This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QNwx3y4VhoemI1iJrb5z48RuxiU.roa File: QNwx3y4VhoemI1iJrb5z48RuxiU.roa (raw, json) Hash identifier: 7vTeDxb6bgPAXmLqnyu7XZdNgMusCjPAPqEPUFQHxxI= Subject key identifier: 40:DC:31:DF:2E:15:86:87:A6:23:58:89:AD:BE:73:E3:C4:6E:C6:25 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84C28A284DD45D27E0736F820D2DE7 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QNwx3y4VhoemI1iJrb5z48RuxiU.roa Signing time: Fri 02 Jan 2026 16:22:45 +0000 ROA not before: Fri 02 Jan 2026 16:22:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214431 IP address blocks: 94.183.156.0/24 maxlen: 24 94.183.157.0/24 maxlen: 24 94.183.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c2:8a:28:4d:d4:5d:27:e0:73:6f:82:0d:2d:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40dc31df2e158687a6235889adbe73e3c46ec625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:82:33:9a:31:7a:c5:5d:bf:ac:5e:09:d2: 4a:6f:8e:b7:7e:74:f9:2e:d5:fb:25:03:2d:26:7e: c6:91:fb:58:18:21:0d:32:7f:8f:9e:41:80:51:d8: c3:71:78:f6:9d:dd:cc:b9:83:72:1e:d3:cc:66:c5: 64:bc:b3:a7:b0:3a:d8:54:45:76:b8:6f:de:03:77: 34:e6:c2:50:6b:96:5a:44:a3:1c:2c:9e:41:a8:6d: 1d:d3:cd:5e:9a:6b:53:99:d1:cc:95:36:fd:d3:42: 8a:8b:77:57:0c:1d:aa:80:e2:c7:b9:0d:e5:86:71: 02:4a:04:f9:37:8d:48:52:c8:fd:81:56:5f:f8:e1: e3:90:df:8e:4e:17:ff:96:02:2b:31:92:e1:fc:f9: 0c:66:01:75:af:f4:24:28:29:93:ff:8c:d4:b9:b0: 5e:de:b1:55:dc:76:4f:47:74:70:35:9c:ba:d8:91: 3d:72:09:74:7b:59:fa:8b:b9:d9:f2:38:9f:a6:3a: da:d7:a2:b9:44:fb:77:5b:dc:71:b1:7a:e4:51:dd: b6:bb:2b:6e:95:3c:6e:c2:6a:ba:e6:65:eb:fb:75: 28:ff:2b:92:3d:c6:3b:69:fa:1e:df:c6:0b:43:58: 70:b4:24:f1:dc:bf:41:2a:00:fe:0b:5c:36:b9:be: 29:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DC:31:DF:2E:15:86:87:A6:23:58:89:AD:BE:73:E3:C4:6E:C6:25 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QNwx3y4VhoemI1iJrb5z48RuxiU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.183.156.0/23 94.183.160.0/24 Signature Algorithm: sha256WithRSAEncryption 90:3a:0f:60:b3:3f:d3:17:fe:0d:4d:8a:e6:ae:dd:1c:ad:c6: a7:c9:89:71:f0:96:22:76:b3:3d:94:bd:7e:fd:97:ec:55:8e: a5:6b:ae:2b:fb:c3:9b:06:d6:3e:f7:a9:7d:cf:8d:52:87:f7: fd:82:f6:84:10:41:58:4f:ee:e3:97:27:75:49:84:cb:a6:98: a7:0a:4f:ba:37:1b:25:ea:8c:6f:6d:d0:64:f7:44:85:30:0d: 6c:9a:cf:dc:f7:58:01:2c:dc:a8:3b:33:af:ac:32:fb:2b:3c: ea:95:22:38:7e:69:a6:6e:bc:3c:74:06:a7:33:c1:54:45:ab: 8c:d0:e1:f1:c3:0d:aa:48:5d:eb:21:e5:a2:b9:a2:7c:47:f0: d3:8a:5d:50:9a:2d:e1:69:3b:03:c7:1e:df:af:91:3c:4a:1e: 60:eb:6b:13:75:31:19:bb:6d:0c:93:4a:12:56:a9:a9:97:89: b7:ab:75:bb:4e:cc:22:0a:3b:f4:f4:3b:6f:f1:ea:6a:4c:20: 23:22:18:8e:03:cb:ee:2d:fd:e7:dd:19:64:ae:5e:68:14:cc: 79:c4:93:d3:43:a6:f3:0b:35:66:f7:52:d9:e2:3d:47:4b:a8: 21:71:ea:8a:c0:0a:78:b1:e4:f6:5a:eb:44:4e:f6:ae:c3:63: 1f:31:42:a5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hMKKKE3UXSfgc2+CDS3nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGRjMzFkZjJlMTU4Njg3YTYyMzU4ODlhZGJlNzNlM2M0NmVjNjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEGCM5oxesVdv6xeCdJKb463fnT5 LtX7JQMtJn7GkftYGCENMn+PnkGAUdjDcXj2nd3MuYNyHtPMZsVkvLOnsDrYVEV2 uG/eA3c05sJQa5ZaRKMcLJ5BqG0d081emmtTmdHMlTb900KKi3dXDB2qgOLHuQ3l hnECSgT5N41IUsj9gVZf+OHjkN+OThf/lgIrMZLh/PkMZgF1r/QkKCmT/4zUubBe 3rFV3HZPR3RwNZy62JE9cgl0e1n6i7nZ8jifpjra16K5RPt3W9xxsXrkUd22uytu lTxuwmq65mXr+3Uo/yuSPcY7afoe38YLQ1hwtCTx3L9BKgD+C1w2ub4pmQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEDcMd8uFYaHpiNYia2+c+PEbsYlMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvUU53eDN5NFZob2VtSTFpSnJiNXo0OFJ1eGlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXrecAwQA XregMA0GCSqGSIb3DQEBCwUAA4IBAQCQOg9gsz/TF/4NTYrmrt0crcanyYlx8JYi drM9lL1+/ZfsVY6la64r+8ObBtY+96l9z41Sh/f9gvaEEEFYT+7jlyd1SYTLppin Ck+6Nxsl6oxvbdBk90SFMA1sms/c91gBLNyoOzOvrDL7KzzqlSI4fmmmbrw8dAan M8FURauM0OHxww2qSF3rIeWiuaJ8R/DTil1Qmi3haTsDxx7fr5E8Sh5g62sTdTEZ u20Mk0oSVqmpl4m3q3W7TswiCjv09Dtv8epqTCAjIhiOA8vuLf3n3Rlkrl5oFMx5 xJPTQ6bzCzVm91LZ4j1HS6ghceqKwAp4seT2WutETvauw2MfMUKl -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:59 2026 by rpki-client