This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/QagkOpEdpHhNgHY1gsbe4glnCSc.roa File: QagkOpEdpHhNgHY1gsbe4glnCSc.roa (raw, json) Hash identifier: GXJi3OLC9i8a7LaOHVajb4K6NTzH/1utxRUiFymI5dw= Subject key identifier: 41:A8:24:3A:91:1D:A4:78:4D:80:76:35:82:C6:DE:E2:09:67:09:27 Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296 Certificate serial: 019B7CEE41A3A698AE1ADB648CAD7EE68ECB Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/QagkOpEdpHhNgHY1gsbe4glnCSc.roa Signing time: Fri 02 Jan 2026 04:19:07 +0000 ROA not before: Fri 02 Jan 2026 04:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21453 IP address blocks: 31.31.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:41:a3:a6:98:ae:1a:db:64:8c:ad:7e:e6:8e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296 Validity Not Before: Jan 2 04:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41a8243a911da4784d80763582c6dee209670927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e8:ef:d3:1e:6a:18:d2:4d:ab:ad:de:17:7f: d3:6e:a7:97:37:80:ed:74:9d:0d:5c:0c:49:26:b1: 2a:6f:7d:60:c6:6e:ac:b4:de:70:f8:49:09:ae:53: f8:bf:be:b3:90:26:af:2f:13:dc:fb:66:8e:e5:24: e8:96:26:01:7b:74:04:8f:e9:02:0f:1b:1a:12:f1: 95:6b:b0:e4:0d:47:9e:a1:54:0d:41:f1:ec:98:95: c5:ac:4b:af:a3:51:08:72:fa:f2:c3:e6:25:5d:94: f1:f0:06:50:12:45:f8:a7:b6:f5:6e:2d:02:d0:a4: bc:7f:71:5a:71:14:09:89:1b:7d:fc:16:aa:15:1a: d8:18:91:03:eb:6a:56:0c:8a:02:a7:33:f4:1f:aa: fe:51:df:f2:29:f7:34:48:04:fb:a8:2d:5c:fa:f7: e8:ca:07:ff:8e:69:02:5c:15:6e:7f:98:32:00:92: 51:4f:2d:c7:08:86:ad:30:29:b8:2c:61:3e:ed:4b: c0:1f:64:5d:7e:91:88:58:b6:e0:dc:96:83:b0:c6: 46:25:e5:90:60:dd:41:b3:ac:97:35:fd:ed:63:8d: 4d:05:e2:9f:f3:e8:c2:8a:a3:c5:39:5b:9b:a9:02: 65:13:31:04:29:7a:45:75:e5:62:69:fd:9e:a7:b4: fb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A8:24:3A:91:1D:A4:78:4D:80:76:35:82:C6:DE:E2:09:67:09:27 X509v3 Authority Key Identifier: keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/QagkOpEdpHhNgHY1gsbe4glnCSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.31.64.0/21 Signature Algorithm: sha256WithRSAEncryption 30:09:14:60:9c:51:90:d6:5e:0c:05:63:90:88:24:6c:eb:e6: 9d:b3:27:19:6d:05:38:09:4e:6c:24:60:49:b2:d7:d6:62:1a: 7e:83:be:6e:83:e8:4c:86:c3:71:72:66:b8:2e:41:b0:a7:75: 7a:70:ab:b5:ad:7f:cb:60:03:cd:a9:64:03:b8:9e:75:6f:7f: b4:cb:a6:a1:db:d9:a7:a2:49:b9:ff:6c:e9:be:07:f3:ac:13: 44:88:61:bf:09:06:8d:85:95:bb:9a:14:59:97:28:a8:ef:35: 37:ea:31:46:66:d1:6b:c2:b0:80:d9:88:ad:7d:da:13:a2:c2: 6b:44:ca:4d:10:64:86:c7:bc:9c:8c:17:97:25:4e:6a:03:56: 5d:4a:f5:ab:0b:6e:0f:06:a8:f7:4e:e7:df:a9:41:fc:26:92: ba:40:de:86:98:b5:8a:d4:bc:95:58:f6:ea:37:28:9e:04:5c: 09:41:18:7f:65:b8:df:11:ff:9f:01:9f:37:43:09:10:5c:b3: 9f:ac:ea:37:84:91:db:f2:41:5b:e2:32:02:fd:1e:c7:4b:82: 98:2b:7c:97:0a:3c:83:0c:68:22:15:6e:b8:ab:a9:b1:c1:ae: fe:fc:00:d2:b4:b2:ef:a0:2f:76:24:0c:65:d6:63:f4:cb:74: af:c4:19:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87kGjppiuGttkjK1+5o7LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZGIzYzVkOTUxZWJlYmI4NmE5OWE4NGQyMzhlN2ZjYTc1 OGUyOTYwHhcNMjYwMTAyMDQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWE4MjQzYTkxMWRhNDc4NGQ4MDc2MzU4MmM2ZGVlMjA5NjcwOTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+jv0x5qGNJNq63eF3/TbqeXN4Dt dJ0NXAxJJrEqb31gxm6stN5w+EkJrlP4v76zkCavLxPc+2aO5SToliYBe3QEj+kC DxsaEvGVa7DkDUeeoVQNQfHsmJXFrEuvo1EIcvryw+YlXZTx8AZQEkX4p7b1bi0C 0KS8f3FacRQJiRt9/BaqFRrYGJED62pWDIoCpzP0H6r+Ud/yKfc0SAT7qC1c+vfo ygf/jmkCXBVuf5gyAJJRTy3HCIatMCm4LGE+7UvAH2RdfpGIWLbg3JaDsMZGJeWQ YN1Bs6yXNf3tY41NBeKf8+jCiqPFOVubqQJlEzEEKXpFdeViaf2ep7T7swIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEGoJDqRHaR4TYB2NYLG3uIJZwknMB8GA1UdIwQY MBaAFHvbPF2VHr67hqmahNI45/ynWOKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTlzOFhaVWV2cnVHcVpxRTBqam5fS2RZNHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMmM3NDktM2Y5Yi00OWE4LTk1M2It NzdmNjc2M2Y0ZDJiLzEvUWFna09wRWRwSGhOZ0hZMWdzYmU0Z2xuQ1NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iMmM3NDktM2Y5Yi00OWE4LTk1M2ItNzdmNjc2M2Y0ZDJi LzEvZTlzOFhaVWV2cnVHcVpxRTBqam5fS2RZNHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDHx9AMA0G CSqGSIb3DQEBCwUAA4IBAQAwCRRgnFGQ1l4MBWOQiCRs6+adsycZbQU4CU5sJGBJ stfWYhp+g75ug+hMhsNxcma4LkGwp3V6cKu1rX/LYAPNqWQDuJ51b3+0y6ah29mn okm5/2zpvgfzrBNEiGG/CQaNhZW7mhRZlyio7zU36jFGZtFrwrCA2YitfdoTosJr RMpNEGSGx7ycjBeXJU5qA1ZdSvWrC24PBqj3TuffqUH8JpK6QN6GmLWK1LyVWPbq NyieBFwJQRh/ZbjfEf+fAZ83QwkQXLOfrOo3hJHb8kFb4jIC/R7HS4KYK3yXCjyD DGgiFW64q6mxwa7+/ADStLLvoC92JAxl1mP0y3SvxBmz -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:03 2026 by rpki-client