This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qi-tT4j3BR94NA7P1tpJebtlL7c.roa File: qi-tT4j3BR94NA7P1tpJebtlL7c.roa (raw, json) Hash identifier: oNfuGRhBBzP4M/UP49oGgL3h270/cRj1aZSenABCEA0= Subject key identifier: AA:2F:AD:4F:88:F7:05:1F:78:34:0E:CF:D6:DA:49:79:BB:65:2F:B7 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84B158CE1CE43576511E28090FC576 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qi-tT4j3BR94NA7P1tpJebtlL7c.roa Signing time: Fri 02 Jan 2026 16:22:41 +0000 ROA not before: Fri 02 Jan 2026 16:22:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48118 IP address blocks: 95.46.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b1:58:ce:1c:e4:35:76:51:1e:28:09:0f:c5:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa2fad4f88f7051f78340ecfd6da4979bb652fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2f:14:74:99:ec:83:86:f1:ee:54:68:1c:09: d3:2a:67:a9:c2:1b:57:88:30:3e:b7:4b:a3:92:c8: 1f:51:3d:f0:30:f8:06:b8:9d:22:87:ef:46:71:5e: 2d:a9:8e:28:9a:32:29:c6:7c:e7:7d:5c:01:f1:5b: 68:b3:a2:db:99:90:42:7c:c6:cf:da:5d:5e:2c:3e: e6:bc:3f:bc:98:70:eb:2e:0c:78:25:34:f4:83:f3: 63:b0:25:e2:66:c0:d4:6f:76:7f:aa:61:81:44:f3: 21:1a:eb:f0:9f:c3:97:d5:5c:6a:da:6c:cd:1f:64: d3:44:9a:1a:bc:65:08:80:f6:06:97:8a:f5:a0:46: 38:f9:ec:13:cd:cc:ef:6f:8b:1d:2f:05:d8:06:8a: d4:5a:ec:6b:4f:6f:65:c2:84:e9:49:8a:5e:7b:c0: d1:0d:f2:9b:d3:40:33:31:41:67:45:79:9b:e9:22: 06:4c:cc:6d:cf:1f:b5:eb:fa:6f:27:cf:cc:4f:dc: 18:9d:3f:39:a9:16:8b:e1:f4:d1:e4:39:23:c0:5d: 58:57:27:6d:8d:de:3c:08:b5:7d:46:fe:5d:3e:94: cf:48:4e:86:7b:99:3b:c6:1f:39:2d:41:ad:f4:79: 4e:f2:04:90:ae:02:f7:f9:ba:4a:a5:a5:92:98:4a: 4b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2F:AD:4F:88:F7:05:1F:78:34:0E:CF:D6:DA:49:79:BB:65:2F:B7 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qi-tT4j3BR94NA7P1tpJebtlL7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.46.10.0/24 Signature Algorithm: sha256WithRSAEncryption 25:ae:ca:ff:38:78:32:3f:63:cd:eb:2b:7c:13:29:d2:98:d6: 0a:8c:aa:e9:51:59:e6:06:f4:ec:a0:af:7c:a6:d6:1e:34:75: 8b:34:c7:48:fa:3a:41:64:a0:ed:2d:e6:5c:ed:98:2c:99:0e: 32:79:24:0e:c8:7c:bf:c1:ae:17:10:b4:c0:0c:b1:94:81:82: 7c:02:60:f8:7f:16:73:4b:1e:f2:9d:05:01:85:b2:79:f8:17: e6:ee:56:9d:86:49:0b:91:3f:b7:97:a7:37:fc:62:b3:5a:3e: 74:b6:94:11:0b:ef:73:03:1d:b8:3f:65:c3:80:a4:8e:62:bc: a5:7b:eb:d9:78:19:82:0e:da:46:a2:18:d8:dd:f6:ca:bd:da: 52:66:db:16:b7:70:00:13:77:0e:89:e5:d5:05:67:b2:34:03: b5:de:e9:0e:34:ef:76:69:7a:aa:37:e0:19:fc:11:bb:85:7e: 12:7e:e6:66:ed:16:d4:04:80:f7:75:4a:4f:f1:4c:79:55:24: 09:34:6f:6b:c1:f6:52:31:38:e8:5e:6f:b4:d3:8a:da:42:3c: 70:be:e1:98:10:e4:b2:42:98:5c:c4:0f:18:83:bf:41:8c:d4: f7:df:12:c9:24:17:58:cd:07:db:9a:97:18:d3:0e:a4:57:1c: 23:1a:6d:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLFYzhzkNXZRHigJD8V2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTJmYWQ0Zjg4ZjcwNTFmNzgzNDBlY2ZkNmRhNDk3OWJiNjUyZmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi8UdJnsg4bx7lRoHAnTKmepwhtX iDA+t0ujksgfUT3wMPgGuJ0ih+9GcV4tqY4omjIpxnznfVwB8Vtos6LbmZBCfMbP 2l1eLD7mvD+8mHDrLgx4JTT0g/NjsCXiZsDUb3Z/qmGBRPMhGuvwn8OX1Vxq2mzN H2TTRJoavGUIgPYGl4r1oEY4+ewTzczvb4sdLwXYBorUWuxrT29lwoTpSYpee8DR DfKb00AzMUFnRXmb6SIGTMxtzx+16/pvJ8/MT9wYnT85qRaL4fTR5DkjwF1YVydt jd48CLV9Rv5dPpTPSE6Ge5k7xh85LUGt9HlO8gSQrgL3+bpKpaWSmEpL4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKovrU+I9wUfeDQOz9baSXm7ZS+3MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvcWktdFQ0ajNCUjk0TkE3UDF0cEplYnRsTDdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy4KMA0G CSqGSIb3DQEBCwUAA4IBAQAlrsr/OHgyP2PN6yt8EynSmNYKjKrpUVnmBvTsoK98 ptYeNHWLNMdI+jpBZKDtLeZc7ZgsmQ4yeSQOyHy/wa4XELTADLGUgYJ8AmD4fxZz Sx7ynQUBhbJ5+Bfm7ladhkkLkT+3l6c3/GKzWj50tpQRC+9zAx24P2XDgKSOYryl e+vZeBmCDtpGohjY3fbKvdpSZtsWt3AAE3cOieXVBWeyNAO13ukONO92aXqqN+AZ /BG7hX4SfuZm7RbUBID3dUpP8Ux5VSQJNG9rwfZSMTjoXm+004raQjxwvuGYEOSy QphcxA8Yg79BjNT33xLJJBdYzQfbmpcY0w6kVxwjGm0I -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:34 2026 by rpki-client