This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/QJ1HkdAXItAzxlhFaHYQmHmX4Xs.roa File: QJ1HkdAXItAzxlhFaHYQmHmX4Xs.roa (raw, json) Hash identifier: MUkecizqv3eYRM3Ng4C7CpXSwUounW1ENydthr9OUwA= Subject key identifier: 40:9D:47:91:D0:17:22:D0:33:C6:58:45:68:76:10:98:79:97:E1:7B Certificate issuer: /CN=046acac713123856d4ae6c16054602684dfd07cb Certificate serial: 019B7BA3BDFF63B9FB95E8769D111D155595 Authority key identifier: 04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/QJ1HkdAXItAzxlhFaHYQmHmX4Xs.roa Signing time: Thu 01 Jan 2026 22:18:07 +0000 ROA not before: Thu 01 Jan 2026 22:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12969 IP address blocks: 217.171.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 22:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:bd:ff:63:b9:fb:95:e8:76:9d:11:1d:15:55:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=046acac713123856d4ae6c16054602684dfd07cb Validity Not Before: Jan 1 22:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=409d4791d01722d033c65845687610987997e17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:67:b2:98:c1:69:d1:a9:ac:b6:da:fc:92:ad: 6f:77:3f:db:d0:17:a1:f0:a8:81:3f:66:a1:71:64: b2:c6:14:87:c8:44:c1:52:79:72:1a:85:c3:6f:d2: f8:4d:fc:bc:3b:e7:55:17:9a:64:ca:48:d5:4e:36: d4:c9:89:54:09:e8:d2:de:e6:46:a9:d3:f0:ff:b7: b1:e4:2c:a5:8c:b5:24:93:4e:a3:ab:8f:97:38:31: 84:6e:f2:fd:a7:f0:1d:3c:36:44:95:a9:a1:02:a7: 16:22:2b:85:c9:e1:3b:1d:1c:1e:bc:06:bf:72:12: 56:56:fd:ab:db:4f:3d:e6:43:68:6b:df:6f:80:29: df:ad:dc:43:96:60:1b:9d:a8:b1:25:49:e4:97:18: 70:1e:75:a5:7b:37:00:df:18:3b:94:c3:48:b0:5b: ff:1e:40:85:e7:4c:1e:f4:a4:b6:04:83:80:a6:c2: 4d:03:b2:e0:39:61:70:dc:0e:f0:a5:79:29:3a:4d: e8:6f:d5:db:50:ab:75:86:41:0e:ad:62:f0:f8:e9: 25:70:f0:f3:79:33:72:5a:dc:f0:0b:38:32:4c:5f: 9f:16:7d:9f:ee:27:2c:c0:ba:22:6c:d2:2c:3d:e1: e0:4f:ac:8a:33:4a:2f:49:f4:28:11:e0:bd:fd:d3: dc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9D:47:91:D0:17:22:D0:33:C6:58:45:68:76:10:98:79:97:E1:7B X509v3 Authority Key Identifier: keyid:04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/QJ1HkdAXItAzxlhFaHYQmHmX4Xs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.171.208.0/20 Signature Algorithm: sha256WithRSAEncryption 16:10:e7:07:df:0c:44:72:39:f1:5f:da:51:c3:89:e4:97:4f: 7e:96:c3:66:ef:71:94:11:93:fb:5a:e7:a7:e6:c4:70:98:64: e7:60:09:96:28:19:63:9b:e3:cd:e1:5b:ed:b0:77:45:ad:34: ba:d4:5e:26:48:3a:dd:7f:da:91:7a:fc:2d:fb:aa:78:6c:f1: 9d:a8:71:eb:bf:9c:9c:f6:19:35:72:24:66:4b:d9:a9:bb:2d: 0b:6d:0f:1b:20:6b:2e:5b:64:b9:a2:b1:ac:40:a6:cf:d4:4b: 83:82:09:82:4b:50:39:34:28:58:81:9f:60:d6:20:78:1e:81: 0a:be:2b:03:d8:76:35:82:48:56:65:99:16:7c:ca:8d:a1:1d: 1b:8f:e2:0d:52:b2:ea:31:f1:03:6a:47:45:24:ae:30:d0:32: 79:81:d6:54:77:62:a0:7d:90:ea:2d:cd:b0:24:3a:17:27:7d: 60:f5:a4:7a:0b:4e:a0:e3:e9:fd:cd:3d:91:61:df:29:f9:2f: bc:8b:66:d9:b8:98:9d:7d:ed:61:09:49:90:69:9d:45:3f:4d: 3a:1b:c9:96:d9:5f:d8:b7:cd:06:bf:4e:5d:70:df:fc:d4:f4: f4:f4:16:ff:61:75:36:9e:46:d8:fe:4e:00:6a:08:7c:3c:35: 1a:f3:03:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o73/Y7n7leh2nREdFVWVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NmFjYWM3MTMxMjM4NTZkNGFlNmMxNjA1NDYwMjY4NGRm ZDA3Y2IwHhcNMjYwMTAxMjIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDlkNDc5MWQwMTcyMmQwMzNjNjU4NDU2ODc2MTA5ODc5OTdlMTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2eymMFp0amsttr8kq1vdz/b0Beh 8KiBP2ahcWSyxhSHyETBUnlyGoXDb9L4Tfy8O+dVF5pkykjVTjbUyYlUCejS3uZG qdPw/7ex5CyljLUkk06jq4+XODGEbvL9p/AdPDZElamhAqcWIiuFyeE7HRwevAa/ chJWVv2r20895kNoa99vgCnfrdxDlmAbnaixJUnklxhwHnWlezcA3xg7lMNIsFv/ HkCF50we9KS2BIOApsJNA7LgOWFw3A7wpXkpOk3ob9XbUKt1hkEOrWLw+OklcPDz eTNyWtzwCzgyTF+fFn2f7icswLoibNIsPeHgT6yKM0ovSfQoEeC9/dPcdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFECdR5HQFyLQM8ZYRWh2EJh5l+F7MB8GA1UdIwQY MBaAFARqyscTEjhW1K5sFgVGAmhN/QfLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkdyS3h4TVNPRmJVcm13V0JVWUNhRTM5QjhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MTg2ZTQtYTJhMC00YmRhLWJjODgt ZTZlOTI4Y2U1MzRmLzEvUUoxSGtkQVhJdEF6eGxoRmFIWVFtSG1YNFhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS80MTg2ZTQtYTJhMC00YmRhLWJjODgtZTZlOTI4Y2U1MzRm LzEvQkdyS3h4TVNPRmJVcm13V0JVWUNhRTM5QjhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2avQMA0G CSqGSIb3DQEBCwUAA4IBAQAWEOcH3wxEcjnxX9pRw4nkl09+lsNm73GUEZP7Wuen 5sRwmGTnYAmWKBljm+PN4VvtsHdFrTS61F4mSDrdf9qRevwt+6p4bPGdqHHrv5yc 9hk1ciRmS9mpuy0LbQ8bIGsuW2S5orGsQKbP1EuDggmCS1A5NChYgZ9g1iB4HoEK visD2HY1gkhWZZkWfMqNoR0bj+INUrLqMfEDakdFJK4w0DJ5gdZUd2KgfZDqLc2w JDoXJ31g9aR6C06g4+n9zT2RYd8p+S+8i2bZuJidfe1hCUmQaZ1FP006G8mW2V/Y t80Gv05dcN/81PT09Bb/YXU2nkbY/k4Aagh8PDUa8wOw -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:15 2026 by rpki-client