This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/QH02WxuzjvjRn51oLBiPvrujLa4.roa File: QH02WxuzjvjRn51oLBiPvrujLa4.roa (raw, json) Hash identifier: IQDzIfbbVCDUYyTY4gs2wjyKwyhZrH0/tzgcEn65G5w= Subject key identifier: 40:7D:36:5B:1B:B3:8E:F8:D1:9F:9D:68:2C:18:8F:BE:BB:A3:2D:AE Certificate issuer: /CN=e0c2866398142a574ba47b197d71791b5e23af7c Certificate serial: 019B7DCA6DD2FA93EB23C7323B3EA4CCDF19 Authority key identifier: E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/QH02WxuzjvjRn51oLBiPvrujLa4.roa Signing time: Fri 02 Jan 2026 08:19:36 +0000 ROA not before: Fri 02 Jan 2026 08:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21336 IP address blocks: 80.243.192.0/20 maxlen: 20 212.27.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:6d:d2:fa:93:eb:23:c7:32:3b:3e:a4:cc:df:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0c2866398142a574ba47b197d71791b5e23af7c Validity Not Before: Jan 2 08:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=407d365b1bb38ef8d19f9d682c188fbebba32dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0d:82:ca:99:ed:ba:9d:bb:82:0a:c0:42:10: 2f:5f:c4:48:2d:06:75:97:f5:cb:d6:49:ed:97:50: 8c:64:f9:b9:f1:bf:dd:ba:30:d4:28:0f:eb:9b:16: 80:46:9a:1b:11:98:a1:13:34:64:ff:cb:5d:21:4c: 6e:18:9f:d0:9c:9e:33:1c:93:9b:81:f4:25:31:4f: e3:27:53:41:40:1e:90:44:ce:a8:7b:67:f9:ff:9b: a1:23:9a:6e:3a:85:75:c6:68:37:9a:08:4a:47:e6: c1:3f:2b:a7:b1:cb:36:ef:12:73:3c:b0:c2:09:ef: 06:81:35:73:88:be:a0:9c:b4:89:3c:16:96:a2:36: 01:36:80:f0:2d:7f:5c:3d:54:c4:ee:44:73:29:63: 3b:02:be:1f:b0:32:a3:9c:f2:4e:05:13:05:e3:34: 5b:ba:c7:81:88:7f:55:01:ef:74:6f:65:f0:3a:bc: ac:03:a4:82:8c:94:cb:41:dd:45:db:0a:55:11:83: c8:d3:c7:c8:92:c4:ed:d1:e3:a0:b3:5f:3a:ec:a1: 5b:ca:5f:ca:9d:ac:fc:f2:70:bb:4d:e8:b7:c2:7b: 61:8b:8c:69:9f:0c:0f:1e:a1:f6:e4:f4:4a:41:8c: 9d:97:9c:a1:01:15:38:35:98:aa:db:40:80:e5:98: 75:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7D:36:5B:1B:B3:8E:F8:D1:9F:9D:68:2C:18:8F:BE:BB:A3:2D:AE X509v3 Authority Key Identifier: keyid:E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/QH02WxuzjvjRn51oLBiPvrujLa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.243.192.0/20 212.27.128.0/19 Signature Algorithm: sha256WithRSAEncryption 40:d1:a0:d1:06:fd:d8:16:f8:2c:30:1b:7c:15:bb:b5:70:a9: 19:53:c0:db:d7:3b:36:2f:3f:bf:7c:15:d0:f2:8d:95:a9:13: f9:b5:22:8c:e7:20:63:53:17:0f:0c:d9:54:b4:60:97:09:88: 47:4a:03:fa:50:bd:69:84:65:b7:50:8d:03:99:7f:2a:2e:8e: 40:88:56:4a:bb:9b:f1:ed:53:f9:c8:7e:7c:85:cb:29:dd:4c: e7:71:dc:77:f8:4c:d6:f8:94:47:28:60:e0:19:f1:a2:c9:c7: 0a:83:ba:35:b6:b5:45:45:93:8f:8a:a8:8b:5f:16:6d:08:16: 37:16:9b:7e:dd:74:79:5d:55:6b:2b:5b:81:3b:a3:e5:6d:65: b9:e4:c5:e2:fe:5b:7f:55:21:c8:78:73:f5:e9:39:d2:44:88: e6:49:52:9a:24:59:64:ad:12:45:b7:61:04:1d:39:8c:2b:b4: 86:82:12:5a:0b:81:ae:9f:99:60:fe:10:e5:72:a9:8a:6a:81: 00:85:10:3b:da:95:1f:aa:bd:80:4b:6c:27:13:af:48:a9:ab: 15:b0:58:d0:93:f9:9b:21:e2:25:ac:c9:f7:be:bb:12:c5:5b: 0d:db:21:7a:d8:85:43:10:d5:b0:cb:8b:13:0e:e4:a9:4f:9b: 47:55:a2:c7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ym3S+pPrI8cyOz6kzN8ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYzI4NjYzOTgxNDJhNTc0YmE0N2IxOTdkNzE3OTFiNWUy M2FmN2MwHhcNMjYwMTAyMDgxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDdkMzY1YjFiYjM4ZWY4ZDE5ZjlkNjgyYzE4OGZiZWJiYTMyZGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw2Cypntup27ggrAQhAvX8RILQZ1 l/XL1kntl1CMZPm58b/dujDUKA/rmxaARpobEZihEzRk/8tdIUxuGJ/QnJ4zHJOb gfQlMU/jJ1NBQB6QRM6oe2f5/5uhI5puOoV1xmg3mghKR+bBPyunscs27xJzPLDC Ce8GgTVziL6gnLSJPBaWojYBNoDwLX9cPVTE7kRzKWM7Ar4fsDKjnPJOBRMF4zRb useBiH9VAe90b2XwOrysA6SCjJTLQd1F2wpVEYPI08fIksTt0eOgs1867KFbyl/K naz88nC7Tei3wnthi4xpnwwPHqH25PRKQYydl5yhARU4NZiq20CA5Zh1TwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEB9Nlsbs4740Z+daCwYj767oy2uMB8GA1UdIwQY MBaAFODChmOYFCpXS6R7GX1xeRteI698MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE1LR1k1Z1VLbGRMcEhzWmZYRjVHMTRqcjN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zY2Q5NjEtMmRjZC00NTE4LWJmYjgt YTE2Y2Y3YWM3ZGQ4LzEvUUgwMld4dXpqdmpSbjUxb0xCaVB2cnVqTGE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8zY2Q5NjEtMmRjZC00NTE4LWJmYjgtYTE2Y2Y3YWM3ZGQ4 LzEvNE1LR1k1Z1VLbGRMcEhzWmZYRjVHMTRqcjN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEUPPAAwQF 1BuAMA0GCSqGSIb3DQEBCwUAA4IBAQBA0aDRBv3YFvgsMBt8Fbu1cKkZU8Db1zs2 Lz+/fBXQ8o2VqRP5tSKM5yBjUxcPDNlUtGCXCYhHSgP6UL1phGW3UI0DmX8qLo5A iFZKu5vx7VP5yH58hcsp3Uzncdx3+EzW+JRHKGDgGfGiyccKg7o1trVFRZOPiqiL XxZtCBY3Fpt+3XR5XVVrK1uBO6PlbWW55MXi/lt/VSHIeHP16TnSRIjmSVKaJFlk rRJFt2EEHTmMK7SGghJaC4Gun5lg/hDlcqmKaoEAhRA72pUfqr2AS2wnE69IqasV sFjQk/mbIeIlrMn3vrsSxVsN2yF62IVDENWwy4sTDuSpT5tHVaLH -----END CERTIFICATE-----Generated at Tue Feb 10 00:28:46 2026 by rpki-client