This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Qp331O64UTuQoLfYcCQVpN0-uPw.roa File: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (raw, json) Hash identifier: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80= Subject key identifier: 42:9D:F7:D4:EE:B8:51:3B:90:A0:B7:D8:70:24:15:A4:DD:3E:B8:FC Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B7A5B08A7AE69CAABA3F39AD446213FCE Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Qp331O64UTuQoLfYcCQVpN0-uPw.roa Signing time: Thu 01 Jan 2026 16:19:04 +0000 ROA not before: Thu 01 Jan 2026 16:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197787 IP address blocks: 217.114.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:08:a7:ae:69:ca:ab:a3:f3:9a:d4:46:21:3f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 1 16:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=429df7d4eeb8513b90a0b7d8702415a4dd3eb8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:97:45:65:a1:17:ae:fb:9d:b4:42:d5:d1:d8: 10:41:ed:1f:04:fe:b2:02:37:64:cc:40:79:dc:97: 65:f0:0c:8d:5e:52:66:19:55:4b:3c:dc:ff:5a:8a: 59:0f:f6:38:f5:e7:b9:6e:01:ce:76:15:ce:7d:93: fa:53:e8:1c:8d:03:bf:6e:f7:27:ad:49:60:e7:fb: 38:3e:70:23:48:fa:cf:58:bd:ff:a3:cf:11:d8:5f: 5b:10:48:64:79:6a:e9:7f:73:3e:b5:9c:27:bb:f3: 49:d4:e4:4c:4a:45:4a:75:53:d7:4c:ce:fb:01:09: 4f:0a:b9:ab:97:53:f5:2f:06:22:93:61:29:53:2f: d2:36:fe:32:e7:64:3b:a2:4c:a2:ab:ac:c0:ca:e9: e1:59:55:1f:bd:b2:8d:4a:04:d2:b8:a4:3f:4a:b1: 6c:72:ad:b8:c7:da:c3:64:c2:e0:38:bc:6e:c6:99: 88:6b:30:ab:0f:9f:f1:6a:a0:54:d9:24:c1:77:a7: b0:26:7f:1e:1c:60:de:64:17:5d:66:ce:4b:8d:eb: 09:ea:b6:80:40:6f:64:10:18:f3:ac:58:f3:90:cc: 90:06:b7:4b:45:05:2f:4d:93:64:10:24:ef:d0:81: 65:f5:27:f1:a3:6a:33:9c:78:62:d5:fe:44:74:df: 41:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9D:F7:D4:EE:B8:51:3B:90:A0:B7:D8:70:24:15:A4:DD:3E:B8:FC X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Qp331O64UTuQoLfYcCQVpN0-uPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.114.46.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:65:11:c7:8c:5d:61:79:8f:cf:02:d5:16:47:3f:e3:b3:74: c4:c3:d5:cf:92:fe:88:45:3c:d3:4e:83:86:71:8c:c3:b5:90: fb:60:25:51:e2:b1:4e:ff:82:43:36:c8:91:a5:26:30:85:cf: 92:6a:ed:d7:9c:31:dc:6a:5f:59:0d:23:8b:4a:60:72:c4:fd: 90:3c:1f:0b:88:2a:9d:63:cb:41:91:79:7c:38:d2:e8:2e:74: a3:2d:5b:6f:cf:a3:17:d4:ca:f0:9f:ff:4c:1f:b7:d0:7e:dd: ff:0d:80:10:b5:a8:b5:b4:ce:f8:68:89:70:e7:6d:1c:a8:bb: 9b:e7:9f:64:9b:33:2e:44:5e:64:2d:bf:9d:df:9d:69:1d:9b: 2b:76:61:1e:4c:8a:6b:84:4b:19:7e:c5:50:2b:29:22:60:9d: a9:ef:cf:56:6a:76:3d:65:d3:30:a9:0d:12:2a:f3:cf:8a:1f: 8f:02:e9:9a:1a:bb:90:4a:44:d6:ef:6a:d8:3d:38:06:e0:d5: b7:1a:35:bf:b4:01:71:3a:e9:3e:43:62:ef:ba:1b:49:59:01: e1:ae:0e:32:26:ba:a4:fc:93:d6:4c:af:3d:56:ee:98:0a:de: dc:06:de:32:e5:67:41:0f:e7:ba:36:24:a0:38:8d:6e:aa:0f: e1:b7:3d:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WwinrmnKq6PzmtRGIT/OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTAxMTYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjlkZjdkNGVlYjg1MTNiOTBhMGI3ZDg3MDI0MTVhNGRkM2ViOGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJdFZaEXrvudtELV0dgQQe0fBP6y AjdkzEB53Jdl8AyNXlJmGVVLPNz/WopZD/Y49ee5bgHOdhXOfZP6U+gcjQO/bvcn rUlg5/s4PnAjSPrPWL3/o88R2F9bEEhkeWrpf3M+tZwnu/NJ1ORMSkVKdVPXTM77 AQlPCrmrl1P1LwYik2EpUy/SNv4y52Q7okyiq6zAyunhWVUfvbKNSgTSuKQ/SrFs cq24x9rDZMLgOLxuxpmIazCrD5/xaqBU2STBd6ewJn8eHGDeZBddZs5LjesJ6raA QG9kEBjzrFjzkMyQBrdLRQUvTZNkECTv0IFl9Sfxo2oznHhi1f5EdN9BvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEKd99TuuFE7kKC32HAkFaTdPrj8MB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvUXAzMzFPNjRVVHVRb0xmWWNDUVZwTjAtdVB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XIuMA0G CSqGSIb3DQEBCwUAA4IBAQCNZRHHjF1heY/PAtUWRz/js3TEw9XPkv6IRTzTToOG cYzDtZD7YCVR4rFO/4JDNsiRpSYwhc+Sau3XnDHcal9ZDSOLSmByxP2QPB8LiCqd Y8tBkXl8ONLoLnSjLVtvz6MX1Mrwn/9MH7fQft3/DYAQtai1tM74aIlw520cqLub 559kmzMuRF5kLb+d351pHZsrdmEeTIprhEsZfsVQKykiYJ2p789WanY9ZdMwqQ0S KvPPih+PAumaGruQSkTW72rYPTgG4NW3GjW/tAFxOuk+Q2LvuhtJWQHhrg4yJrqk /JPWTK89Vu6YCt7cBt4y5WdBD+e6NiSgOI1uqg/htz2H -----END CERTIFICATE-----Generated at Mon Jan 5 13:06:17 2026 by rpki-client