This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/Q1vTPTsAyiBhd4B6ICPubVT5RAA.roa File: Q1vTPTsAyiBhd4B6ICPubVT5RAA.roa (raw, json) Hash identifier: QYiqA7g6apA/hS3xz4OT+/HBNbSOo0h0b476zf/bHvU= Subject key identifier: 43:5B:D3:3D:3B:00:CA:20:61:77:80:7A:20:23:EE:6D:54:F9:44:00 Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 019B76EB5865CDFB5B2954D825AC43F1A1DA Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/Q1vTPTsAyiBhd4B6ICPubVT5RAA.roa Signing time: Thu 01 Jan 2026 00:18:13 +0000 ROA not before: Thu 01 Jan 2026 00:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209227 IP address blocks: 80.191.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:58:65:cd:fb:5b:29:54:d8:25:ac:43:f1:a1:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Jan 1 00:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=435bd33d3b00ca206177807a2023ee6d54f94400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:29:23:d7:ff:55:37:20:18:d8:3c:fd:81:dd: 4a:94:a6:7d:9c:74:e4:d0:e5:5c:74:02:b7:f2:7e: 93:27:16:6d:03:53:1f:78:be:f2:f3:65:f6:f6:74: 67:d9:26:4d:f4:63:65:46:e0:d7:24:3f:c5:ba:8e: 64:e4:ac:15:af:d1:f6:e1:6e:8a:69:8b:71:5c:d2: a4:ae:ac:f4:49:cb:eb:fc:15:0f:03:4f:28:ac:7c: 6b:f4:d2:ad:48:f6:03:a0:f3:c8:2e:1d:bc:68:7b: fd:f0:3a:30:13:62:d8:a9:c3:b8:8f:74:8b:fb:59: 03:55:7f:ba:ba:8e:58:ff:ee:e9:9d:f8:f9:77:0a: 51:67:a9:4f:4d:cf:dc:e4:3c:0e:5b:d0:1e:a0:4f: 96:40:9b:1e:3a:83:f9:7e:e2:e1:ed:82:34:c3:40: 4b:97:31:6c:b4:68:ee:ae:7d:9c:cc:5a:7d:83:ad: b8:cc:c0:25:c2:1d:df:f8:8d:e1:b5:aa:6d:5c:5e: 97:87:70:e6:89:61:2b:97:f8:00:a0:1d:89:d1:44: d4:5d:a4:72:06:44:67:02:f3:f8:4e:a4:5b:6c:1f: 75:f2:13:25:14:27:ba:7d:8d:a4:06:91:37:d6:42: 8f:fe:56:1b:d0:e3:c0:54:b5:17:0b:11:0b:9b:33: 8e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5B:D3:3D:3B:00:CA:20:61:77:80:7A:20:23:EE:6D:54:F9:44:00 X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/Q1vTPTsAyiBhd4B6ICPubVT5RAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.191.78.0/23 Signature Algorithm: sha256WithRSAEncryption 60:ff:4b:c4:a3:28:f7:8b:c9:48:d1:41:18:ae:39:ce:97:ac: f5:04:e4:29:0a:80:c9:e8:95:52:4f:cf:c1:d3:d7:c8:b0:50: 77:c3:67:51:81:fd:ef:87:3f:24:36:db:1d:0d:cd:5c:3a:ba: 4a:5a:08:15:f6:28:50:fc:e0:b8:59:38:8b:31:1e:2b:cc:b3: 21:2f:68:40:30:6e:13:73:09:77:ef:3f:69:9b:0e:e8:c6:f4: 3e:62:fe:30:e9:3e:78:51:92:f5:fc:8c:37:89:a2:83:40:a0: 15:c2:94:12:c6:68:d4:51:c8:a4:26:89:71:08:85:6e:a8:82: 9c:0c:6f:cf:9f:30:d9:80:10:8a:57:89:85:9a:cf:d7:76:22: c8:c5:46:d7:a4:77:ee:94:c6:b0:f7:6d:08:3b:99:65:a8:39: da:28:94:c8:91:a0:18:78:6e:ff:6c:22:01:99:cb:60:f5:1c: e7:fb:a0:96:26:b4:6e:80:99:99:0c:62:a3:7d:f1:ee:95:63: 39:2a:06:7f:67:7f:79:ab:96:49:9e:ba:81:18:94:50:38:8d: e3:6a:7f:43:e5:41:f5:24:29:a5:c8:ea:13:23:ef:46:ac:7b: fc:e9:79:99:8f:87:8a:81:dd:e8:9c:32:1c:a0:85:66:49:38: a7:73:bd:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt261hlzftbKVTYJaxD8aHaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjYwMTAxMDAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzViZDMzZDNiMDBjYTIwNjE3NzgwN2EyMDIzZWU2ZDU0Zjk0NDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ckj1/9VNyAY2Dz9gd1KlKZ9nHTk 0OVcdAK38n6TJxZtA1MfeL7y82X29nRn2SZN9GNlRuDXJD/Fuo5k5KwVr9H24W6K aYtxXNKkrqz0Scvr/BUPA08orHxr9NKtSPYDoPPILh28aHv98DowE2LYqcO4j3SL +1kDVX+6uo5Y/+7pnfj5dwpRZ6lPTc/c5DwOW9AeoE+WQJseOoP5fuLh7YI0w0BL lzFstGjurn2czFp9g624zMAlwh3f+I3htaptXF6Xh3DmiWErl/gAoB2J0UTUXaRy BkRnAvP4TqRbbB918hMlFCe6fY2kBpE31kKP/lYb0OPAVLUXCxELmzOOHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFENb0z07AMogYXeAeiAj7m1U+UQAMB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvUTF2VFBUc0F5aUJoZDRCNklDUHViVlQ1UkFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUL9OMA0G CSqGSIb3DQEBCwUAA4IBAQBg/0vEoyj3i8lI0UEYrjnOl6z1BOQpCoDJ6JVST8/B 09fIsFB3w2dRgf3vhz8kNtsdDc1cOrpKWggV9ihQ/OC4WTiLMR4rzLMhL2hAMG4T cwl37z9pmw7oxvQ+Yv4w6T54UZL1/Iw3iaKDQKAVwpQSxmjUUcikJolxCIVuqIKc DG/PnzDZgBCKV4mFms/XdiLIxUbXpHfulMaw920IO5llqDnaKJTIkaAYeG7/bCIB mctg9Rzn+6CWJrRugJmZDGKjffHulWM5KgZ/Z395q5ZJnrqBGJRQOI3jan9D5UH1 JCmlyOoTI+9GrHv86XmZj4eKgd3onDIcoIVmSTinc71q -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:47 2026 by rpki-client