This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/QBQ6UrNfdmOJ5LiH_jniQBS9lnM.roa File: QBQ6UrNfdmOJ5LiH_jniQBS9lnM.roa (raw, json) Hash identifier: 0vMXpkUay9t5dPiHXGwHHtx/tEoJJV1kaTq7T1ZzaOo= Subject key identifier: 40:14:3A:52:B3:5F:76:63:89:E4:B8:87:FE:39:E2:40:14:BD:96:73 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBE22C383D2E6BC9F25C7849D192F9 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/QBQ6UrNfdmOJ5LiH_jniQBS9lnM.roa Signing time: Thu 01 Jan 2026 14:17:40 +0000 ROA not before: Thu 01 Jan 2026 14:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201759 IP address blocks: 213.33.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:e2:2c:38:3d:2e:6b:c9:f2:5c:78:49:d1:92:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40143a52b35f766389e4b887fe39e24014bd9673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:cd:1e:ec:45:59:3a:46:e6:a2:d7:ba:2c: 0f:7c:11:36:77:37:c4:87:6e:f0:f3:ca:ac:9b:08: dd:34:69:71:18:25:a4:e7:98:4c:b7:ce:b3:df:cb: e0:69:92:b5:dd:43:58:a8:2f:17:fc:b0:dd:ff:f1: ae:23:5d:57:85:cf:47:99:90:37:01:79:69:0a:68: 26:bb:b4:b1:99:a5:48:04:52:62:63:0d:30:5a:a3: c5:bb:05:6e:b9:03:53:c8:c4:63:d0:65:9a:86:8e: 89:12:ee:14:8e:ee:ad:61:5c:6b:6f:be:27:c3:a6: f9:39:03:4f:ba:68:59:ce:2c:70:1e:b7:4f:8d:78: 75:2f:52:fd:57:37:68:a4:bd:ae:f2:bf:58:68:f2: 71:68:fe:80:a7:1c:a8:6c:c3:95:c9:18:75:e9:af: b2:ba:9c:c1:76:46:38:5f:eb:f9:cd:11:c3:96:22: 3e:a7:ea:53:bd:8a:73:a2:c1:fe:c3:cf:9f:55:c2: 1f:5d:54:0a:d7:6c:5b:bf:5a:63:95:2c:65:b5:90: 21:b2:f9:c1:78:8d:1b:12:44:9a:0d:6f:a6:36:79: 86:ce:9e:18:6f:4b:4a:e4:9b:2f:06:04:b9:2d:3c: 66:83:e0:5c:b3:d7:71:ad:93:00:f0:23:19:29:59: 59:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:14:3A:52:B3:5F:76:63:89:E4:B8:87:FE:39:E2:40:14:BD:96:73 X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/QBQ6UrNfdmOJ5LiH_jniQBS9lnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.33.100.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:42:dc:7e:e8:87:dc:78:d4:3e:79:36:73:31:59:f6:bc:25: 69:9b:28:76:47:f4:81:7a:62:67:9b:b2:08:28:a2:c7:49:6d: a9:21:87:f7:17:bd:1b:53:90:0e:c3:1f:7b:53:cc:e8:58:1d: 98:e9:f6:d0:f0:02:ef:1a:49:87:28:49:59:97:1b:c0:97:3e: 84:45:fe:c8:80:4f:8a:f2:15:76:22:d9:a0:7d:39:9c:78:e4: 58:78:3e:f1:38:60:c5:40:d0:50:23:9d:89:f4:98:07:43:7a: 09:29:7c:88:2f:2e:44:e6:8c:79:a3:d2:56:e8:df:f9:d8:87: 58:07:13:db:fe:43:23:ca:8b:41:0c:ab:3a:ee:88:e0:e2:96: 49:fb:84:37:41:81:91:60:d3:ad:f7:f1:c9:c4:3f:8e:0f:24: 89:26:fa:de:17:bd:7d:18:17:e1:0d:1b:1b:a4:c3:ad:c1:13: 83:c5:56:62:f4:4f:f3:95:25:3a:28:6c:cd:86:b5:46:10:5e: f4:d1:c6:44:ac:cf:6a:58:66:5b:8a:10:e8:28:f8:3b:96:3d: e1:fe:30:a8:12:a3:53:e8:31:f0:14:65:b9:0d:60:36:a5:b3: 99:09:c4:b4:5b:96:fe:e8:23:5d:fc:63:7d:1b:f3:d4:3b:db: 56:01:8e:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt56+IsOD0ua8nyXHhJ0ZL5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDE0M2E1MmIzNWY3NjYzODllNGI4ODdmZTM5ZTI0MDE0YmQ5NjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl3NHuxFWTpG5qLXuiwPfBE2dzfE h27w88qsmwjdNGlxGCWk55hMt86z38vgaZK13UNYqC8X/LDd//GuI11Xhc9HmZA3 AXlpCmgmu7SxmaVIBFJiYw0wWqPFuwVuuQNTyMRj0GWaho6JEu4Uju6tYVxrb74n w6b5OQNPumhZzixwHrdPjXh1L1L9VzdopL2u8r9YaPJxaP6ApxyobMOVyRh16a+y upzBdkY4X+v5zRHDliI+p+pTvYpzosH+w8+fVcIfXVQK12xbv1pjlSxltZAhsvnB eI0bEkSaDW+mNnmGzp4Yb0tK5JsvBgS5LTxmg+Bcs9dxrZMA8CMZKVlZxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEAUOlKzX3ZjieS4h/454kAUvZZzMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvUUJRNlVyTmZkbU9KNUxpSF9qbmlRQlM5bG5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1SFkMA0G CSqGSIb3DQEBCwUAA4IBAQANQtx+6IfceNQ+eTZzMVn2vCVpmyh2R/SBemJnm7II KKLHSW2pIYf3F70bU5AOwx97U8zoWB2Y6fbQ8ALvGkmHKElZlxvAlz6ERf7IgE+K 8hV2ItmgfTmceORYeD7xOGDFQNBQI52J9JgHQ3oJKXyILy5E5ox5o9JW6N/52IdY BxPb/kMjyotBDKs67ojg4pZJ+4Q3QYGRYNOt9/HJxD+ODySJJvreF719GBfhDRsb pMOtwRODxVZi9E/zlSU6KGzNhrVGEF700cZErM9qWGZbihDoKPg7lj3h/jCoEqNT 6DHwFGW5DWA2pbOZCcS0W5b+6CNd/GN9G/PUO9tWAY7q -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:15 2026 by rpki-client