This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/QEDdRTIUJe_n_5D0ErrIweyWB4Y.roa File: QEDdRTIUJe_n_5D0ErrIweyWB4Y.roa (raw, json) Hash identifier: pygwk+rXsHzfwQgNiVed0HaRjH+crfTbH842swTjNzA= Subject key identifier: 40:40:DD:45:32:14:25:EF:E7:FF:90:F4:12:BA:C8:C1:EC:96:07:86 Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Certificate serial: 019B7DC880A6336CFF562692D11D373CD10F Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/QEDdRTIUJe_n_5D0ErrIweyWB4Y.roa Signing time: Fri 02 Jan 2026 08:17:30 +0000 ROA not before: Fri 02 Jan 2026 08:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39688 IP address blocks: 95.161.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:80:a6:33:6c:ff:56:26:92:d1:1d:37:3c:d1:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Validity Not Before: Jan 2 08:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4040dd45321425efe7ff90f412bac8c1ec960786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ff:7c:dc:d1:23:ad:ca:af:ad:91:3f:d7:52: 00:31:da:13:a4:c0:62:3d:98:69:66:18:08:16:5c: 0c:32:c9:db:9c:f3:bb:ea:e1:45:84:47:08:ee:04: 9f:93:cb:16:90:23:19:5b:ff:d3:99:d2:94:36:8c: fd:eb:01:ab:62:68:88:84:b9:a0:54:ca:ea:b1:bf: fe:1e:83:38:c3:4b:bc:c3:0d:88:d7:b0:5b:b2:17: fe:0b:2b:39:4b:dd:9a:66:1f:b4:5a:d0:ff:f5:04: 3c:2d:50:1b:29:c8:ca:f2:65:66:2e:0c:97:b8:fe: cc:a5:c3:55:9c:33:a8:06:d8:fe:52:6e:4b:4d:49: db:64:8b:1a:ca:91:a6:cf:f8:41:9e:e6:fd:4e:54: af:63:d9:bb:41:69:77:87:44:b2:83:86:7b:e3:42: c2:de:64:c1:e8:db:f8:f0:14:3c:f1:48:4c:f1:1f: f6:95:0d:f3:e8:fe:65:93:ce:41:53:a0:1a:ed:16: f2:63:cf:07:4c:46:42:e2:5c:a9:23:52:35:4b:58: e0:24:8a:d6:19:e6:4c:54:74:4a:a7:33:5e:fa:28: de:9f:55:bb:44:9a:af:a1:d4:4c:d0:d0:67:0d:02: 57:01:a7:5b:2a:32:8b:6c:d2:09:27:0d:89:b2:df: c5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:40:DD:45:32:14:25:EF:E7:FF:90:F4:12:BA:C8:C1:EC:96:07:86 X509v3 Authority Key Identifier: keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/QEDdRTIUJe_n_5D0ErrIweyWB4Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.161.82.0/24 Signature Algorithm: sha256WithRSAEncryption 46:93:ea:7c:04:2e:37:a7:a9:d3:8e:37:7a:9c:34:64:dd:41: 70:64:8d:62:81:da:ac:05:62:23:22:83:5b:52:e8:e8:c5:4e: 72:67:c7:40:2c:df:f0:12:39:d5:33:87:ee:4b:97:45:4c:65: 4a:fc:82:f5:5b:15:2c:2a:4e:34:02:f5:af:16:1f:2d:48:33: 2c:75:f4:c3:d1:cc:12:5e:1d:89:44:f9:db:21:a3:80:85:f7: 6b:dd:03:11:be:c1:a7:c1:8f:d8:dc:4c:cc:83:72:f9:cb:05: d0:1a:ff:52:74:25:bf:9a:83:fa:d3:f1:5c:73:cf:e3:3f:cb: a6:31:5b:44:64:f9:06:f8:2e:1f:85:3a:cb:0d:99:c9:ea:99: ba:0c:14:02:9a:1c:64:55:31:02:a4:7c:c2:c6:1e:62:fb:8d: d5:49:5b:a1:d4:f7:26:d1:06:81:1e:ec:c4:58:4d:74:b2:9a: f5:49:cf:fd:0c:0f:7d:35:b3:34:8a:90:a7:fd:f3:35:ce:5b: 76:6a:5c:78:0f:fc:bb:22:12:c5:db:33:09:37:49:a9:4c:b3: c4:86:47:91:eb:4c:e2:e8:ef:75:42:2f:b2:e3:b4:d6:e7:2d: d7:32:e4:83:50:7f:d2:6c:08:72:e3:85:2d:79:46:e6:a2:90: 83:d7:5b:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yICmM2z/ViaS0R03PNEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx YTUxYjgwHhcNMjYwMTAyMDgxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDQwZGQ0NTMyMTQyNWVmZTdmZjkwZjQxMmJhYzhjMWVjOTYwNzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP983NEjrcqvrZE/11IAMdoTpMBi PZhpZhgIFlwMMsnbnPO76uFFhEcI7gSfk8sWkCMZW//TmdKUNoz96wGrYmiIhLmg VMrqsb/+HoM4w0u8ww2I17Bbshf+Cys5S92aZh+0WtD/9QQ8LVAbKcjK8mVmLgyX uP7MpcNVnDOoBtj+Um5LTUnbZIsaypGmz/hBnub9TlSvY9m7QWl3h0Syg4Z740LC 3mTB6Nv48BQ88UhM8R/2lQ3z6P5lk85BU6Aa7RbyY88HTEZC4lypI1I1S1jgJIrW GeZMVHRKpzNe+ijen1W7RJqvodRM0NBnDQJXAadbKjKLbNIJJw2Jst/F8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEBA3UUyFCXv5/+Q9BK6yMHslgeGMB8GA1UdIwQY MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt NzY3NDE2NTI1MTBkLzEvUUVEZFJUSVVKZV9uXzVEMEVyckl3ZXlXQjRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6FSMA0G CSqGSIb3DQEBCwUAA4IBAQBGk+p8BC43p6nTjjd6nDRk3UFwZI1igdqsBWIjIoNb UujoxU5yZ8dALN/wEjnVM4fuS5dFTGVK/IL1WxUsKk40AvWvFh8tSDMsdfTD0cwS Xh2JRPnbIaOAhfdr3QMRvsGnwY/Y3EzMg3L5ywXQGv9SdCW/moP60/Fcc8/jP8um MVtEZPkG+C4fhTrLDZnJ6pm6DBQCmhxkVTECpHzCxh5i+43VSVuh1Pcm0QaBHuzE WE10spr1Sc/9DA99NbM0ipCn/fM1zlt2alx4D/y7IhLF2zMJN0mpTLPEhkeR60zi 6O91Qi+y47TW5y3XMuSDUH/SbAhy44UteUbmopCD11uE -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:25 2026 by rpki-client