This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/kqpgzMgdhr3wMyQEV2vtr2Mx3xc.roa File: kqpgzMgdhr3wMyQEV2vtr2Mx3xc.roa (raw, json) Hash identifier: 7vj+pBhw6vHaA4hoqmc9v21Rfqacj7MRpkM3sWCRjSM= Subject key identifier: 92:AA:60:CC:C8:1D:86:BD:F0:33:24:04:57:6B:ED:AF:63:31:DF:17 Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d Certificate serial: 019B7C7F313A2E51ABE83640C77BAA9BD9FA Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/kqpgzMgdhr3wMyQEV2vtr2Mx3xc.roa Signing time: Fri 02 Jan 2026 02:17:48 +0000 ROA not before: Fri 02 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209588 IP address blocks: 141.98.82.0/24 maxlen: 24 141.98.83.0/24 maxlen: 24 2a10:9107:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:31:3a:2e:51:ab:e8:36:40:c7:7b:aa:9b:d9:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d Validity Not Before: Jan 2 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92aa60ccc81d86bdf0332404576bedaf6331df17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:92:f0:73:18:78:4a:55:b2:8d:97:4d:e1:46: 30:91:25:54:47:bb:46:3f:de:10:b3:a8:e3:69:05: 81:15:b0:f6:a4:c5:5e:fc:c1:ad:b2:21:96:eb:60: 66:6e:cf:fd:2b:ff:1b:c7:fd:a4:b8:1c:50:a1:7e: 0e:e0:39:88:06:02:a6:36:ec:cc:2d:00:e6:bf:4d: 5f:cc:ce:2b:9d:b4:c0:5a:19:4f:0c:0c:ab:b7:c7: 6a:09:8d:1e:e3:4f:81:93:83:76:ad:ae:40:16:36: f5:28:0d:be:43:dd:ae:77:c5:81:bd:86:f4:15:6e: 17:32:61:77:b6:ab:0f:dd:c4:7f:74:1d:2f:e9:83: 21:ee:5a:e7:48:ad:7d:14:36:fc:9d:f5:bd:50:e8: 20:e7:46:c5:8c:07:b5:c7:de:c1:54:b4:ee:27:4f: 65:98:2e:d4:79:20:71:48:d5:03:a9:d2:f1:be:3f: 57:ac:06:31:cd:c5:78:4b:83:60:c9:fd:cc:b1:35: 52:03:c4:b3:f0:8b:8f:db:65:97:ac:24:0b:a9:9d: d1:1d:dd:02:a5:f1:87:44:eb:fe:34:bb:a3:31:2c: 99:88:d9:7f:1c:0d:ed:6c:da:b2:4f:48:b5:2b:ae: 70:a2:da:e6:6a:38:8c:57:2d:e4:d1:ee:ed:81:de: da:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AA:60:CC:C8:1D:86:BD:F0:33:24:04:57:6B:ED:AF:63:31:DF:17 X509v3 Authority Key Identifier: keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/kqpgzMgdhr3wMyQEV2vtr2Mx3xc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.82.0/23 IPv6: 2a10:9107:f000::/36 Signature Algorithm: sha256WithRSAEncryption 3b:fd:68:2c:70:7b:f4:92:06:97:a0:9a:c5:70:d0:02:1d:89: be:5c:da:0e:2d:89:e8:47:3f:99:e3:6e:6d:d0:c8:93:8c:87: f9:74:a6:ca:58:d1:78:88:53:23:82:13:aa:48:bb:10:e4:68: b3:5e:74:25:b2:5e:ab:87:33:a2:15:65:8f:31:f3:72:82:f7: bf:71:20:5b:5f:e0:5a:fb:14:aa:97:e0:4c:fd:54:18:76:f0: 97:54:2c:cd:19:ca:b9:aa:3a:ee:40:23:ca:ec:57:1b:2e:e6: b5:a2:09:e0:9b:c2:af:ed:2a:8c:e5:ac:c8:62:da:d4:cb:2b: 29:13:35:a9:46:4f:40:a1:0a:8d:5b:d7:5e:35:5c:bd:95:a5: 37:d6:90:e2:db:b3:1d:f0:53:69:d9:9f:40:e1:53:88:c6:35: db:b3:7b:c4:6f:88:7b:a7:36:cc:2f:3b:58:38:63:97:76:ab: 55:3b:ee:a3:86:93:bf:3a:f2:0a:06:03:b7:95:9a:28:bc:cc: 9a:b6:e4:be:3e:ef:40:61:e5:b8:3e:41:cb:04:40:8b:95:68: d0:46:bf:76:f5:ae:89:30:e2:00:85:e8:d6:7c:93:de:a7:e7: 0f:44:9f:70:15:13:a9:58:81:f0:01:3d:0b:66:a9:20:39:59: 23:fb:f5:c2 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt8fzE6LlGr6DZAx3uqm9n6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYzc4NDA5MjBkMWM3MDlmZjI5OWFlZDM2ODJjMjNmYjQz Mjc2N2QwHhcNMjYwMTAyMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmFhNjBjY2M4MWQ4NmJkZjAzMzI0MDQ1NzZiZWRhZjYzMzFkZjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJLwcxh4SlWyjZdN4UYwkSVUR7tG P94Qs6jjaQWBFbD2pMVe/MGtsiGW62Bmbs/9K/8bx/2kuBxQoX4O4DmIBgKmNuzM LQDmv01fzM4rnbTAWhlPDAyrt8dqCY0e40+Bk4N2ra5AFjb1KA2+Q92ud8WBvYb0 FW4XMmF3tqsP3cR/dB0v6YMh7lrnSK19FDb8nfW9UOgg50bFjAe1x97BVLTuJ09l mC7UeSBxSNUDqdLxvj9XrAYxzcV4S4Ngyf3MsTVSA8Sz8IuP22WXrCQLqZ3RHd0C pfGHROv+NLujMSyZiNl/HA3tbNqyT0i1K65wotrmajiMVy3k0e7tgd7aLwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFJKqYMzIHYa98DMkBFdr7a9jMd8XMB8GA1UdIwQY MBaAFNvHhAkg0ccJ/yma7TaCwj+0MnZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMt NTFiZTJmOTYwOGJjLzEva3FwZ3pNZ2RocjN3TXlRRVYydnRyMk14M3hjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMtNTFiZTJmOTYwOGJj LzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBjWJSMA4E AgACMAgDBgQqEJEH8DANBgkqhkiG9w0BAQsFAAOCAQEAO/1oLHB79JIGl6CaxXDQ Ah2JvlzaDi2J6Ec/meNubdDIk4yH+XSmyljReIhTI4ITqki7EORos150JbJeq4cz ohVljzHzcoL3v3EgW1/gWvsUqpfgTP1UGHbwl1QszRnKuao67kAjyuxXGy7mtaIJ 4JvCr+0qjOWsyGLa1MsrKRM1qUZPQKEKjVvXXjVcvZWlN9aQ4tuzHfBTadmfQOFT iMY127N7xG+Ie6c2zC87WDhjl3arVTvuo4aTvzryCgYDt5WaKLzMmrbkvj7vQGHl uD5BywRAi5Vo0Ea/dvWuiTDiAIXo1nyT3qfnD0SfcBUTqViB8AE9C2apIDlZI/v1 wg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:58 2026 by rpki-client