This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/QQg-EV4YSeTtW88liCvZE3JZJN4.roa File: QQg-EV4YSeTtW88liCvZE3JZJN4.roa (raw, json) Hash identifier: BlNIOZivnagMRQWrTBwPXmJaq1VIGQ1ABsuvUyI4XEE= Subject key identifier: 41:08:3E:11:5E:18:49:E4:ED:5B:CF:25:88:2B:D9:13:72:59:24:DE Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019B7E389F1A2EA36F19882AE6C65B46534F Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/QQg-EV4YSeTtW88liCvZE3JZJN4.roa Signing time: Fri 02 Jan 2026 10:19:58 +0000 ROA not before: Fri 02 Jan 2026 10:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133153 IP address blocks: 213.220.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9f:1a:2e:a3:6f:19:88:2a:e6:c6:5b:46:53:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jan 2 10:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41083e115e1849e4ed5bcf25882bd913725924de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:c7:ea:20:da:e2:50:04:52:2f:e7:06:60: 54:14:8f:9a:ca:3a:df:14:8e:e4:f0:bf:b3:35:8e: 68:c1:38:42:15:bb:c1:28:6f:7b:c3:e3:bc:1a:d1: f7:a8:5c:c5:04:e5:3b:e1:54:f8:ff:ea:a3:a5:ca: da:94:72:66:6b:b1:90:c2:7f:91:7b:65:79:38:27: 12:22:43:cc:5c:68:b3:d9:e6:66:9d:aa:05:ae:61: f6:f9:16:36:23:87:1c:34:d6:5d:aa:88:fd:7c:20: f9:ed:23:d2:b3:75:9f:83:2c:7f:d9:04:e1:cf:64: 4d:90:87:93:36:c2:33:6b:66:83:ad:b7:ad:f0:6e: 0a:37:b3:ae:07:a3:4a:e7:fc:69:d6:e2:49:72:5d: ce:38:fc:2b:d2:ae:85:c9:d0:dd:bf:07:22:47:20: 3f:ae:9e:3e:d5:bb:d8:e9:7d:ca:b3:b1:81:bc:f2: a7:ad:48:e0:51:2b:52:8a:bc:bc:ae:37:9f:72:3b: 86:cc:5a:43:d6:0c:ef:d3:0a:41:01:5d:ab:4d:be: 5b:ff:e9:69:91:06:ac:fd:5d:8e:41:f6:b8:f5:91: d5:58:c8:dd:84:b5:1f:4f:c7:8e:81:32:5a:e7:28: d8:56:ec:46:74:7f:a7:8e:ba:7e:46:06:be:ff:c2: 24:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:08:3E:11:5E:18:49:E4:ED:5B:CF:25:88:2B:D9:13:72:59:24:DE X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/QQg-EV4YSeTtW88liCvZE3JZJN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.220.62.0/24 Signature Algorithm: sha256WithRSAEncryption 54:8c:fd:b4:1b:d5:b3:03:fc:a0:8d:1c:9d:f0:1e:fe:47:b8: 33:5e:c6:52:8c:e8:38:9d:df:e8:ba:b6:72:df:11:28:c1:dd: 98:c5:29:cf:1a:57:f2:b3:ac:93:16:a4:22:a7:c3:bf:1b:3e: 4b:24:58:9b:58:5a:34:6e:b5:37:5b:aa:63:48:73:9b:ea:90: 35:b7:f2:65:08:57:ad:e6:2e:58:80:7d:5c:af:1c:11:06:4d: 1f:62:b2:0e:59:85:e3:b7:d7:a3:2b:18:9f:6e:71:ae:2f:db: e7:28:dc:b8:e5:8d:10:2f:73:7c:37:93:8c:e3:88:43:94:ca: 5e:b7:4a:13:d5:95:52:74:c6:db:26:b9:d7:bb:fa:f0:33:8f: 47:43:0d:d4:75:84:ff:ee:4d:cc:2b:97:18:91:b7:cf:f0:00: 9b:0d:be:53:08:d1:1f:82:46:26:82:38:3c:73:6d:72:4f:35: 43:9e:7d:fa:b7:44:f2:3e:1f:1f:97:39:67:89:d3:9d:cc:e7: 5c:03:41:7e:76:32:07:4e:0f:13:c2:5a:12:fe:fc:5e:a0:b5: 62:01:a3:95:11:01:f1:a0:89:5e:1c:61:5a:59:70:c3:f5:6a: 80:7d:71:19:ba:42:91:9f:5c:ba:59:33:e3:91:35:ff:92:49: d8:6b:3a:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJ8aLqNvGYgq5sZbRlNPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwMTAyMTAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTA4M2UxMTVlMTg0OWU0ZWQ1YmNmMjU4ODJiZDkxMzcyNTkyNGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB7H6iDa4lAEUi/nBmBUFI+ayjrf FI7k8L+zNY5owThCFbvBKG97w+O8GtH3qFzFBOU74VT4/+qjpcralHJma7GQwn+R e2V5OCcSIkPMXGiz2eZmnaoFrmH2+RY2I4ccNNZdqoj9fCD57SPSs3Wfgyx/2QTh z2RNkIeTNsIza2aDrbet8G4KN7OuB6NK5/xp1uJJcl3OOPwr0q6FydDdvwciRyA/ rp4+1bvY6X3Ks7GBvPKnrUjgUStSiry8rjefcjuGzFpD1gzv0wpBAV2rTb5b/+lp kQas/V2OQfa49ZHVWMjdhLUfT8eOgTJa5yjYVuxGdH+njrp+Rga+/8IklQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEEIPhFeGEnk7VvPJYgr2RNyWSTeMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvUVFnLUVWNFlTZVR0Vzg4bGlDdlpFM0paSk40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dw+MA0G CSqGSIb3DQEBCwUAA4IBAQBUjP20G9WzA/ygjRyd8B7+R7gzXsZSjOg4nd/ourZy 3xEowd2YxSnPGlfys6yTFqQip8O/Gz5LJFibWFo0brU3W6pjSHOb6pA1t/JlCFet 5i5YgH1crxwRBk0fYrIOWYXjt9ejKxifbnGuL9vnKNy45Y0QL3N8N5OM44hDlMpe t0oT1ZVSdMbbJrnXu/rwM49HQw3UdYT/7k3MK5cYkbfP8ACbDb5TCNEfgkYmgjg8 c21yTzVDnn36t0TyPh8flzlnidOdzOdcA0F+djIHTg8TwloS/vxeoLViAaOVEQHx oIleHGFaWXDD9WqAfXEZukKRn1y6WTPjkTX/kknYazo6 -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:56 2026 by rpki-client