This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QVx8uM8-LaSiiJsO9ZjJ6AxoFpo.roa File: QVx8uM8-LaSiiJsO9ZjJ6AxoFpo.roa (raw, json) Hash identifier: iICrLEem1F2cvBD8wFIAPhfrQtH1SDo0atTZtMn2LSc= Subject key identifier: 41:5C:7C:B8:CF:3E:2D:A4:A2:88:9B:0E:F5:98:C9:E8:0C:68:16:9A Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AC0A1D70F7A938114D94C401C0AE6 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QVx8uM8-LaSiiJsO9ZjJ6AxoFpo.roa Signing time: Thu 01 Jan 2026 16:18:46 +0000 ROA not before: Thu 01 Jan 2026 16:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209043 IP address blocks: 213.152.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c0:a1:d7:0f:7a:93:81:14:d9:4c:40:1c:0a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=415c7cb8cf3e2da4a2889b0ef598c9e80c68169a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6b:e7:49:8a:6a:f0:bf:fb:62:b8:fc:a4:58: 20:ae:00:a8:71:ab:9b:98:f3:38:02:55:ac:1c:d0: d2:c7:31:f7:1d:63:25:24:6c:45:5a:8f:d6:a7:bc: c5:59:69:1b:72:c3:54:e4:64:82:3f:39:94:a8:01: dc:ee:b8:db:7f:44:f4:9c:cb:79:43:f0:7d:5b:55: e1:e9:53:52:be:9f:4a:f5:82:0e:71:b1:8a:11:f8: 14:37:0a:d2:b9:73:65:a8:5e:94:d2:9a:9e:37:6a: fc:5b:c5:a4:67:8e:f8:08:bc:7f:d4:6c:72:85:d0: 1b:15:f0:6f:27:5a:b8:9d:f2:06:81:58:8f:13:9b: ba:89:96:b1:59:cf:68:12:da:44:fd:10:d2:82:ab: 0b:a7:9e:fb:de:1b:a9:82:9d:e4:50:7e:fa:b6:ec: ea:d3:9a:22:70:2e:4f:15:db:66:dd:10:ca:93:b0: 86:ad:83:df:59:17:d7:a5:55:67:70:73:a0:b1:f3: b8:1d:23:7a:1c:69:88:72:15:e0:91:96:6f:b5:f1: 17:ad:6b:7b:e5:60:3d:87:33:2b:35:85:a4:71:1e: 55:63:29:2c:f5:53:23:6c:24:ec:f1:69:64:23:fe: 7e:31:d8:20:be:d0:ae:96:cf:da:16:fe:c7:37:a4: 4d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5C:7C:B8:CF:3E:2D:A4:A2:88:9B:0E:F5:98:C9:E8:0C:68:16:9A X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QVx8uM8-LaSiiJsO9ZjJ6AxoFpo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.152.42.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:ab:00:71:e1:19:93:d0:2d:96:46:64:19:5a:d4:2e:a7:8a: 5c:fc:73:f1:9e:6b:3b:56:b8:74:2b:43:c8:20:1c:6c:65:93: 51:8e:89:6a:72:fd:47:57:c1:f1:ca:46:38:f4:42:3a:57:f2: 2b:52:aa:b6:db:3f:68:1b:0d:81:79:ac:56:3b:36:ba:c8:14: 8e:f4:fb:07:ae:a3:79:e8:6c:19:52:c1:d5:8b:63:23:56:1e: e4:c2:a1:60:eb:ad:92:c1:63:7b:d7:11:b3:b3:72:55:10:21: da:a7:4c:0f:09:2f:0d:79:c4:10:c2:aa:2c:35:b1:dc:47:3a: 8d:72:ff:98:46:62:59:74:ff:e3:e3:28:b4:d5:9a:50:29:d4: 23:8e:77:18:a5:0b:a9:c0:56:7e:d4:86:52:ff:88:52:ab:79: 06:ef:40:e4:33:fe:50:75:25:ce:4d:47:f3:5b:3a:62:94:6c: 56:de:70:17:50:ab:93:88:59:00:98:e5:7e:42:10:5e:14:f5: 22:c3:9f:7f:54:27:25:be:85:30:41:b8:98:6f:58:d3:0f:07: 87:fe:f4:57:2a:e0:5f:41:d1:53:c1:c6:52:0a:b6:60:a9:d4: d8:08:44:76:39:38:06:e1:19:3f:45:ca:58:60:2a:8f:d6:62: 0e:c2:cb:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WsCh1w96k4EU2UxAHArmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTVjN2NiOGNmM2UyZGE0YTI4ODliMGVmNTk4YzllODBjNjgxNjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWvnSYpq8L/7Yrj8pFggrgCocaub mPM4AlWsHNDSxzH3HWMlJGxFWo/Wp7zFWWkbcsNU5GSCPzmUqAHc7rjbf0T0nMt5 Q/B9W1Xh6VNSvp9K9YIOcbGKEfgUNwrSuXNlqF6U0pqeN2r8W8WkZ474CLx/1Gxy hdAbFfBvJ1q4nfIGgViPE5u6iZaxWc9oEtpE/RDSgqsLp5773hupgp3kUH76tuzq 05oicC5PFdtm3RDKk7CGrYPfWRfXpVVncHOgsfO4HSN6HGmIchXgkZZvtfEXrWt7 5WA9hzMrNYWkcR5VYyks9VMjbCTs8WlkI/5+MdggvtCuls/aFv7HN6RN6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEFcfLjPPi2kooibDvWYyegMaBaaMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvUVZ4OHVNOC1MYVNpaUpzTzlaako2QXhvRnBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZgqMA0G CSqGSIb3DQEBCwUAA4IBAQBrqwBx4RmT0C2WRmQZWtQup4pc/HPxnms7Vrh0K0PI IBxsZZNRjolqcv1HV8HxykY49EI6V/IrUqq22z9oGw2BeaxWOza6yBSO9PsHrqN5 6GwZUsHVi2MjVh7kwqFg662SwWN71xGzs3JVECHap0wPCS8NecQQwqosNbHcRzqN cv+YRmJZdP/j4yi01ZpQKdQjjncYpQupwFZ+1IZS/4hSq3kG70DkM/5QdSXOTUfz WzpilGxW3nAXUKuTiFkAmOV+QhBeFPUiw59/VCclvoUwQbiYb1jTDweH/vRXKuBf QdFTwcZSCrZgqdTYCER2OTgG4Rk/RcpYYCqP1mIOwstk -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:55 2026 by rpki-client