This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/QfIo87XsCuJzTUYuuoqKD3WaLb0.roa File: QfIo87XsCuJzTUYuuoqKD3WaLb0.roa (raw, json) Hash identifier: 3OJrGr0r+PmdJst/a4vFJ2BEBu96S/fI6q0nYYtF9LQ= Subject key identifier: 41:F2:28:F3:B5:EC:0A:E2:73:4D:46:2E:BA:8A:8A:0F:75:9A:2D:BD Certificate issuer: /CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff Certificate serial: 019B7D5D0C05E1B045D75AE3A8EED7C31C39 Authority key identifier: 6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/QfIo87XsCuJzTUYuuoqKD3WaLb0.roa Signing time: Fri 02 Jan 2026 06:20:08 +0000 ROA not before: Fri 02 Jan 2026 06:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1103 IP address blocks: 156.83.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:0c:05:e1:b0:45:d7:5a:e3:a8:ee:d7:c3:1c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff Validity Not Before: Jan 2 06:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41f228f3b5ec0ae2734d462eba8a8a0f759a2dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:56:f5:23:10:97:d2:a4:30:4a:77:53:0a:62: 25:86:83:61:a8:f7:6b:d9:c2:51:c0:b2:c4:b0:0e: e9:f9:45:0a:95:9f:f5:a0:8d:cb:72:b1:0a:1e:74: 08:22:6d:c1:29:bd:3e:47:eb:18:2b:02:82:ca:a6: e1:f8:e5:fe:0e:c2:71:06:e4:66:99:c2:51:8b:a0: d4:78:2e:76:10:f0:c3:91:79:4e:8d:94:86:a7:d1: 5e:3c:e3:1d:bb:f4:c1:0e:06:15:a9:73:75:d0:2a: f0:06:b7:07:66:67:ad:52:89:90:04:14:2f:a5:96: c5:f8:28:be:61:72:38:6b:e0:61:a3:db:c2:8d:19: 6b:02:c6:9e:51:6b:27:aa:99:8b:d7:0a:a1:bb:7e: 00:10:bc:b6:1d:60:31:69:37:f3:d5:55:26:4c:75: 29:15:32:0a:0b:b6:03:1d:89:47:a1:8c:97:ac:c5: 91:a2:9f:fa:85:f2:ca:88:22:84:ba:a3:f8:58:2c: ee:03:a5:c8:01:fc:5d:d0:da:be:ac:5d:a1:a0:e5: 1f:54:7e:63:49:35:95:54:f0:4b:d0:0a:00:55:2e: a1:b5:2d:47:71:2b:1c:44:2e:4d:7c:1a:f4:2d:76: 0a:46:b8:26:80:78:9a:f7:eb:98:ff:20:dc:c4:ff: 48:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F2:28:F3:B5:EC:0A:E2:73:4D:46:2E:BA:8A:8A:0F:75:9A:2D:BD X509v3 Authority Key Identifier: keyid:6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/QfIo87XsCuJzTUYuuoqKD3WaLb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 156.83.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3d:6e:59:1a:a2:47:a0:ab:15:7d:30:0a:a9:28:67:e0:39:0b: ff:09:e9:c8:a1:b4:ab:b9:ed:5b:33:a5:63:f0:94:41:d4:7c: 4f:ec:d0:36:ca:9b:d2:e3:3e:c8:fb:1b:cc:ea:53:1d:4b:75: a8:32:6d:ab:dd:c4:eb:c2:81:d9:c7:0e:82:07:ff:0b:13:7c: 9e:ed:8e:72:6c:b3:3b:b5:c9:d0:98:57:13:06:0a:ef:4f:bc: 4c:e3:42:c6:7b:f0:a5:8a:69:0b:36:75:d3:a6:09:14:50:47: df:26:40:73:cd:74:a0:35:88:2d:31:b2:51:a9:dc:99:38:ba: 17:14:ed:ec:90:20:36:8b:10:45:11:03:73:f1:03:29:6e:21: a6:4c:d7:bc:f4:7e:d7:60:d6:4b:67:d2:83:b9:44:88:34:9d: 09:11:29:83:70:72:0a:d4:82:b7:dd:f3:c8:ba:ef:c4:c2:51: 22:b5:78:f7:5f:2d:41:74:fb:af:5a:57:a0:e8:fd:0c:91:64: 25:20:47:43:23:5b:b3:d1:e9:a2:58:ac:a9:1a:21:3d:a4:ea: 41:44:43:ff:e8:39:4e:98:b1:68:d8:62:c8:48:c0:e7:49:41: c5:9e:13:18:38:e3:7b:4d:4b:bc:ce:a4:15:fb:55:65:a8:df: c7:0b:d0:16 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt9XQwF4bBF11rjqO7Xwxw5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZjFjODcyNGNiYmQwMzRiYWI3YTBkYWRmMGFiNGI5OWZm NjZmZmYwHhcNMjYwMTAyMDYyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWYyMjhmM2I1ZWMwYWUyNzM0ZDQ2MmViYThhOGEwZjc1OWEyZGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Vb1IxCX0qQwSndTCmIlhoNhqPdr 2cJRwLLEsA7p+UUKlZ/1oI3LcrEKHnQIIm3BKb0+R+sYKwKCyqbh+OX+DsJxBuRm mcJRi6DUeC52EPDDkXlOjZSGp9FePOMdu/TBDgYVqXN10CrwBrcHZmetUomQBBQv pZbF+Ci+YXI4a+Bho9vCjRlrAsaeUWsnqpmL1wqhu34AELy2HWAxaTfz1VUmTHUp FTIKC7YDHYlHoYyXrMWRop/6hfLKiCKEuqP4WCzuA6XIAfxd0Nq+rF2hoOUfVH5j STWVVPBL0AoAVS6htS1HcSscRC5NfBr0LXYKRrgmgHia9+uY/yDcxP9IAwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFEHyKPO17Aric01GLrqKig91mi29MB8GA1UdIwQY MBaAFG3xyHJMu9A0ureg2t8KtLmf9m//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmZISWNreTcwRFM2dDZEYTN3cTB1Wl8yYl84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9lMDc4MWYtNmU2NC00NmFhLThhZjAt ZjkyNGQ2ZjZhNTk1LzEvUWZJbzg3WHNDdUp6VFVZdXVvcUtEM1dhTGIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9lMDc4MWYtNmU2NC00NmFhLThhZjAtZjkyNGQ2ZjZhNTk1 LzEvYmZISWNreTcwRFM2dDZEYTN3cTB1Wl8yYl84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnFMwDQYJ KoZIhvcNAQELBQADggEBAD1uWRqiR6CrFX0wCqkoZ+A5C/8J6cihtKu57VszpWPw lEHUfE/s0DbKm9LjPsj7G8zqUx1LdagybavdxOvCgdnHDoIH/wsTfJ7tjnJsszu1 ydCYVxMGCu9PvEzjQsZ78KWKaQs2ddOmCRRQR98mQHPNdKA1iC0xslGp3Jk4uhcU 7eyQIDaLEEURA3PxAyluIaZM17z0ftdg1ktn0oO5RIg0nQkRKYNwcgrUgrfd88i6 78TCUSK1ePdfLUF0+69aV6Do/QyRZCUgR0MjW7PR6aJYrKkaIT2k6kFEQ//oOU6Y sWjYYshIwOdJQcWeExg443tNS7zOpBX7VWWo38cL0BY= -----END CERTIFICATE-----Generated at Mon Jan 26 03:08:30 2026 by rpki-client