This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/qFHjepGd1W1NeOB2M_HnT_9NnkI.roa File: qFHjepGd1W1NeOB2M_HnT_9NnkI.roa (raw, json) Hash identifier: qeCuA+kLoBoYh5DPSa7sfbtMwdjrN2PNoIXoYyFRFww= Subject key identifier: A8:51:E3:7A:91:9D:D5:6D:4D:78:E0:76:33:F1:E7:4F:FF:4D:9E:42 Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 019B791118AB0B2F8BEAAE9A06E6248E17B8 Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/qFHjepGd1W1NeOB2M_HnT_9NnkI.roa Signing time: Thu 01 Jan 2026 10:18:42 +0000 ROA not before: Thu 01 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 37.202.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:18:ab:0b:2f:8b:ea:ae:9a:06:e6:24:8e:17:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Jan 1 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a851e37a919dd56d4d78e07633f1e74fff4d9e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d3:06:c8:fe:d4:81:69:bb:c7:54:cb:9f:e4: 3d:ef:c6:a2:18:c6:b0:dc:f6:49:3f:5a:3c:07:56: b9:f8:f7:76:a6:32:cd:3e:57:a2:e7:f6:c8:f1:22: 0d:59:2c:78:df:ce:11:68:3a:db:72:f5:b1:6e:ab: da:06:c6:ec:3c:50:ea:5a:51:30:21:15:db:7e:17: c8:3c:4d:99:58:0f:9b:28:f6:da:d7:87:4b:dc:a9: 63:41:0f:ad:cc:99:db:a2:c9:98:3d:d9:75:78:46: bb:db:02:6c:07:ba:50:d4:de:44:ef:b0:3e:c3:fa: 66:66:f8:bc:53:24:35:51:3d:e8:99:eb:11:88:e5: a1:b4:49:f2:f0:ea:a2:8c:40:2f:74:e7:ef:72:dd: 6d:91:36:f1:ea:6a:78:a6:08:8e:77:f4:34:ea:01: c9:de:c9:6a:31:44:22:d1:fe:29:44:c8:4c:05:f2: 4c:45:04:4f:ee:cc:d5:4d:61:83:a1:01:58:ad:6c: a7:57:69:92:f0:60:f7:ab:9b:67:3c:9b:e1:d2:d1: fd:76:36:bd:09:74:17:4a:de:17:12:f3:a1:d3:e1: db:96:30:3b:c0:26:a5:94:45:04:a4:82:e9:e7:1b: 6a:f9:c3:43:38:03:c8:ca:88:f6:ff:ce:30:a9:12: 42:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:51:E3:7A:91:9D:D5:6D:4D:78:E0:76:33:F1:E7:4F:FF:4D:9E:42 X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/qFHjepGd1W1NeOB2M_HnT_9NnkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.252.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:6e:ea:0c:c3:f5:e3:9c:a1:36:6e:db:8f:a9:76:e9:46:40: 91:49:55:9d:8d:ad:cd:bd:64:6d:0f:7c:90:9b:75:06:9f:9e: cb:4a:65:60:0e:e6:4e:72:f4:fc:ac:92:e6:cd:7c:dc:a7:7d: ae:2c:6c:ff:1d:e5:9f:04:46:ba:b1:20:14:6c:3d:9c:26:45: 20:5c:10:6b:ec:38:93:3d:c2:fc:33:08:09:f1:1f:7b:78:68: c5:30:3c:d6:0d:bd:67:85:9c:5e:85:a9:64:cb:a2:82:8b:40: 5a:41:95:5c:2a:fe:fa:6f:64:1e:8b:43:d7:fc:a6:60:37:fa: da:b5:97:83:4f:08:fd:3b:61:3b:ba:62:73:be:ee:b9:b9:e8: ef:11:6c:77:4e:e0:14:9e:65:f3:40:10:78:d1:f9:a1:ab:54: 70:84:c0:01:a7:3e:f2:92:d0:44:70:14:f8:36:fe:81:0f:46: 7d:c4:3c:0e:94:e0:66:6f:6b:3f:0f:f0:8f:50:80:75:4b:1d: 74:33:c6:ea:d3:65:33:06:e6:25:3f:63:b3:70:02:ba:3d:c5: f3:a9:96:67:93:df:37:73:5a:bc:14:19:0a:a5:3e:b3:90:15: f2:ea:9d:36:01:ca:a3:34:ed:5f:78:c6:8c:18:ca:04:8f:f3: c7:bb:61:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ERirCy+L6q6aBuYkjhe4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjYwMTAxMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODUxZTM3YTkxOWRkNTZkNGQ3OGUwNzYzM2YxZTc0ZmZmNGQ5ZTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNMGyP7UgWm7x1TLn+Q978aiGMaw 3PZJP1o8B1a5+Pd2pjLNPlei5/bI8SINWSx4384RaDrbcvWxbqvaBsbsPFDqWlEw IRXbfhfIPE2ZWA+bKPba14dL3KljQQ+tzJnbosmYPdl1eEa72wJsB7pQ1N5E77A+ w/pmZvi8UyQ1UT3omesRiOWhtEny8OqijEAvdOfvct1tkTbx6mp4pgiOd/Q06gHJ 3slqMUQi0f4pRMhMBfJMRQRP7szVTWGDoQFYrWynV2mS8GD3q5tnPJvh0tH9dja9 CXQXSt4XEvOh0+HbljA7wCallEUEpILp5xtq+cNDOAPIyoj2/84wqRJCNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKhR43qRndVtTXjgdjPx50//TZ5CMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvcUZIamVwR2QxVzFOZU9CMk1fSG5UXzlObmtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJcr8MA0G CSqGSIb3DQEBCwUAA4IBAQCebuoMw/XjnKE2btuPqXbpRkCRSVWdja3NvWRtD3yQ m3UGn57LSmVgDuZOcvT8rJLmzXzcp32uLGz/HeWfBEa6sSAUbD2cJkUgXBBr7DiT PcL8MwgJ8R97eGjFMDzWDb1nhZxehalky6KCi0BaQZVcKv76b2Qei0PX/KZgN/ra tZeDTwj9O2E7umJzvu65uejvEWx3TuAUnmXzQBB40fmhq1RwhMABpz7yktBEcBT4 Nv6BD0Z9xDwOlOBmb2s/D/CPUIB1Sx10M8bq02UzBuYlP2OzcAK6PcXzqZZnk983 c1q8FBkKpT6zkBXy6p02AcqjNO1feMaMGMoEj/PHu2Gy -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:31 2026 by rpki-client