This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/QeO4RYPEZYqWVyKtD-9Gp_PO5zY.roa File: QeO4RYPEZYqWVyKtD-9Gp_PO5zY.roa (raw, json) Hash identifier: Im3xwEoEL6BR1cUagEaX6G23CchRoDsbikZ2oM3sAss= Subject key identifier: 41:E3:B8:45:83:C4:65:8A:96:57:22:AD:0F:EF:46:A7:F3:CE:E7:36 Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019B7CEE0803CAAF965C8629698CF34FEB57 Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/QeO4RYPEZYqWVyKtD-9Gp_PO5zY.roa Signing time: Fri 02 Jan 2026 04:18:52 +0000 ROA not before: Fri 02 Jan 2026 04:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215727 IP address blocks: 80.71.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:08:03:ca:af:96:5c:86:29:69:8c:f3:4f:eb:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Jan 2 04:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41e3b84583c4658a965722ad0fef46a7f3cee736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:65:33:bb:f6:45:af:f1:9c:2b:5b:52:ae: d5:f2:19:99:c6:4d:b8:83:0d:53:4f:2d:83:27:36: ee:3b:9a:2d:b2:33:dc:d6:b2:29:dc:2a:57:92:a2: 3d:f7:66:72:3d:3b:64:92:a8:46:03:46:37:ec:7d: 45:5b:ee:10:76:03:fb:1d:91:d4:79:b6:2d:f4:6c: e6:ef:37:a7:3b:4e:6e:9c:77:af:83:93:56:00:e8: 19:19:27:cc:55:58:d3:60:aa:c1:98:ba:34:8a:86: 23:f4:3f:83:8a:d9:b6:24:a0:c3:64:16:80:c5:aa: a0:ad:5d:70:ed:78:a8:4d:c5:5c:56:82:cc:51:c6: cd:39:6f:d6:d0:42:35:59:2a:aa:7d:d2:bf:37:b6: 42:df:d5:e6:11:dc:26:e4:cf:2a:77:e6:3e:fe:37: c0:60:c8:d1:aa:34:c3:ca:18:26:6c:5c:8a:fb:ca: 4b:2b:48:2e:c1:bf:e8:fa:2d:d8:f4:be:e1:30:7b: aa:de:b1:3d:44:fa:cc:4d:92:d6:c1:6d:8c:f4:b9: 5f:9b:ad:b4:aa:e7:ad:0f:57:18:00:41:b7:e1:79: 05:47:aa:eb:22:3f:31:14:c9:6b:32:fd:a5:4a:21: af:c3:1a:88:47:15:e9:72:fa:53:d4:38:ba:77:97: b1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E3:B8:45:83:C4:65:8A:96:57:22:AD:0F:EF:46:A7:F3:CE:E7:36 X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/QeO4RYPEZYqWVyKtD-9Gp_PO5zY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.71.237.0/24 Signature Algorithm: sha256WithRSAEncryption 35:02:84:73:ae:a5:c3:27:0d:57:54:f4:75:e9:1d:c1:dc:d3: de:ee:ba:d2:15:90:22:f0:dc:c7:a1:a3:f6:93:2a:46:86:63: 1d:0d:6a:85:8e:d3:d0:0d:55:40:98:5b:19:1d:71:a2:e8:6b: 90:ce:6a:35:54:d8:37:6f:e9:ee:e8:73:86:68:64:ce:d6:df: a9:dc:23:63:57:06:98:89:2e:51:cf:9e:89:dd:15:6a:2a:f7: 81:3b:8e:79:6c:24:9f:54:17:b2:7c:9f:97:66:78:85:11:cb: f7:4d:46:b5:72:25:f4:50:56:53:89:53:aa:e2:7c:8b:8c:b6: 12:9d:94:0b:b1:3b:27:e5:69:1e:ba:01:3a:1f:54:08:b7:85: 3a:f4:af:67:a0:71:56:c1:72:f0:c5:61:f1:00:c0:39:ce:8a: ef:a7:30:85:c6:72:9c:cf:d7:87:af:d5:50:57:df:70:2a:07: af:d5:3d:e0:57:ac:2a:c5:89:c7:2a:fc:74:e8:a2:44:21:b8: 54:7f:58:32:03:ab:c3:81:5d:02:62:35:e4:40:3d:94:13:33: c6:d9:87:86:2a:0d:f5:b5:e8:66:3d:f7:07:7d:dc:d6:07:f0: 73:71:77:40:4a:19:e2:cc:a8:45:1e:31:d9:e1:c7:45:ed:fc: b2:ad:6a:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ggDyq+WXIYpaYzzT+tXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjYwMTAyMDQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWUzYjg0NTgzYzQ2NThhOTY1NzIyYWQwZmVmNDZhN2YzY2VlNzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3xlM7v2Ra/xnCtbUq7V8hmZxk24 gw1TTy2DJzbuO5otsjPc1rIp3CpXkqI992ZyPTtkkqhGA0Y37H1FW+4QdgP7HZHU ebYt9Gzm7zenO05unHevg5NWAOgZGSfMVVjTYKrBmLo0ioYj9D+Ditm2JKDDZBaA xaqgrV1w7XioTcVcVoLMUcbNOW/W0EI1WSqqfdK/N7ZC39XmEdwm5M8qd+Y+/jfA YMjRqjTDyhgmbFyK+8pLK0guwb/o+i3Y9L7hMHuq3rE9RPrMTZLWwW2M9Llfm620 quetD1cYAEG34XkFR6rrIj8xFMlrMv2lSiGvwxqIRxXpcvpT1Di6d5exvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEHjuEWDxGWKllcirQ/vRqfzzuc2MB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvUWVPNFJZUEVaWXFXVnlLdEQtOUdwX1BPNXpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEftMA0G CSqGSIb3DQEBCwUAA4IBAQA1AoRzrqXDJw1XVPR16R3B3NPe7rrSFZAi8NzHoaP2 kypGhmMdDWqFjtPQDVVAmFsZHXGi6GuQzmo1VNg3b+nu6HOGaGTO1t+p3CNjVwaY iS5Rz56J3RVqKveBO455bCSfVBeyfJ+XZniFEcv3TUa1ciX0UFZTiVOq4nyLjLYS nZQLsTsn5WkeugE6H1QIt4U69K9noHFWwXLwxWHxAMA5zorvpzCFxnKcz9eHr9VQ V99wKgev1T3gV6wqxYnHKvx06KJEIbhUf1gyA6vDgV0CYjXkQD2UEzPG2YeGKg31 tehmPfcHfdzWB/BzcXdAShnizKhFHjHZ4cdF7fyyrWpu -----END CERTIFICATE-----Generated at Mon Jan 19 18:28:00 2026 by rpki-client