This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/QP9Oe3_zJ6yuF3kAViKnMINjXbE.roa File: QP9Oe3_zJ6yuF3kAViKnMINjXbE.roa (raw, json) Hash identifier: kIkr4A1mpUTupFUwElbDch1PJM/dciLvNLfYLTlKNU4= Subject key identifier: 40:FF:4E:7B:7F:F3:27:AC:AE:17:79:00:56:22:A7:30:83:63:5D:B1 Certificate issuer: /CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77 Certificate serial: 019B7A5AC27EF339D175ECDFD3726E274EEC Authority key identifier: 9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/QP9Oe3_zJ6yuF3kAViKnMINjXbE.roa Signing time: Thu 01 Jan 2026 16:18:46 +0000 ROA not before: Thu 01 Jan 2026 16:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 217.8.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c2:7e:f3:39:d1:75:ec:df:d3:72:6e:27:4e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77 Validity Not Before: Jan 1 16:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40ff4e7b7ff327acae1779005622a73083635db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1d:5f:91:fa:34:ef:5e:fd:7f:8c:bd:8e:30: c4:ad:47:9a:3c:ec:12:c8:c0:8d:e2:4b:c4:93:c1: ba:a7:af:49:36:73:d4:4f:fe:77:3b:7f:ee:13:99: 3d:21:4d:23:60:ea:65:ea:2b:15:ac:c5:54:05:ea: ce:99:09:93:9f:6a:f3:72:7d:19:88:64:73:33:b5: 42:fa:93:7c:b8:8f:4e:84:f7:1b:ca:59:3f:9f:40: b9:12:87:ea:9d:94:9e:09:ad:74:bb:e2:4b:99:5d: c3:25:ac:60:37:57:8e:29:83:5d:f0:fc:1d:fd:1b: 17:4f:d2:01:ad:a1:d9:5c:0b:6a:43:50:44:ef:29: 88:6f:f5:9b:5c:a0:82:10:d1:5e:94:bd:d6:a1:4f: 5e:aa:bf:8d:2a:3e:e0:93:21:f0:1d:42:79:66:23: aa:27:1b:6b:bf:91:40:87:0b:58:95:8a:d8:72:a2: ea:59:99:4e:cc:fc:51:93:af:06:de:cd:6c:ef:f0: 04:2e:45:00:cd:cb:c8:d7:37:78:1b:ec:f1:f0:2f: c0:33:d6:8f:f9:69:35:59:cc:37:5f:90:99:69:a9: 43:d9:77:35:82:16:26:48:1c:55:a2:37:2f:25:47: 7d:48:d7:ee:64:3c:04:12:42:07:ba:25:23:af:b0: 65:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FF:4E:7B:7F:F3:27:AC:AE:17:79:00:56:22:A7:30:83:63:5D:B1 X509v3 Authority Key Identifier: keyid:9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/QP9Oe3_zJ6yuF3kAViKnMINjXbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.8.118.0/24 Signature Algorithm: sha256WithRSAEncryption 81:ef:80:3d:cc:d6:67:7d:6a:19:ae:53:e5:e0:2c:03:93:c9: d5:da:88:ac:b5:56:d5:fe:79:83:8b:7d:75:af:a4:97:60:2f: 1d:a8:89:64:05:2d:44:96:84:7d:8e:50:5f:03:ca:cf:4f:6d: 8e:6f:ee:83:4b:37:97:e4:97:01:21:66:0e:30:6a:98:c0:b6: 2c:97:1e:bd:d7:16:fd:c5:f3:85:f0:e0:8d:df:90:aa:36:c6: 5b:45:bb:22:1d:12:f7:57:78:69:00:33:9a:b6:91:1c:ac:9f: 6d:30:1d:59:7b:af:78:73:98:0f:a7:16:ff:e9:59:1f:81:1b: b1:88:73:fb:a7:75:72:64:4f:16:bf:14:28:ca:8a:06:c7:f2: fc:ed:6a:bb:6d:c6:ba:fd:68:04:cc:f6:70:25:11:88:eb:e1: d1:e1:5a:56:ce:ad:76:db:d9:9d:7b:db:82:8d:ed:c3:4d:c8: 95:28:5e:c2:d2:98:75:88:35:7e:31:53:17:39:60:39:bc:09: 3b:ef:00:a5:b2:2b:1b:bb:a8:cb:95:d5:ed:07:ea:a4:31:c1: 0d:c3:c7:b1:74:ba:0b:00:06:b3:06:96:53:f2:5d:c6:c6:bb: 40:0e:56:f0:03:16:e8:c6:0d:ba:7d:81:c1:36:e7:5d:8c:39: f9:01:01:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WsJ+8znRdezf03JuJ07sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNDdlZTFmMTdjOTg3ZGViYjJjMDIwZDhiNWYyZDhiZGFk YmViNzcwHhcNMjYwMTAxMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGZmNGU3YjdmZjMyN2FjYWUxNzc5MDA1NjIyYTczMDgzNjM1ZGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh1fkfo07179f4y9jjDErUeaPOwS yMCN4kvEk8G6p69JNnPUT/53O3/uE5k9IU0jYOpl6isVrMVUBerOmQmTn2rzcn0Z iGRzM7VC+pN8uI9OhPcbylk/n0C5EofqnZSeCa10u+JLmV3DJaxgN1eOKYNd8Pwd /RsXT9IBraHZXAtqQ1BE7ymIb/WbXKCCENFelL3WoU9eqr+NKj7gkyHwHUJ5ZiOq Jxtrv5FAhwtYlYrYcqLqWZlOzPxRk68G3s1s7/AELkUAzcvI1zd4G+zx8C/AM9aP +Wk1Wcw3X5CZaalD2Xc1ghYmSBxVojcvJUd9SNfuZDwEEkIHuiUjr7BldQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFED/Tnt/8yesrhd5AFYipzCDY12xMB8GA1UdIwQY MBaAFJtH7h8XyYfeuywCDYtfLYva2+t3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTBmdUh4ZkpoOTY3TEFJTmkxOHRpOXJiNjNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS85YjE2ZjMtMDEwMC00OTY0LTllYzkt ZTVlYzJjYzY0N2FhLzEvUVA5T2UzX3pKNnl1RjNrQVZpS25NSU5qWGJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS85YjE2ZjMtMDEwMC00OTY0LTllYzktZTVlYzJjYzY0N2Fh LzEvbTBmdUh4ZkpoOTY3TEFJTmkxOHRpOXJiNjNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Qh2MA0G CSqGSIb3DQEBCwUAA4IBAQCB74A9zNZnfWoZrlPl4CwDk8nV2oistVbV/nmDi311 r6SXYC8dqIlkBS1EloR9jlBfA8rPT22Ob+6DSzeX5JcBIWYOMGqYwLYslx691xb9 xfOF8OCN35CqNsZbRbsiHRL3V3hpADOatpEcrJ9tMB1Ze694c5gPpxb/6VkfgRux iHP7p3VyZE8WvxQoyooGx/L87Wq7bca6/WgEzPZwJRGI6+HR4VpWzq1229mde9uC je3DTciVKF7C0ph1iDV+MVMXOWA5vAk77wClsisbu6jLldXtB+qkMcENw8exdLoL AAazBpZT8l3GxrtADlbwAxboxg26fYHBNuddjDn5AQFk -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:43 2026 by rpki-client