This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QKWxOdN9dw5HL4QNLHbdIm4WNfM.roa File: QKWxOdN9dw5HL4QNLHbdIm4WNfM.roa (raw, json) Hash identifier: MjgKE+bvrvy6rn+1ds19woiOFAJ0776eJ3jkizqX0lo= Subject key identifier: 40:A5:B1:39:D3:7D:77:0E:47:2F:84:0D:2C:76:DD:22:6E:16:35:F3 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84DC04BC3F2A62E8A8672B826042BC Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QKWxOdN9dw5HL4QNLHbdIm4WNfM.roa Signing time: Fri 02 Jan 2026 16:22:51 +0000 ROA not before: Fri 02 Jan 2026 16:22:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61123 IP address blocks: 93.171.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:dc:04:bc:3f:2a:62:e8:a8:67:2b:82:60:42:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40a5b139d37d770e472f840d2c76dd226e1635f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c1:89:5b:8e:e0:a2:fc:2d:11:40:8f:2c:ba: f9:1a:91:4e:1f:81:bd:27:df:e3:93:b2:54:2b:f3: 34:0a:d7:9b:1e:0d:25:13:74:18:52:d1:2d:f1:19: 63:41:1c:9a:44:30:d1:25:12:a6:7d:1b:52:39:d6: 06:81:a8:5d:81:ee:ba:f7:b1:45:4e:5e:c1:07:85: 4b:6a:ff:9a:4b:db:94:bd:5a:94:61:96:7b:d0:f7: 7e:df:1f:c8:ed:63:ad:5e:f3:59:86:67:3f:a8:4d: e3:dc:63:bb:37:39:61:8c:b0:f0:31:58:b6:b8:20: 0d:b8:be:de:5a:64:90:cd:35:4a:92:bc:ae:06:45: 91:b0:25:82:c7:f5:23:8c:fb:a8:d9:61:9e:2d:89: 33:e5:bf:94:8a:3d:64:f8:cd:60:8f:a5:a8:86:fa: b9:22:42:1a:4f:70:8d:d0:30:f2:64:87:23:14:cb: 05:17:82:0a:16:6f:f3:4e:6d:71:a4:55:5d:e3:55: 0d:38:f2:f1:28:48:04:4d:33:0b:74:3c:f3:7b:26: a4:54:c6:7c:3b:1d:c3:b8:6a:6b:ac:b1:b4:16:11: d1:35:bf:39:60:17:e2:d6:b5:f2:88:63:be:dc:71: b3:31:dc:23:22:8b:d5:a2:01:ea:7d:51:89:0b:e4: 6c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A5:B1:39:D3:7D:77:0E:47:2F:84:0D:2C:76:DD:22:6E:16:35:F3 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QKWxOdN9dw5HL4QNLHbdIm4WNfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.219.0/24 Signature Algorithm: sha256WithRSAEncryption 14:d9:db:b4:ee:5c:8d:87:e9:29:c1:f4:85:cc:62:fd:d5:be: 54:74:80:8d:0b:31:7c:08:a5:f1:05:bc:78:11:a0:be:52:4d: d8:fb:71:bc:f2:e5:0b:c4:f0:64:a3:c9:af:be:66:64:29:0a: a4:ea:e8:19:2d:f3:12:b6:de:dc:b7:cb:f0:bc:e8:96:55:cd: 31:2c:60:e9:2b:65:10:9b:68:90:fe:62:07:d7:03:05:7f:66: 83:43:5a:be:3c:9f:a1:a4:ed:64:4d:bf:a0:2d:ce:6c:b7:f0: 3e:35:bb:2c:07:00:ae:59:cd:cf:4c:32:da:2c:ff:d3:ac:ce: 11:eb:8b:ae:39:db:f3:f2:7c:84:91:71:04:82:94:6c:28:3b: 1a:0a:f6:2f:35:74:d1:71:98:ff:b8:c7:ae:a6:18:a5:44:c5: 93:d9:61:d0:a4:00:58:a6:b3:93:cf:7c:37:b2:b2:ad:30:55: 07:c3:cf:8c:b2:95:f4:5d:95:45:3f:a2:6b:68:7e:77:36:a4: 2e:58:e6:7b:97:6d:f1:3b:2d:cb:97:15:63:28:b1:b7:1b:8d: 83:5a:3c:bf:87:9c:41:25:db:61:c9:86:41:62:4e:65:35:90: 3f:2f:d5:ab:1e:7c:fb:23:4d:6f:b0:ad:e5:d5:b2:34:a7:f9: a7:ca:0f:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNwEvD8qYuioZyuCYEK8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGE1YjEzOWQzN2Q3NzBlNDcyZjg0MGQyYzc2ZGQyMjZlMTYzNWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cGJW47govwtEUCPLLr5GpFOH4G9 J9/jk7JUK/M0CtebHg0lE3QYUtEt8RljQRyaRDDRJRKmfRtSOdYGgahdge6697FF Tl7BB4VLav+aS9uUvVqUYZZ70Pd+3x/I7WOtXvNZhmc/qE3j3GO7NzlhjLDwMVi2 uCANuL7eWmSQzTVKkryuBkWRsCWCx/UjjPuo2WGeLYkz5b+Uij1k+M1gj6Wohvq5 IkIaT3CN0DDyZIcjFMsFF4IKFm/zTm1xpFVd41UNOPLxKEgETTMLdDzzeyakVMZ8 Ox3DuGprrLG0FhHRNb85YBfi1rXyiGO+3HGzMdwjIovVogHqfVGJC+RsFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEClsTnTfXcORy+EDSx23SJuFjXzMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvUUtXeE9kTjlkdzVITDRRTkxIYmRJbTRXTmZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXavbMA0G CSqGSIb3DQEBCwUAA4IBAQAU2du07lyNh+kpwfSFzGL91b5UdICNCzF8CKXxBbx4 EaC+Uk3Y+3G88uULxPBko8mvvmZkKQqk6ugZLfMStt7ct8vwvOiWVc0xLGDpK2UQ m2iQ/mIH1wMFf2aDQ1q+PJ+hpO1kTb+gLc5st/A+NbssBwCuWc3PTDLaLP/TrM4R 64uuOdvz8nyEkXEEgpRsKDsaCvYvNXTRcZj/uMeuphilRMWT2WHQpABYprOTz3w3 srKtMFUHw8+MspX0XZVFP6JraH53NqQuWOZ7l23xOy3LlxVjKLG3G42DWjy/h5xB JdthyYZBYk5lNZA/L9WrHnz7I01vsK3l1bI0p/mnyg9X -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:39 2026 by rpki-client