This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/qVYl2gaC1o0QPGWKC8uPavjq7q4.roa File: qVYl2gaC1o0QPGWKC8uPavjq7q4.roa (raw, json) Hash identifier: N5USX4HmmcxvOGVDo+fCpGoOKoXPYdIuEyuWXJTwzwQ= Subject key identifier: A9:56:25:DA:06:82:D6:8D:10:3C:65:8A:0B:CB:8F:6A:F8:EA:EE:AE Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B79101F1DEFD57052A0C97CA756BE5513 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/qVYl2gaC1o0QPGWKC8uPavjq7q4.roa Signing time: Thu 01 Jan 2026 10:17:38 +0000 ROA not before: Thu 01 Jan 2026 10:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200435 IP address blocks: 46.37.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1f:1d:ef:d5:70:52:a0:c9:7c:a7:56:be:55:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a95625da0682d68d103c658a0bcb8f6af8eaeeae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:40:fc:c5:27:95:f1:65:b8:66:0c:98:f6:c9: 59:c3:56:5a:c5:67:5b:3a:ca:04:c7:5e:28:05:5d: 46:1a:03:bf:8c:47:87:b7:eb:43:22:51:73:d0:07: 34:9b:34:4e:83:b2:12:34:1e:07:25:7e:1a:3e:0c: 2e:3a:36:64:13:56:77:9e:0f:bd:1d:6d:5a:fd:9e: 64:43:00:bd:09:60:51:38:5b:a5:83:58:22:0f:58: 1e:b7:d0:5d:d0:75:9b:ae:fd:5a:31:2d:fc:8e:a5: 42:1d:6c:93:7f:93:04:e2:b7:fc:d3:86:0e:8f:d2: 7e:c1:dc:a7:a3:38:e5:3a:16:aa:33:0c:d6:c9:22: d0:31:15:62:ea:8c:c0:5b:3c:19:02:0d:20:b3:32: 87:4f:22:54:ed:1e:6f:90:9d:4c:84:44:06:21:36: 7e:9f:01:36:3a:28:f2:6e:87:82:ca:88:7d:c3:e2: 0e:9c:65:c9:60:a6:9c:ab:4c:f6:7d:80:ef:3a:95: a5:09:5c:0d:d1:77:b8:bb:cd:b6:d7:dc:e0:84:3b: 4f:00:88:e0:06:54:81:49:8c:ca:bf:d9:40:e7:e0: 38:52:26:79:bd:ec:b1:ab:b9:d7:84:81:0d:84:fb: c6:c4:46:c3:d2:b7:fe:01:4a:cc:11:73:47:06:c9: 6a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:56:25:DA:06:82:D6:8D:10:3C:65:8A:0B:CB:8F:6A:F8:EA:EE:AE X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/qVYl2gaC1o0QPGWKC8uPavjq7q4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.120.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:47:ff:65:b9:99:22:14:b3:ab:72:c0:32:fa:90:20:56:4b: 3e:92:c0:ce:f3:9d:06:73:76:c4:47:39:3c:5a:ae:a0:2c:44: cb:be:67:bf:eb:d2:7e:1a:af:4a:8d:14:31:08:be:96:fc:8b: a3:6e:d5:d1:6f:d8:ee:6c:57:20:b8:c4:9b:89:b6:7c:f4:c1: 2e:92:c9:94:a0:15:e0:99:37:94:6a:7c:02:a7:22:fb:12:89: e5:95:96:0e:30:07:73:ec:99:cd:29:a7:49:3a:0c:50:37:96: 00:4b:1a:ea:80:9e:15:39:9b:42:a6:26:7e:f2:f2:f6:41:0d: a8:b8:51:dd:e4:7e:5e:5e:44:8a:8a:82:4a:e7:b1:40:27:3a: 60:2e:93:3e:07:2e:71:a8:a4:52:74:83:c9:59:f9:97:f8:dc: 08:b0:c6:35:51:08:d9:0e:74:52:19:15:74:66:0f:91:00:d6: 59:03:1e:99:83:d1:22:50:48:c4:23:ed:98:b1:9e:06:39:00: 75:d7:15:fa:84:42:6d:c5:41:8d:47:a0:3a:90:30:a6:e5:ae: 89:2a:67:fa:c1:86:b1:10:be:0b:28:4a:9d:bd:d1:05:fa:74: d0:01:26:ef:c5:83:7e:99:59:5d:00:cb:86:88:10:69:6e:f2: 46:13:69:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EB8d79VwUqDJfKdWvlUTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTU2MjVkYTA2ODJkNjhkMTAzYzY1OGEwYmNiOGY2YWY4ZWFlZWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUD8xSeV8WW4ZgyY9slZw1ZaxWdb OsoEx14oBV1GGgO/jEeHt+tDIlFz0Ac0mzROg7ISNB4HJX4aPgwuOjZkE1Z3ng+9 HW1a/Z5kQwC9CWBROFulg1giD1get9Bd0HWbrv1aMS38jqVCHWyTf5ME4rf804YO j9J+wdynozjlOhaqMwzWySLQMRVi6ozAWzwZAg0gszKHTyJU7R5vkJ1MhEQGITZ+ nwE2OijyboeCyoh9w+IOnGXJYKacq0z2fYDvOpWlCVwN0Xe4u82219zghDtPAIjg BlSBSYzKv9lA5+A4UiZ5veyxq7nXhIENhPvGxEbD0rf+AUrMEXNHBslqjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKlWJdoGgtaNEDxligvLj2r46u6uMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvcVZZbDJnYUMxbzBRUEdXS0M4dVBhdmpxN3E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiV4MA0G CSqGSIb3DQEBCwUAA4IBAQAbR/9luZkiFLOrcsAy+pAgVks+ksDO850Gc3bERzk8 Wq6gLETLvme/69J+Gq9KjRQxCL6W/IujbtXRb9jubFcguMSbibZ89MEuksmUoBXg mTeUanwCpyL7EonllZYOMAdz7JnNKadJOgxQN5YASxrqgJ4VOZtCpiZ+8vL2QQ2o uFHd5H5eXkSKioJK57FAJzpgLpM+By5xqKRSdIPJWfmX+NwIsMY1UQjZDnRSGRV0 Zg+RANZZAx6Zg9EiUEjEI+2YsZ4GOQB11xX6hEJtxUGNR6A6kDCm5a6JKmf6wYax EL4LKEqdvdEF+nTQASbvxYN+mVldAMuGiBBpbvJGE2nO -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:00 2026 by rpki-client