This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/QiybHyZYXADSID7uWkeeef6I9FM.roa File: QiybHyZYXADSID7uWkeeef6I9FM.roa (raw, json) Hash identifier: nffxcFthp0YuUEIfa7lK0CY+6Pk1YEGmytbZGeUzOYY= Subject key identifier: 42:2C:9B:1F:26:58:5C:00:D2:20:3E:EE:5A:47:9E:79:FE:88:F4:53 Certificate issuer: /CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9 Certificate serial: 019B7C12C23F2F3F7235B2BAEA7A33BF7B2A Authority key identifier: 1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/QiybHyZYXADSID7uWkeeef6I9FM.roa Signing time: Fri 02 Jan 2026 00:19:22 +0000 ROA not before: Fri 02 Jan 2026 00:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209211 IP address blocks: 92.118.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c2:3f:2f:3f:72:35:b2:ba:ea:7a:33:bf:7b:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9 Validity Not Before: Jan 2 00:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=422c9b1f26585c00d2203eee5a479e79fe88f453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ee:df:7b:66:7e:14:a0:94:3a:f8:c9:8b:80: 07:8b:14:67:4c:3d:66:11:44:f2:28:d6:70:ba:1b: 89:f7:6b:3c:cd:e4:7d:01:28:b9:03:20:d5:01:91: 41:9f:d6:26:2d:95:21:6f:b7:1e:de:6e:56:90:2d: 64:de:16:87:7b:97:63:c9:ad:c4:78:37:b9:07:4b: 5e:d7:9e:37:f8:32:2e:51:c9:9b:bb:02:89:8b:cf: 41:12:c2:9d:90:ec:3a:c6:4e:2b:27:63:d1:09:4a: f0:ee:8f:83:96:85:4b:12:e5:c3:1b:ff:e5:a6:21: 8b:62:a6:f6:44:98:b5:08:fa:c9:f5:68:2b:7a:87: ea:46:e9:5c:06:0f:eb:ef:74:ac:ca:b6:54:f0:4d: fc:46:fc:bb:57:1b:3b:9b:d5:c1:9d:ce:e6:00:c4: 4c:79:f1:6b:e4:b8:24:12:28:3e:5c:31:fa:3a:1f: 74:d5:1c:06:20:dd:af:ae:f5:80:29:cc:d0:71:70: 98:03:6f:58:92:0e:da:45:83:eb:24:f3:41:c7:64: 00:88:07:69:1d:84:32:3c:86:f5:6d:4c:09:3b:7f: 04:05:50:ec:06:ea:38:22:0f:b8:2f:66:a5:be:64: 3c:d7:b3:8c:87:a9:50:c6:96:13:f1:e8:7c:1d:33: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2C:9B:1F:26:58:5C:00:D2:20:3E:EE:5A:47:9E:79:FE:88:F4:53 X509v3 Authority Key Identifier: keyid:1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/QiybHyZYXADSID7uWkeeef6I9FM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.20.0/24 Signature Algorithm: sha256WithRSAEncryption 31:18:0e:54:e8:ad:8b:df:3b:7e:94:a4:80:14:6b:0a:3e:da: 2f:2a:25:2e:0b:1f:6a:e7:19:d1:6a:c4:d2:7b:c0:5c:74:23: 86:9b:b4:38:a2:41:85:56:cf:8f:0b:e6:a6:0a:32:97:65:b5: 9e:7e:95:f6:bb:1e:77:1c:f6:a6:1b:52:03:35:b6:b8:c9:a8: 33:b1:82:3a:85:43:82:f3:13:7e:1a:77:c9:d7:49:32:a3:4b: e5:93:e1:3a:6e:c4:46:bf:ea:96:50:b5:e1:7c:2a:d4:52:cb: 33:ec:ad:87:ae:33:85:f0:a5:cf:18:5b:8b:08:fe:94:8e:3f: 18:ef:33:1e:0c:a8:fb:85:4f:a5:4f:e3:06:8a:f0:7f:70:cd: ac:8b:dd:8b:33:7b:15:cb:65:1b:05:2d:70:8d:72:9a:51:99: 59:ae:d7:d6:54:0a:2e:df:ac:d9:0b:55:83:39:d2:51:3b:27: 6d:2c:23:fc:8a:61:4c:5c:b3:16:57:a2:28:06:1b:5f:ad:d2: 9a:8c:81:7e:f0:c0:1d:e2:b4:cb:64:09:26:6c:bf:f9:7f:10: e0:00:3c:c5:b3:8e:0c:04:40:d5:04:ac:21:2e:91:4c:6a:43: cc:aa:d8:8a:90:55:b4:c7:21:91:88:4a:3e:5c:53:26:cf:9a: e6:03:98:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EsI/Lz9yNbK66nozv3sqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I4YTcwZjkwOWFlM2UxZmMxZGJkNmJkYzQyNWUwOGVl YzgxYjkwHhcNMjYwMTAyMDAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjJjOWIxZjI2NTg1YzAwZDIyMDNlZWU1YTQ3OWU3OWZlODhmNDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu7fe2Z+FKCUOvjJi4AHixRnTD1m EUTyKNZwuhuJ92s8zeR9ASi5AyDVAZFBn9YmLZUhb7ce3m5WkC1k3haHe5djya3E eDe5B0te1543+DIuUcmbuwKJi89BEsKdkOw6xk4rJ2PRCUrw7o+DloVLEuXDG//l piGLYqb2RJi1CPrJ9WgreofqRulcBg/r73SsyrZU8E38Rvy7Vxs7m9XBnc7mAMRM efFr5LgkEig+XDH6Oh901RwGIN2vrvWAKczQcXCYA29Ykg7aRYPrJPNBx2QAiAdp HYQyPIb1bUwJO38EBVDsBuo4Ig+4L2alvmQ817OMh6lQxpYT8eh8HTOltQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEIsmx8mWFwA0iA+7lpHnnn+iPRTMB8GA1UdIwQY MBaAFBrLinD5Ca4+H8Hb1r3EJeCO7IG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N1S2NQa0pyajRmd2R2V3ZjUWw0STdzZ2JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iOTQ1NmUtNGU1Mi00ZGU1LWJiZDYt NjBkZTIyNGNmYTRiLzEvUWl5Ykh5WllYQURTSUQ3dVdrZWVlZjZJOUZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9iOTQ1NmUtNGU1Mi00ZGU1LWJiZDYtNjBkZTIyNGNmYTRi LzEvR3N1S2NQa0pyajRmd2R2V3ZjUWw0STdzZ2JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHYUMA0G CSqGSIb3DQEBCwUAA4IBAQAxGA5U6K2L3zt+lKSAFGsKPtovKiUuCx9q5xnRasTS e8BcdCOGm7Q4okGFVs+PC+amCjKXZbWefpX2ux53HPamG1IDNba4yagzsYI6hUOC 8xN+GnfJ10kyo0vlk+E6bsRGv+qWULXhfCrUUssz7K2HrjOF8KXPGFuLCP6Ujj8Y 7zMeDKj7hU+lT+MGivB/cM2si92LM3sVy2UbBS1wjXKaUZlZrtfWVAou36zZC1WD OdJROydtLCP8imFMXLMWV6IoBhtfrdKajIF+8MAd4rTLZAkmbL/5fxDgADzFs44M BEDVBKwhLpFMakPMqtiKkFW0xyGRiEo+XFMmz5rmA5gH -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:26 2026 by rpki-client