This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Qcy7H8pptHALc_HRlSPBrAjHQFk.roa File: Qcy7H8pptHALc_HRlSPBrAjHQFk.roa (raw, json) Hash identifier: c34mSfwg8wGcF0HxnO7HpnD3dUE7IsUJP/VVpFraSK8= Subject key identifier: 41:CC:BB:1F:CA:69:B4:70:0B:73:F1:D1:95:23:C1:AC:08:C7:40:59 Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 019B79111BF8D7AF587A69B13CFAFB9EEBB2 Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Qcy7H8pptHALc_HRlSPBrAjHQFk.roa Signing time: Thu 01 Jan 2026 10:18:42 +0000 ROA not before: Thu 01 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212742 IP address blocks: 37.202.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1b:f8:d7:af:58:7a:69:b1:3c:fa:fb:9e:eb:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Jan 1 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41ccbb1fca69b4700b73f1d19523c1ac08c74059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:15:1a:a5:2d:69:67:71:18:d1:83:c7:71:0f: 0f:13:1f:ed:03:06:7b:a9:4d:1d:ac:fa:24:ba:a3: 25:1a:68:8a:22:b8:1c:b4:68:6a:12:ae:28:a0:21: 03:9e:88:c6:ed:a2:fb:6f:73:59:e6:15:88:06:7d: bd:0d:66:27:77:2f:93:fa:6c:84:d9:4a:3f:e1:1d: 17:2e:01:40:9b:59:15:87:51:02:10:d3:84:cb:91: 31:0c:62:8c:b8:35:4b:af:ef:4e:b9:1f:a5:80:93: 3d:82:c9:43:c9:e2:7f:de:c7:b1:de:80:56:aa:2d: b7:8b:bb:c9:d3:93:37:9f:98:4b:72:25:90:15:bf: 3f:55:75:e6:b1:0b:5c:1f:81:b6:75:78:9b:3d:ca: 32:61:79:62:2d:51:8a:9d:8a:15:dc:04:1f:3e:66: 22:6b:eb:db:8e:d2:d9:70:ba:f1:71:60:a6:f4:3d: b6:bb:98:86:a9:51:77:3f:a5:64:30:06:78:96:39: 52:9d:dc:44:f3:02:62:c1:d0:d6:ab:a5:0a:df:66: 27:45:10:91:aa:56:5c:d9:98:a4:c8:4c:2d:9e:8a: a5:74:55:b7:ae:cd:85:5f:e3:54:43:25:af:b7:57: 77:44:1f:5d:d8:b7:3c:59:4f:b5:9b:91:3d:51:7c: 7c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CC:BB:1F:CA:69:B4:70:0B:73:F1:D1:95:23:C1:AC:08:C7:40:59 X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Qcy7H8pptHALc_HRlSPBrAjHQFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.252.0/22 Signature Algorithm: sha256WithRSAEncryption b9:54:f9:f8:c1:6d:10:41:0b:76:23:9a:9f:21:00:a9:08:4d: 97:ed:8d:5e:5d:26:7b:5a:ec:1e:bd:6d:56:a1:94:00:e0:e9: b4:18:93:33:da:6c:32:ba:a4:6b:62:ec:62:b3:90:f6:e1:fe: be:3c:0d:6d:4a:54:2b:2d:4f:6d:26:33:36:88:de:a9:84:5a: 6d:26:d6:d0:b2:71:99:5a:4d:41:a2:80:26:3f:b1:20:a3:0c: 53:23:1d:f5:a0:18:f7:3c:81:22:9a:38:9a:4d:8c:2a:ae:63: 5d:d0:4d:56:11:e5:72:0f:7d:8d:8e:33:09:3f:aa:a4:a7:f0: cb:aa:db:94:cc:af:7d:bb:ba:0f:cf:f9:9c:78:3e:50:88:dc: c1:93:a0:30:ef:32:58:a4:48:b7:86:90:06:15:f0:4f:2d:bf: d4:27:ca:36:86:29:ab:07:bd:3b:42:36:27:cd:eb:63:12:de: 17:ba:ac:4e:07:60:47:8f:77:c9:4c:77:37:b9:cd:7a:a6:2c: 25:56:c1:f2:b2:4e:9b:4d:01:62:68:52:f7:e6:28:eb:1e:b5: 31:06:cd:83:83:5c:c6:a5:13:59:27:a1:ed:fa:d7:04:77:fa: cc:3e:11:91:04:4f:c7:cf:ff:26:e8:f3:61:59:da:01:96:b4: 32:ae:3a:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ERv4169YemmxPPr7nuuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjYwMTAxMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWNjYmIxZmNhNjliNDcwMGI3M2YxZDE5NTIzYzFhYzA4Yzc0MDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hUapS1pZ3EY0YPHcQ8PEx/tAwZ7 qU0drPokuqMlGmiKIrgctGhqEq4ooCEDnojG7aL7b3NZ5hWIBn29DWYndy+T+myE 2Uo/4R0XLgFAm1kVh1ECENOEy5ExDGKMuDVLr+9OuR+lgJM9gslDyeJ/3sex3oBW qi23i7vJ05M3n5hLciWQFb8/VXXmsQtcH4G2dXibPcoyYXliLVGKnYoV3AQfPmYi a+vbjtLZcLrxcWCm9D22u5iGqVF3P6VkMAZ4ljlSndxE8wJiwdDWq6UK32YnRRCR qlZc2ZikyEwtnoqldFW3rs2FX+NUQyWvt1d3RB9d2Lc8WU+1m5E9UXx8rQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEHMux/KabRwC3Px0ZUjwawIx0BZMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvUWN5N0g4cHB0SEFMY19IUmxTUEJyQWpIUUZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJcr8MA0G CSqGSIb3DQEBCwUAA4IBAQC5VPn4wW0QQQt2I5qfIQCpCE2X7Y1eXSZ7WuwevW1W oZQA4Om0GJMz2mwyuqRrYuxis5D24f6+PA1tSlQrLU9tJjM2iN6phFptJtbQsnGZ Wk1BooAmP7EgowxTIx31oBj3PIEimjiaTYwqrmNd0E1WEeVyD32NjjMJP6qkp/DL qtuUzK99u7oPz/mceD5QiNzBk6Aw7zJYpEi3hpAGFfBPLb/UJ8o2himrB707QjYn zetjEt4XuqxOB2BHj3fJTHc3uc16piwlVsHysk6bTQFiaFL35ijrHrUxBs2Dg1zG pRNZJ6Ht+tcEd/rMPhGRBE/Hz/8m6PNhWdoBlrQyrjqU -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:01 2026 by rpki-client