This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/QYcFCUvrty_eEw95bsUeyFFjK-c.roa File: QYcFCUvrty_eEw95bsUeyFFjK-c.roa (raw, json) Hash identifier: jbyRPBMO6AQ8+x+sL1BfcSXlfYOvQy8bP202dnbtn6o= Subject key identifier: 41:87:05:09:4B:EB:B7:2F:DE:13:0F:79:6E:C5:1E:C8:51:63:2B:E7 Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb Certificate serial: 019B797F0BE8D97549C579A01D46BCA80220 Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/QYcFCUvrty_eEw95bsUeyFFjK-c.roa Signing time: Thu 01 Jan 2026 12:18:47 +0000 ROA not before: Thu 01 Jan 2026 12:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8068 IP address blocks: 94.245.84.0/24 maxlen: 24 2a01:111:2003::/48 maxlen: 48 2a01:111:202c::/48 maxlen: 48 2a01:111:202d::/48 maxlen: 48 2a01:111:202e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 13:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:0b:e8:d9:75:49:c5:79:a0:1d:46:bc:a8:02:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb Validity Not Before: Jan 1 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=418705094bebb72fde130f796ec51ec851632be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bb:fe:5f:23:bf:eb:4e:d9:a8:5c:4a:3a:46: e6:38:82:79:19:23:03:af:db:bf:f3:e1:ff:ce:fc: 62:00:b9:f3:f1:33:ca:c1:0e:f4:45:be:22:09:8b: ac:1e:95:f6:34:2b:3e:60:3b:23:3f:a7:40:86:80: 3d:af:3f:8a:b7:c7:50:e0:32:5c:16:87:93:9c:38: c5:7b:78:e1:4a:1c:f4:24:78:95:bd:7a:a2:8b:48: 57:2f:00:17:79:f0:07:87:36:03:df:6e:b9:71:04: 54:51:2f:ce:75:c8:1e:e2:bd:95:24:85:d3:0e:c3: 12:e9:eb:f3:3e:60:fd:61:fe:9c:21:0a:41:f1:40: b5:69:01:d3:e3:8d:32:a1:f2:18:5c:9e:91:75:2f: 19:ce:06:19:62:45:9c:ef:98:17:48:a5:67:18:2b: a4:96:89:6b:c4:8a:8d:d0:35:65:67:1e:ef:45:bd: 4b:dc:b5:c5:85:75:99:46:51:6d:1c:62:85:83:15: e5:70:a2:10:76:33:38:21:f0:2c:24:67:f3:39:7e: ab:da:6e:a6:f7:ec:8d:8c:66:07:98:83:f0:99:f2: 6b:24:a9:68:d8:0e:29:d9:6f:b8:1c:24:9e:22:4a: b6:cf:63:fd:a7:f1:31:1e:e0:5b:76:d5:ed:c2:0c: 43:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:87:05:09:4B:EB:B7:2F:DE:13:0F:79:6E:C5:1E:C8:51:63:2B:E7 X509v3 Authority Key Identifier: keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/QYcFCUvrty_eEw95bsUeyFFjK-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.245.84.0/24 IPv6: 2a01:111:2003::/48 2a01:111:202c::-2a01:111:202e:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 02:76:a4:56:79:43:9d:14:f0:a7:b4:27:39:99:cc:fd:8d:a3: ad:88:1e:d3:ff:2e:91:80:76:11:a5:03:6b:8d:a3:64:b0:b3: dc:87:8e:2d:98:5a:ad:8f:b2:79:82:33:e1:24:95:12:6e:c1: ce:77:34:62:a3:c2:b0:6b:98:7e:90:47:66:6f:ac:56:35:68: ee:74:29:8f:a1:df:75:07:b4:1e:52:f4:56:74:1e:7c:2c:5a: 34:39:67:14:a1:18:39:df:90:c8:09:97:7a:88:ad:02:3a:3a: 8f:48:3d:89:4e:ad:6e:47:c0:e5:f1:a4:c4:2a:79:d0:88:7e: 14:b9:1c:c9:ad:4e:64:fa:17:ef:87:54:00:08:05:39:c2:1b: 70:2a:fd:f0:b9:0d:6c:ee:c7:27:3b:e5:b4:6f:84:5e:5a:56: 01:36:28:d6:e6:ce:a5:c6:5e:25:17:53:d0:83:a8:ee:55:31: 3c:34:87:bf:05:49:77:ac:0e:c4:96:c0:26:60:dc:c1:89:5f: bc:c5:96:39:83:08:c5:fe:bd:78:c9:c3:27:7d:23:2b:0f:e1: f4:25:79:4c:ae:7b:81:ed:fb:fa:81:3a:9b:f0:02:c6:ac:bc: 6e:0a:59:dc:99:9b:c7:57:bf:8f:44:0c:eb:15:cb:df:07:4e: 17:5b:1e:da -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt5fwvo2XVJxXmgHUa8qAIgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZTY4ZGFmNWYwODk0NTZjMGUxZDAyMjQ1MzkzNTMxYWM1 YjhmY2IwHhcNMjYwMTAxMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTg3MDUwOTRiZWJiNzJmZGUxMzBmNzk2ZWM1MWVjODUxNjMyYmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLv+XyO/607ZqFxKOkbmOIJ5GSMD r9u/8+H/zvxiALnz8TPKwQ70Rb4iCYusHpX2NCs+YDsjP6dAhoA9rz+Kt8dQ4DJc FoeTnDjFe3jhShz0JHiVvXqii0hXLwAXefAHhzYD3265cQRUUS/Odcge4r2VJIXT DsMS6evzPmD9Yf6cIQpB8UC1aQHT440yofIYXJ6RdS8ZzgYZYkWc75gXSKVnGCuk lolrxIqN0DVlZx7vRb1L3LXFhXWZRlFtHGKFgxXlcKIQdjM4IfAsJGfzOX6r2m6m 9+yNjGYHmIPwmfJrJKlo2A4p2W+4HCSeIkq2z2P9p/ExHuBbdtXtwgxDUQIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFEGHBQlL67cv3hMPeW7FHshRYyvnMB8GA1UdIwQY MBaAFHzmja9fCJRWwOHQIkU5NTGsW4/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMt MTNhMDZhMjY5YWE4LzEvUVljRkNVdnJ0eV9lRXc5NWJzVWV5RkZqSy1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMtMTNhMDZhMjY5YWE4 LzEvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAMBAIAATAGAwQAXvVUMCME AgACMB0DBwAqAQERIAMwEgMHAioBAREgLAMHACoBAREgLjANBgkqhkiG9w0BAQsF AAOCAQEAAnakVnlDnRTwp7QnOZnM/Y2jrYge0/8ukYB2EaUDa42jZLCz3IeOLZha rY+yeYIz4SSVEm7Bznc0YqPCsGuYfpBHZm+sVjVo7nQpj6HfdQe0HlL0VnQefCxa NDlnFKEYOd+QyAmXeoitAjo6j0g9iU6tbkfA5fGkxCp50Ih+FLkcya1OZPoX74dU AAgFOcIbcCr98LkNbO7HJzvltG+EXlpWATYo1ubOpcZeJRdT0IOo7lUxPDSHvwVJ d6wOxJbAJmDcwYlfvMWWOYMIxf69eMnDJ30jKw/h9CV5TK57ge37+oE6m/ACxqy8 bgpZ3Jmbx1e/j0QM6xXL3wdOF1se2g== -----END CERTIFICATE-----Generated at Sun Jan 18 17:54:24 2026 by rpki-client