This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/QN7dmkDvoiUVbRmtbs4ksoJXTM0.roa File: QN7dmkDvoiUVbRmtbs4ksoJXTM0.roa (raw, json) Hash identifier: aJSRTzEAE733XK1a9bU/vkTGlWCBV/QtJ/qcXmWO7iQ= Subject key identifier: 40:DE:DD:9A:40:EF:A2:25:15:6D:19:AD:6E:CE:24:B2:82:57:4C:CD Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c Certificate serial: 019B7A5A8BD6CDAF6973FA2221E2544D1861 Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/QN7dmkDvoiUVbRmtbs4ksoJXTM0.roa Signing time: Thu 01 Jan 2026 16:18:32 +0000 ROA not before: Thu 01 Jan 2026 16:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 193.222.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:8b:d6:cd:af:69:73:fa:22:21:e2:54:4d:18:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c Validity Not Before: Jan 1 16:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40dedd9a40efa225156d19ad6ece24b282574ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c3:99:fa:d3:ec:31:26:81:2f:a5:77:6a:60: 01:21:d2:b1:cc:c0:95:39:fa:cb:a5:69:d6:ca:25: 5b:72:58:a6:45:42:44:d0:d9:af:46:f7:12:71:ff: c6:e5:1d:86:b6:2d:ee:d0:1f:02:8f:0e:63:d5:82: cd:06:67:66:0d:61:11:27:61:c4:fc:c8:10:bc:94: 26:3e:66:6a:9d:54:c2:3f:3c:04:1e:c9:f3:ed:d8: 68:d6:9d:f0:3b:f2:b5:f9:e6:2e:68:e6:9a:4c:58: 31:4a:3e:91:e3:a5:ec:dd:10:45:37:f1:d1:7a:29: 13:db:a1:e4:86:e5:d9:10:86:07:19:f8:39:43:b8: 77:16:ef:e6:a7:99:7f:fb:c9:8b:e1:57:9b:14:1c: ac:d0:bb:06:2b:58:98:95:5e:8a:6d:97:1d:de:39: 15:23:43:57:b6:73:a5:46:90:24:a3:51:5a:f3:88: 0a:4a:ea:5c:94:2e:31:4d:ed:57:1d:b3:ac:71:20: 3b:0c:24:c1:c8:16:4b:4e:55:3a:5e:82:68:51:21: ee:6f:40:a6:67:a2:e9:3c:ee:99:cb:18:bd:16:22: ba:18:9e:ed:8e:ce:16:e3:3a:c6:6e:a2:41:ec:13: a5:29:aa:a1:2e:75:42:4d:74:93:ad:63:f3:a5:86: c5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DE:DD:9A:40:EF:A2:25:15:6D:19:AD:6E:CE:24:B2:82:57:4C:CD X509v3 Authority Key Identifier: keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/QN7dmkDvoiUVbRmtbs4ksoJXTM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.222.61.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:ef:c0:a6:c0:17:1a:6b:b3:63:ed:de:95:ab:38:db:c0:1a: 18:b9:cb:d6:a0:ef:d8:f6:29:90:ac:33:fe:01:00:f2:46:b3: af:6e:5d:65:31:a1:0c:1e:be:75:90:68:0c:e8:eb:d0:d4:a5: f6:08:26:63:a5:20:ac:73:ac:b9:00:69:54:a5:01:4c:39:42: 99:b3:25:c6:78:eb:5f:41:82:1e:d2:ac:4a:a6:8c:40:14:20: 32:09:e9:ab:ed:2d:58:39:ea:f0:e3:49:fb:e6:d9:b4:f8:12: b2:b8:ae:8b:a7:3e:15:51:d4:b3:36:6a:b7:4f:ae:b8:93:da: 48:00:3a:ed:94:1f:27:fd:4f:3a:89:ac:7c:84:67:96:44:97: 37:da:29:e7:fe:e4:ca:dd:6f:fe:09:d9:fc:2a:7d:ef:c2:e2: 67:90:ee:6f:da:ff:67:1f:81:f8:2f:6c:48:5f:bb:78:30:f9: 68:53:89:8f:1e:2b:bc:a6:2e:f4:2c:e4:96:92:90:cc:ec:6c: d6:76:21:ea:83:32:85:f9:07:ef:34:30:48:2a:6c:28:fb:06: 10:c6:69:31:17:fb:a7:af:04:db:57:c9:9c:9f:0e:39:7d:43: c4:0c:a1:bf:1e:78:d6:cf:66:32:30:f8:3e:88:f6:1d:4e:57: 1a:11:4d:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WovWza9pc/oiIeJUTRhhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNDAxODVmNTUyY2Q5NzUyNzZjMDM0NjRmNTBjN2E1ZDM1 MTU2NGMwHhcNMjYwMTAxMTYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGRlZGQ5YTQwZWZhMjI1MTU2ZDE5YWQ2ZWNlMjRiMjgyNTc0Y2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8OZ+tPsMSaBL6V3amABIdKxzMCV OfrLpWnWyiVbclimRUJE0NmvRvcScf/G5R2Gti3u0B8Cjw5j1YLNBmdmDWERJ2HE /MgQvJQmPmZqnVTCPzwEHsnz7dho1p3wO/K1+eYuaOaaTFgxSj6R46Xs3RBFN/HR eikT26HkhuXZEIYHGfg5Q7h3Fu/mp5l/+8mL4VebFBys0LsGK1iYlV6KbZcd3jkV I0NXtnOlRpAko1Fa84gKSupclC4xTe1XHbOscSA7DCTByBZLTlU6XoJoUSHub0Cm Z6LpPO6Zyxi9FiK6GJ7tjs4W4zrGbqJB7BOlKaqhLnVCTXSTrWPzpYbFQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEDe3ZpA76IlFW0ZrW7OJLKCV0zNMB8GA1UdIwQY MBaAFM9AGF9VLNl1J2wDRk9Qx6XTUVZMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejBBWVgxVXMyWFVuYkFOR1QxREhwZE5SVmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8xMTY4ZmEtZmJmNi00ZTA3LTllYzct OTE5ZWVmYmE0OGI1LzEvUU43ZG1rRHZvaVVWYlJtdGJzNGtzb0pYVE0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8xMTY4ZmEtZmJmNi00ZTA3LTllYzctOTE5ZWVmYmE0OGI1 LzEvejBBWVgxVXMyWFVuYkFOR1QxREhwZE5SVmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd49MA0G CSqGSIb3DQEBCwUAA4IBAQBc78CmwBcaa7Nj7d6VqzjbwBoYucvWoO/Y9imQrDP+ AQDyRrOvbl1lMaEMHr51kGgM6OvQ1KX2CCZjpSCsc6y5AGlUpQFMOUKZsyXGeOtf QYIe0qxKpoxAFCAyCemr7S1YOerw40n75tm0+BKyuK6Lpz4VUdSzNmq3T664k9pI ADrtlB8n/U86iax8hGeWRJc32inn/uTK3W/+Cdn8Kn3vwuJnkO5v2v9nH4H4L2xI X7t4MPloU4mPHiu8pi70LOSWkpDM7GzWdiHqgzKF+QfvNDBIKmwo+wYQxmkxF/un rwTbV8mcnw45fUPEDKG/HnjWz2YyMPg+iPYdTlcaEU2e -----END CERTIFICATE-----Generated at Fri Jan 2 16:06:36 2026 by rpki-client