This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/QdmtMonnxjCquFhjrcUo8qpZ9bk.roa File: QdmtMonnxjCquFhjrcUo8qpZ9bk.roa (raw, json) Hash identifier: wbBSWKojB7pH/vu01mc7MlC/g/OxHu6eJE6dc+J3abI= Subject key identifier: 41:D9:AD:32:89:E7:C6:30:AA:B8:58:63:AD:C5:28:F2:AA:59:F5:B9 Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774 Certificate serial: 019B7F8458A6A53A84143FE608241ED42581 Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/QdmtMonnxjCquFhjrcUo8qpZ9bk.roa Signing time: Fri 02 Jan 2026 16:22:18 +0000 ROA not before: Fri 02 Jan 2026 16:22:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49086 IP address blocks: 80.228.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:58:a6:a5:3a:84:14:3f:e6:08:24:1e:d4:25:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774 Validity Not Before: Jan 2 16:22:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41d9ad3289e7c630aab85863adc528f2aa59f5b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:75:96:f5:72:91:28:a2:0a:2e:1d:93:9b:4c: be:d5:9d:4f:b9:1e:10:3b:28:99:aa:d7:72:0e:91: 89:bf:b9:45:36:39:58:39:55:2a:3f:99:15:54:6e: 16:d5:92:6a:94:93:c2:9b:24:4b:54:46:17:52:d1: 87:cf:c5:4e:2c:85:6e:44:e5:82:c5:55:3f:c4:ac: 47:d5:67:21:2b:49:0a:26:0a:be:fe:89:fa:bf:c7: d1:28:2a:99:75:6e:79:dd:a2:f3:c3:bc:7f:27:87: 2b:35:52:ec:a6:f7:1a:c0:1f:29:f8:df:b4:d3:73: 06:11:21:92:16:0b:67:ab:44:aa:de:ec:5b:dd:45: 37:17:62:2e:76:10:8d:27:18:a7:37:7a:53:ba:0c: 39:30:d2:18:ec:29:f6:ff:c6:65:8f:92:c2:ad:0a: c9:a4:ac:96:47:cf:e5:d5:d4:49:1a:25:1c:dd:16: 09:f9:40:3b:37:33:7d:3c:cb:4e:74:dc:78:74:70: 94:53:15:a9:35:59:46:44:12:56:95:7a:c9:c1:27: 19:b9:92:33:b6:0a:1b:69:41:11:03:82:16:14:4a: 0a:3c:b3:c7:77:91:0c:ee:4a:7a:46:07:14:ef:e5: 07:99:7c:b1:b0:ec:ec:f5:9d:95:b8:fb:ba:3b:63: b5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D9:AD:32:89:E7:C6:30:AA:B8:58:63:AD:C5:28:F2:AA:59:F5:B9 X509v3 Authority Key Identifier: keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/QdmtMonnxjCquFhjrcUo8qpZ9bk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.228.2.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:48:74:a3:c3:63:00:4c:91:3c:66:ff:53:a0:95:28:27:9a: 47:46:c1:52:1d:41:9a:5e:12:78:78:85:e0:73:27:7e:08:0a: ef:a2:2f:ab:d7:9b:12:d5:2c:a8:cf:21:77:a2:bf:8e:a1:83: 2d:2c:71:eb:cb:62:dc:eb:80:d9:ff:c9:6f:fd:fe:50:f9:60: 55:a6:a9:fe:b6:8f:e1:83:9c:e5:b6:7b:a1:74:0e:f7:78:31: 14:d0:ce:5a:d9:85:64:5e:b9:48:f7:e0:6a:e9:5f:ee:e6:cd: 3b:83:be:4a:b4:8f:4a:10:f2:21:56:62:90:8a:01:b9:cd:74: 68:80:0c:69:fb:cb:bf:dc:a8:a1:6f:b4:f6:24:25:bd:ce:77: 46:94:9d:79:1f:05:63:57:aa:b5:08:bf:47:19:66:37:0c:14: a3:68:c5:2d:c1:05:09:1f:89:77:36:4e:04:8b:af:a8:af:3c: f9:93:a9:0d:52:4a:48:18:36:00:6b:63:01:dd:67:e6:94:0d: 41:9d:d5:e6:4e:05:37:44:58:1e:9b:3f:6e:da:d7:6f:eb:27: a8:ff:e4:19:1e:cc:01:ff:6b:7f:02:1c:c8:4b:19:3c:d0:f6: f3:ac:f5:49:37:93:8f:5c:5e:97:c8:af:d3:b6:c0:35:cb:b4: 83:7d:10:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hFimpTqEFD/mCCQe1CWBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTVkYWRkYjg3MWI5ZDZhNTNjZDZiNDdmNzc2MjUwODM3 Zjc3NzQwHhcNMjYwMTAyMTYyMjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWQ5YWQzMjg5ZTdjNjMwYWFiODU4NjNhZGM1MjhmMmFhNTlmNWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHWW9XKRKKIKLh2Tm0y+1Z1PuR4Q OyiZqtdyDpGJv7lFNjlYOVUqP5kVVG4W1ZJqlJPCmyRLVEYXUtGHz8VOLIVuROWC xVU/xKxH1WchK0kKJgq+/on6v8fRKCqZdW553aLzw7x/J4crNVLspvcawB8p+N+0 03MGESGSFgtnq0Sq3uxb3UU3F2IudhCNJxinN3pTugw5MNIY7Cn2/8Zlj5LCrQrJ pKyWR8/l1dRJGiUc3RYJ+UA7NzN9PMtOdNx4dHCUUxWpNVlGRBJWlXrJwScZuZIz tgobaUERA4IWFEoKPLPHd5EM7kp6RgcU7+UHmXyxsOzs9Z2VuPu6O2O1FQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEHZrTKJ58YwqrhYY63FKPKqWfW5MB8GA1UdIwQY MBaAFLFV2t24cbnWpTzWtH93YlCDf3d0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmIt NTQ2OGIyY2YwYTc3LzEvUWRtdE1vbm54akNxdUZoanJjVW84cXBaOWJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmItNTQ2OGIyY2YwYTc3 LzEvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUOQCMA0G CSqGSIb3DQEBCwUAA4IBAQAtSHSjw2MATJE8Zv9ToJUoJ5pHRsFSHUGaXhJ4eIXg cyd+CArvoi+r15sS1SyozyF3or+OoYMtLHHry2Lc64DZ/8lv/f5Q+WBVpqn+to/h g5zltnuhdA73eDEU0M5a2YVkXrlI9+Bq6V/u5s07g75KtI9KEPIhVmKQigG5zXRo gAxp+8u/3Kihb7T2JCW9zndGlJ15HwVjV6q1CL9HGWY3DBSjaMUtwQUJH4l3Nk4E i6+orzz5k6kNUkpIGDYAa2MB3WfmlA1BndXmTgU3RFgemz9u2tdv6yeo/+QZHswB /2t/AhzISxk80PbzrPVJN5OPXF6XyK/TtsA1y7SDfRAg -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:39 2026 by rpki-client