This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/qZeBWU9bZf_vaF_zTeE59RnC4mc.roa File: qZeBWU9bZf_vaF_zTeE59RnC4mc.roa (raw, json) Hash identifier: OPPP31x9eOLetoM61DyLeuuWy5iFqZ95Cdxcv5ym6ME= Subject key identifier: A9:97:81:59:4F:5B:65:FF:EF:68:5F:F3:4D:E1:39:F5:19:C2:E2:67 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA535106F435697F5B4124D67B8B0A9 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/qZeBWU9bZf_vaF_zTeE59RnC4mc.roa Signing time: Thu 01 Jan 2026 22:19:43 +0000 ROA not before: Thu 01 Jan 2026 22:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39401 IP address blocks: 94.236.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:35:10:6f:43:56:97:f5:b4:12:4d:67:b8:b0:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a99781594f5b65ffef685ff34de139f519c2e267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8c:c3:f6:50:3d:d9:89:9e:59:9f:20:82:df: 17:21:ca:79:0d:67:15:1a:2f:bc:f6:41:8b:a5:94: 03:be:6f:dd:e5:6a:99:24:c7:68:1c:20:5a:6d:dd: 65:35:d9:c5:f5:81:be:52:d7:51:29:2c:1b:a9:43: fe:1b:c2:f1:dc:3e:32:78:f6:fc:31:7b:9a:5d:57: 1c:b9:15:42:98:87:9c:7e:6b:1b:56:1c:e6:ca:6e: 66:3e:5f:cb:ab:15:69:b7:ac:4d:44:37:76:31:9d: af:db:f5:91:2b:dd:59:5a:87:e2:40:f4:46:dd:ff: e8:3a:f9:61:86:a2:52:a9:6b:a1:56:bc:12:0a:54: f5:37:d5:b2:2e:a2:6d:b0:c7:b3:c8:f8:66:ef:ff: 9f:ee:c2:77:b1:9e:6a:77:ce:29:76:cd:24:7e:ef: 3a:cd:2c:a3:57:34:89:73:6d:82:5a:0c:d5:f7:ea: 5d:95:4c:9d:f9:3f:3f:39:d2:37:24:34:ec:e4:a1: 0c:ce:6a:7f:21:c0:b5:ff:c6:bf:16:77:3c:97:b8: d1:c7:58:5b:10:38:34:85:d4:cc:e8:4a:94:04:ce: 4e:64:fc:f5:65:88:03:16:32:eb:d9:4b:28:76:9e: 38:a1:ac:d4:ba:b3:d2:34:ff:c5:9c:1f:70:b9:36: ad:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:97:81:59:4F:5B:65:FF:EF:68:5F:F3:4D:E1:39:F5:19:C2:E2:67 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/qZeBWU9bZf_vaF_zTeE59RnC4mc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.236.168.0/24 Signature Algorithm: sha256WithRSAEncryption 36:86:c6:a8:9e:9a:10:b6:56:33:9c:2b:c8:bc:a8:67:e1:de: b4:c3:33:b6:ed:7c:30:e5:53:ee:04:a3:3c:24:c9:ba:f0:28: fe:d7:35:f0:6b:4f:2d:fd:9c:4d:92:cd:9a:f1:ae:8c:fe:c8: af:07:c1:84:ee:fd:6d:e5:03:b3:3f:46:28:de:cd:e2:94:8e: 74:e0:95:ee:c6:18:61:15:a7:8b:77:62:18:e6:e7:21:1b:a7: 19:06:a4:95:16:25:82:1b:f3:0c:15:29:c7:78:3c:e4:75:45: 8c:42:e7:13:3f:85:ee:a0:f1:89:32:17:f3:20:f3:9a:76:77: aa:71:35:fc:a1:98:20:dc:3c:34:a5:ea:4a:17:39:f5:81:01: 29:9a:84:49:e1:34:fa:fb:2a:b0:9d:d1:95:c4:41:5c:5a:6c: bf:d1:d3:1d:13:07:6e:c7:2a:46:21:52:aa:64:f4:74:aa:1d: 84:a0:bd:e9:a6:ab:c7:50:e2:b5:17:0c:d6:e2:92:eb:f6:07: eb:a5:75:44:99:cd:f0:7f:6b:74:bd:87:14:09:f5:cc:25:25: 50:8e:fb:b2:da:c2:45:99:da:47:87:81:c7:d4:fb:7a:06:8f: 6d:02:0d:b4:3d:d1:f7:ac:0c:ce:d2:ea:23:a5:33:58:e2:15: f5:d5:c5:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTUQb0NWl/W0Ek1nuLCpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTk3ODE1OTRmNWI2NWZmZWY2ODVmZjM0ZGUxMzlmNTE5YzJlMjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ozD9lA92YmeWZ8ggt8XIcp5DWcV Gi+89kGLpZQDvm/d5WqZJMdoHCBabd1lNdnF9YG+UtdRKSwbqUP+G8Lx3D4yePb8 MXuaXVccuRVCmIecfmsbVhzmym5mPl/LqxVpt6xNRDd2MZ2v2/WRK91ZWofiQPRG 3f/oOvlhhqJSqWuhVrwSClT1N9WyLqJtsMezyPhm7/+f7sJ3sZ5qd84pds0kfu86 zSyjVzSJc22CWgzV9+pdlUyd+T8/OdI3JDTs5KEMzmp/IcC1/8a/Fnc8l7jRx1hb EDg0hdTM6EqUBM5OZPz1ZYgDFjLr2Usodp44oazUurPSNP/FnB9wuTatWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKmXgVlPW2X/72hf803hOfUZwuJnMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvcVplQldVOWJaZl92YUZfelRlRTU5Um5DNG1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXuyoMA0G CSqGSIb3DQEBCwUAA4IBAQA2hsaonpoQtlYznCvIvKhn4d60wzO27Xww5VPuBKM8 JMm68Cj+1zXwa08t/ZxNks2a8a6M/sivB8GE7v1t5QOzP0Yo3s3ilI504JXuxhhh FaeLd2IY5uchG6cZBqSVFiWCG/MMFSnHeDzkdUWMQucTP4XuoPGJMhfzIPOadneq cTX8oZgg3Dw0pepKFzn1gQEpmoRJ4TT6+yqwndGVxEFcWmy/0dMdEwduxypGIVKq ZPR0qh2EoL3ppqvHUOK1FwzW4pLr9gfrpXVEmc3wf2t0vYcUCfXMJSVQjvuy2sJF mdpHh4HH1Pt6Bo9tAg20PdH3rAzO0uojpTNY4hX11cUB -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:37 2026 by rpki-client