This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/qBtD45ePZxEyjY1Nf7recz2k_yw.roa File: qBtD45ePZxEyjY1Nf7recz2k_yw.roa (raw, json) Hash identifier: kT9/pn99SGeNgQXQuObDmYEjVZYsAnNFgF4HU4nZkQQ= Subject key identifier: A8:1B:43:E3:97:8F:67:11:32:8D:8D:4D:7F:BA:DE:73:3D:A4:FF:2C Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC84D155F4FDBCAC1E1C21B1DED38E2 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/qBtD45ePZxEyjY1Nf7recz2k_yw.roa Signing time: Thu 01 Jan 2026 18:18:25 +0000 ROA not before: Thu 01 Jan 2026 18:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 94.229.212.0/24 maxlen: 24 103.41.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:4d:15:5f:4f:db:ca:c1:e1:c2:1b:1d:ed:38:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a81b43e3978f6711328d8d4d7fbade733da4ff2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:be:2b:9b:52:28:69:e2:ff:db:59:da:89:b5: 7a:57:c2:75:53:b9:5c:b7:82:25:30:6b:f4:27:ec: 39:1f:92:84:a8:65:6d:15:54:4d:ad:cf:c1:d6:1a: 04:17:79:7f:f5:23:97:19:ef:f2:68:37:53:72:f2: a4:35:2b:3c:9c:9f:8d:1c:d0:f5:b9:0c:84:61:59: e8:54:92:8b:6c:0d:12:3d:93:12:20:58:aa:86:09: 2f:db:bb:6f:4f:08:75:ba:1a:e5:77:e2:1d:1b:01: 53:f8:e0:59:7c:dc:8b:75:de:50:ad:cb:c6:10:7d: 85:a6:9d:76:eb:d1:02:ed:ef:a9:f8:43:5f:de:56: 61:23:7d:bc:2e:a4:f4:8d:d4:48:34:45:b3:13:42: 8e:2f:33:b2:24:ce:03:d7:23:1b:40:68:43:c9:41: 25:f3:c1:a0:5d:8c:e4:b6:06:8e:16:67:d8:fe:3d: d9:f3:86:74:cb:24:b2:08:ef:8c:06:28:ad:37:85: 70:8f:66:3c:4d:e4:8a:d1:02:51:b5:ea:3a:49:0d: 6e:26:77:23:ef:34:c8:89:e8:da:2d:cb:86:2d:0d: c1:21:84:5f:6d:37:10:f2:e3:0c:ff:ea:28:9b:05: fd:ef:99:cd:6a:02:5c:46:c5:95:2a:82:4a:df:c1: 0e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1B:43:E3:97:8F:67:11:32:8D:8D:4D:7F:BA:DE:73:3D:A4:FF:2C X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/qBtD45ePZxEyjY1Nf7recz2k_yw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.229.212.0/24 103.41.46.0/23 Signature Algorithm: sha256WithRSAEncryption 70:c6:40:36:ef:c0:34:8c:25:2a:9f:10:94:a8:e3:cc:d0:a4: 74:84:3c:23:fd:ab:25:3a:60:1d:22:2d:90:35:72:e1:55:16: 86:46:bf:61:55:f7:58:2d:88:65:b0:e8:97:5e:44:29:94:d0: 26:28:7f:64:ee:1b:34:bf:3a:2a:50:c6:92:1e:b9:8e:51:ff: 4f:4a:9b:ba:9a:bc:45:67:dc:ba:e0:8c:7f:86:98:86:27:35: 3f:e0:de:a7:25:bf:c2:c5:38:eb:ee:a4:15:a8:65:78:3d:79: f1:38:4b:5d:fc:e4:1e:4b:75:d5:7d:11:84:36:8e:10:3b:69: d4:63:0f:ca:b6:88:2a:d4:7d:77:33:19:bd:21:e3:f9:0a:28: b1:12:ce:26:ad:9b:f0:20:4d:3b:c2:2d:27:a4:72:35:97:d9: df:a2:53:ad:37:f5:d1:7f:c6:1b:dc:a3:e5:11:3c:a9:44:48: ef:ef:26:f6:5c:ee:f3:11:c7:6c:87:0c:5f:5a:70:53:49:1e: 0b:03:1e:d2:b0:26:a6:51:db:65:33:8d:35:48:fc:a0:60:da: c7:f7:04:30:0e:ae:98:4a:4d:d9:b4:fa:13:cf:0b:b4:c5:23: 77:1d:e3:20:76:d9:74:48:88:a2:bb:3d:70:75:4c:29:0d:96: a8:9a:e3:b6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yE0VX0/bysHhwhsd7TjiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODFiNDNlMzk3OGY2NzExMzI4ZDhkNGQ3ZmJhZGU3MzNkYTRmZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7r4rm1IoaeL/21naibV6V8J1U7lc t4IlMGv0J+w5H5KEqGVtFVRNrc/B1hoEF3l/9SOXGe/yaDdTcvKkNSs8nJ+NHND1 uQyEYVnoVJKLbA0SPZMSIFiqhgkv27tvTwh1uhrld+IdGwFT+OBZfNyLdd5QrcvG EH2Fpp1269EC7e+p+ENf3lZhI328LqT0jdRINEWzE0KOLzOyJM4D1yMbQGhDyUEl 88GgXYzktgaOFmfY/j3Z84Z0yySyCO+MBiitN4Vwj2Y8TeSK0QJRteo6SQ1uJncj 7zTIiejaLcuGLQ3BIYRfbTcQ8uMM/+oomwX975nNagJcRsWVKoJK38EOSwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKgbQ+OXj2cRMo2NTX+63nM9pP8sMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvcUJ0RDQ1ZVBaeEV5alkxTmY3cmVjejJrX3l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXuXUAwQB ZykuMA0GCSqGSIb3DQEBCwUAA4IBAQBwxkA278A0jCUqnxCUqOPM0KR0hDwj/asl OmAdIi2QNXLhVRaGRr9hVfdYLYhlsOiXXkQplNAmKH9k7hs0vzoqUMaSHrmOUf9P Spu6mrxFZ9y64Ix/hpiGJzU/4N6nJb/CxTjr7qQVqGV4PXnxOEtd/OQeS3XVfRGE No4QO2nUYw/Ktogq1H13Mxm9IeP5CiixEs4mrZvwIE07wi0npHI1l9nfolOtN/XR f8Yb3KPlETypREjv7yb2XO7zEcdshwxfWnBTSR4LAx7SsCamUdtlM401SPygYNrH 9wQwDq6YSk3ZtPoTzwu0xSN3HeMgdtl0SIiiuz1wdUwpDZaomuO2 -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:23 2026 by rpki-client