This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/QGAJExkL2FvXDViXp-Coxz1ISyE.roa File: QGAJExkL2FvXDViXp-Coxz1ISyE.roa (raw, json) Hash identifier: KqS/q7o4Pi5DS6O8i7jT3UhmWb+gbQp5j9Y+K8+kuI8= Subject key identifier: 40:60:09:13:19:0B:D8:5B:D7:0D:58:97:A7:E0:A8:C7:3D:48:4B:21 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019B7E38D48E098A766E36B9197DB0D0B566 Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/QGAJExkL2FvXDViXp-Coxz1ISyE.roa Signing time: Fri 02 Jan 2026 10:20:12 +0000 ROA not before: Fri 02 Jan 2026 10:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207464 IP address blocks: 84.214.116.0/22 maxlen: 22 84.214.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d4:8e:09:8a:76:6e:36:b9:19:7d:b0:d0:b5:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Jan 2 10:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40600913190bd85bd70d5897a7e0a8c73d484b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:99:67:91:6e:e8:77:43:96:68:45:9d:5a:3e: 1e:a5:30:66:2e:1d:6e:46:49:6d:18:25:46:b7:7c: f0:59:a8:58:3f:0e:6c:ae:a7:bc:2e:50:52:fb:5b: aa:d1:74:41:10:c4:ba:6d:5d:6a:79:0a:7a:c8:5d: bf:6f:8d:c0:4f:18:55:f3:b1:48:6e:62:35:aa:8b: 6a:04:54:2f:3e:3f:37:d6:49:2e:9d:27:fe:dc:f1: d2:1a:8b:07:c3:ab:49:e8:70:67:3e:27:ff:10:ee: 52:41:d7:80:18:16:cd:5a:aa:fb:e0:42:d5:cf:4f: 84:bd:ef:3d:df:0e:30:10:7c:fb:e7:a3:68:08:3a: cd:6a:6b:b2:fe:1d:80:f5:f8:8a:79:f1:c2:c0:cb: 0c:cb:e2:cb:8b:74:47:fe:85:5a:a3:59:ec:9b:72: e6:0a:6c:8d:0f:f7:68:63:3a:fe:65:11:22:7d:1d: 53:2b:ce:e2:50:d4:6c:76:f1:c3:e5:1d:b9:40:de: e8:37:6c:d6:fc:fc:d0:90:91:7d:ff:8c:87:af:72: 65:fd:87:08:99:bb:7f:d5:bd:7b:2e:9d:66:44:aa: bc:c6:18:07:05:dd:72:49:81:0e:35:cf:3d:46:33: 91:d1:01:ff:bf:db:6f:06:4f:20:71:3c:ea:18:89: 77:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:60:09:13:19:0B:D8:5B:D7:0D:58:97:A7:E0:A8:C7:3D:48:4B:21 X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/QGAJExkL2FvXDViXp-Coxz1ISyE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.214.116.0/22 84.214.232.0/22 Signature Algorithm: sha256WithRSAEncryption be:1c:48:7c:57:55:4a:db:89:3d:88:9e:64:37:12:fa:60:65: d0:8c:78:00:03:de:b8:d3:7e:df:e4:83:6d:db:c1:57:42:89: d6:77:e5:8d:e5:eb:a5:60:0c:af:25:00:45:d0:0e:9b:51:99: 8a:ce:01:c7:c8:b2:fd:7f:eb:27:a9:81:1f:a8:cc:3a:e6:c7: 27:e9:36:7b:15:5b:f3:ff:56:24:6a:8e:a3:2e:6c:ce:81:a8: 00:a4:e0:fc:bc:90:a8:ef:b8:9e:89:9e:94:f2:8d:c1:2c:94: c3:54:07:dc:94:f0:8a:a8:8a:4c:6e:f1:7b:8b:e6:6d:41:bd: 64:11:a1:4c:8b:8a:19:f5:76:77:7f:e0:c3:29:11:29:b1:a2: f4:77:be:cf:d5:d5:55:99:b7:22:76:0c:d2:a9:3b:90:7a:2a: b9:a1:72:37:ff:98:5f:66:1b:2c:5e:c6:ce:7b:64:c4:0c:2d: 91:38:b5:9f:42:f2:ca:ea:fe:41:27:56:11:36:a5:97:5e:bf: f1:9a:ba:39:fa:db:c5:01:5d:b7:67:a1:b6:e9:7c:0a:58:bd: c7:3e:19:9c:06:3d:d8:09:bb:12:4a:f4:81:04:12:bb:86:12: fc:56:fa:2c:6b:62:67:a3:33:47:65:3b:67:70:31:33:81:83: 6d:3b:22:e8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+ONSOCYp2bja5GX2w0LVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYwMTAyMTAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDYwMDkxMzE5MGJkODViZDcwZDU4OTdhN2UwYThjNzNkNDg0YjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArplnkW7od0OWaEWdWj4epTBmLh1u RkltGCVGt3zwWahYPw5srqe8LlBS+1uq0XRBEMS6bV1qeQp6yF2/b43ATxhV87FI bmI1qotqBFQvPj831kkunSf+3PHSGosHw6tJ6HBnPif/EO5SQdeAGBbNWqr74ELV z0+Eve893w4wEHz756NoCDrNamuy/h2A9fiKefHCwMsMy+LLi3RH/oVao1nsm3Lm CmyND/doYzr+ZREifR1TK87iUNRsdvHD5R25QN7oN2zW/PzQkJF9/4yHr3Jl/YcI mbt/1b17Lp1mRKq8xhgHBd1ySYEONc89RjOR0QH/v9tvBk8gcTzqGIl38wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEBgCRMZC9hb1w1Yl6fgqMc9SEshMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvUUdBSkV4a0wyRnZYRFZpWHAtQ294ejFJU3lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVNZ0AwQC VNboMA0GCSqGSIb3DQEBCwUAA4IBAQC+HEh8V1VK24k9iJ5kNxL6YGXQjHgAA964 037f5INt28FXQonWd+WN5eulYAyvJQBF0A6bUZmKzgHHyLL9f+snqYEfqMw65scn 6TZ7FVvz/1Ykao6jLmzOgagApOD8vJCo77ieiZ6U8o3BLJTDVAfclPCKqIpMbvF7 i+ZtQb1kEaFMi4oZ9XZ3f+DDKREpsaL0d77P1dVVmbcidgzSqTuQeiq5oXI3/5hf ZhssXsbOe2TEDC2ROLWfQvLK6v5BJ1YRNqWXXr/xmro5+tvFAV23Z6G26XwKWL3H PhmcBj3YCbsSSvSBBBK7hhL8Vvosa2JnozNHZTtncDEzgYNtOyLo -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:28 2026 by rpki-client