This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/1-QjCvQyEiSSrXN04KWll_jRfeW0.roa File: 1-QjCvQyEiSSrXN04KWll_jRfeW0.roa (raw, json) Hash identifier: RMz19B8NK0lDXxzH2DOAYRkrqiIKDr84AiR/LHs2BHU= Subject key identifier: F9:08:C2:BD:0C:84:89:24:AB:5C:DD:38:29:69:65:FE:34:5F:79:6D Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019B78A32C990C25F9671C9F50A8FA4F7CC1 Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/1-QjCvQyEiSSrXN04KWll_jRfeW0.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24832 IP address blocks: 81.28.0.0/24 maxlen: 24 81.28.1.0/24 maxlen: 24 81.28.2.0/24 maxlen: 24 81.28.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2c:99:0c:25:f9:67:1c:9f:50:a8:fa:4f:7c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f908c2bd0c848924ab5cdd38296965fe345f796d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:40:51:09:4e:0e:0a:b1:b5:cb:e8:5b:cb:de: 9b:36:6b:ef:e9:2c:9f:f9:63:ea:b7:fa:9a:9a:1c: 46:e9:e6:12:63:4b:70:8f:46:d4:0a:7f:83:69:44: c5:61:c8:02:ab:3b:7f:cb:66:69:87:24:97:a2:60: 6f:39:0e:a6:09:75:7a:2a:a0:10:eb:b7:10:12:c3: 0a:13:ea:2f:e8:23:ee:6c:4d:03:b0:06:61:54:b3: 46:90:f2:9f:a0:82:06:b6:45:ac:ce:68:91:43:ef: ef:75:69:1e:2b:4b:9d:7a:e6:a2:b9:31:ef:05:54: 17:2d:b4:92:31:ff:71:16:64:85:04:6d:a4:14:7a: f5:19:10:13:c6:6f:ab:37:73:c4:63:5c:ea:2b:96: 15:dc:fd:65:50:97:b3:fa:6c:28:d8:02:c6:4a:07: 2c:0e:97:21:b9:19:b2:08:41:30:5f:47:9b:fb:8a: 68:32:37:01:c0:cf:db:2c:a0:a8:c7:56:16:a7:cc: a8:52:06:f5:ed:83:cd:8e:61:9f:a8:e5:c6:b7:58: 96:49:36:b4:24:d8:d2:79:7e:f0:cc:56:f4:cf:87: dc:d3:1a:5b:d8:f3:d7:64:55:d0:39:96:f4:13:b8: 0c:6f:54:49:04:4b:37:ca:77:ac:47:9f:41:d8:b5: fa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:08:C2:BD:0C:84:89:24:AB:5C:DD:38:29:69:65:FE:34:5F:79:6D X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/1-QjCvQyEiSSrXN04KWll_jRfeW0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.28.0.0/22 Signature Algorithm: sha256WithRSAEncryption 92:f1:07:ea:ce:eb:62:3e:a8:61:1d:c8:42:2b:bb:89:0c:6c: 39:0e:5a:ef:b5:6e:65:1c:74:78:9e:03:08:1f:ca:b0:ef:c3: 28:69:45:27:e0:f5:1c:95:1f:27:d9:2a:41:77:e1:41:be:f6: 6d:7d:2b:8f:d6:41:a4:ee:0a:0c:f1:6e:0a:7c:27:49:2f:d6: 33:4f:78:02:e7:32:fd:74:03:f5:ba:2b:37:2b:7a:35:40:43: b0:a9:11:aa:61:6c:63:0c:80:88:44:f5:1e:2c:c8:28:75:4e: 87:47:fb:0e:b3:c0:dd:f2:0f:60:94:9c:24:52:9d:fd:03:81: 78:fa:45:b8:a5:f9:98:b9:ca:bc:03:e0:06:d2:d8:07:29:a5: ce:90:44:06:89:a9:b7:fb:1b:57:dc:f3:5b:8f:76:79:9a:53: e3:ff:48:b2:11:a5:27:5e:23:a0:68:fb:2a:e6:91:42:24:bf: 54:e5:88:b2:5f:6f:c5:0b:13:46:72:bc:e9:a4:75:55:d0:f4: 56:e9:65:61:79:4c:7e:70:16:32:a2:08:f3:0c:da:51:fd:c9: 37:f1:99:d7:02:b5:b5:92:4a:7e:fb:ba:bf:3e:96:1b:f0:24: 52:e1:c2:4e:49:fc:db:80:e7:1c:53:c1:73:10:a7:e7:be:55: f4:0a:3c:c8 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4oyyZDCX5ZxyfUKj6T3zBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTA4YzJiZDBjODQ4OTI0YWI1Y2RkMzgyOTY5NjVmZTM0NWY3OTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0BRCU4OCrG1y+hby96bNmvv6Syf +WPqt/qamhxG6eYSY0twj0bUCn+DaUTFYcgCqzt/y2ZphySXomBvOQ6mCXV6KqAQ 67cQEsMKE+ov6CPubE0DsAZhVLNGkPKfoIIGtkWszmiRQ+/vdWkeK0udeuaiuTHv BVQXLbSSMf9xFmSFBG2kFHr1GRATxm+rN3PEY1zqK5YV3P1lUJez+mwo2ALGSgcs DpchuRmyCEEwX0eb+4poMjcBwM/bLKCox1YWp8yoUgb17YPNjmGfqOXGt1iWSTa0 JNjSeX7wzFb0z4fc0xpb2PPXZFXQOZb0E7gMb1RJBEs3ynesR59B2LX6DwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPkIwr0MhIkkq1zdOClpZf40X3ltMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvMS1RakN2UXlFaVNTclhOMDRLV2xsX2pSZmVXMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDYvMDlkYmE0LTFjOTMtNDlkNi04ODg4LWJmYjRiYTMwZTQ1 YS8xL2p6Z1lWVXBSZ0k3dnVDbnNkR1dqSWk4bkFTTS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlEcADAN BgkqhkiG9w0BAQsFAAOCAQEAkvEH6s7rYj6oYR3IQiu7iQxsOQ5a77VuZRx0eJ4D CB/KsO/DKGlFJ+D1HJUfJ9kqQXfhQb72bX0rj9ZBpO4KDPFuCnwnSS/WM094Aucy /XQD9borNyt6NUBDsKkRqmFsYwyAiET1HizIKHVOh0f7DrPA3fIPYJScJFKd/QOB ePpFuKX5mLnKvAPgBtLYBymlzpBEBompt/sbV9zzW492eZpT4/9IshGlJ14joGj7 KuaRQiS/VOWIsl9vxQsTRnK86aR1VdD0VullYXlMfnAWMqII8wzaUf3JN/GZ1wK1 tZJKfvu6vz6WG/AkUuHCTkn824DnHFPBcxCn575V9Ao8yA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:49 2026 by rpki-client