This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/QRfdDVkt_h3uZi2qFgrq9ytk9NM.roa File: QRfdDVkt_h3uZi2qFgrq9ytk9NM.roa (raw, json) Hash identifier: kVt/mkZ/E59+3oUc66185qlzg7hwnqUaLl1xxhgP/VQ= Subject key identifier: 41:17:DD:0D:59:2D:FE:1D:EE:66:2D:AA:16:0A:EA:F7:2B:64:F4:D3 Certificate issuer: /CN=bafd79b6dd85290fef6169a44e426107d274651a Certificate serial: 019B78A3523116AA1CD8BA8C5D7B6F0A4458 Authority key identifier: BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/QRfdDVkt_h3uZi2qFgrq9ytk9NM.roa Signing time: Thu 01 Jan 2026 08:18:47 +0000 ROA not before: Thu 01 Jan 2026 08:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202302 IP address blocks: 176.117.76.0/24 maxlen: 24 176.117.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:52:31:16:aa:1c:d8:ba:8c:5d:7b:6f:0a:44:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bafd79b6dd85290fef6169a44e426107d274651a Validity Not Before: Jan 1 08:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4117dd0d592dfe1dee662daa160aeaf72b64f4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8b:3e:04:d0:8f:27:7f:60:a5:b4:55:a0:f1: 4a:b8:38:fd:f6:83:84:77:64:a0:47:90:c8:40:e1: 84:30:c5:5a:7b:5b:20:02:84:97:f1:ed:8d:e5:da: 65:7d:51:97:ee:21:38:77:2b:c8:22:9b:a5:4b:8b: 38:7e:9e:0b:0f:97:6f:18:17:8c:71:bf:b8:ab:cd: 3d:bc:d7:c1:64:cc:01:78:c2:f7:9e:02:e0:66:e4: 42:0d:be:51:a9:69:33:0a:4e:78:fe:4c:5a:ad:33: 60:92:aa:ab:45:83:25:10:13:31:50:77:27:ec:c7: 80:22:0e:b3:73:56:41:8e:2e:13:6b:5d:26:2d:47: 45:69:5a:f8:1b:ad:e2:d6:eb:b3:2b:74:f6:49:67: eb:21:9c:a2:d3:51:0d:66:c5:22:99:ca:21:5b:45: 07:af:f6:f3:c3:49:bd:0d:59:28:29:0c:fc:b9:44: 93:f4:c1:9e:b8:d3:57:1d:d1:d5:1b:d3:7d:d6:4f: 95:23:c2:4b:27:90:51:9f:4e:fa:ee:aa:ad:33:c2: 94:74:33:e1:03:15:77:a6:30:7e:00:3c:43:24:c6: 7a:ed:2f:61:f4:85:ac:49:c6:a2:fb:63:b2:9d:40: 7d:40:3a:1b:c7:de:6d:69:d6:8d:c5:6d:28:f5:70: 16:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:17:DD:0D:59:2D:FE:1D:EE:66:2D:AA:16:0A:EA:F7:2B:64:F4:D3 X509v3 Authority Key Identifier: keyid:BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/QRfdDVkt_h3uZi2qFgrq9ytk9NM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.117.76.0/23 Signature Algorithm: sha256WithRSAEncryption 88:3e:17:8c:74:96:0d:a7:ee:32:7d:02:ff:5e:98:d0:cb:f8: 59:a8:37:9b:83:b6:12:23:76:23:16:fd:7c:99:66:a8:12:75: 5f:73:dc:6d:ec:5c:88:31:f0:b6:3f:98:2d:82:17:6b:ed:24: f2:68:0c:2f:2f:0c:0b:25:47:59:15:fd:5e:c0:08:4e:28:3d: 0e:da:a9:36:dc:2d:0d:9d:c4:18:69:23:3b:25:51:a2:30:77: f3:94:5e:51:06:49:ae:f1:90:23:85:01:5d:93:16:89:86:25: bd:2e:6d:a8:f9:ba:f5:b9:67:3d:7f:ae:a1:28:19:6e:37:e3: b8:16:e8:83:86:f2:54:36:c2:81:e6:4a:43:ed:41:38:df:3a: c7:84:a9:3e:eb:66:06:82:a1:e2:3e:b3:48:be:ca:ac:d1:bf: e3:a3:09:19:92:bc:fb:c5:05:86:70:17:65:5c:65:7b:54:d8: d2:d7:d3:91:df:18:92:36:46:38:2f:f1:4c:d0:10:48:9d:dc: a9:fb:32:22:fe:50:e3:a8:ef:21:b6:0a:76:3a:af:c5:9a:e5: b6:41:0a:13:05:48:21:95:09:44:4c:60:51:83:a7:70:06:e6: d5:e5:a4:a6:ec:6a:4e:6e:d5:02:0e:d2:ab:f5:21:88:44:34: e5:82:39:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1IxFqoc2LqMXXtvCkRYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhZmQ3OWI2ZGQ4NTI5MGZlZjYxNjlhNDRlNDI2MTA3ZDI3 NDY1MWEwHhcNMjYwMTAxMDgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTE3ZGQwZDU5MmRmZTFkZWU2NjJkYWExNjBhZWFmNzJiNjRmNGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIs+BNCPJ39gpbRVoPFKuDj99oOE d2SgR5DIQOGEMMVae1sgAoSX8e2N5dplfVGX7iE4dyvIIpulS4s4fp4LD5dvGBeM cb+4q809vNfBZMwBeML3ngLgZuRCDb5RqWkzCk54/kxarTNgkqqrRYMlEBMxUHcn 7MeAIg6zc1ZBji4Ta10mLUdFaVr4G63i1uuzK3T2SWfrIZyi01ENZsUimcohW0UH r/bzw0m9DVkoKQz8uUST9MGeuNNXHdHVG9N91k+VI8JLJ5BRn0767qqtM8KUdDPh AxV3pjB+ADxDJMZ67S9h9IWsScai+2OynUB9QDobx95tadaNxW0o9XAWcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEEX3Q1ZLf4d7mYtqhYK6vcrZPTTMB8GA1UdIwQY MBaAFLr9ebbdhSkP72FppE5CYQfSdGUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXYxNXR0MkZLUV92WVdta1RrSmhCOUowWlJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xNjlhMjEtZjNjMS00M2I5LWFkZTUt ODY5NmE5NjA0NGYyLzEvUVJmZERWa3RfaDN1WmkycUZncnE5eXRrOU5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8xNjlhMjEtZjNjMS00M2I5LWFkZTUtODY5NmE5NjA0NGYy LzEvdXYxNXR0MkZLUV92WVdta1RrSmhCOUowWlJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsHVMMA0G CSqGSIb3DQEBCwUAA4IBAQCIPheMdJYNp+4yfQL/XpjQy/hZqDebg7YSI3YjFv18 mWaoEnVfc9xt7FyIMfC2P5gtghdr7STyaAwvLwwLJUdZFf1ewAhOKD0O2qk23C0N ncQYaSM7JVGiMHfzlF5RBkmu8ZAjhQFdkxaJhiW9Lm2o+br1uWc9f66hKBluN+O4 FuiDhvJUNsKB5kpD7UE43zrHhKk+62YGgqHiPrNIvsqs0b/jowkZkrz7xQWGcBdl XGV7VNjS19OR3xiSNkY4L/FM0BBIndyp+zIi/lDjqO8htgp2Oq/FmuW2QQoTBUgh lQlETGBRg6dwBubV5aSm7GpObtUCDtKr9SGIRDTlgjmB -----END CERTIFICATE-----Generated at Mon Jan 12 02:26:35 2026 by rpki-client