This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qikBM4H39ZQWZMoqdjGKpqwA50c.roa File: qikBM4H39ZQWZMoqdjGKpqwA50c.roa (raw, json) Hash identifier: 5YGNC0blnljJ5NKFZdTU09L+yZtaMLUvUwbzgcxzNuM= Subject key identifier: AA:29:01:33:81:F7:F5:94:16:64:CA:2A:76:31:8A:A6:AC:00:E7:47 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F851FB8107CB97BD91BA0D40017EDE8 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qikBM4H39ZQWZMoqdjGKpqwA50c.roa Signing time: Fri 02 Jan 2026 16:23:09 +0000 ROA not before: Fri 02 Jan 2026 16:23:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215851 IP address blocks: 95.47.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:1f:b8:10:7c:b9:7b:d9:1b:a0:d4:00:17:ed:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa29013381f7f5941664ca2a76318aa6ac00e747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:90:d7:bb:18:40:5f:6c:73:90:13:af:d6:e6: 8f:d4:83:a8:1e:aa:bc:b8:e5:3c:da:ae:83:bc:ad: 80:db:d4:e4:7a:e1:a0:f7:15:5a:02:07:0b:56:1b: e0:db:99:5b:1e:92:4a:a2:a7:38:82:4f:25:2a:d5: 47:1f:2a:ff:d4:5a:0a:40:71:cd:1c:3b:67:47:ee: 7e:8a:b8:00:48:07:84:4d:38:7f:6e:7b:d7:04:e2: 7a:c3:87:3a:31:b3:25:be:8a:6a:d8:78:68:7a:1a: 0e:81:d1:94:fd:59:31:60:22:12:5f:e7:76:db:ec: 80:5c:7f:e6:62:8d:2a:63:90:4a:85:ce:c4:7a:bb: 63:c9:4a:d6:ee:bf:f4:72:6a:e3:2d:cf:ca:b4:e9: a6:89:50:f8:32:29:78:93:e8:9f:d5:e5:f1:de:6e: 06:af:c4:2b:99:8e:67:56:9b:43:1b:5e:a9:2c:ad: fa:a6:d2:18:ce:3d:1f:dc:ed:94:fb:44:05:4a:c8: 5a:ef:2c:96:29:59:4e:86:f6:2c:8d:c2:c4:02:0b: 56:f7:79:a2:4a:97:02:8c:94:7d:70:ef:d1:0c:52: 4b:6e:dd:49:f4:82:bd:f5:04:ca:df:6e:dc:fd:98: a7:7d:17:87:a8:6a:c0:95:ed:05:9f:23:d1:ae:c9: 15:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:29:01:33:81:F7:F5:94:16:64:CA:2A:76:31:8A:A6:AC:00:E7:47 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qikBM4H39ZQWZMoqdjGKpqwA50c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.47.63.0/24 Signature Algorithm: sha256WithRSAEncryption 00:38:dc:46:93:20:37:64:35:9b:d4:02:a3:26:e4:4c:7b:51: 86:2a:ef:ff:f2:49:2c:c5:b9:84:d1:9f:b5:3d:12:ec:74:17: ee:fc:41:da:d1:92:b4:2d:ac:e2:7f:5d:6e:4a:90:39:39:35: a0:37:49:61:7d:b0:79:c7:7b:74:a1:6b:f4:be:77:ce:01:d3: 83:3f:c9:6f:9b:c1:77:d8:75:07:8b:69:d4:af:c6:df:9b:a6: c4:49:58:13:8f:81:04:88:29:63:2b:48:6b:a0:6c:a3:69:da: e6:76:1e:97:ab:36:86:f2:43:3a:23:9c:1c:0f:04:bb:a5:dc: 47:e6:19:4f:ab:99:97:33:67:67:9a:60:52:d8:b4:d0:2a:46: 49:7e:0e:e0:59:f4:c0:87:f3:c7:20:4e:fe:e8:1b:5c:de:cb: cb:f7:83:95:cb:aa:cd:33:10:f9:0c:d8:68:28:63:48:b8:35: da:6b:69:b5:58:bb:5c:7d:f1:18:64:d2:8e:e9:c5:23:1a:55: f7:46:57:7c:5b:b4:05:b8:1c:27:89:d5:7d:24:6f:60:57:7a: 1e:fb:ab:7a:6b:9e:e3:6a:db:04:5c:ec:9e:b6:1d:f4:41:0f: 15:91:e7:1d:ef:af:e9:d7:79:97:d7:32:1b:87:2b:66:d4:d8: cc:d3:36:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hR+4EHy5e9kboNQAF+3oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTI5MDEzMzgxZjdmNTk0MTY2NGNhMmE3NjMxOGFhNmFjMDBlNzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZDXuxhAX2xzkBOv1uaP1IOoHqq8 uOU82q6DvK2A29TkeuGg9xVaAgcLVhvg25lbHpJKoqc4gk8lKtVHHyr/1FoKQHHN HDtnR+5+irgASAeETTh/bnvXBOJ6w4c6MbMlvopq2HhoehoOgdGU/VkxYCISX+d2 2+yAXH/mYo0qY5BKhc7EertjyUrW7r/0cmrjLc/KtOmmiVD4Mil4k+if1eXx3m4G r8QrmY5nVptDG16pLK36ptIYzj0f3O2U+0QFSsha7yyWKVlOhvYsjcLEAgtW93mi SpcCjJR9cO/RDFJLbt1J9IK99QTK327c/ZinfReHqGrAle0FnyPRrskVdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKopATOB9/WUFmTKKnYxiqasAOdHMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvcWlrQk00SDM5WlFXWk1vcWRqR0twcXdBNTBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy8/MA0G CSqGSIb3DQEBCwUAA4IBAQAAONxGkyA3ZDWb1AKjJuRMe1GGKu//8kksxbmE0Z+1 PRLsdBfu/EHa0ZK0Lazif11uSpA5OTWgN0lhfbB5x3t0oWv0vnfOAdODP8lvm8F3 2HUHi2nUr8bfm6bESVgTj4EEiCljK0hroGyjadrmdh6XqzaG8kM6I5wcDwS7pdxH 5hlPq5mXM2dnmmBS2LTQKkZJfg7gWfTAh/PHIE7+6Btc3svL94OVy6rNMxD5DNho KGNIuDXaa2m1WLtcffEYZNKO6cUjGlX3Rld8W7QFuBwnidV9JG9gV3oe+6t6a57j atsEXOyeth30QQ8Vkecd76/p13mX1zIbhytm1NjM0zYc -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:38 2026 by rpki-client