This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/nQD1CGA0fFxqB5jFdVE9KyClo5c.roa File: nQD1CGA0fFxqB5jFdVE9KyClo5c.roa (raw, json) Hash identifier: 14Z5xwdLDF0hr7ZlyjxAbNr7/dynl3kWmXO/VVy34xQ= Subject key identifier: 9D:00:F5:08:60:34:7C:5C:6A:07:98:C5:75:51:3D:2B:20:A5:A3:97 Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Certificate serial: 019B78353AAFC28AC069D2B74017137DCF38 Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/nQD1CGA0fFxqB5jFdVE9KyClo5c.roa Signing time: Thu 01 Jan 2026 06:18:32 +0000 ROA not before: Thu 01 Jan 2026 06:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133398 IP address blocks: 79.141.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:3a:af:c2:8a:c0:69:d2:b7:40:17:13:7d:cf:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Validity Not Before: Jan 1 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d00f50860347c5c6a0798c575513d2b20a5a397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a7:70:4c:0f:4b:41:fe:2f:4b:bd:47:de:07: 8c:ea:a9:c0:50:4e:7c:d1:3e:aa:c4:60:4f:e0:ad: 13:c5:d0:d6:73:38:ce:b3:ea:90:56:74:68:cb:48: ec:fb:ab:70:f2:c0:18:a2:7f:ec:2d:d5:6d:18:05: f8:ca:fd:21:d0:55:ee:b2:4a:0a:c9:15:3a:d7:3e: 13:ff:9f:82:13:55:5c:53:95:a9:f0:07:1f:e2:eb: 73:be:b3:b0:96:f6:fd:fe:98:2c:86:d3:d7:89:83: 3d:00:8d:59:de:d5:5e:89:81:a5:c9:2d:bd:cd:66: 04:0c:57:de:92:cc:01:b0:49:27:83:92:e5:98:18: a3:26:e5:b6:a6:c4:30:f5:d6:80:0e:5c:d4:e7:6d: 62:4d:a3:4d:c5:4f:4d:7f:34:0f:34:5c:ba:90:56: 09:d1:df:b8:35:34:eb:28:c4:4f:f7:c1:0f:d5:45: 15:16:d4:ce:c2:17:3c:ba:90:a1:1d:23:8d:32:23: e4:64:f3:46:55:80:7a:2e:ba:df:6a:35:af:3b:56: c4:e4:2f:46:59:dc:25:22:42:31:3d:b5:58:5a:6f: d5:97:17:e9:aa:bf:98:31:30:6f:78:81:6c:76:07: d6:7e:bd:f3:2d:cf:36:2b:4a:c3:95:f9:6d:60:8f: b5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:00:F5:08:60:34:7C:5C:6A:07:98:C5:75:51:3D:2B:20:A5:A3:97 X509v3 Authority Key Identifier: keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/nQD1CGA0fFxqB5jFdVE9KyClo5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.141.168.0/23 Signature Algorithm: sha256WithRSAEncryption 12:0b:32:82:99:54:5e:ca:fc:4e:a8:13:d8:d5:21:45:6c:58: 7f:75:bf:2e:59:cb:ce:25:44:a4:79:c6:b6:4b:5d:76:e1:04: 02:50:56:27:79:f0:8b:36:1e:7f:20:e4:41:5f:81:12:f2:87: 1b:ce:a3:b8:6e:74:55:07:dc:f6:6e:bb:53:5a:6b:97:69:4a: 5b:03:da:6f:87:0f:ab:ac:80:69:a0:17:d9:9f:61:30:3e:8a: dd:64:44:89:07:02:78:19:09:2e:73:ba:fd:0b:5c:bf:95:a2: a4:30:a4:0d:53:d6:d3:ee:14:19:09:df:7b:58:4d:64:f7:7f: b9:10:f4:c1:02:e8:bd:8d:26:58:d5:69:9f:ca:35:b3:9d:95: 3c:4b:34:1e:80:ff:d9:e7:ab:2f:87:a4:2b:83:95:61:53:5d: a3:c3:3f:6e:7a:ff:b0:f0:18:5f:a8:a9:22:8a:2c:bc:92:eb: 37:1e:e1:c4:de:c8:7d:dc:85:59:f9:6b:c7:7b:e2:55:b5:e0: 03:20:64:d4:ba:af:02:c5:ea:f2:86:3c:11:a8:53:48:d7:ca: 75:c8:42:80:8f:4e:f6:5d:55:98:25:4c:b7:8f:f7:0c:52:17: 8c:4a:a7:77:d2:75:14:b7:a7:7e:f8:6a:79:91:54:ff:7d:dd: 5d:97:2b:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NTqvworAadK3QBcTfc84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw NmE0YjgwHhcNMjYwMTAxMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDAwZjUwODYwMzQ3YzVjNmEwNzk4YzU3NTUxM2QyYjIwYTVhMzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmadwTA9LQf4vS71H3geM6qnAUE58 0T6qxGBP4K0TxdDWczjOs+qQVnRoy0js+6tw8sAYon/sLdVtGAX4yv0h0FXuskoK yRU61z4T/5+CE1VcU5Wp8Acf4utzvrOwlvb9/pgshtPXiYM9AI1Z3tVeiYGlyS29 zWYEDFfekswBsEkng5LlmBijJuW2psQw9daADlzU521iTaNNxU9NfzQPNFy6kFYJ 0d+4NTTrKMRP98EP1UUVFtTOwhc8upChHSONMiPkZPNGVYB6LrrfajWvO1bE5C9G WdwlIkIxPbVYWm/Vlxfpqr+YMTBveIFsdgfWfr3zLc82K0rDlfltYI+1DwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ0A9QhgNHxcageYxXVRPSsgpaOXMB8GA1UdIwQY MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt MzYyZmZlOGVlMjcwLzEvblFEMUNHQTBmRnhxQjVqRmRWRTlLeUNsbzVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBT42oMA0G CSqGSIb3DQEBCwUAA4IBAQASCzKCmVReyvxOqBPY1SFFbFh/db8uWcvOJUSkeca2 S1124QQCUFYnefCLNh5/IORBX4ES8ocbzqO4bnRVB9z2brtTWmuXaUpbA9pvhw+r rIBpoBfZn2EwPordZESJBwJ4GQkuc7r9C1y/laKkMKQNU9bT7hQZCd97WE1k93+5 EPTBAui9jSZY1WmfyjWznZU8SzQegP/Z56svh6Qrg5VhU12jwz9uev+w8BhfqKki iiy8kus3HuHE3sh93IVZ+WvHe+JVteADIGTUuq8CxeryhjwRqFNI18p1yEKAj072 XVWYJUy3j/cMUheMSqd30nUUt6d++Gp5kVT/fd1dlysr -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:02 2026 by rpki-client