This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/QFemVBga8R6MUy4la4qdXV606kc.roa File: QFemVBga8R6MUy4la4qdXV606kc.roa (raw, json) Hash identifier: 75fcTq+XSvxc/YMDH3A8ovZYGGLiO1iXpSLbHu45owU= Subject key identifier: 40:57:A6:54:18:1A:F1:1E:8C:53:2E:25:6B:8A:9D:5D:5E:B4:EA:47 Certificate issuer: /CN=4d109be50d40e32b3d516fc1eb72eab32c5e0bce Certificate serial: 019B7F8526B2DF90070E89B3817F2DD113E5 Authority key identifier: 4D:10:9B:E5:0D:40:E3:2B:3D:51:6F:C1:EB:72:EA:B3:2C:5E:0B:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/QFemVBga8R6MUy4la4qdXV606kc.roa Signing time: Fri 02 Jan 2026 16:23:11 +0000 ROA not before: Fri 02 Jan 2026 16:23:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41323 IP address blocks: 176.121.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:26:b2:df:90:07:0e:89:b3:81:7f:2d:d1:13:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d109be50d40e32b3d516fc1eb72eab32c5e0bce Validity Not Before: Jan 2 16:23:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4057a654181af11e8c532e256b8a9d5d5eb4ea47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fd:a0:ec:1f:51:44:3d:a4:81:8f:0c:cb:b6: 45:a2:35:f0:7a:55:6a:47:ee:57:40:c0:dd:08:95: f5:e2:ab:d3:d7:53:23:ec:04:c0:e0:35:be:ca:ea: f3:21:84:b6:70:83:aa:56:8e:a3:72:8c:d9:2b:2e: 59:93:19:15:13:77:77:e6:3e:2a:7d:bd:a4:f1:7a: b6:4d:e3:f1:00:eb:33:60:53:02:eb:3c:90:e8:c4: e2:05:87:ca:ef:a8:c4:f5:af:66:85:60:70:da:ce: cc:4a:69:39:2a:a5:89:e2:67:06:fd:02:a3:d5:00: 4a:cd:67:4d:b1:40:c3:f8:db:51:ee:b1:e4:32:fa: fd:97:81:c9:83:86:73:fd:a2:4e:bb:b8:ca:27:99: 60:f7:2d:52:4e:0a:96:c1:ce:9b:c6:c1:18:7e:d5: ca:03:2a:ca:81:6f:cc:cf:ce:2a:de:9d:18:2f:61: 55:c3:2c:4a:1b:79:9d:a4:5c:b7:32:e6:8b:d1:b3: dc:11:9b:8a:e6:1a:31:76:bb:7d:7a:ca:e2:df:a0: 23:79:58:a8:64:55:ae:1b:8a:9a:96:d7:63:83:bb: e0:6a:38:d0:81:e0:10:a8:46:bf:59:26:b1:cc:c2: bb:c5:57:dc:9d:74:fe:15:5a:1e:83:ca:b5:60:36: 36:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:57:A6:54:18:1A:F1:1E:8C:53:2E:25:6B:8A:9D:5D:5E:B4:EA:47 X509v3 Authority Key Identifier: keyid:4D:10:9B:E5:0D:40:E3:2B:3D:51:6F:C1:EB:72:EA:B3:2C:5E:0B:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/QFemVBga8R6MUy4la4qdXV606kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.121.8.0/24 Signature Algorithm: sha256WithRSAEncryption 58:a0:4b:dd:53:74:66:16:49:6a:dc:ed:b5:b5:6f:9b:d0:a4: 76:23:2c:24:0a:b8:a6:49:d7:3a:d1:5b:9b:67:80:5b:31:69: 65:c5:9e:49:e5:e8:a9:b6:c2:f9:c7:75:a7:fe:f1:d5:17:23: 77:31:c2:65:44:36:04:43:8c:6c:3d:b6:08:66:e9:07:fb:09: d3:da:b9:09:e0:55:3a:43:e6:27:f8:86:90:dd:c7:5c:d1:7b: ec:a7:0d:20:cd:ec:3c:6c:e4:42:11:0d:72:55:6a:ff:d3:92: d5:49:3f:cd:98:10:71:26:e9:56:50:fa:1f:a1:1f:fc:ae:23: d4:20:25:53:66:06:a1:7e:e5:96:0a:6a:03:10:e2:72:ef:81: de:27:a7:55:98:d7:88:d3:a5:90:fb:c9:b6:74:39:ec:e6:58: b5:6d:d5:ec:6b:f4:72:35:7d:08:8d:d9:3c:e9:4a:fe:b5:17: 97:89:af:af:90:f4:bc:dd:79:92:97:7a:59:08:25:ee:ee:81: 5b:14:64:bd:a3:dc:28:99:19:05:69:37:33:04:6a:29:33:6f: 92:ad:16:b2:7f:01:54:33:b2:0f:02:3d:7c:b7:80:4d:7a:a7: 52:ea:ab:3a:12:a9:7e:8b:5f:f0:b2:a2:34:7d:6b:23:e1:7e: 6c:36:41:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hSay35AHDomzgX8t0RPlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMTA5YmU1MGQ0MGUzMmIzZDUxNmZjMWViNzJlYWIzMmM1 ZTBiY2UwHhcNMjYwMTAyMTYyMzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDU3YTY1NDE4MWFmMTFlOGM1MzJlMjU2YjhhOWQ1ZDVlYjRlYTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP2g7B9RRD2kgY8My7ZFojXwelVq R+5XQMDdCJX14qvT11Mj7ATA4DW+yurzIYS2cIOqVo6jcozZKy5ZkxkVE3d35j4q fb2k8Xq2TePxAOszYFMC6zyQ6MTiBYfK76jE9a9mhWBw2s7MSmk5KqWJ4mcG/QKj 1QBKzWdNsUDD+NtR7rHkMvr9l4HJg4Zz/aJOu7jKJ5lg9y1STgqWwc6bxsEYftXK AyrKgW/Mz84q3p0YL2FVwyxKG3mdpFy3MuaL0bPcEZuK5hoxdrt9esri36AjeVio ZFWuG4qaltdjg7vgajjQgeAQqEa/WSaxzMK7xVfcnXT+FVoeg8q1YDY2AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEBXplQYGvEejFMuJWuKnV1etOpHMB8GA1UdIwQY MBaAFE0Qm+UNQOMrPVFvwety6rMsXgvOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFJDYjVRMUE0eXM5VVdfQjYzTHFzeXhlQzg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zNmViMzItOTVmYS00MmYzLThmZGYt YWI5NTMzNzcyMzM5LzEvUUZlbVZCZ2E4UjZNVXk0bGE0cWRYVjYwNmtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8zNmViMzItOTVmYS00MmYzLThmZGYtYWI5NTMzNzcyMzM5 LzEvVFJDYjVRMUE0eXM5VVdfQjYzTHFzeXhlQzg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHkIMA0G CSqGSIb3DQEBCwUAA4IBAQBYoEvdU3RmFklq3O21tW+b0KR2IywkCrimSdc60Vub Z4BbMWllxZ5J5eiptsL5x3Wn/vHVFyN3McJlRDYEQ4xsPbYIZukH+wnT2rkJ4FU6 Q+Yn+IaQ3cdc0Xvspw0gzew8bORCEQ1yVWr/05LVST/NmBBxJulWUPofoR/8riPU ICVTZgahfuWWCmoDEOJy74HeJ6dVmNeI06WQ+8m2dDns5li1bdXsa/RyNX0Ijdk8 6Ur+tReXia+vkPS83XmSl3pZCCXu7oFbFGS9o9womRkFaTczBGopM2+SrRayfwFU M7IPAj18t4BNeqdS6qs6Eql+i1/wsqI0fWsj4X5sNkFV -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:06 2026 by rpki-client