This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/QP9nM5PMiejN9yhohpS-UJYwohQ.roa File: QP9nM5PMiejN9yhohpS-UJYwohQ.roa (raw, json) Hash identifier: YoeG5CqmyBDeclyGv/x1kOlmle614YEmox8sx9pd0fU= Subject key identifier: 40:FF:67:33:93:CC:89:E8:CD:F7:28:68:86:94:BE:50:96:30:A2:14 Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b Certificate serial: 019B7D5B34AB019A6E86346818A454A94F0E Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/QP9nM5PMiejN9yhohpS-UJYwohQ.roa Signing time: Fri 02 Jan 2026 06:18:07 +0000 ROA not before: Fri 02 Jan 2026 06:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198549 IP address blocks: 92.53.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:34:ab:01:9a:6e:86:34:68:18:a4:54:a9:4f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b Validity Not Before: Jan 2 06:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40ff673393cc89e8cdf728688694be509630a214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:79:6c:86:b4:92:28:d5:b0:f7:01:61:a2:cb: d2:86:eb:f5:9a:95:70:39:e6:8c:2f:39:64:21:9e: e7:74:23:e1:a8:a4:02:71:63:7f:6a:55:0f:08:22: 1a:af:ea:da:db:37:b0:1b:31:77:c6:1c:93:1b:31: f8:02:98:89:2c:8f:66:a6:90:e3:08:9e:16:00:fd: f4:6f:ea:37:a0:95:7c:e1:18:16:23:f0:90:d5:28: 7c:f6:78:ea:a7:ed:1d:2d:fc:ca:f2:9c:25:1a:e4: f7:e3:0e:96:78:a4:70:a9:a4:d9:1a:a0:62:da:40: a0:ac:bc:79:ea:d5:9a:b9:da:fb:3b:ff:d8:c0:a7: 9c:e7:2c:c4:c9:42:06:b5:60:ab:19:9a:cb:f1:12: 7f:58:2c:74:f2:31:6d:0d:35:11:2d:72:96:eb:8b: 54:0f:69:df:37:2e:fb:35:21:ce:75:c5:31:e0:19: 46:6b:93:47:cf:62:80:e6:c6:cd:4d:ae:33:b2:99: bc:61:f7:95:84:95:61:47:7d:87:04:64:99:cc:9f: a1:7f:eb:fc:41:a2:b5:85:51:1c:00:ab:aa:1c:eb: 10:b5:78:83:fc:7d:b0:14:14:79:ec:a4:82:ef:db: c4:7b:62:8d:95:d3:ee:2f:18:0f:79:8c:e5:fd:96: f0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FF:67:33:93:CC:89:E8:CD:F7:28:68:86:94:BE:50:96:30:A2:14 X509v3 Authority Key Identifier: keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/QP9nM5PMiejN9yhohpS-UJYwohQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.53.232.0/22 Signature Algorithm: sha256WithRSAEncryption 84:32:b8:d6:c5:70:50:ea:05:f0:28:00:3a:74:4f:f0:f6:45: ac:ff:99:61:ad:48:82:ab:74:93:a6:ce:e1:76:7b:7d:59:e8: 43:63:d9:73:23:9f:9a:c4:b2:15:8a:2b:65:f3:2f:13:89:38: 5f:58:a0:0b:02:4e:d5:47:04:2d:3d:56:51:1c:a7:f7:c5:09: 6c:54:60:72:b3:ae:0d:ec:8f:f7:6e:b8:6d:7f:2c:e1:6c:8d: 7c:9d:77:80:96:b6:3c:ea:05:06:56:0c:e0:da:88:d0:53:c3: 38:7a:68:18:58:de:ea:b5:ce:49:d9:60:9f:a2:39:a9:a1:4c: 6b:50:f8:26:ce:e2:04:53:ca:ee:c8:20:d0:8e:a2:eb:45:c5: e0:a7:cc:7c:6d:bb:ff:91:06:6a:70:2e:62:2a:04:46:a0:ad: f3:e9:9d:7f:f3:2c:01:de:61:6a:ff:f0:ea:60:9f:a3:1f:9e: 0f:39:53:1e:63:18:55:85:43:cd:7a:15:e7:31:7c:8a:cf:2a: c6:94:c8:08:5f:b5:79:b2:49:46:c3:9a:33:40:45:03:c4:aa: 0e:9d:d9:0a:05:f4:2b:ec:d4:d4:ba:81:3d:12:f1:6a:c3:32: 1d:5a:73:2d:dd:6f:e2:24:89:b9:af:2f:ed:c1:51:42:44:9c: 0f:3b:fb:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WzSrAZpuhjRoGKRUqU8OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZGZmMDFmNTZlMzQxOWQwMjdiZTc1OTFjZWVmNjI4NTFj ZTBmNmIwHhcNMjYwMTAyMDYxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGZmNjczMzkzY2M4OWU4Y2RmNzI4Njg4Njk0YmU1MDk2MzBhMjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHlshrSSKNWw9wFhosvShuv1mpVw OeaMLzlkIZ7ndCPhqKQCcWN/alUPCCIar+ra2zewGzF3xhyTGzH4ApiJLI9mppDj CJ4WAP30b+o3oJV84RgWI/CQ1Sh89njqp+0dLfzK8pwlGuT34w6WeKRwqaTZGqBi 2kCgrLx56tWaudr7O//YwKec5yzEyUIGtWCrGZrL8RJ/WCx08jFtDTURLXKW64tU D2nfNy77NSHOdcUx4BlGa5NHz2KA5sbNTa4zspm8YfeVhJVhR32HBGSZzJ+hf+v8 QaK1hVEcAKuqHOsQtXiD/H2wFBR57KSC79vEe2KNldPuLxgPeYzl/ZbwJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFED/ZzOTzInozfcoaIaUvlCWMKIUMB8GA1UdIwQY MBaAFKjf8B9W40GdAnvnWRzu9ihRzg9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUt ODgyYzQ0OGUyZWY2LzEvUVA5bk01UE1pZWpOOXlob2hwUy1VSll3b2hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUtODgyYzQ0OGUyZWY2 LzEvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXDXoMA0G CSqGSIb3DQEBCwUAA4IBAQCEMrjWxXBQ6gXwKAA6dE/w9kWs/5lhrUiCq3STps7h dnt9WehDY9lzI5+axLIViitl8y8TiThfWKALAk7VRwQtPVZRHKf3xQlsVGBys64N 7I/3brhtfyzhbI18nXeAlrY86gUGVgzg2ojQU8M4emgYWN7qtc5J2WCfojmpoUxr UPgmzuIEU8ruyCDQjqLrRcXgp8x8bbv/kQZqcC5iKgRGoK3z6Z1/8ywB3mFq//Dq YJ+jH54POVMeYxhVhUPNehXnMXyKzyrGlMgIX7V5sklGw5ozQEUDxKoOndkKBfQr 7NTUuoE9EvFqwzIdWnMt3W/iJIm5ry/twVFCRJwPO/uP -----END CERTIFICATE-----Generated at Mon Jan 26 00:16:42 2026 by rpki-client