This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/qPCjKFrGlCNUHjx_vor1JA3jHb8.roa File: qPCjKFrGlCNUHjx_vor1JA3jHb8.roa (raw, json) Hash identifier: l+K/oYAVSbzs8nUlzmSSgb/G/fJy3yi4irQ8IvElAgY= Subject key identifier: A8:F0:A3:28:5A:C6:94:23:54:1E:3C:7F:BE:8A:F5:24:0D:E3:1D:BF Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019B7E388FA83EFFF84CB038E4DC806B96A9 Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/qPCjKFrGlCNUHjx_vor1JA3jHb8.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48628 IP address blocks: 37.0.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8f:a8:3e:ff:f8:4c:b0:38:e4:dc:80:6b:96:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8f0a3285ac69423541e3c7fbe8af5240de31dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:63:41:f6:9a:a5:3e:7a:28:f2:df:78:65:98: a5:4d:28:bd:51:7b:df:ce:43:5f:57:8a:a7:43:ba: 94:09:1a:36:e9:59:35:7f:10:b6:c2:56:8e:86:60: 64:67:86:ca:83:30:37:23:37:b5:40:b5:f7:98:f0: 56:b1:c0:04:07:d3:e6:9b:c5:2f:22:24:b7:22:9a: 25:d2:02:bf:6a:bb:a7:ed:d7:da:be:98:ea:d0:dd: d9:b2:59:77:ea:2f:0e:77:de:58:28:de:69:87:ed: 72:08:71:72:35:b0:f3:42:84:8b:57:53:29:39:ec: 69:7a:5c:77:71:ea:18:c8:aa:43:2e:a7:27:c6:ac: d7:3f:aa:06:b7:a5:0a:8c:c4:59:43:2c:7d:0c:99: 76:0f:30:67:f1:4f:bc:f0:d4:22:28:0e:9a:4b:dd: 49:30:21:56:1d:bb:67:00:98:e4:a6:1d:8a:da:b8: 89:c2:57:33:b1:07:08:bd:dc:49:6e:e8:bf:3e:f3: 79:57:54:7a:10:45:4d:54:6d:8c:1d:d1:29:28:73: a8:10:90:c7:76:9c:a2:af:02:f3:cd:8d:2b:7f:85: 1f:8e:b5:6b:8e:5d:52:2e:03:3c:36:cf:28:31:09: 73:cb:a9:ef:e5:c7:27:5d:29:75:d2:0e:0d:15:49: f7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F0:A3:28:5A:C6:94:23:54:1E:3C:7F:BE:8A:F5:24:0D:E3:1D:BF X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/qPCjKFrGlCNUHjx_vor1JA3jHb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.0.8.0/24 Signature Algorithm: sha256WithRSAEncryption 88:9a:c4:5d:ce:b9:a3:cc:23:9e:14:17:5d:71:28:d4:32:82: 6f:2d:65:8e:12:92:ee:98:34:d9:2f:10:52:00:73:e7:0a:d3: 40:98:a4:de:0a:88:ab:d5:07:cf:e5:74:5d:7f:c0:2f:b4:65: 4a:9c:11:89:fa:6f:8e:2a:48:8a:c8:55:21:05:a2:2d:ed:67: ff:13:f6:03:de:d3:69:9c:dc:d7:44:04:6e:97:9f:c9:08:74: 63:c2:ac:07:7d:0f:23:43:41:c7:68:ed:64:05:72:5a:a8:56: 50:bf:f9:21:86:3c:d8:53:1b:6a:07:bf:86:6d:2d:90:a7:76: 0e:75:57:ea:30:ab:71:02:f8:46:e6:32:de:5c:4a:43:8d:89: 25:4c:9f:3e:7d:f2:29:75:89:fa:5c:ab:a3:ce:17:dd:93:3f: 35:e4:e5:f0:88:50:ae:28:53:43:bd:ec:ab:f5:eb:62:7b:01: 35:da:30:4c:40:1a:8e:c7:d7:46:91:ae:9f:63:e2:bf:f8:8f: ec:5f:53:89:27:37:d5:89:1f:34:b5:bc:55:26:70:a6:e1:af: 4f:5d:c5:ca:5b:03:12:01:4a:0b:ab:ef:6b:1d:29:2e:0c:54: b8:96:0b:b3:d1:23:c4:4e:42:84:63:8a:7f:a7:9e:66:67:34: 4e:af:b1:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OI+oPv/4TLA45NyAa5apMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGYwYTMyODVhYzY5NDIzNTQxZTNjN2ZiZThhZjUyNDBkZTMxZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02NB9pqlPnoo8t94ZZilTSi9UXvf zkNfV4qnQ7qUCRo26Vk1fxC2wlaOhmBkZ4bKgzA3Ize1QLX3mPBWscAEB9Pmm8Uv IiS3Ipol0gK/arun7dfavpjq0N3Zsll36i8Od95YKN5ph+1yCHFyNbDzQoSLV1Mp Oexpelx3ceoYyKpDLqcnxqzXP6oGt6UKjMRZQyx9DJl2DzBn8U+88NQiKA6aS91J MCFWHbtnAJjkph2K2riJwlczsQcIvdxJbui/PvN5V1R6EEVNVG2MHdEpKHOoEJDH dpyirwLzzY0rf4UfjrVrjl1SLgM8Ns8oMQlzy6nv5ccnXSl10g4NFUn3OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKjwoyhaxpQjVB48f76K9SQN4x2/MB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvcVBDaktGckdsQ05VSGp4X3ZvcjFKQTNqSGI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJQAIMA0G CSqGSIb3DQEBCwUAA4IBAQCImsRdzrmjzCOeFBddcSjUMoJvLWWOEpLumDTZLxBS AHPnCtNAmKTeCoir1QfP5XRdf8AvtGVKnBGJ+m+OKkiKyFUhBaIt7Wf/E/YD3tNp nNzXRARul5/JCHRjwqwHfQ8jQ0HHaO1kBXJaqFZQv/khhjzYUxtqB7+GbS2Qp3YO dVfqMKtxAvhG5jLeXEpDjYklTJ8+ffIpdYn6XKujzhfdkz815OXwiFCuKFNDveyr 9etiewE12jBMQBqOx9dGka6fY+K/+I/sX1OJJzfViR80tbxVJnCm4a9PXcXKWwMS AUoLq+9rHSkuDFS4lguz0SPETkKEY4p/p55mZzROr7FI -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:25 2026 by rpki-client