This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/Q3icqhJs5qAyA3hER2hkXKmmVkg.roa File: Q3icqhJs5qAyA3hER2hkXKmmVkg.roa (raw, json) Hash identifier: Vd3hohE6ub6CWkSKlO/X8MF+gU7dSgWfrpJ+oaxmW9o= Subject key identifier: 43:78:9C:AA:12:6C:E6:A0:32:03:78:44:47:68:64:5C:A9:A6:56:48 Certificate issuer: /CN=68639a21759796fe3a1d919f9b5737eb68d708e4 Certificate serial: 019B7AC883461FB1F6F5C07342DF2B72EDFC Authority key identifier: 68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/Q3icqhJs5qAyA3hER2hkXKmmVkg.roa Signing time: Thu 01 Jan 2026 18:18:39 +0000 ROA not before: Thu 01 Jan 2026 18:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30936 IP address blocks: 82.116.32.0/19 maxlen: 19 82.116.63.0/24 maxlen: 24 87.238.232.0/21 maxlen: 21 185.39.116.0/22 maxlen: 22 2a01:4420::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:83:46:1f:b1:f6:f5:c0:73:42:df:2b:72:ed:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68639a21759796fe3a1d919f9b5737eb68d708e4 Validity Not Before: Jan 1 18:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43789caa126ce6a0320378444768645ca9a65648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:48:bc:2e:88:0b:18:b7:14:1c:d8:5c:a7:65: 5b:9d:ac:56:e8:6f:a2:95:6a:14:b2:90:34:bb:75: 65:45:6f:6b:37:77:94:53:e3:18:9f:0e:75:83:2c: 04:3f:68:84:e6:f9:d1:79:b6:e2:18:08:34:c9:0b: 16:d3:64:7a:e3:8e:a6:3a:ef:f1:2f:be:21:1a:97: c1:85:0c:b3:78:7c:e0:7e:be:86:f8:23:54:6c:91: 4a:8a:54:b9:cd:24:d7:68:cf:7d:df:0e:83:28:59: e6:97:f7:eb:15:d0:81:2a:0c:38:f8:81:0c:0f:57: 26:5d:0a:cd:23:dd:48:99:ff:8e:dc:e0:fb:92:f0: 70:46:cc:14:1a:30:cd:3d:eb:a8:e1:63:e3:f0:58: 31:78:6a:ea:c5:69:ee:82:95:b7:9a:fb:c6:37:02: 27:7f:43:60:a2:d5:2d:8b:5a:1c:21:3b:ca:da:5a: c1:98:79:8b:52:7a:a7:e9:34:6d:2f:3f:2c:53:7c: 52:5d:f7:2f:24:a7:df:38:fe:5a:4d:50:3c:0b:01: 24:bf:52:d5:4c:70:09:99:13:31:1d:9e:a0:f0:67: 61:9f:51:92:e7:1b:1b:79:bd:35:8b:9c:31:0f:28: 2a:f2:7e:c0:a0:fc:aa:b9:fa:37:0c:dd:61:08:3e: 03:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:78:9C:AA:12:6C:E6:A0:32:03:78:44:47:68:64:5C:A9:A6:56:48 X509v3 Authority Key Identifier: keyid:68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/Q3icqhJs5qAyA3hER2hkXKmmVkg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.116.32.0/19 87.238.232.0/21 185.39.116.0/22 IPv6: 2a01:4420::/32 Signature Algorithm: sha256WithRSAEncryption 93:8f:f0:ad:63:44:49:40:bb:e3:38:aa:b7:08:18:46:cf:7d: 30:1f:6e:f9:6e:ef:29:a3:63:0c:9f:fa:e4:17:98:45:52:e5: 53:c5:b0:98:db:59:8a:b2:c6:a8:fc:fc:e1:08:4e:66:bf:3b: 25:9e:39:18:c6:9d:3b:3e:77:2f:c1:3a:e9:d3:dc:75:ca:2b: 5b:12:82:d7:85:a4:3d:56:74:87:e6:b1:c7:34:e3:49:ce:78: 76:20:9e:0b:35:84:f2:b9:5c:f0:21:2a:31:8a:4c:ac:9e:1f: 85:fb:de:3a:80:6f:18:13:3d:e3:c2:a8:d9:7a:ec:f5:34:eb: d6:92:4a:bd:49:ac:ce:81:50:a5:23:e8:9d:d4:0c:dc:b4:83: 72:0f:2a:48:b2:b5:01:a7:58:89:8c:ee:61:8f:9a:86:89:1e: 31:c5:4f:da:1d:b9:28:c7:d1:be:81:2c:84:86:f0:e8:6f:75: 6c:bd:61:dd:89:57:79:d1:06:ea:b3:b8:16:83:e1:7d:a6:2f: 7d:35:0c:7f:f0:0d:35:cd:73:58:5a:7d:21:da:33:99:b9:4b: f8:c4:f0:a0:f1:df:32:d5:fe:e7:87:60:b7:1c:c8:f3:7f:28: b5:d1:a5:07:c2:09:fa:31:93:b6:d9:6f:c8:b1:d2:cd:0b:d5: 55:e6:20:1c -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6yINGH7H29cBzQt8rcu38MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NjM5YTIxNzU5Nzk2ZmUzYTFkOTE5ZjliNTczN2ViNjhk NzA4ZTQwHhcNMjYwMTAxMTgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Mzc4OWNhYTEyNmNlNmEwMzIwMzc4NDQ0NzY4NjQ1Y2E5YTY1NjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ki8LogLGLcUHNhcp2VbnaxW6G+i lWoUspA0u3VlRW9rN3eUU+MYnw51gywEP2iE5vnRebbiGAg0yQsW02R6446mOu/x L74hGpfBhQyzeHzgfr6G+CNUbJFKilS5zSTXaM993w6DKFnml/frFdCBKgw4+IEM D1cmXQrNI91Imf+O3OD7kvBwRswUGjDNPeuo4WPj8FgxeGrqxWnugpW3mvvGNwIn f0NgotUti1ocITvK2lrBmHmLUnqn6TRtLz8sU3xSXfcvJKffOP5aTVA8CwEkv1LV THAJmRMxHZ6g8Gdhn1GS5xsbeb01i5wxDygq8n7AoPyqufo3DN1hCD4DjwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFEN4nKoSbOagMgN4REdoZFypplZIMB8GA1UdIwQY MBaAFGhjmiF1l5b+Oh2Rn5tXN+to1wjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUdPYUlYV1hsdjQ2SFpHZm0xYzM2MmpYQ09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lNTY4MTEtOTgwMS00NTk1LTg3ZTct MTNkMTY4ZDU5YjExLzEvUTNpY3FoSnM1cUF5QTNoRVIyaGtYS21tVmtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9lNTY4MTEtOTgwMS00NTk1LTg3ZTctMTNkMTY4ZDU5YjEx LzEvYUdPYUlYV1hsdjQ2SFpHZm0xYzM2MmpYQ09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFUnQgAwQD V+7oAwQCuSd0MA0EAgACMAcDBQAqAUQgMA0GCSqGSIb3DQEBCwUAA4IBAQCTj/Ct Y0RJQLvjOKq3CBhGz30wH275bu8po2MMn/rkF5hFUuVTxbCY21mKssao/PzhCE5m vzslnjkYxp07PncvwTrp09x1yitbEoLXhaQ9VnSH5rHHNONJznh2IJ4LNYTyuVzw ISoxikysnh+F+946gG8YEz3jwqjZeuz1NOvWkkq9SazOgVClI+id1AzctINyDypI srUBp1iJjO5hj5qGiR4xxU/aHbkox9G+gSyEhvDob3VsvWHdiVd50Qbqs7gWg+F9 pi99NQx/8A01zXNYWn0h2jOZuUv4xPCg8d8y1f7nh2C3HMjzfyi10aUHwgn6MZO2 2W/IsdLNC9VV5iAc -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:10 2026 by rpki-client