This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/QkokzrYDGI69z71ocapb49HcmMw.roa File: QkokzrYDGI69z71ocapb49HcmMw.roa (raw, json) Hash identifier: BPEQLv+L5DDtagemk+MXVy03tCKM+xoA01OlIV162OU= Subject key identifier: 42:4A:24:CE:B6:03:18:8E:BD:CF:BD:68:71:AA:5B:E3:D1:DC:98:CC Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 019B78348058F7C5EB2060D6D64F1650E0CF Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/QkokzrYDGI69z71ocapb49HcmMw.roa Signing time: Thu 01 Jan 2026 06:17:45 +0000 ROA not before: Thu 01 Jan 2026 06:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 212.81.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:80:58:f7:c5:eb:20:60:d6:d6:4f:16:50:e0:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Jan 1 06:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=424a24ceb603188ebdcfbd6871aa5be3d1dc98cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0f:4b:c3:53:06:4b:38:95:ff:e8:fb:03:34: e9:5a:ce:b1:1d:22:4b:a8:9e:81:cf:f0:36:7c:c8: 00:8c:d9:3d:58:75:b3:77:e5:10:d6:d7:6e:ba:80: 56:fb:08:b1:67:89:70:f0:ed:27:78:f1:63:9a:1d: 48:7d:af:ca:1a:75:2e:39:e7:91:25:1a:c0:93:26: 6c:d9:45:ec:4d:4f:42:1a:07:81:d3:f0:70:4f:77: be:3c:83:15:fc:61:21:66:f1:5c:70:a6:e5:3c:cc: 9f:ed:43:96:2e:6f:cf:ff:1f:3d:47:34:f8:07:54: 64:75:05:da:e7:91:30:81:c8:5c:83:10:21:66:2c: ca:e2:9c:dc:98:be:de:92:43:a7:40:92:8c:af:42: 63:41:7b:50:05:58:25:b6:8b:07:39:c8:92:6c:23: a9:6b:b8:6c:af:40:b2:80:35:0d:73:19:b7:86:f5: e3:2c:8c:f8:1a:b0:a7:0b:e2:54:d3:ff:02:b0:a4: 8d:6a:02:04:ec:18:b2:f8:8e:e7:5f:89:91:a4:c3: 9b:31:53:95:50:ed:8c:99:71:05:d4:a2:f7:41:01: 52:2f:7b:d2:79:d1:1a:9d:06:32:0a:ad:59:e7:1b: 9c:5e:4c:e2:14:43:8e:f6:b9:ee:39:28:b4:0a:53: 38:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4A:24:CE:B6:03:18:8E:BD:CF:BD:68:71:AA:5B:E3:D1:DC:98:CC X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/QkokzrYDGI69z71ocapb49HcmMw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.81.47.0/24 Signature Algorithm: sha256WithRSAEncryption 86:43:f6:dd:bf:c3:27:47:43:3d:52:81:b1:f1:cf:20:1c:50: ab:01:d4:1f:14:f6:c2:dc:4e:df:b6:fc:3e:90:01:50:61:71: f9:4e:6f:c6:fa:4b:23:cb:af:f6:ff:10:6f:96:bf:e6:f8:95: bf:13:88:e8:6f:48:06:be:8b:cc:21:ff:67:65:9e:74:aa:10: 7c:df:6e:08:3d:14:d4:22:9d:e8:e1:22:bb:40:9f:2f:a7:3a: 3e:76:69:3d:7c:8b:5c:5f:1f:b3:2d:1e:64:9e:d6:2f:d4:20: 81:b7:76:b0:de:23:b7:53:79:22:d8:28:18:05:8a:2b:a8:de: cc:0d:75:31:20:0d:f5:d2:a7:b3:76:95:c9:74:56:2c:da:51: ee:20:1d:b8:06:3c:83:b7:7c:88:f1:d4:df:d9:06:b5:70:ea: 6e:bb:a7:94:4f:8b:97:86:41:e3:bc:85:02:40:ca:1a:a6:90: 36:5c:fc:c2:94:9d:b9:23:2c:9f:5e:0a:83:17:3b:e2:3b:a5: bb:9c:e0:52:b6:4f:97:18:3b:e0:dc:7b:28:33:76:6d:9d:2f: b7:71:1b:2a:f5:15:68:78:75:ee:79:6f:d7:30:5f:ee:db:d9: 1c:41:10:ba:33:f4:aa:3a:e9:bc:c5:ae:c4:e0:43:da:0b:bd: b4:1e:91:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NIBY98XrIGDW1k8WUODPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjYwMTAxMDYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjRhMjRjZWI2MDMxODhlYmRjZmJkNjg3MWFhNWJlM2QxZGM5OGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg9Lw1MGSziV/+j7AzTpWs6xHSJL qJ6Bz/A2fMgAjNk9WHWzd+UQ1tduuoBW+wixZ4lw8O0nePFjmh1Ifa/KGnUuOeeR JRrAkyZs2UXsTU9CGgeB0/BwT3e+PIMV/GEhZvFccKblPMyf7UOWLm/P/x89RzT4 B1RkdQXa55EwgchcgxAhZizK4pzcmL7ekkOnQJKMr0JjQXtQBVgltosHOciSbCOp a7hsr0CygDUNcxm3hvXjLIz4GrCnC+JU0/8CsKSNagIE7Biy+I7nX4mRpMObMVOV UO2MmXEF1KL3QQFSL3vSedEanQYyCq1Z5xucXkziFEOO9rnuOSi0ClM4ZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEJKJM62AxiOvc+9aHGqW+PR3JjMMB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvUWtva3pyWURHSTY5ejcxb2NhcGI0OUhjbU13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FEvMA0G CSqGSIb3DQEBCwUAA4IBAQCGQ/bdv8MnR0M9UoGx8c8gHFCrAdQfFPbC3E7ftvw+ kAFQYXH5Tm/G+ksjy6/2/xBvlr/m+JW/E4job0gGvovMIf9nZZ50qhB8324IPRTU Ip3o4SK7QJ8vpzo+dmk9fItcXx+zLR5kntYv1CCBt3aw3iO3U3ki2CgYBYorqN7M DXUxIA310qezdpXJdFYs2lHuIB24BjyDt3yI8dTf2Qa1cOpuu6eUT4uXhkHjvIUC QMoappA2XPzClJ25IyyfXgqDFzviO6W7nOBStk+XGDvg3HsoM3ZtnS+3cRsq9RVo eHXueW/XMF/u29kcQRC6M/SqOum8xa7E4EPaC720HpFb -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:18 2026 by rpki-client