This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/D-QuEP4IligLmiH1Vpj8cATe378.roa File: D-QuEP4IligLmiH1Vpj8cATe378.roa (raw, json) Hash identifier: 9Hc6YaNH5CoT1hAHiAk1w4no/D39VZT0Fifmyjk6Q2k= Subject key identifier: 0F:E4:2E:10:FE:08:96:28:0B:9A:21:F5:56:98:FC:70:04:DE:DF:BF Certificate issuer: /CN=26c672da72a34cc282adc40f282676de75117654 Certificate serial: 019B797EE2B876941BACD529893E0147DEBE Authority key identifier: 26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/D-QuEP4IligLmiH1Vpj8cATe378.roa Signing time: Thu 01 Jan 2026 12:18:37 +0000 ROA not before: Thu 01 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8011 IP address blocks: 31.88.0.0/15 maxlen: 24 218.254.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e2:b8:76:94:1b:ac:d5:29:89:3e:01:47:de:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26c672da72a34cc282adc40f282676de75117654 Validity Not Before: Jan 1 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fe42e10fe0896280b9a21f55698fc7004dedfbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:05:ce:e8:f3:b1:18:08:f5:f3:ad:99:56:c6: 4d:b4:9d:fa:4f:3c:00:5b:b6:7a:4c:ab:39:1b:5b: e8:aa:d1:84:ab:8a:65:14:f2:61:54:2b:10:61:73: a9:e0:93:56:24:36:47:51:b2:57:31:fd:bf:d9:54: c8:8a:27:60:f8:4a:15:a5:fe:12:52:be:d4:27:01: ad:45:a8:46:27:79:26:9e:80:ef:ec:4e:aa:47:56: f9:ba:dc:51:71:42:50:e7:84:80:52:66:d5:1f:70: 7f:ae:8d:ec:e5:98:ba:c9:5f:27:8d:ba:d4:33:ae: 24:32:9b:f7:ec:7b:a9:04:7b:94:67:d3:b7:f6:62: f9:a3:a8:62:ca:58:49:31:d6:86:64:16:60:46:cb: c6:e7:5b:59:c5:05:c2:e3:64:23:44:84:d9:e2:db: bc:e1:97:eb:18:59:6e:d7:19:4f:ec:3c:4b:8e:71: 52:45:db:64:f6:0c:9c:dc:2b:ab:32:2e:13:07:8f: 9b:c0:af:a8:37:7e:31:d7:8e:64:ae:1d:e8:87:82: 77:c5:e1:aa:64:36:e9:47:9d:79:95:c3:f3:cb:72: 47:25:f6:c4:5a:ed:88:29:53:ec:e2:95:fc:c8:c8: 98:9c:ff:85:11:17:b8:fb:27:c4:25:3e:f6:75:94: 37:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E4:2E:10:FE:08:96:28:0B:9A:21:F5:56:98:FC:70:04:DE:DF:BF X509v3 Authority Key Identifier: keyid:26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/D-QuEP4IligLmiH1Vpj8cATe378.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.88.0.0/15 218.254.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1f:c0:2e:c5:e4:eb:78:18:d8:49:9a:e1:51:b8:64:4e:98:0b: 93:3f:08:ab:40:49:7f:e0:11:fc:6d:ac:d1:61:18:fe:55:6a: 64:d3:ad:e8:50:af:a0:65:75:94:be:30:25:a4:97:b0:b9:9e: cc:59:c8:60:06:86:32:f8:2a:75:5d:32:d3:48:07:7d:ae:62: 94:8d:7e:9e:74:17:7e:02:d5:07:f9:be:3a:12:29:0e:f4:02: 3d:63:16:f7:fc:15:ea:ca:9e:e5:07:38:55:84:84:c9:fd:b0: 6b:a8:7b:09:d9:2e:57:9a:a5:12:8b:9b:41:ba:20:df:f9:ec: 19:91:6f:76:0c:cf:a4:3e:3f:af:5f:69:4f:4e:47:b8:0c:63: 8e:73:dc:ab:4c:89:5b:51:40:5e:76:64:32:f6:1e:d1:ff:23: f3:0c:23:44:56:09:5d:d5:08:c4:66:c8:53:30:d4:68:38:de: d2:84:f2:4d:c7:e0:af:06:2b:9a:b0:f2:69:40:c4:fa:88:42: 0b:3b:2d:05:13:42:fd:6e:35:31:bf:5b:de:ea:dc:ae:9e:43: 5a:dc:de:f6:aa:11:f9:4b:be:22:12:63:65:30:fc:5f:c9:8d: cf:25:12:88:7a:38:19:84:41:07:ad:e0:27:f9:76:b4:11:94: a5:8e:2f:07 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt5fuK4dpQbrNUpiT4BR96+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YzY3MmRhNzJhMzRjYzI4MmFkYzQwZjI4MjY3NmRlNzUx MTc2NTQwHhcNMjYwMTAxMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmU0MmUxMGZlMDg5NjI4MGI5YTIxZjU1Njk4ZmM3MDA0ZGVkZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgXO6POxGAj1862ZVsZNtJ36TzwA W7Z6TKs5G1voqtGEq4plFPJhVCsQYXOp4JNWJDZHUbJXMf2/2VTIiidg+EoVpf4S Ur7UJwGtRahGJ3kmnoDv7E6qR1b5utxRcUJQ54SAUmbVH3B/ro3s5Zi6yV8njbrU M64kMpv37HupBHuUZ9O39mL5o6hiylhJMdaGZBZgRsvG51tZxQXC42QjRITZ4tu8 4ZfrGFlu1xlP7DxLjnFSRdtk9gyc3CurMi4TB4+bwK+oN34x145krh3oh4J3xeGq ZDbpR515lcPzy3JHJfbEWu2IKVPs4pX8yMiYnP+FERe4+yfEJT72dZQ3pQIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFA/kLhD+CJYoC5oh9VaY/HAE3t+/MB8GA1UdIwQY MBaAFCbGctpyo0zCgq3EDygmdt51EXZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnNaeTJuS2pUTUtDcmNRUEtDWjIzblVSZGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83ZmUwMTUtNWNkNS00NDI5LThiN2Qt MjJkMDI3MTk3NzEyLzEvRC1RdUVQNElsaWdMbWlIMVZwajhjQVRlMzc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni83ZmUwMTUtNWNkNS00NDI5LThiN2QtMjJkMDI3MTk3NzEy LzEvSnNaeTJuS2pUTUtDcmNRUEtDWjIzblVSZGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMBH1gDAwDa /jANBgkqhkiG9w0BAQsFAAOCAQEAH8AuxeTreBjYSZrhUbhkTpgLkz8Iq0BJf+AR /G2s0WEY/lVqZNOt6FCvoGV1lL4wJaSXsLmezFnIYAaGMvgqdV0y00gHfa5ilI1+ nnQXfgLVB/m+OhIpDvQCPWMW9/wV6sqe5Qc4VYSEyf2wa6h7CdkuV5qlEoubQbog 3/nsGZFvdgzPpD4/r19pT05HuAxjjnPcq0yJW1FAXnZkMvYe0f8j8wwjRFYJXdUI xGbIUzDUaDje0oTyTcfgrwYrmrDyaUDE+ohCCzstBRNC/W41Mb9b3urcrp5DWtze 9qoR+Uu+IhJjZTD8X8mNzyUSiHo4GYRBB63gJ/l2tBGUpY4vBw== -----END CERTIFICATE-----Generated at Mon Jan 12 01:03:56 2026 by rpki-client