This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Qvax3lpSBoZEa1FpIaikXUctjb4.roa File: Qvax3lpSBoZEa1FpIaikXUctjb4.roa (raw, json) Hash identifier: W5OvZVVd90LRDX6S2W5r6fiIDa/olFLaPx9Wo1uj13s= Subject key identifier: 42:F6:B1:DE:5A:52:06:86:44:6B:51:69:21:A8:A4:5D:47:2D:8D:BE Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84A63EEB3F52CE6065D16DC9A8837B Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Qvax3lpSBoZEa1FpIaikXUctjb4.roa Signing time: Fri 02 Jan 2026 16:22:38 +0000 ROA not before: Fri 02 Jan 2026 16:22:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43656 IP address blocks: 93.170.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a6:3e:eb:3f:52:ce:60:65:d1:6d:c9:a8:83:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42f6b1de5a520686446b516921a8a45d472d8dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:ac:02:ef:2f:be:1d:e6:df:e1:90:b0:73: 74:15:65:76:e6:30:c8:1d:46:29:67:58:9b:7e:85: 54:78:61:b0:24:2f:7e:9b:84:c4:08:44:ea:7c:87: f8:bf:ac:a4:95:78:84:c8:6c:6c:6f:3d:b3:9d:8a: 18:c0:2f:c1:c4:b1:e8:fc:cc:ce:36:25:de:19:e8: 03:ce:ea:ac:0a:40:79:f8:a4:7d:87:33:70:50:85: 5d:d4:3a:78:6c:af:af:42:e2:8d:e0:f3:a9:ed:67: b3:7d:00:b1:cb:95:36:6f:7a:cd:ee:ff:6f:1b:79: 35:53:99:25:fb:87:81:b9:c6:f9:40:40:6c:a5:a5: 0c:c4:d3:68:92:a7:7e:44:62:ee:f0:32:49:90:c0: 41:87:d4:6d:12:1e:c8:2f:b8:ff:65:3f:35:b2:eb: d8:f0:00:ce:55:39:34:38:b8:c6:c9:46:df:a7:6e: b0:25:76:5e:ed:75:8c:c0:a2:bf:a1:fb:92:f8:dd: 49:54:6f:a9:2c:c8:5d:69:df:04:7b:26:41:f4:50: 97:d3:c7:d7:2a:70:84:2e:93:32:cd:71:7e:a4:41: a9:d6:68:84:e5:35:ea:02:d7:f6:62:9d:56:58:7a: 2d:0d:73:bb:01:c2:77:d6:1a:45:72:ed:4b:f2:75: 4f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F6:B1:DE:5A:52:06:86:44:6B:51:69:21:A8:A4:5D:47:2D:8D:BE X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Qvax3lpSBoZEa1FpIaikXUctjb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.64.0/21 Signature Algorithm: sha256WithRSAEncryption 29:37:48:16:ed:f2:44:62:b2:fd:9d:7c:83:99:09:b8:60:ab: a4:17:d7:f9:99:fe:b0:9d:f1:24:16:c7:48:de:f7:cf:fd:97: 30:80:f4:a1:08:bb:c6:e1:13:77:ff:02:53:5f:b2:81:80:1c: db:2a:2e:aa:bc:ef:42:9e:df:97:7d:69:e0:8c:b7:c4:21:9a: 77:80:0a:7d:ec:05:fc:e2:16:78:f8:af:9a:3e:a9:60:eb:a6: 7e:95:9d:7c:e7:65:ea:60:dc:74:37:22:45:75:d6:0e:4a:2e: 26:4b:b7:be:60:e9:11:de:24:82:05:49:52:74:74:bb:b8:81: 50:b9:40:8c:5a:44:3d:36:9d:3d:9c:1d:85:5c:b8:f8:3b:31: 66:49:ed:05:8c:93:3d:47:4c:86:6e:5a:87:3e:57:bc:63:23: b9:00:77:8c:16:9c:49:f5:81:c1:84:78:7a:eb:e8:a8:a1:f4: 25:9b:98:62:40:ab:43:63:0a:22:f4:04:36:a8:83:26:4d:3d: 9e:96:6a:fd:ca:e0:a8:35:ea:bf:a7:e2:98:bb:b5:1c:60:67: 3e:6e:32:4c:fb:79:5a:09:20:14:87:8b:38:df:06:74:67:32: 38:c5:b5:fe:2a:14:09:88:7f:12:37:bb:5c:09:de:89:ef:5f: c0:af:db:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hKY+6z9SzmBl0W3JqIN7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmY2YjFkZTVhNTIwNjg2NDQ2YjUxNjkyMWE4YTQ1ZDQ3MmQ4ZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLmsAu8vvh3m3+GQsHN0FWV25jDI HUYpZ1ibfoVUeGGwJC9+m4TECETqfIf4v6yklXiEyGxsbz2znYoYwC/BxLHo/MzO NiXeGegDzuqsCkB5+KR9hzNwUIVd1Dp4bK+vQuKN4POp7WezfQCxy5U2b3rN7v9v G3k1U5kl+4eBucb5QEBspaUMxNNokqd+RGLu8DJJkMBBh9RtEh7IL7j/ZT81suvY 8ADOVTk0OLjGyUbfp26wJXZe7XWMwKK/ofuS+N1JVG+pLMhdad8EeyZB9FCX08fX KnCELpMyzXF+pEGp1miE5TXqAtf2Yp1WWHotDXO7AcJ31hpFcu1L8nVP4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEL2sd5aUgaGRGtRaSGopF1HLY2+MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvUXZheDNscFNCb1pFYTFGcElhaWtYVWN0amI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXapAMA0G CSqGSIb3DQEBCwUAA4IBAQApN0gW7fJEYrL9nXyDmQm4YKukF9f5mf6wnfEkFsdI 3vfP/ZcwgPShCLvG4RN3/wJTX7KBgBzbKi6qvO9Cnt+XfWngjLfEIZp3gAp97AX8 4hZ4+K+aPqlg66Z+lZ1852XqYNx0NyJFddYOSi4mS7e+YOkR3iSCBUlSdHS7uIFQ uUCMWkQ9Np09nB2FXLj4OzFmSe0FjJM9R0yGblqHPle8YyO5AHeMFpxJ9YHBhHh6 6+ioofQlm5hiQKtDYwoi9AQ2qIMmTT2elmr9yuCoNeq/p+KYu7UcYGc+bjJM+3la CSAUh4s43wZ0ZzI4xbX+KhQJiH8SN7tcCd6J71/Ar9vl -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:51 2026 by rpki-client