This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/QfXrjLJUb_JZ4_SXYspmGSo1vhU.roa File: QfXrjLJUb_JZ4_SXYspmGSo1vhU.roa (raw, json) Hash identifier: VbKsZvzC9FvlIfRYrSZ78JLt37iuRlrN1qMCaWZNw9I= Subject key identifier: 41:F5:EB:8C:B2:54:6F:F2:59:E3:F4:97:62:CA:66:19:2A:35:BE:15 Certificate issuer: /CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e Certificate serial: 019BB24523900A1DC8EC38B3822E12264ACA Authority key identifier: 48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/QfXrjLJUb_JZ4_SXYspmGSo1vhU.roa Signing time: Mon 12 Jan 2026 12:53:54 +0000 ROA not before: Mon 12 Jan 2026 12:53:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57013 IP address blocks: 87.76.32.0/24 maxlen: 24 87.76.33.0/24 maxlen: 24 87.76.34.0/23 maxlen: 23 87.76.36.0/22 maxlen: 22 87.76.40.0/21 maxlen: 21 87.76.48.0/21 maxlen: 21 87.76.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:45:23:90:0a:1d:c8:ec:38:b3:82:2e:12:26:4a:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e Validity Not Before: Jan 12 12:53:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41f5eb8cb2546ff259e3f49762ca66192a35be15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:24:ed:ea:28:b3:53:11:e9:ce:70:d1:3b:90: f2:ad:3a:58:51:46:28:53:bc:14:68:54:a5:5a:26: f1:05:30:71:91:6f:11:0e:b1:6f:0d:67:f2:b8:57: 8e:fa:c8:31:bf:1a:86:eb:2a:e0:ad:a4:9e:53:22: f8:57:4d:ee:15:79:d2:5f:36:38:4d:d5:2f:da:bf: 0a:36:33:8c:c0:57:bc:a1:11:b8:df:26:16:a1:06: 21:7a:e5:b7:ec:7b:65:5c:2e:96:6d:fc:b4:10:f2: cd:2d:83:1f:fa:a7:ac:a6:da:10:fb:04:45:51:16: 45:bb:83:6d:e1:97:f4:1f:21:d7:d2:6a:37:40:c8: f9:3d:e6:dd:34:ae:1e:5b:80:16:87:b1:4c:15:df: 86:bc:db:f4:d9:98:5e:6c:30:8f:6c:36:a6:a3:9b: 59:ce:22:c8:2c:71:93:a8:43:20:5c:41:6a:16:a5: af:85:d2:28:63:eb:5a:47:c5:46:a7:b3:c9:24:48: 16:5f:8e:03:d5:dc:79:fc:70:ea:6a:3b:4a:89:99: 0d:ff:cc:6a:38:07:e4:6a:59:d9:cc:c3:2a:a0:94: 6a:ca:df:0b:e6:c7:fd:58:7a:b8:5e:61:ee:00:8c: 62:d9:e6:a5:69:3f:ed:63:e2:f6:0a:26:9f:ca:28: a2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F5:EB:8C:B2:54:6F:F2:59:E3:F4:97:62:CA:66:19:2A:35:BE:15 X509v3 Authority Key Identifier: keyid:48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/QfXrjLJUb_JZ4_SXYspmGSo1vhU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.76.32.0/19 Signature Algorithm: sha256WithRSAEncryption 9f:e9:8e:e4:60:2a:73:19:d0:31:17:8d:c4:bf:49:fc:40:da: e9:71:1e:aa:6c:6e:d3:d6:a1:65:92:58:2a:fd:4e:b6:8e:c1: d4:30:08:44:2c:2b:2e:72:59:71:da:ef:87:c7:ef:33:5f:4b: a1:27:d6:9d:8e:ad:1b:68:6c:f3:99:4c:d2:03:6c:ab:0d:c4: 5e:04:37:a7:f1:ef:64:bc:63:27:8e:39:f8:97:f8:01:14:8d: e0:0b:57:08:3a:7f:b9:ed:f5:06:f3:e2:9a:d4:42:1e:8c:03: 35:b4:38:96:b6:b0:47:e5:a8:4a:d9:05:31:f6:28:d0:be:98: 72:cf:d4:0f:9d:1c:3f:68:a9:a1:80:5b:2a:f0:75:7a:4b:27: 24:15:06:db:ee:a8:08:19:dc:5e:bf:48:5c:0d:68:76:70:49: b5:8d:73:d3:6e:d2:8e:aa:75:ed:59:c8:fe:ea:61:ff:9f:05: 25:a6:de:20:1d:0a:bf:cc:3f:e0:fb:6a:43:8d:3a:41:ff:2b: a5:ed:5f:7b:52:ee:89:93:8c:f6:40:c5:28:ad:98:5d:e6:df: 24:69:e4:4f:ba:cc:85:2d:cf:8e:b4:f4:1a:03:b3:6b:49:b0: ec:11:53:6a:35:46:39:47:ff:ce:74:20:3c:b2:53:cf:e7:87: 30:7f:15:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuyRSOQCh3I7Dizgi4SJkrKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YzFlOWRhMWE3ODhkMGU3NWQ1OGE3NTE1ZTAyOTEzN2Vk NmZlOGUwHhcNMjYwMTEyMTI1MzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWY1ZWI4Y2IyNTQ2ZmYyNTllM2Y0OTc2MmNhNjYxOTJhMzViZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryTt6iizUxHpznDRO5DyrTpYUUYo U7wUaFSlWibxBTBxkW8RDrFvDWfyuFeO+sgxvxqG6yrgraSeUyL4V03uFXnSXzY4 TdUv2r8KNjOMwFe8oRG43yYWoQYheuW37HtlXC6Wbfy0EPLNLYMf+qesptoQ+wRF URZFu4Nt4Zf0HyHX0mo3QMj5PebdNK4eW4AWh7FMFd+GvNv02ZhebDCPbDamo5tZ ziLILHGTqEMgXEFqFqWvhdIoY+taR8VGp7PJJEgWX44D1dx5/HDqajtKiZkN/8xq OAfkalnZzMMqoJRqyt8L5sf9WHq4XmHuAIxi2ealaT/tY+L2CiafyiiiNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEH164yyVG/yWeP0l2LKZhkqNb4VMB8GA1UdIwQY MBaAFEjB6doaeI0OddWKdRXgKRN+1v6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU01IcDJocDRqUTUxMVlwMUZlQXBFMzdXX280LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9kOGU3ZjUtM2I3Zi00MTBlLWE2ZDct ZDliNWNjMmEwOTZmLzEvUWZYcmpMSlViX0paNF9TWFlzcG1HU28xdmhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9kOGU3ZjUtM2I3Zi00MTBlLWE2ZDctZDliNWNjMmEwOTZm LzEvU01IcDJocDRqUTUxMVlwMUZlQXBFMzdXX280LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFV0wgMA0G CSqGSIb3DQEBCwUAA4IBAQCf6Y7kYCpzGdAxF43Ev0n8QNrpcR6qbG7T1qFlklgq /U62jsHUMAhELCsucllx2u+Hx+8zX0uhJ9adjq0baGzzmUzSA2yrDcReBDen8e9k vGMnjjn4l/gBFI3gC1cIOn+57fUG8+Ka1EIejAM1tDiWtrBH5ahK2QUx9ijQvphy z9QPnRw/aKmhgFsq8HV6SyckFQbb7qgIGdxev0hcDWh2cEm1jXPTbtKOqnXtWcj+ 6mH/nwUlpt4gHQq/zD/g+2pDjTpB/yul7V97Uu6Jk4z2QMUorZhd5t8kaeRPusyF Lc+OtPQaA7NrSbDsEVNqNUY5R//OdCA8slPP54cwfxWv -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:04 2026 by rpki-client