This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/Qhj-dAw4UmH14cGcWPixT30vFoE.roa File: Qhj-dAw4UmH14cGcWPixT30vFoE.roa (raw, json) Hash identifier: JjCn/CEVqHRrx5g3GCN0ImneG9z/AYQZMRc57RLWwA8= Subject key identifier: 42:18:FE:74:0C:38:52:61:F5:E1:C1:9C:58:F8:B1:4F:7D:2F:16:81 Certificate issuer: /CN=eebe79d147882422ec275417dfd2affa93a02757 Certificate serial: 019B797DEA6C53B109B5E72C4629FEFFD832 Authority key identifier: EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/Qhj-dAw4UmH14cGcWPixT30vFoE.roa Signing time: Thu 01 Jan 2026 12:17:33 +0000 ROA not before: Thu 01 Jan 2026 12:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215076 IP address blocks: 193.8.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 15:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:ea:6c:53:b1:09:b5:e7:2c:46:29:fe:ff:d8:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebe79d147882422ec275417dfd2affa93a02757 Validity Not Before: Jan 1 12:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4218fe740c385261f5e1c19c58f8b14f7d2f1681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:de:a6:4d:5c:18:6b:44:aa:db:89:29:94:67: e3:3d:75:1c:f2:88:b0:21:2f:21:1e:62:d8:2f:bd: 5c:fc:d5:44:c0:c0:1e:b8:bb:6a:e0:15:6f:1a:ac: 26:81:23:68:bf:d8:1a:9a:e5:1a:38:00:c8:73:5e: a0:f3:7d:3f:44:8e:b5:b5:28:14:af:12:44:76:5b: cd:35:63:34:a0:3c:ee:cf:66:18:b4:db:65:eb:0e: 04:67:50:d4:71:44:ac:ba:27:47:1e:6e:ea:b3:f7: 71:ec:95:32:36:e7:c7:05:4c:93:92:e7:fd:92:8d: d5:fa:47:29:90:27:6d:cd:15:16:d9:42:c5:c0:3f: 51:6b:24:56:9c:b7:a7:2e:b3:8e:2b:b3:08:56:6b: ac:b0:cc:2a:78:01:6d:61:b0:7c:df:d5:61:b7:0f: b2:bf:1b:fd:79:5c:42:92:72:86:dd:8d:7d:e4:d3: 7d:9a:d0:bf:d5:18:b4:1e:07:ab:be:e7:93:b2:4f: ef:c4:69:43:5c:95:ba:0b:05:f8:74:f9:1c:94:9f: cc:60:cd:92:bc:4f:42:a7:f2:b0:a0:9e:71:9e:9d: b8:fd:c1:cf:c7:cd:cf:65:fa:b5:72:29:57:0f:84: 14:26:bd:36:9f:34:11:27:1c:16:89:b6:9b:76:ef: 01:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:18:FE:74:0C:38:52:61:F5:E1:C1:9C:58:F8:B1:4F:7D:2F:16:81 X509v3 Authority Key Identifier: keyid:EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/Qhj-dAw4UmH14cGcWPixT30vFoE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.72.0/24 Signature Algorithm: sha256WithRSAEncryption 10:ac:f2:04:10:08:99:9e:8a:6d:35:a7:a2:6d:01:f7:a7:f6: f8:f4:56:b0:2d:81:32:83:6d:95:57:91:8e:06:f3:7a:2c:18: d4:59:26:dc:90:75:06:87:ec:45:4b:c2:eb:ba:dc:05:eb:bc: 0b:55:59:30:bd:b5:2f:cd:b5:4f:d5:f5:15:7a:e0:1f:1d:b3: 51:96:4a:cc:e7:21:b3:ae:cb:54:cc:13:a2:a3:9c:f0:13:d6: 32:84:a2:40:f6:76:0b:db:23:38:a5:ce:f7:27:90:fd:a6:7e: c5:82:c0:d1:d7:90:0c:17:81:1f:91:1c:02:3a:70:f1:3e:cd: bd:f4:81:fc:ab:e5:28:19:f1:75:e9:bd:23:03:1f:01:76:6f: 97:eb:eb:ba:85:24:cc:a8:c1:b6:e5:51:6b:ed:ce:56:1d:0b: a4:02:76:f7:45:a1:2e:05:34:41:2a:4e:d3:01:cc:41:6e:11: 9f:c7:6c:04:75:da:0b:2c:7d:a3:98:f2:7a:dd:12:b9:7a:78: 8b:c2:75:a9:03:f9:44:bb:fe:95:f1:7f:52:cc:6c:5b:71:a1: 6a:ee:55:94:b6:74:b4:dc:7d:c5:21:e4:d7:41:72:4c:ca:2b: 5e:fd:1a:6c:85:61:5d:1f:58:71:a1:42:e0:b9:7a:53:b2:69: 0d:63:0e:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fepsU7EJtecsRin+/9gyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmU3OWQxNDc4ODI0MjJlYzI3NTQxN2RmZDJhZmZhOTNh MDI3NTcwHhcNMjYwMTAxMTIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjE4ZmU3NDBjMzg1MjYxZjVlMWMxOWM1OGY4YjE0ZjdkMmYxNjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA296mTVwYa0Sq24kplGfjPXUc8oiw IS8hHmLYL71c/NVEwMAeuLtq4BVvGqwmgSNov9gamuUaOADIc16g830/RI61tSgU rxJEdlvNNWM0oDzuz2YYtNtl6w4EZ1DUcUSsuidHHm7qs/dx7JUyNufHBUyTkuf9 ko3V+kcpkCdtzRUW2ULFwD9RayRWnLenLrOOK7MIVmussMwqeAFtYbB839Vhtw+y vxv9eVxCknKG3Y195NN9mtC/1Ri0HgervueTsk/vxGlDXJW6CwX4dPkclJ/MYM2S vE9Cp/KwoJ5xnp24/cHPx83PZfq1cilXD4QUJr02nzQRJxwWibabdu8B6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEIY/nQMOFJh9eHBnFj4sU99LxaBMB8GA1UdIwQY MBaAFO6+edFHiCQi7CdUF9/Sr/qToCdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3I1NTBVZUlKQ0xzSjFRWDM5S3YtcE9nSjFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jNDRiN2YtNWJjZC00ZWU3LTg3MTIt Mzg4MjNjMTQ0OWFmLzEvUWhqLWRBdzRVbUgxNGNHY1dQaXhUMzB2Rm9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9jNDRiN2YtNWJjZC00ZWU3LTg3MTItMzg4MjNjMTQ0OWFm LzEvN3I1NTBVZUlKQ0xzSjFRWDM5S3YtcE9nSjFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQhIMA0G CSqGSIb3DQEBCwUAA4IBAQAQrPIEEAiZnoptNaeibQH3p/b49FawLYEyg22VV5GO BvN6LBjUWSbckHUGh+xFS8LrutwF67wLVVkwvbUvzbVP1fUVeuAfHbNRlkrM5yGz rstUzBOio5zwE9YyhKJA9nYL2yM4pc73J5D9pn7FgsDR15AMF4EfkRwCOnDxPs29 9IH8q+UoGfF16b0jAx8Bdm+X6+u6hSTMqMG25VFr7c5WHQukAnb3RaEuBTRBKk7T AcxBbhGfx2wEddoLLH2jmPJ63RK5eniLwnWpA/lEu/6V8X9SzGxbcaFq7lWUtnS0 3H3FIeTXQXJMyite/RpshWFdH1hxoULguXpTsmkNYw7Z -----END CERTIFICATE-----Generated at Tue Feb 3 22:50:29 2026 by rpki-client