This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QtSH-D_nkxtjoDk8kpfof3_HDP4.roa File: QtSH-D_nkxtjoDk8kpfof3_HDP4.roa (raw, json) Hash identifier: xf8dbtqQ2hZn03UJNKMyYPdxfQCAuMwl1sUdf4owpF0= Subject key identifier: 42:D4:87:F8:3F:E7:93:1B:63:A0:39:3C:92:97:E8:7F:7F:C7:0C:FE Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84D29761071D8EF811F05D716C0F29 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QtSH-D_nkxtjoDk8kpfof3_HDP4.roa Signing time: Fri 02 Jan 2026 16:22:49 +0000 ROA not before: Fri 02 Jan 2026 16:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59825 IP address blocks: 93.171.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d2:97:61:07:1d:8e:f8:11:f0:5d:71:6c:0f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42d487f83fe7931b63a0393c9297e87f7fc70cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:e7:e1:15:ce:6e:69:5a:44:74:0c:3e:ce: 58:8c:ae:d5:75:01:07:d7:94:ab:f7:64:bb:b6:5b: 88:9e:11:9e:22:73:bb:21:c7:a9:eb:22:01:19:01: 8c:7d:7a:d1:91:28:8c:af:61:8c:98:8d:da:a7:10: 23:b8:ca:17:e0:05:5d:21:d2:f4:72:5d:bc:e9:62: bf:97:6f:96:74:5b:18:09:25:af:95:4b:49:47:5d: 2c:2c:78:61:8f:a3:11:33:5a:48:c4:ee:9c:98:f5: 4f:ac:90:fa:d2:c4:3d:1c:82:5d:02:96:4e:3a:9d: 52:0a:de:f0:c0:13:6d:00:c7:d1:57:16:e2:8e:03: de:1f:48:40:74:e7:3e:9d:30:31:fd:c2:5e:93:0e: f8:c7:5a:e4:30:19:4e:bc:04:7e:15:f3:12:8b:43: e9:4d:6d:77:c2:f7:2e:25:d9:94:2a:ba:02:30:57: 69:53:96:89:fb:b9:b9:4f:15:95:e6:32:2b:26:96: 4d:c9:96:85:50:57:17:58:2d:ac:ba:96:94:40:c8: 96:09:b6:25:bc:f7:e7:96:67:fd:59:10:f9:cd:6e: 64:3d:bd:28:45:86:29:30:ee:72:aa:e6:ff:16:e0: 3b:5d:45:6f:0c:76:48:7e:04:f1:b4:19:cb:58:43: 5c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D4:87:F8:3F:E7:93:1B:63:A0:39:3C:92:97:E8:7F:7F:C7:0C:FE X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QtSH-D_nkxtjoDk8kpfof3_HDP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.173.0/24 Signature Algorithm: sha256WithRSAEncryption a6:10:d8:d0:ce:05:18:e3:97:79:8f:5e:f8:19:1f:4b:80:b1: d1:b3:57:c2:6a:e6:ec:44:86:bf:23:c2:21:42:38:b8:8d:6b: da:d1:b5:a3:72:8b:9b:f2:d1:9d:52:1b:05:24:86:99:5e:21: 29:4e:e1:88:a6:00:14:f8:b8:85:2e:a8:3f:d2:5d:46:36:c9: 8b:a4:c8:db:a9:2d:cb:95:b5:82:f6:7f:7b:7a:90:f0:50:a1: 75:2d:3d:31:7b:0b:c7:16:3e:51:35:f8:64:93:ad:1c:b9:9d: 16:05:8e:02:d8:5d:c8:d3:31:e6:07:40:1e:e5:11:7c:0b:6d: b7:24:4e:f9:c0:77:65:3d:c5:94:4a:cf:07:57:6c:9e:f6:5d: 06:f9:ce:e7:98:18:2a:36:d1:5a:d8:25:76:9f:7b:a3:7d:4a: 84:27:6e:4d:cb:c9:a9:69:6f:d3:30:b7:ce:06:39:e2:4d:31: be:7f:18:be:f6:37:de:05:e0:60:0b:c0:e5:24:31:79:38:46: 7c:28:86:f5:f7:1f:a4:fa:5a:7b:bc:6c:4f:ef:eb:93:a7:23: bb:5b:2e:59:86:1e:10:76:12:02:a5:54:8f:b2:a3:8c:71:e6: 42:51:db:c3:5d:04:33:8d:46:77:d9:ed:e9:c2:ee:f3:d3:89: e4:c3:3f:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNKXYQcdjvgR8F1xbA8pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmQ0ODdmODNmZTc5MzFiNjNhMDM5M2M5Mjk3ZTg3ZjdmYzcwY2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf3n4RXObmlaRHQMPs5YjK7VdQEH 15Sr92S7tluInhGeInO7Icep6yIBGQGMfXrRkSiMr2GMmI3apxAjuMoX4AVdIdL0 cl286WK/l2+WdFsYCSWvlUtJR10sLHhhj6MRM1pIxO6cmPVPrJD60sQ9HIJdApZO Op1SCt7wwBNtAMfRVxbijgPeH0hAdOc+nTAx/cJekw74x1rkMBlOvAR+FfMSi0Pp TW13wvcuJdmUKroCMFdpU5aJ+7m5TxWV5jIrJpZNyZaFUFcXWC2supaUQMiWCbYl vPfnlmf9WRD5zW5kPb0oRYYpMO5yqub/FuA7XUVvDHZIfgTxtBnLWENcHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFELUh/g/55MbY6A5PJKX6H9/xwz+MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvUXRTSC1EX25reHRqb0RrOGtwZm9mM19IRFA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXautMA0G CSqGSIb3DQEBCwUAA4IBAQCmENjQzgUY45d5j174GR9LgLHRs1fCaubsRIa/I8Ih Qji4jWva0bWjcoub8tGdUhsFJIaZXiEpTuGIpgAU+LiFLqg/0l1GNsmLpMjbqS3L lbWC9n97epDwUKF1LT0xewvHFj5RNfhkk60cuZ0WBY4C2F3I0zHmB0Ae5RF8C223 JE75wHdlPcWUSs8HV2ye9l0G+c7nmBgqNtFa2CV2n3ujfUqEJ25Ny8mpaW/TMLfO BjniTTG+fxi+9jfeBeBgC8DlJDF5OEZ8KIb19x+k+lp7vGxP7+uTpyO7Wy5Zhh4Q dhICpVSPsqOMceZCUdvDXQQzjUZ32e3pwu7z04nkwz9G -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:20 2026 by rpki-client