This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/qWmrXkuHj_sWsoWUwUEWOmRpZO0.roa File: qWmrXkuHj_sWsoWUwUEWOmRpZO0.roa (raw, json) Hash identifier: MHfvuh3eLEasmU8bZ+QtTWQpVIX8pvTM+Puzp/lNHV0= Subject key identifier: A9:69:AB:5E:4B:87:8F:FB:16:B2:85:94:C1:41:16:3A:64:69:64:ED Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b Certificate serial: 019B78A2A4DB5FE30AC8A011C9ECCA3B1CD0 Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/qWmrXkuHj_sWsoWUwUEWOmRpZO0.roa Signing time: Thu 01 Jan 2026 08:18:03 +0000 ROA not before: Thu 01 Jan 2026 08:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20936 IP address blocks: 81.28.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a4:db:5f:e3:0a:c8:a0:11:c9:ec:ca:3b:1c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b Validity Not Before: Jan 1 08:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a969ab5e4b878ffb16b28594c141163a646964ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:42:89:44:52:6d:87:ea:b1:f9:65:f0:c7:b5: cf:e0:23:33:ac:e0:fa:b5:2a:80:c5:89:ca:1e:d0: e2:ea:39:96:4d:23:a6:ac:8b:d9:e0:95:96:8c:e9: 4e:5e:68:93:8b:86:b2:b6:4c:7f:b1:a9:cb:d4:61: b6:52:eb:c0:54:53:fa:ae:ed:da:43:75:a7:52:52: 93:f4:78:79:74:ae:02:5f:b7:5a:3c:89:16:94:a4: b1:a9:21:c8:4b:89:6b:11:ab:83:2e:2d:e8:0b:52: 85:4b:49:19:9f:0e:8c:9f:62:06:f0:d7:fc:d4:e9: 62:47:b2:d9:63:ac:19:fe:d0:ee:02:70:72:8a:f6: 66:b8:3e:35:2c:28:64:0e:66:6f:4f:3a:17:3c:19: 07:a3:5a:f8:c2:43:76:1f:28:ec:70:41:ea:ee:d1: 2d:3b:3e:b7:e0:41:37:07:df:e6:e0:72:75:48:40: 5d:40:fc:a8:30:0e:f4:b1:a2:d4:07:05:72:f7:1d: 04:45:50:c3:0e:25:df:ae:a4:1c:c9:0f:d6:40:e0: 38:ea:cf:f4:94:73:26:97:f2:9c:6f:75:3c:d2:23: 3c:ef:04:2e:f3:e3:90:06:69:06:03:d7:25:43:b6: e1:84:03:8f:14:f6:89:43:99:38:f0:82:62:1d:44: cc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:69:AB:5E:4B:87:8F:FB:16:B2:85:94:C1:41:16:3A:64:69:64:ED X509v3 Authority Key Identifier: keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/qWmrXkuHj_sWsoWUwUEWOmRpZO0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.28.64.0/20 Signature Algorithm: sha256WithRSAEncryption 60:2b:96:97:c7:af:b0:cf:99:34:25:5b:59:f5:09:f4:9d:e7: 4e:79:d2:c6:f8:6d:68:98:ea:bf:4e:6f:27:b1:a8:3e:f1:54: 67:fb:a8:af:4c:aa:d8:46:2b:64:e8:ba:c8:98:41:87:16:42: 80:12:7f:1d:08:45:42:63:a7:09:26:e9:a1:d8:3a:c4:36:28: 8d:ec:57:94:b5:34:71:d7:e4:fe:b9:6a:fd:ed:38:a7:50:0b: 2c:39:1e:14:b5:30:8a:e5:cf:ba:da:e2:7c:fd:8d:6e:e9:4e: c4:7e:71:f7:0c:22:25:50:8b:9d:26:7e:ed:23:cf:21:8c:ce: 99:09:ba:ee:a2:a6:fa:ba:6d:57:45:62:3d:ef:f9:bd:30:37: 41:5d:54:eb:ee:06:cc:cb:56:f9:fe:5b:b3:98:b2:e5:ed:da: df:e2:09:b2:31:8e:d3:44:5c:3b:0e:3d:38:74:8e:f4:2e:49: 8f:e6:af:9c:7d:57:71:9c:dd:5e:fb:2a:77:05:29:76:31:30: bf:a6:70:a1:e2:57:08:75:43:f5:36:ad:84:5b:1c:d8:87:6f: a4:b4:7c:6b:f9:ea:2b:ab:a4:54:c3:5c:56:b3:df:fb:7d:26: e7:53:7d:27:1a:e0:25:77:32:72:b0:b8:50:75:e6:55:b4:62: 90:c5:c8:32 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4oqTbX+MKyKARyezKOxzQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZDcxMDBlNzdlZDkxMTlkNjZlMjMyMWJiNjcxMWQ3ZTc2 MDk4MmIwHhcNMjYwMTAxMDgxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTY5YWI1ZTRiODc4ZmZiMTZiMjg1OTRjMTQxMTYzYTY0Njk2NGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEKJRFJth+qx+WXwx7XP4CMzrOD6 tSqAxYnKHtDi6jmWTSOmrIvZ4JWWjOlOXmiTi4aytkx/sanL1GG2UuvAVFP6ru3a Q3WnUlKT9Hh5dK4CX7daPIkWlKSxqSHIS4lrEauDLi3oC1KFS0kZnw6Mn2IG8Nf8 1OliR7LZY6wZ/tDuAnByivZmuD41LChkDmZvTzoXPBkHo1r4wkN2HyjscEHq7tEt Oz634EE3B9/m4HJ1SEBdQPyoMA70saLUBwVy9x0ERVDDDiXfrqQcyQ/WQOA46s/0 lHMml/Kcb3U80iM87wQu8+OQBmkGA9clQ7bhhAOPFPaJQ5k48IJiHUTMVQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKlpq15Lh4/7FrKFlMFBFjpkaWTtMB8GA1UdIwQY MBaAFPrXEA537ZEZ1m4jIbtnEdfnYJgrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10Y1FEbmZ0a1JuV2JpTWh1MmNSMS1kZ21Dcy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUy LTc2YjBkZGEyYmYzZS8xL3FXbXJYa3VIal9zV3NvV1V3VUVXT21ScFpPMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUyLTc2YjBkZGEyYmYz ZS8xLzEtdGNRRG5mdGtSbldiaU1odTJjUjEtZGdtQ3MuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARRHEAw DQYJKoZIhvcNAQELBQADggEBAGArlpfHr7DPmTQlW1n1CfSd50550sb4bWiY6r9O byexqD7xVGf7qK9MqthGK2TousiYQYcWQoASfx0IRUJjpwkm6aHYOsQ2KI3sV5S1 NHHX5P65av3tOKdQCyw5HhS1MIrlz7ra4nz9jW7pTsR+cfcMIiVQi50mfu0jzyGM zpkJuu6ipvq6bVdFYj3v+b0wN0FdVOvuBszLVvn+W7OYsuXt2t/iCbIxjtNEXDsO PTh0jvQuSY/mr5x9V3Gc3V77KncFKXYxML+mcKHiVwh1Q/U2rYRbHNiHb6S0fGv5 6iurpFTDXFaz3/t9JudTfSca4CV3MnKwuFB15lW0YpDFyDI= -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:01 2026 by rpki-client