This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/QiFIDQaK57RQDC2wBjTgFDeAGGk.roa File: QiFIDQaK57RQDC2wBjTgFDeAGGk.roa (raw, json) Hash identifier: i5P77GwNdzqnxs89g/W5Ts+xYO0h1KNAlwDqj9gxX20= Subject key identifier: 42:21:48:0D:06:8A:E7:B4:50:0C:2D:B0:06:34:E0:14:37:80:18:69 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C73FFB6BB87CA274888A26168FD72D Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/QiFIDQaK57RQDC2wBjTgFDeAGGk.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5089 IP address blocks: 79.139.52.0/22 maxlen: 24 93.119.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3f:fb:6b:b8:7c:a2:74:88:8a:26:16:8f:d7:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4221480d068ae7b4500c2db00634e01437801869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:29:48:8d:ce:fb:70:51:7b:39:0a:ee:62:40: ba:f3:0d:c5:08:65:42:a3:dd:cb:95:ed:06:a9:9d: 71:e6:9c:8c:36:5e:53:fc:7d:77:c1:46:ab:f8:67: 30:5b:45:88:6e:43:bc:c9:29:84:e2:65:a0:b3:49: 25:d3:fd:4d:d1:4b:6d:f0:f1:54:49:64:57:fa:b8: 7e:08:f1:88:5e:80:52:7f:4c:ff:ac:4b:83:98:fd: 24:67:59:37:9a:6d:fa:09:2b:bc:dd:83:e1:04:61: 4e:d6:b4:1f:98:ec:6c:bb:9a:f6:cf:48:6f:dc:9a: 6c:b4:b6:52:a3:1b:70:d2:85:0f:ba:2b:0e:dd:61: 77:5d:47:17:eb:04:9b:31:93:fa:3e:4d:c2:60:17: 64:98:48:e5:0d:00:15:db:ae:90:53:40:a7:12:63: 34:3f:f8:f0:c3:73:77:53:bf:7c:77:99:6f:8f:7c: 79:1e:17:64:28:3a:1d:66:c4:f5:10:a2:14:d4:62: b4:a1:d6:e5:78:02:c1:c3:a0:ad:97:ba:7f:33:8a: 75:87:83:06:b4:62:d6:01:30:cb:24:23:2b:77:ee: b1:0b:a6:25:f0:44:31:7e:13:c8:87:0a:1d:4b:db: bb:b3:5b:93:fd:40:ab:7e:8a:0f:fc:8b:aa:40:5d: e2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:21:48:0D:06:8A:E7:B4:50:0C:2D:B0:06:34:E0:14:37:80:18:69 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/QiFIDQaK57RQDC2wBjTgFDeAGGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.139.52.0/22 93.119.184.0/21 Signature Algorithm: sha256WithRSAEncryption 2d:db:c3:f7:69:23:e2:b6:ce:73:bb:26:9d:40:3d:4c:3f:0c: af:b7:c7:0f:7a:66:54:c3:e4:c2:c0:79:c6:c5:04:b7:88:70: ce:2e:e4:bb:6e:e7:86:0c:12:15:95:6a:f1:f6:06:1f:e0:63: de:0d:09:54:23:9c:a9:52:35:97:df:04:48:3d:4d:d2:ad:1c: fe:0d:ff:86:5b:a6:ba:b4:f3:8b:06:fd:fa:35:11:d8:a4:28: 8d:b8:47:b3:e9:96:78:a5:ea:b1:ff:21:0e:84:3c:41:83:22: 46:2f:fe:b2:63:08:dd:1f:d9:3e:37:80:b9:86:c2:10:6d:dc: 1a:03:bc:40:4b:fd:78:aa:35:16:34:3b:b2:4d:15:72:2e:53: 01:85:9c:4b:7c:0e:12:d0:68:95:9c:6a:27:4b:b3:72:14:81: 2e:a2:f5:85:09:91:04:bc:51:bc:6c:be:f2:ee:ca:f3:32:99: 0e:85:f5:72:e8:dc:73:2b:b4:c5:6e:a9:61:09:60:f3:af:a0: ed:53:69:1a:94:8a:f1:48:c0:3a:b1:cb:d8:f9:10:17:41:aa: ec:86:35:e3:20:4d:6a:13:e8:37:c8:cc:0a:95:84:e9:7e:9e: 16:5d:db:ee:e1:6a:18:e1:19:51:c0:c0:c5:9b:72:39:c7:28: b5:e8:7f:63 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xz/7a7h8onSIiiYWj9ctMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjIxNDgwZDA2OGFlN2I0NTAwYzJkYjAwNjM0ZTAxNDM3ODAxODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuClIjc77cFF7OQruYkC68w3FCGVC o93Lle0GqZ1x5pyMNl5T/H13wUar+GcwW0WIbkO8ySmE4mWgs0kl0/1N0Utt8PFU SWRX+rh+CPGIXoBSf0z/rEuDmP0kZ1k3mm36CSu83YPhBGFO1rQfmOxsu5r2z0hv 3JpstLZSoxtw0oUPuisO3WF3XUcX6wSbMZP6Pk3CYBdkmEjlDQAV266QU0CnEmM0 P/jww3N3U798d5lvj3x5HhdkKDodZsT1EKIU1GK0odbleALBw6Ctl7p/M4p1h4MG tGLWATDLJCMrd+6xC6Yl8EQxfhPIhwodS9u7s1uT/UCrfooP/IuqQF3iRQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEIhSA0Giue0UAwtsAY04BQ3gBhpMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvUWlGSURRYUs1N1JRREMyd0JqVGdGRGVBR0drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCT4s0AwQD XXe4MA0GCSqGSIb3DQEBCwUAA4IBAQAt28P3aSPits5zuyadQD1MPwyvt8cPemZU w+TCwHnGxQS3iHDOLuS7bueGDBIVlWrx9gYf4GPeDQlUI5ypUjWX3wRIPU3SrRz+ Df+GW6a6tPOLBv36NRHYpCiNuEez6ZZ4peqx/yEOhDxBgyJGL/6yYwjdH9k+N4C5 hsIQbdwaA7xAS/14qjUWNDuyTRVyLlMBhZxLfA4S0GiVnGonS7NyFIEuovWFCZEE vFG8bL7y7srzMpkOhfVy6NxzK7TFbqlhCWDzr6DtU2kalIrxSMA6scvY+RAXQars hjXjIE1qE+g3yMwKlYTpfp4WXdvu4WoY4RlRwMDFm3I5xyi16H9j -----END CERTIFICATE-----Generated at Thu Jan 1 20:22:37 2026 by rpki-client