This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/QgQy1th6ID-L5VfO9xAH4yNvVlw.roa File: QgQy1th6ID-L5VfO9xAH4yNvVlw.roa (raw, json) Hash identifier: ogOTpvjhwZNOv9mM4eRvXGZKd+Zmqg9jm28SibEw98c= Subject key identifier: 42:04:32:D6:D8:7A:20:3F:8B:E5:57:CE:F7:10:07:E3:23:6F:56:5C Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Certificate serial: 019B7DC887B78BE3051EEABFBE08843BA2F3 Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/QgQy1th6ID-L5VfO9xAH4yNvVlw.roa Signing time: Fri 02 Jan 2026 08:17:32 +0000 ROA not before: Fri 02 Jan 2026 08:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197563 IP address blocks: 178.18.231.0/24 maxlen: 24 2001:b28:4::/48 maxlen: 48 2a03:5f80:8::/48 maxlen: 48 2a03:5f80:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:87:b7:8b:e3:05:1e:ea:bf:be:08:84:3b:a2:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Validity Not Before: Jan 2 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=420432d6d87a203f8be557cef71007e3236f565c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:16:9c:7a:c9:bb:39:06:6e:49:d8:70:21:fc: 28:0e:51:a5:74:fe:a2:80:43:e9:65:7e:cc:ae:66: 92:33:1b:50:a0:3f:2a:fd:c9:1f:98:ed:7f:3f:25: 1f:44:ed:89:67:d8:f8:e7:bf:c0:39:f4:98:50:3c: 3d:71:9b:ef:cd:01:d0:bb:4c:dd:67:7c:70:e3:c6: 84:96:78:52:d9:c7:0c:09:88:b1:0a:37:8d:92:75: 3d:0c:f3:3f:ce:30:3b:7b:e6:00:f9:66:a4:69:a7: 47:79:f4:97:42:ec:b8:67:cb:2e:22:5e:69:4a:be: 17:72:3b:6c:3f:71:01:92:d9:06:ca:09:f8:ec:88: 67:a1:d9:51:87:35:d5:4f:b2:67:bf:aa:94:32:f3: f5:03:e4:72:df:f6:dd:c2:3b:79:d5:64:c1:64:65: f8:32:c6:43:c8:b7:a4:f3:6f:c8:83:4c:45:18:d7: 91:cd:1c:29:e0:f6:92:81:32:7b:f7:ac:7d:7d:35: f5:48:9c:6c:a1:e9:2b:8a:21:dd:d1:0b:32:18:85: fc:08:c1:cb:80:90:b4:1b:7c:23:ee:60:0f:b4:a2: 6d:81:7e:c9:20:48:66:03:63:12:b7:1a:02:6e:c7: 83:5d:71:e8:e0:76:54:da:1f:c7:52:a3:9b:69:aa: 85:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:04:32:D6:D8:7A:20:3F:8B:E5:57:CE:F7:10:07:E3:23:6F:56:5C X509v3 Authority Key Identifier: keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/QgQy1th6ID-L5VfO9xAH4yNvVlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.18.231.0/24 IPv6: 2001:b28:4::/48 2a03:5f80:8::/48 2a03:5f80:a::/48 Signature Algorithm: sha256WithRSAEncryption 66:12:37:6b:30:7d:98:44:fa:01:be:1c:a6:ae:d0:44:2f:8c: 97:8f:7c:d6:72:0a:ea:4c:3b:b4:98:98:7f:16:e1:1d:cf:20: e2:50:3a:61:90:aa:ed:32:4a:91:77:f9:c6:59:4c:dc:b5:f6: d7:8e:3d:fd:3d:26:d8:12:b2:0e:e1:48:62:f9:5d:75:cc:fe: 94:32:70:59:8e:dd:de:43:d5:4d:73:a6:18:5b:03:43:0a:06: c4:fb:8a:32:34:e5:4c:d5:cf:70:09:b2:62:61:2b:97:f1:c3: 05:95:a3:75:f9:97:10:10:af:20:86:49:41:39:77:13:fe:d2: fd:d6:14:93:c1:28:a6:5d:ef:31:2a:78:55:e2:ce:b4:77:4c: cf:41:d3:79:98:73:3a:35:7c:c5:bc:73:e6:89:54:c8:86:85: 82:c8:35:5c:c6:90:f5:00:a6:42:37:58:3a:62:c4:ad:a5:f5: f9:39:47:9c:e9:bb:c5:e2:d2:65:b3:15:2e:9d:d5:31:4e:9d: 4b:48:e6:d4:71:e3:81:ef:ae:1a:60:3d:74:b2:4c:50:4c:3d: 2d:13:96:43:de:59:81:d9:57:51:07:9d:07:cd:8d:c6:4c:26: e6:52:99:43:62:ac:ca:75:2b:44:6e:0c:47:b3:c7:82:eb:dd: c5:f7:89:cf -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt9yIe3i+MFHuq/vgiEO6LzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx YTUxYjgwHhcNMjYwMTAyMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjA0MzJkNmQ4N2EyMDNmOGJlNTU3Y2VmNzEwMDdlMzIzNmY1NjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxacesm7OQZuSdhwIfwoDlGldP6i gEPpZX7MrmaSMxtQoD8q/ckfmO1/PyUfRO2JZ9j457/AOfSYUDw9cZvvzQHQu0zd Z3xw48aElnhS2ccMCYixCjeNknU9DPM/zjA7e+YA+WakaadHefSXQuy4Z8suIl5p Sr4XcjtsP3EBktkGygn47IhnodlRhzXVT7Jnv6qUMvP1A+Ry3/bdwjt51WTBZGX4 MsZDyLek82/Ig0xFGNeRzRwp4PaSgTJ796x9fTX1SJxsoekriiHd0QsyGIX8CMHL gJC0G3wj7mAPtKJtgX7JIEhmA2MStxoCbseDXXHo4HZU2h/HUqObaaqFVQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFEIEMtbYeiA/i+VXzvcQB+Mjb1ZcMB8GA1UdIwQY MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt NzY3NDE2NTI1MTBkLzEvUWdReTF0aDZJRC1MNVZmTzl4QUg0eU52Vmx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAshLnMCEE AgACMBsDBwAgAQsoAAQDBwAqA1+AAAgDBwAqA1+AAAowDQYJKoZIhvcNAQELBQAD ggEBAGYSN2swfZhE+gG+HKau0EQvjJePfNZyCupMO7SYmH8W4R3PIOJQOmGQqu0y SpF3+cZZTNy19teOPf09JtgSsg7hSGL5XXXM/pQycFmO3d5D1U1zphhbA0MKBsT7 ijI05UzVz3AJsmJhK5fxwwWVo3X5lxAQryCGSUE5dxP+0v3WFJPBKKZd7zEqeFXi zrR3TM9B03mYczo1fMW8c+aJVMiGhYLINVzGkPUApkI3WDpixK2l9fk5R5zpu8Xi 0mWzFS6d1TFOnUtI5tRx44HvrhpgPXSyTFBMPS0TlkPeWYHZV1EHnQfNjcZMJuZS mUNirMp1K0RuDEezx4Lr3cX3ic8= -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:29 2026 by rpki-client