This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QR81IOJDq2xzSkIepTFKkUiiTZw.roa File: QR81IOJDq2xzSkIepTFKkUiiTZw.roa (raw, json) Hash identifier: CiRyQtFtbAJbnOadZgECH3y+dAHejO3aIok+RU+cD7c= Subject key identifier: 41:1F:35:20:E2:43:AB:6C:73:4A:42:1E:A5:31:4A:91:48:A2:4D:9C Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB3B98096B7E3A7E246BA431181D35 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QR81IOJDq2xzSkIepTFKkUiiTZw.roa Signing time: Fri 02 Jan 2026 08:20:29 +0000 ROA not before: Fri 02 Jan 2026 08:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55201 IP address blocks: 151.244.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:3b:98:09:6b:7e:3a:7e:24:6b:a4:31:18:1d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=411f3520e243ab6c734a421ea5314a9148a24d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:42:eb:09:cb:4e:94:0a:50:af:60:57:6a:61: af:7d:e0:ed:fa:6b:ec:04:bc:bb:11:cb:4c:2b:22: 43:e8:c4:b4:fe:96:58:78:d1:62:b8:0e:36:f3:70: 09:14:05:c3:65:41:8d:c6:89:e5:35:b2:c7:86:28: f0:47:b9:6b:79:cd:79:b4:9f:ab:ab:6f:f0:fe:44: b2:b5:e9:83:ec:68:36:29:48:f5:35:78:26:f7:2b: 03:58:7f:6c:7b:18:75:23:e1:28:a3:11:58:55:79: b0:d4:23:65:66:cf:c2:51:fe:9b:5a:37:83:31:e8: 1e:63:fe:26:b2:86:6d:72:31:bf:1e:93:37:9d:63: e3:ce:6b:a3:ff:a0:ff:1f:4d:7a:f1:45:64:63:ad: 63:fe:d5:7f:a9:52:36:5e:7f:08:40:06:2d:31:8d: 5a:4a:a9:cc:99:dc:c2:2d:7f:e1:3b:f0:e1:89:3e: d6:31:03:74:16:9d:5b:a7:38:48:9c:34:0c:97:54: 2d:a8:f6:36:e2:e1:bf:fc:75:4e:76:f2:5a:b6:2d: 88:db:2d:25:a3:01:bc:34:7d:21:61:d4:a6:91:7b: 97:fb:c0:c8:35:63:92:39:ab:d4:8e:f7:90:1e:b3: 89:b8:e8:77:f1:99:2b:b6:33:74:5a:6f:19:6a:eb: 71:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1F:35:20:E2:43:AB:6C:73:4A:42:1E:A5:31:4A:91:48:A2:4D:9C X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QR81IOJDq2xzSkIepTFKkUiiTZw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.3.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:87:f4:84:c4:6e:77:e9:7a:29:8b:88:1b:c7:1b:28:cb:bd: 8e:4f:09:f0:64:f2:36:18:8b:1b:19:4b:b1:74:a4:28:64:07: 84:a3:bd:2b:0d:a9:f7:5b:19:79:ea:db:6f:57:88:ee:9d:02: 4b:55:48:25:6d:78:49:90:26:bf:a5:bc:2a:0f:f6:11:01:ea: e1:dd:29:98:7b:f6:64:69:28:75:20:1e:8d:90:d0:55:39:16: 2a:49:f6:d9:96:c4:89:e4:85:f1:6c:93:b7:5c:68:3a:f4:4e: 17:4e:b6:e9:41:d6:b8:ce:de:d1:47:81:c4:13:00:ae:19:e1: c7:c0:ee:17:ae:0d:f3:56:72:35:2c:2b:3b:9d:a8:15:31:de: a2:ac:68:0b:1e:74:44:86:ab:22:b4:bb:d0:d9:2a:9e:74:69: 07:c7:6a:c6:1b:25:b4:79:72:4e:55:34:43:bf:51:6f:b4:79: 36:1f:e7:48:77:16:bd:8d:35:3d:f8:1d:44:22:46:e9:25:69: b0:db:f9:a7:97:38:77:8d:0b:c4:54:cc:c6:f7:0e:3b:36:37: 52:b0:41:a2:01:79:9c:5a:bf:16:74:37:ba:64:f1:b6:6f:d2: 63:e2:8f:33:15:b6:75:ab:29:22:47:77:cc:e1:75:f0:22:f6: 4b:9f:0b:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yzuYCWt+On4ka6QxGB01MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTFmMzUyMGUyNDNhYjZjNzM0YTQyMWVhNTMxNGE5MTQ4YTI0ZDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwULrCctOlApQr2BXamGvfeDt+mvs BLy7EctMKyJD6MS0/pZYeNFiuA4283AJFAXDZUGNxonlNbLHhijwR7lrec15tJ+r q2/w/kSytemD7Gg2KUj1NXgm9ysDWH9sexh1I+EooxFYVXmw1CNlZs/CUf6bWjeD MegeY/4msoZtcjG/HpM3nWPjzmuj/6D/H0168UVkY61j/tV/qVI2Xn8IQAYtMY1a SqnMmdzCLX/hO/DhiT7WMQN0Fp1bpzhInDQMl1QtqPY24uG//HVOdvJati2I2y0l owG8NH0hYdSmkXuX+8DINWOSOavUjveQHrOJuOh38ZkrtjN0Wm8ZautxgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEEfNSDiQ6tsc0pCHqUxSpFIok2cMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvUVI4MUlPSkRxMnh6U2tJZXBURktrVWlpVFp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/QDMA0G CSqGSIb3DQEBCwUAA4IBAQAch/SExG536Xopi4gbxxsoy72OTwnwZPI2GIsbGUux dKQoZAeEo70rDan3Wxl56ttvV4junQJLVUglbXhJkCa/pbwqD/YRAerh3SmYe/Zk aSh1IB6NkNBVORYqSfbZlsSJ5IXxbJO3XGg69E4XTrbpQda4zt7RR4HEEwCuGeHH wO4Xrg3zVnI1LCs7nagVMd6irGgLHnREhqsitLvQ2SqedGkHx2rGGyW0eXJOVTRD v1FvtHk2H+dIdxa9jTU9+B1EIkbpJWmw2/mnlzh3jQvEVMzG9w47NjdSsEGiAXmc Wr8WdDe6ZPG2b9Jj4o8zFbZ1qykiR3fM4XXwIvZLnwsO -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:11 2026 by rpki-client