This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/QfmBtp8KP7z9Jf5dlAT_B8Tard0.roa File: QfmBtp8KP7z9Jf5dlAT_B8Tard0.roa (raw, json) Hash identifier: uRY0F8qxF9a6vSVsKTRXDUbGyb6OveIKtipgP1G7Ly0= Subject key identifier: 41:F9:81:B6:9F:0A:3F:BC:FD:25:FE:5D:94:04:FF:07:C4:DA:AD:DD Certificate issuer: /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de Certificate serial: 019B7F154854EDAB34D2186E42C38338DCC5 Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/QfmBtp8KP7z9Jf5dlAT_B8Tard0.roa Signing time: Fri 02 Jan 2026 14:20:59 +0000 ROA not before: Fri 02 Jan 2026 14:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30766 IP address blocks: 86.62.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:48:54:ed:ab:34:d2:18:6e:42:c3:83:38:dc:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de Validity Not Before: Jan 2 14:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41f981b69f0a3fbcfd25fe5d9404ff07c4daaddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a8:98:a5:5c:89:71:f2:97:b3:24:f4:de:f0: 62:37:f8:60:f4:06:e7:97:37:a2:89:7f:b6:24:ea: e8:9c:61:02:0b:ff:a2:02:86:9c:3d:a3:99:cb:3e: 23:24:61:d2:6a:81:a3:af:d4:87:24:45:5f:bf:b9: 2b:72:8c:ab:01:e8:31:0d:75:ce:c8:c6:52:b4:25: 7f:d7:aa:f6:25:98:8b:33:95:40:ee:18:6b:bd:e5: 57:7c:0a:04:a6:ea:57:0e:24:a1:aa:78:eb:d7:b2: 0d:fc:09:70:f3:d0:98:ec:61:b3:c7:96:48:38:41: eb:d1:43:98:a6:cc:5d:72:23:4d:fb:ed:4a:12:b1: 7e:6f:52:6c:ee:17:80:23:e9:1a:a5:13:05:3c:ba: 6f:6a:11:1e:c1:a2:4d:9e:3f:6d:5e:df:08:c5:05: 91:a9:af:a4:f7:3d:96:70:8a:61:17:9e:d3:f1:6f: 5d:b6:6e:9b:fe:e9:81:61:41:d7:a4:d2:41:a2:60: a1:29:bd:8b:bc:f3:03:fd:d1:23:54:7e:ad:6f:54: 5e:b1:4f:21:09:28:90:21:06:25:62:e9:38:4c:7d: ed:2d:97:2f:54:2d:52:71:d6:4d:5a:83:fa:6b:99: 82:39:81:59:c9:95:0d:64:88:1a:86:68:74:29:0c: 36:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F9:81:B6:9F:0A:3F:BC:FD:25:FE:5D:94:04:FF:07:C4:DA:AD:DD X509v3 Authority Key Identifier: keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/QfmBtp8KP7z9Jf5dlAT_B8Tard0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.62.8.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:ab:5e:d3:0c:34:66:59:af:51:8d:d3:61:3e:bc:d1:7a:89: 0a:93:f0:25:6d:38:24:9b:a3:d8:f9:4b:7d:07:e5:4f:83:e5: 81:f0:ef:0c:53:f3:71:43:90:4b:98:1b:50:77:91:94:c5:41: cd:81:13:44:e6:b4:a7:a7:14:4c:19:b0:1e:8b:fd:47:34:d1: 4a:4e:c2:34:45:33:7a:76:7c:1a:7e:44:45:84:00:57:02:98: 3a:f9:e6:c2:b3:e0:0d:01:37:75:16:d3:f2:4c:02:0c:bc:32: d9:c7:ec:55:40:3f:09:d7:49:24:b1:c2:cc:57:58:cc:f9:07: f9:46:32:66:e1:12:bf:fb:0f:9f:5b:dd:41:4c:3b:42:2d:de: 3a:f6:c5:e7:35:fd:60:24:ba:7f:3e:26:f4:50:dd:96:18:1b: c6:fb:df:b1:ce:69:46:3a:53:53:69:4a:de:e0:ff:73:5c:75: f4:ed:d2:32:ba:45:6c:b8:3f:fc:20:61:44:ea:c4:6f:c7:2c: 86:03:38:08:6d:92:e9:16:09:bd:44:ab:1a:ae:26:be:b2:2c: 3b:89:a8:ec:5e:5b:fc:8f:7e:3b:e4:27:7b:ab:74:df:07:1c: b7:32:7d:88:6d:25:a7:3a:3a:69:88:f1:57:d6:83:a8:2d:ab: 05:9b:e6:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FUhU7as00hhuQsODONzFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMWZkMDA3ZGZmYTUwOGYzMDA2M2ZiZTRkNTNhMmIyZTFl OGM0ZGUwHhcNMjYwMTAyMTQyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWY5ODFiNjlmMGEzZmJjZmQyNWZlNWQ5NDA0ZmYwN2M0ZGFhZGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6iYpVyJcfKXsyT03vBiN/hg9Abn lzeiiX+2JOronGECC/+iAoacPaOZyz4jJGHSaoGjr9SHJEVfv7krcoyrAegxDXXO yMZStCV/16r2JZiLM5VA7hhrveVXfAoEpupXDiShqnjr17IN/Alw89CY7GGzx5ZI OEHr0UOYpsxdciNN++1KErF+b1Js7heAI+kapRMFPLpvahEewaJNnj9tXt8IxQWR qa+k9z2WcIphF57T8W9dtm6b/umBYUHXpNJBomChKb2LvPMD/dEjVH6tb1ResU8h CSiQIQYlYuk4TH3tLZcvVC1ScdZNWoP6a5mCOYFZyZUNZIgahmh0KQw2JwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEH5gbafCj+8/SX+XZQE/wfE2q3dMB8GA1UdIwQY MBaAFNwf0Aff+lCPMAY/vk1TorLh6MTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMt YWU0Yzk1Yzk0MDA1LzEvUWZtQnRwOEtQN3o5SmY1ZGxBVF9COFRhcmQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMtYWU0Yzk1Yzk0MDA1 LzEvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVj4IMA0G CSqGSIb3DQEBCwUAA4IBAQBvq17TDDRmWa9RjdNhPrzReokKk/AlbTgkm6PY+Ut9 B+VPg+WB8O8MU/NxQ5BLmBtQd5GUxUHNgRNE5rSnpxRMGbAei/1HNNFKTsI0RTN6 dnwafkRFhABXApg6+ebCs+ANATd1FtPyTAIMvDLZx+xVQD8J10kkscLMV1jM+Qf5 RjJm4RK/+w+fW91BTDtCLd469sXnNf1gJLp/Pib0UN2WGBvG+9+xzmlGOlNTaUre 4P9zXHX07dIyukVsuD/8IGFE6sRvxyyGAzgIbZLpFgm9RKsaria+siw7iajsXlv8 j3475Cd7q3TfBxy3Mn2IbSWnOjppiPFX1oOoLasFm+Yg -----END CERTIFICATE-----Generated at Tue Jan 27 08:30:41 2026 by rpki-client