBAQAHToYTEoDYLS8m6OlS nK+W6PsE6Ojfdl6GLv/AMtCp1p3ewDzMWxnudEyGRsLa5imxdkjMluHDLrh2hGxF 5L9VHP7Il3LyvlVraOxtDB5bGqFQQPq5utgwYsn4FaBIyz0YOfD+2g1HwSme5yg7 rs3AFIdK5Q49oF4nAG7weS/tL4+dYc54166ec5sTUJNemy3+4+MRCyl0G4GywAdi +47ESi5d9slT0VxKEtyblymtFnibIJtWYhUqkul6IzTqN6ufNRl0XagqtRGi6hcH nsuspRD2Yu8ACPnrZQqEXuIDDaR8U+tV/6AoJ1iw7oEgam8HLOjpRMa4D4r//0aS JhR2 -----END CERTIFICATE-----Generated at Sun Jan 11 12:33:46 2026 by rpki-client