This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/QQUsq5_bxMpaX0AgXCyLCGuNTIo.roa File: QQUsq5_bxMpaX0AgXCyLCGuNTIo.roa (raw, json) Hash identifier: Buoj/gVa9VpkIZHwN4cu0QEoROO7EbtKc1cRDJ64dfw= Subject key identifier: 41:05:2C:AB:9F:DB:C4:CA:5A:5F:40:20:5C:2C:8B:08:6B:8D:4C:8A Certificate issuer: /CN=c7872da032251bae0de510ac5ea6157e4e4e868a Certificate serial: 019B7BA3E0D0E5738B858BCBDFEA241B8F84 Authority key identifier: C7:87:2D:A0:32:25:1B:AE:0D:E5:10:AC:5E:A6:15:7E:4E:4E:86:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4ctoDIlG64N5RCsXqYVfk5Ohoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/QQUsq5_bxMpaX0AgXCyLCGuNTIo.roa Signing time: Thu 01 Jan 2026 22:18:15 +0000 ROA not before: Thu 01 Jan 2026 22:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39132 IP address blocks: 83.137.72.0/21 maxlen: 24 2a13:99c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.crl rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft rsync://rpki.ripe.net/repository/DEFAULT/x4ctoDIlG64N5RCsXqYVfk5Ohoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e0:d0:e5:73:8b:85:8b:cb:df:ea:24:1b:8f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7872da032251bae0de510ac5ea6157e4e4e868a Validity Not Before: Jan 1 22:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41052cab9fdbc4ca5a5f40205c2c8b086b8d4c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bf:84:d0:ca:47:76:9d:4d:79:fc:7a:72:c2: 9d:d6:94:5b:e5:f8:8f:4f:6c:93:ea:35:ae:bc:58: 2b:ad:80:ef:e5:5c:4e:91:94:ad:15:88:9a:e1:12: b7:71:63:75:e7:39:5a:85:95:ac:b3:04:69:80:ff: 12:fe:20:fe:50:c0:0c:b1:f3:f4:82:3e:03:b2:d8: df:cc:a6:9d:90:26:1c:64:6c:69:ca:a5:81:78:15: f2:ad:b5:e9:7e:9e:45:8e:11:74:42:65:4b:6e:ba: 56:27:84:9f:df:79:35:59:d5:a0:6f:56:93:65:78: a0:65:65:0e:3c:55:bb:cc:40:e5:e7:5f:2c:c9:cd: 4c:08:0c:6d:7b:59:5e:ce:3e:a6:ea:e5:44:0e:bd: c0:e3:22:26:b3:74:0b:56:64:8b:2b:ef:78:48:24: ef:e5:68:b5:57:66:b0:b1:2b:bd:95:ae:e8:cb:a1: 82:a4:3a:cf:da:b0:d4:2b:22:e0:c2:3d:60:13:10: 52:73:a2:c2:f3:e7:c7:9f:84:94:df:d6:85:5f:b3: 7c:5c:cb:57:db:b1:1a:db:4d:53:62:3d:b2:fa:fc: 39:a7:4d:91:bb:4c:be:fd:40:12:6d:35:b6:eb:43: 1e:34:2d:79:ab:e8:dc:82:b2:50:73:cb:94:38:73: 19:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:05:2C:AB:9F:DB:C4:CA:5A:5F:40:20:5C:2C:8B:08:6B:8D:4C:8A X509v3 Authority Key Identifier: keyid:C7:87:2D:A0:32:25:1B:AE:0D:E5:10:AC:5E:A6:15:7E:4E:4E:86:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4ctoDIlG64N5RCsXqYVfk5Ohoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/QQUsq5_bxMpaX0AgXCyLCGuNTIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.137.72.0/21 IPv6: 2a13:99c0::/29 Signature Algorithm: sha256WithRSAEncryption 97:81:f5:47:98:35:a3:2e:67:c0:b0:33:34:5f:9f:d8:c6:99: 7e:55:7c:cc:4d:60:b2:5e:60:ea:3c:de:b1:bc:07:86:12:46: c3:69:b4:31:a5:48:e2:6e:5e:99:a8:14:b7:18:e6:59:42:64: ce:a7:2b:39:8d:dd:1d:30:be:20:d1:16:75:9b:57:60:76:7a: fe:a6:66:62:d8:30:3f:25:44:e5:e5:e0:ce:d4:01:43:42:40: 9e:22:aa:0c:c5:67:37:bc:12:4b:24:ce:d7:cd:88:41:2a:d4: c8:9d:cb:fa:a1:0a:84:2e:a7:8d:42:cb:f4:ac:6f:db:90:09: 0c:5c:ae:cc:79:dc:84:3f:be:14:ed:3e:b0:4c:05:4f:84:68: 60:76:d7:07:9c:b0:9a:c4:06:76:11:83:d8:6c:ba:1d:91:8d: 6b:94:57:9e:1f:e0:a4:9b:98:3e:e1:b5:87:1d:9d:d6:17:16: 15:21:5c:ef:67:b0:b6:6f:a9:64:f0:16:23:1a:ec:1d:49:3c: 68:f4:f7:c6:3a:96:46:67:00:06:be:4b:34:70:41:23:fc:d2: 1d:58:5f:f0:6d:77:65:df:a9:e1:44:8b:6f:46:39:fb:9b:19: a7:cb:28:98:69:69:17:d3:e6:5f:0b:84:27:a0:54:52:5b:f8: 61:9f:ee:e2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7o+DQ5XOLhYvL3+okG4+EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ODcyZGEwMzIyNTFiYWUwZGU1MTBhYzVlYTYxNTdlNGU0 ZTg2OGEwHhcNMjYwMTAxMjIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTA1MmNhYjlmZGJjNGNhNWE1ZjQwMjA1YzJjOGIwODZiOGQ0YzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7+E0MpHdp1Nefx6csKd1pRb5fiP T2yT6jWuvFgrrYDv5VxOkZStFYia4RK3cWN15zlahZWsswRpgP8S/iD+UMAMsfP0 gj4DstjfzKadkCYcZGxpyqWBeBXyrbXpfp5FjhF0QmVLbrpWJ4Sf33k1WdWgb1aT ZXigZWUOPFW7zEDl518syc1MCAxte1lezj6m6uVEDr3A4yIms3QLVmSLK+94SCTv 5Wi1V2awsSu9la7oy6GCpDrP2rDUKyLgwj1gExBSc6LC8+fHn4SU39aFX7N8XMtX 27Ea201TYj2y+vw5p02Ru0y+/UASbTW260MeNC15q+jcgrJQc8uUOHMZvQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEEFLKuf28TKWl9AIFwsiwhrjUyKMB8GA1UdIwQY MBaAFMeHLaAyJRuuDeUQrF6mFX5OToaKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDRjdG9ESWxHNjRONVJDc1hxWVZmazVPaG9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85ZTNlMTYtNjkxNi00Y2E0LWI2Y2Qt YTllNGE3ZGRmZTU5LzEvUVFVc3E1X2J4TXBhWDBBZ1hDeUxDR3VOVElvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS85ZTNlMTYtNjkxNi00Y2E0LWI2Y2QtYTllNGE3ZGRmZTU5 LzEveDRjdG9ESWxHNjRONVJDc1hxWVZmazVPaG9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDU4lIMA0E AgACMAcDBQMqE5nAMA0GCSqGSIb3DQEBCwUAA4IBAQCXgfVHmDWjLmfAsDM0X5/Y xpl+VXzMTWCyXmDqPN6xvAeGEkbDabQxpUjibl6ZqBS3GOZZQmTOpys5jd0dML4g 0RZ1m1dgdnr+pmZi2DA/JUTl5eDO1AFDQkCeIqoMxWc3vBJLJM7XzYhBKtTIncv6 oQqELqeNQsv0rG/bkAkMXK7MedyEP74U7T6wTAVPhGhgdtcHnLCaxAZ2EYPYbLod kY1rlFeeH+Ckm5g+4bWHHZ3WFxYVIVzvZ7C2b6lk8BYjGuwdSTxo9PfGOpZGZwAG vks0cEEj/NIdWF/wbXdl36nhRItvRjn7mxmnyyiYaWkX0+ZfC4QnoFRSW/hhn+7i -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:43 2026 by rpki-client