This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/QFEuDeeu4X6RvqTM-9j-vL-jCec.roa File: QFEuDeeu4X6RvqTM-9j-vL-jCec.roa (raw, json) Hash identifier: enIY13X+DtKSJonUyur86EMN51RX0wJhm2ZaFev3lAE= Subject key identifier: 40:51:2E:0D:E7:AE:E1:7E:91:BE:A4:CC:FB:D8:FE:BC:BF:A3:09:E7 Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee Certificate serial: 019B791142F9BDB98ADE4084B880D8886301 Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/QFEuDeeu4X6RvqTM-9j-vL-jCec.roa Signing time: Thu 01 Jan 2026 10:18:52 +0000 ROA not before: Thu 01 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 145.8.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:42:f9:bd:b9:8a:de:40:84:b8:80:d8:88:63:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee Validity Not Before: Jan 1 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40512e0de7aee17e91bea4ccfbd8febcbfa309e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e3:34:3c:0b:25:3d:76:9c:1f:02:be:10:cb: 65:57:22:99:a7:01:c0:71:7b:72:c3:44:63:35:01: 28:44:4c:c7:01:ea:d6:7a:27:25:16:95:6a:e7:e8: c1:6d:1a:be:7e:d8:d5:3a:ca:08:c8:6d:16:f3:67: 20:29:3d:4e:4b:cb:2e:4e:71:92:d0:17:cf:63:45: da:4b:78:0e:16:61:32:52:70:c4:4a:48:3c:3d:0c: b1:98:d8:4a:ec:f1:4c:86:b4:26:75:b9:27:e6:a9: a9:cc:29:d4:58:d0:4c:25:94:e5:d5:0e:49:b3:2e: 3c:a9:2c:08:aa:a5:58:e6:2b:63:9b:6e:9c:67:01: 5e:14:04:da:3c:26:e5:38:6d:2d:c5:ca:28:71:0e: c7:97:16:dc:93:df:2f:49:32:52:0b:96:b6:31:03: 91:8b:8e:f2:31:18:08:d6:7a:fd:60:24:19:05:4d: 00:36:32:71:79:b0:cb:80:e3:51:43:6e:c8:dc:ca: 08:d0:67:f2:18:47:a8:ea:47:6b:78:3b:15:d9:4a: 71:aa:9a:b6:0b:79:46:4d:72:38:c7:2d:57:c9:99: 05:31:cd:f1:3d:35:e1:ab:cf:3f:5e:38:f9:8d:c4: 14:27:8b:74:31:90:c3:04:6d:58:ad:7d:89:0a:e8: 2a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:51:2E:0D:E7:AE:E1:7E:91:BE:A4:CC:FB:D8:FE:BC:BF:A3:09:E7 X509v3 Authority Key Identifier: keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/QFEuDeeu4X6RvqTM-9j-vL-jCec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.8.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1f:d1:fd:e3:e6:b4:f2:be:26:67:5e:bd:52:4d:77:63:75:c3: bc:22:09:c7:49:c8:c7:53:ee:75:37:4a:f8:d1:3e:7b:56:9d: 11:5d:f5:91:ba:43:d5:39:e4:c0:89:0f:f0:de:21:b5:60:9a: f0:1f:42:7e:59:82:8d:be:8f:95:70:fc:15:92:5c:15:0b:5b: ab:06:39:56:fb:1d:30:cd:19:c3:f2:2f:23:17:6e:22:22:c5: 81:e9:ff:47:af:18:9c:b7:e0:ad:67:df:d6:05:bd:ea:98:27: cf:9c:03:f4:d6:15:c4:84:43:8c:1c:25:f7:2b:fd:95:5f:fc: f6:36:2c:be:4c:49:43:42:3f:f9:bc:94:0d:6a:1e:34:71:f4: a3:7c:91:eb:9e:7c:5f:13:29:c2:eb:91:54:0a:94:a5:ba:47: e8:5b:cb:3d:80:c4:23:31:83:3d:ce:92:93:be:a3:4a:97:e9: a7:03:92:c6:3b:b1:d7:50:8f:1d:28:70:23:e4:69:71:dd:73: 55:f4:12:c0:aa:b5:22:40:2c:4d:d6:f1:9a:1e:93:78:c1:c6: de:c6:f9:39:17:87:db:f5:8f:b8:c2:eb:ab:cd:6e:92:49:b5: 11:0c:2e:e3:eb:42:5a:24:4c:48:30:48:94:9c:45:28:28:aa: 7d:63:f6:80 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt5EUL5vbmK3kCEuIDYiGMBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYjcxNDcxMzczYmIwNjAzYzM1NmVlZGVkNGI5MTgyOTJi NWJlZWUwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDUxMmUwZGU3YWVlMTdlOTFiZWE0Y2NmYmQ4ZmViY2JmYTMwOWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOM0PAslPXacHwK+EMtlVyKZpwHA cXtyw0RjNQEoREzHAerWeiclFpVq5+jBbRq+ftjVOsoIyG0W82cgKT1OS8suTnGS 0BfPY0XaS3gOFmEyUnDESkg8PQyxmNhK7PFMhrQmdbkn5qmpzCnUWNBMJZTl1Q5J sy48qSwIqqVY5itjm26cZwFeFATaPCblOG0txcoocQ7Hlxbck98vSTJSC5a2MQOR i47yMRgI1nr9YCQZBU0ANjJxebDLgONRQ27I3MoI0GfyGEeo6kdreDsV2Upxqpq2 C3lGTXI4xy1XyZkFMc3xPTXhq88/Xjj5jcQUJ4t0MZDDBG1YrX2JCugqhQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFEBRLg3nruF+kb6kzPvY/ry/ownnMB8GA1UdIwQY MBaAFN23FHE3O7BgPDVu7e1LkYKStb7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgt NjIxMmFjNDljYTNiLzEvUUZFdURlZXU0WDZSdnFUTS05ai12TC1qQ2VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgtNjIxMmFjNDljYTNi LzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkQgwDQYJ KoZIhvcNAQELBQADggEBAB/R/ePmtPK+JmdevVJNd2N1w7wiCcdJyMdT7nU3SvjR PntWnRFd9ZG6Q9U55MCJD/DeIbVgmvAfQn5Zgo2+j5Vw/BWSXBULW6sGOVb7HTDN GcPyLyMXbiIixYHp/0evGJy34K1n39YFveqYJ8+cA/TWFcSEQ4wcJfcr/ZVf/PY2 LL5MSUNCP/m8lA1qHjRx9KN8keuefF8TKcLrkVQKlKW6R+hbyz2AxCMxgz3OkpO+ o0qX6acDksY7sddQjx0ocCPkaXHdc1X0EsCqtSJALE3W8Zoek3jBxt7G+TkXh9v1 j7jC66vNbpJJtREMLuPrQlokTEgwSJScRSgoqn1j9oA= -----END CERTIFICATE-----Generated at Fri Jan 2 16:24:22 2026 by rpki-client