This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/qgc2BHITW3F3Fb1Nu0nXShoQLoM.roa File: qgc2BHITW3F3Fb1Nu0nXShoQLoM.roa (raw, json) Hash identifier: CQpVzp5lW1S/T6Fu+MruSBubNMRYvg+fyjfJdrmJ720= Subject key identifier: AA:07:36:04:72:13:5B:71:77:15:BD:4D:BB:49:D7:4A:1A:10:2E:83 Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 019B7F150F7FA36D971316AC32A97D840011 Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/qgc2BHITW3F3Fb1Nu0nXShoQLoM.roa Signing time: Fri 02 Jan 2026 14:20:44 +0000 ROA not before: Fri 02 Jan 2026 14:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49434 IP address blocks: 89.234.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:0f:7f:a3:6d:97:13:16:ac:32:a9:7d:84:00:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Jan 2 14:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa07360472135b717715bd4dbb49d74a1a102e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a6:cd:5f:d9:60:e4:07:d3:af:4c:74:59:3c: b7:60:7d:89:f3:c7:39:99:f6:25:27:63:a9:db:2c: 72:e7:38:f4:5a:99:ec:5e:d1:68:03:ce:5c:48:08: 80:a6:05:71:18:f5:77:2c:be:85:7a:1a:02:2e:d1: 6a:16:42:f9:7b:b2:71:a8:16:52:cc:b2:92:ef:0b: 42:1a:94:9b:f4:a4:3e:80:cb:b6:61:e7:20:c1:f8: a8:43:e5:50:e0:7d:54:f5:5a:c2:5f:b1:cb:f6:85: 89:cf:fb:c9:43:bb:ce:14:cd:69:2f:b1:1e:ad:0d: 5b:c3:47:21:4e:7e:d1:2f:d9:8f:8d:ff:20:2a:db: ba:c1:30:65:d8:50:3e:95:7b:c8:4e:98:0b:af:7d: 49:95:44:a5:52:fc:06:da:58:e6:4e:db:32:05:cd: 39:08:a3:af:27:f0:de:06:42:0a:c7:87:60:6f:03: c7:89:8e:86:67:7b:ca:2b:bc:be:bb:f8:6b:71:e4: 9c:9c:7c:a5:99:1a:88:dd:79:9d:37:c7:c2:8a:9e: 30:19:71:96:9f:8e:99:34:fa:e9:bf:24:45:0d:4e: 90:7d:30:c7:5a:fb:96:2c:47:27:8b:3b:5e:8c:30: 25:72:82:e5:85:2a:c1:d4:47:21:70:77:1f:62:b1: 16:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:07:36:04:72:13:5B:71:77:15:BD:4D:BB:49:D7:4A:1A:10:2E:83 X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/qgc2BHITW3F3Fb1Nu0nXShoQLoM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.234.190.0/24 Signature Algorithm: sha256WithRSAEncryption 11:63:4b:11:f5:eb:9d:d6:82:09:72:a8:cb:db:7e:4e:fe:55: 90:f1:4e:a8:0a:1e:f6:6f:22:61:d4:01:46:d3:1c:3a:46:dc: b2:b0:e5:59:bf:28:dc:83:91:0f:2b:d0:da:08:0f:6d:96:a3: 3c:4a:0c:62:b9:c9:94:f3:7c:85:7f:1a:6d:b7:55:d3:f3:b5: 14:f5:4e:96:c0:05:f1:2a:d0:63:b7:10:a3:70:f5:f6:50:d7: c7:a4:54:75:1c:f4:69:8a:cd:72:ae:72:2f:a7:f5:36:c9:8c: 99:30:b5:e1:8f:07:79:22:31:fb:b5:36:04:2b:b7:a8:38:be: d5:32:b5:6b:e8:73:c7:b9:6f:33:ae:cc:e7:7d:f4:23:b8:e5: 06:61:4e:72:65:5b:1f:6d:8c:7e:0f:c5:82:3e:2e:04:36:f7: fe:cb:78:53:c4:c0:35:64:ee:a7:3d:a3:c8:29:45:8b:ee:74: 43:49:5c:f6:f6:41:2b:6e:9a:a3:15:f7:99:33:05:a5:9a:ad: 7e:a1:91:ad:e6:fb:82:42:8a:48:24:ab:df:3a:c8:38:7b:5b: 74:75:3f:55:4e:90:4a:fa:ff:d1:f1:3d:f2:9d:be:cb:57:8d: b6:71:7a:13:e7:1a:88:e7:1f:9e:62:86:28:b3:bd:e5:8d:18: b1:b8:83:93 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/FQ9/o22XExasMql9hAARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjYwMTAyMTQyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTA3MzYwNDcyMTM1YjcxNzcxNWJkNGRiYjQ5ZDc0YTFhMTAyZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5abNX9lg5AfTr0x0WTy3YH2J88c5 mfYlJ2Op2yxy5zj0WpnsXtFoA85cSAiApgVxGPV3LL6FehoCLtFqFkL5e7JxqBZS zLKS7wtCGpSb9KQ+gMu2YecgwfioQ+VQ4H1U9VrCX7HL9oWJz/vJQ7vOFM1pL7Ee rQ1bw0chTn7RL9mPjf8gKtu6wTBl2FA+lXvITpgLr31JlUSlUvwG2ljmTtsyBc05 CKOvJ/DeBkIKx4dgbwPHiY6GZ3vKK7y+u/hrceScnHylmRqI3XmdN8fCip4wGXGW n46ZNPrpvyRFDU6QfTDHWvuWLEcniztejDAlcoLlhSrB1EchcHcfYrEWHwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKoHNgRyE1txdxW9TbtJ10oaEC6DMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xL3FnYzJCSElUVzNGM0ZiMU51MG5YU2hvUUxvTS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNmLTk2NWQ2ZDYwM2Jm YS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZ6r4w DQYJKoZIhvcNAQELBQADggEBABFjSxH1653WgglyqMvbfk7+VZDxTqgKHvZvImHU AUbTHDpG3LKw5Vm/KNyDkQ8r0NoID22WozxKDGK5yZTzfIV/Gm23VdPztRT1TpbA BfEq0GO3EKNw9fZQ18ekVHUc9GmKzXKuci+n9TbJjJkwteGPB3kiMfu1NgQrt6g4 vtUytWvoc8e5bzOuzOd99CO45QZhTnJlWx9tjH4PxYI+LgQ29/7LeFPEwDVk7qc9 o8gpRYvudENJXPb2QStumqMV95kzBaWarX6hka3m+4JCikgkq986yDh7W3R1P1VO kEr6/9HxPfKdvstXjbZxehPnGojnH55ihiizveWNGLG4g5M= -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:52 2026 by rpki-client