This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/QH92-KbfL63ctZl3QrX0nIExypM.roa File: QH92-KbfL63ctZl3QrX0nIExypM.roa (raw, json) Hash identifier: aa3zpeOKy0KyaOR31LacRMZS9fLi4Tzjtg5JgfAnbwk= Subject key identifier: 40:7F:76:F8:A6:DF:2F:AD:DC:B5:99:77:42:B5:F4:9C:81:31:CA:93 Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7 Certificate serial: 019B7B368CD7BDE93B4EA2D66129676D997F Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/QH92-KbfL63ctZl3QrX0nIExypM.roa Signing time: Thu 01 Jan 2026 20:18:51 +0000 ROA not before: Thu 01 Jan 2026 20:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60027 IP address blocks: 213.243.48.0/24 maxlen: 24 213.243.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:8c:d7:bd:e9:3b:4e:a2:d6:61:29:67:6d:99:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7 Validity Not Before: Jan 1 20:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=407f76f8a6df2faddcb5997742b5f49c8131ca93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d0:70:78:3a:b5:54:e6:98:65:79:56:16:72: 87:e8:a4:9e:d2:40:68:c1:a2:2d:4c:c0:6f:11:e2: 49:11:1b:24:f4:49:96:da:72:d9:7e:39:d2:a2:0d: 6c:17:fe:4b:04:9f:8f:7f:55:65:40:fb:41:76:d9: eb:94:26:28:ee:fa:4b:c0:0c:76:60:a4:ac:0c:71: 3f:3b:64:87:94:10:7c:4b:f3:38:32:93:2c:a8:e0: b5:f1:fb:3b:39:cd:81:fb:69:11:8c:9b:01:cf:30: 25:8a:cb:88:99:47:a0:f1:31:7c:da:da:4d:ab:38: cb:4a:3a:ae:99:7c:b7:fd:ba:aa:8f:b3:16:cd:e5: a2:bf:ce:e7:f9:f0:13:f6:43:62:73:07:a0:b6:f2: c0:a4:37:7f:58:e6:19:dd:46:32:8b:3c:65:67:9c: 35:61:e0:ee:62:97:bd:45:21:12:4a:b3:33:0e:cd: 1e:f0:e0:16:29:79:b4:f6:19:aa:c0:98:bb:74:23: 10:02:04:ac:00:67:23:9c:f0:61:79:a2:7c:0c:5b: 84:3a:cb:1d:ae:a4:cf:de:ca:13:c9:81:33:38:ec: 52:e8:a6:56:a0:b5:ee:9c:5e:2f:bc:7e:9e:6f:6e: 02:38:7a:13:c8:91:e0:8f:5e:90:f2:f0:33:b7:4d: 90:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7F:76:F8:A6:DF:2F:AD:DC:B5:99:77:42:B5:F4:9C:81:31:CA:93 X509v3 Authority Key Identifier: keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/QH92-KbfL63ctZl3QrX0nIExypM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.243.48.0/24 213.243.61.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:dd:f5:da:dd:fa:d3:08:44:11:31:8d:bc:09:d9:f8:67:e0: 00:d8:6f:da:df:84:b4:52:81:85:98:92:74:8f:ac:91:5f:3c: 2c:e1:42:7d:41:03:cd:80:f3:ed:53:1d:02:ec:ab:e5:05:25: 63:79:2a:65:c3:01:e3:7c:32:2f:fa:68:78:92:2a:d2:0d:73: a0:23:c6:7f:39:c4:15:59:bc:ec:6a:95:8b:3a:ce:49:fd:c7: d9:9a:42:a7:44:6d:e2:35:cb:e6:c2:bf:f2:98:75:4a:ba:60: 3e:d8:7f:14:c3:9c:7e:d4:a4:78:49:cd:64:d8:f5:ea:41:96: 4d:79:5c:62:ac:70:bb:d5:63:3d:1d:25:b1:0b:79:67:2d:bd: ba:7b:22:8a:6b:79:72:0d:ab:39:0e:7e:59:31:07:36:18:ac: f7:cb:cd:38:d0:a2:a7:f0:98:30:24:90:65:12:e4:4a:70:b8: b5:ee:b5:c2:6c:63:24:86:5e:42:6c:8d:fd:8a:ed:a7:e6:6e: 37:37:5e:05:8e:e2:ce:77:5c:af:b4:28:e2:5b:86:db:95:f9: ca:64:f9:0a:a9:64:39:91:a3:c1:0c:94:66:59:71:46:73:9e: 64:4b:da:d3:7b:db:7d:62:25:44:b4:60:49:07:b2:6a:c6:59: 4c:c5:6d:4e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NozXvek7TqLWYSlnbZl/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OTIyMGE4MDVlNDM3ODU0N2U0M2JhYzczMWNlODZmZTAx MTQ1YzcwHhcNMjYwMTAxMjAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDdmNzZmOGE2ZGYyZmFkZGNiNTk5Nzc0MmI1ZjQ5YzgxMzFjYTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtBweDq1VOaYZXlWFnKH6KSe0kBo waItTMBvEeJJERsk9EmW2nLZfjnSog1sF/5LBJ+Pf1VlQPtBdtnrlCYo7vpLwAx2 YKSsDHE/O2SHlBB8S/M4MpMsqOC18fs7Oc2B+2kRjJsBzzAlisuImUeg8TF82tpN qzjLSjqumXy3/bqqj7MWzeWiv87n+fAT9kNicwegtvLApDd/WOYZ3UYyizxlZ5w1 YeDuYpe9RSESSrMzDs0e8OAWKXm09hmqwJi7dCMQAgSsAGcjnPBheaJ8DFuEOssd rqTP3soTyYEzOOxS6KZWoLXunF4vvH6eb24COHoTyJHgj16Q8vAzt02QnwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEB/dvim3y+t3LWZd0K19JyBMcqTMB8GA1UdIwQY MBaAFLeSIKgF5DeFR+Q7rHMc6G/gEUXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDkt NDIzYWZjMmI2OGI4LzEvUUg5Mi1LYmZMNjNjdFpsM1FyWDBuSUV4eXBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDktNDIzYWZjMmI2OGI4 LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1fMwAwQA 1fM9MA0GCSqGSIb3DQEBCwUAA4IBAQCO3fXa3frTCEQRMY28Cdn4Z+AA2G/a34S0 UoGFmJJ0j6yRXzws4UJ9QQPNgPPtUx0C7KvlBSVjeSplwwHjfDIv+mh4kirSDXOg I8Z/OcQVWbzsapWLOs5J/cfZmkKnRG3iNcvmwr/ymHVKumA+2H8Uw5x+1KR4Sc1k 2PXqQZZNeVxirHC71WM9HSWxC3lnLb26eyKKa3lyDas5Dn5ZMQc2GKz3y8040KKn 8JgwJJBlEuRKcLi17rXCbGMkhl5CbI39iu2n5m43N14FjuLOd1yvtCjiW4bblfnK ZPkKqWQ5kaPBDJRmWXFGc55kS9rTe9t9YiVEtGBJB7JqxllMxW1O -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:10 2026 by rpki-client