This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9a234c-6512-4447-823c-0db7259f20b8/1/qjlzVUCaFQUZ4gX30tzeHb6m2Vc.roa File: qjlzVUCaFQUZ4gX30tzeHb6m2Vc.roa (raw, json) Hash identifier: O0FkDLh7vK3dEH2T/ZCf0yS5Z/Mux8DWSQvw+qcaVik= Subject key identifier: AA:39:73:55:40:9A:15:05:19:E2:05:F7:D2:DC:DE:1D:BE:A6:D9:57 Certificate issuer: /CN=848b1294d2769fa37b348acc5dabfcb8fe6f9998 Certificate serial: 019B7B36A345C018122E1F8A795016B2A27E Authority key identifier: 84:8B:12:94:D2:76:9F:A3:7B:34:8A:CC:5D:AB:FC:B8:FE:6F:99:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIsSlNJ2n6N7NIrMXav8uP5vmZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9a234c-6512-4447-823c-0db7259f20b8/1/qjlzVUCaFQUZ4gX30tzeHb6m2Vc.roa Signing time: Thu 01 Jan 2026 20:18:56 +0000 ROA not before: Thu 01 Jan 2026 20:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51524 IP address blocks: 178.213.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9a234c-6512-4447-823c-0db7259f20b8/1/hIsSlNJ2n6N7NIrMXav8uP5vmZg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/9a234c-6512-4447-823c-0db7259f20b8/1/hIsSlNJ2n6N7NIrMXav8uP5vmZg.mft rsync://rpki.ripe.net/repository/DEFAULT/hIsSlNJ2n6N7NIrMXav8uP5vmZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a3:45:c0:18:12:2e:1f:8a:79:50:16:b2:a2:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848b1294d2769fa37b348acc5dabfcb8fe6f9998 Validity Not Before: Jan 1 20:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa397355409a150519e205f7d2dcde1dbea6d957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:46:8c:4e:88:1b:64:bc:c5:5a:47:ca:73:fe: a1:33:b3:21:7a:e5:6b:4e:7f:10:56:df:c8:77:c0: 75:a2:fe:a6:32:22:a6:23:29:fe:a7:47:e0:20:d6: 87:a2:cb:44:41:b0:00:1e:46:35:45:14:e5:3c:fb: c1:f9:72:f5:24:e0:af:47:81:de:11:73:32:e8:79: e7:e2:13:76:26:b0:d3:ec:0f:ee:c6:d6:8f:13:df: 9d:dd:26:79:04:b7:46:e7:da:de:40:24:95:d4:60: 64:ce:c2:2c:a3:8b:75:03:d9:40:9b:64:1d:d4:c0: e4:34:54:2d:82:8f:86:fa:a0:64:b1:b6:ac:fd:0f: ec:33:b4:44:ec:3d:62:4b:1c:d2:11:01:41:e6:07: 7d:31:7c:4b:da:6a:64:70:f3:ee:17:e6:0a:b8:8c: 40:a9:df:13:f1:a7:13:d4:61:4c:d3:87:37:8c:58: 83:b4:69:d5:57:b8:56:63:6b:80:ef:2d:47:58:9a: c2:b8:52:47:34:e3:09:bb:8c:22:49:20:79:bd:55: 4e:9a:b4:95:62:14:27:13:18:06:de:9d:b3:a0:b1: 05:7b:04:e2:20:65:28:da:42:08:df:3b:e3:19:b2: 5a:0f:59:68:07:d6:73:df:95:83:5a:60:db:4e:b2: cf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:39:73:55:40:9A:15:05:19:E2:05:F7:D2:DC:DE:1D:BE:A6:D9:57 X509v3 Authority Key Identifier: keyid:84:8B:12:94:D2:76:9F:A3:7B:34:8A:CC:5D:AB:FC:B8:FE:6F:99:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIsSlNJ2n6N7NIrMXav8uP5vmZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9a234c-6512-4447-823c-0db7259f20b8/1/qjlzVUCaFQUZ4gX30tzeHb6m2Vc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9a234c-6512-4447-823c-0db7259f20b8/1/hIsSlNJ2n6N7NIrMXav8uP5vmZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.213.40.0/21 Signature Algorithm: sha256WithRSAEncryption 84:c5:91:ae:ea:98:af:38:71:56:44:fd:cb:00:5a:ae:7b:18: 5d:ce:9b:79:04:31:69:e5:73:25:35:da:cc:aa:98:12:2f:bb: 50:2b:7f:75:4d:5e:50:be:dd:ce:29:56:cd:17:c9:a8:52:1d: 2f:fc:b8:95:07:aa:cd:1e:65:02:ad:c8:c7:80:d9:28:81:9b: 9d:fc:93:37:d5:5f:5e:d7:18:1b:01:2b:d6:88:a4:3c:b4:93: 9c:4f:8f:49:35:ab:89:8b:e1:c3:69:9a:81:25:e0:fb:92:4f: 80:17:ba:1b:2a:59:55:60:bb:3c:7f:b1:ce:0d:99:b4:ce:05: 82:ab:da:5e:ec:78:6c:f8:3b:d2:17:cc:0b:3b:de:1a:b7:39: bd:d7:d6:3d:c2:88:26:22:cf:82:37:13:d1:95:ab:93:bc:93: 95:74:00:e6:82:57:7a:14:ea:94:dd:6c:1c:a4:06:0f:4e:07: 4f:d4:e8:c8:92:c3:97:ab:1f:43:8a:d5:3e:3c:4e:3d:7c:55: 0b:c9:79:6e:09:2a:9f:48:60:9e:39:9e:a2:a9:b6:3e:31:9f: 1c:b4:08:79:25:80:40:5f:04:7d:d0:3a:74:ad:75:64:a5:f6: cb:45:e2:56:df:c6:3e:27:83:4a:f9:29:80:08:f4:82:4d:af: aa:eb:64:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NqNFwBgSLh+KeVAWsqJ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OGIxMjk0ZDI3NjlmYTM3YjM0OGFjYzVkYWJmY2I4ZmU2 Zjk5OTgwHhcNMjYwMTAxMjAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTM5NzM1NTQwOWExNTA1MTllMjA1ZjdkMmRjZGUxZGJlYTZkOTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0aMTogbZLzFWkfKc/6hM7MheuVr Tn8QVt/Id8B1ov6mMiKmIyn+p0fgINaHostEQbAAHkY1RRTlPPvB+XL1JOCvR4He EXMy6Hnn4hN2JrDT7A/uxtaPE9+d3SZ5BLdG59reQCSV1GBkzsIso4t1A9lAm2Qd 1MDkNFQtgo+G+qBksbas/Q/sM7RE7D1iSxzSEQFB5gd9MXxL2mpkcPPuF+YKuIxA qd8T8acT1GFM04c3jFiDtGnVV7hWY2uA7y1HWJrCuFJHNOMJu4wiSSB5vVVOmrSV YhQnExgG3p2zoLEFewTiIGUo2kII3zvjGbJaD1loB9Zz35WDWmDbTrLPjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKo5c1VAmhUFGeIF99Lc3h2+ptlXMB8GA1UdIwQY MBaAFISLEpTSdp+jezSKzF2r/Lj+b5mYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaElzU2xOSjJuNk43TklyTVhhdjh1UDV2bVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85YTIzNGMtNjUxMi00NDQ3LTgyM2Mt MGRiNzI1OWYyMGI4LzEvcWpselZVQ2FGUVVaNGdYMzB0emVIYjZtMlZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy85YTIzNGMtNjUxMi00NDQ3LTgyM2MtMGRiNzI1OWYyMGI4 LzEvaElzU2xOSjJuNk43TklyTVhhdjh1UDV2bVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstUoMA0G CSqGSIb3DQEBCwUAA4IBAQCExZGu6pivOHFWRP3LAFquexhdzpt5BDFp5XMlNdrM qpgSL7tQK391TV5Qvt3OKVbNF8moUh0v/LiVB6rNHmUCrcjHgNkogZud/JM31V9e 1xgbASvWiKQ8tJOcT49JNauJi+HDaZqBJeD7kk+AF7obKllVYLs8f7HODZm0zgWC q9pe7Hhs+DvSF8wLO94atzm919Y9wogmIs+CNxPRlauTvJOVdADmgld6FOqU3Wwc pAYPTgdP1OjIksOXqx9DitU+PE49fFULyXluCSqfSGCeOZ6iqbY+MZ8ctAh5JYBA XwR90Dp0rXVkpfbLReJW38Y+J4NK+SmACPSCTa+q62Qn -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:22 2026 by rpki-client