This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/qQkZ0fBNkjQxEBuz0kI59N7djKc.roa File: qQkZ0fBNkjQxEBuz0kI59N7djKc.roa (raw, json) Hash identifier: NFmLHMfKCgRpayRK/IC4kjzItXsX/Ql3tfEI1LLkiYo= Subject key identifier: A9:09:19:D1:F0:4D:92:34:31:10:1B:B3:D2:42:39:F4:DE:DD:8C:A7 Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Certificate serial: 019B78A36850A46893BD2ACBD919C1433808 Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/qQkZ0fBNkjQxEBuz0kI59N7djKc.roa Signing time: Thu 01 Jan 2026 08:18:53 +0000 ROA not before: Thu 01 Jan 2026 08:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20864 IP address blocks: 213.143.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:68:50:a4:68:93:bd:2a:cb:d9:19:c1:43:38:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Validity Not Before: Jan 1 08:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a90919d1f04d923431101bb3d24239f4dedd8ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:23:27:5b:bd:f6:b3:ef:c7:44:51:70:9b:e8: 8b:87:75:e1:31:ed:18:0c:ee:90:13:0c:b7:4a:0d: f3:90:49:2e:96:df:3d:c6:d4:99:50:9e:03:fd:cc: a2:bd:8d:30:dd:46:64:80:7b:60:f3:d3:83:88:88: 02:b5:e1:ec:1e:ba:62:56:08:00:08:40:05:27:30: 26:4f:90:97:90:37:8e:67:a8:39:f4:fb:0f:f2:92: 2d:f9:16:33:c6:5d:a7:7d:6b:56:34:de:78:50:1c: 40:09:7e:c5:84:4c:6a:ee:09:ae:12:fa:3a:1b:fe: e4:38:89:4f:35:ee:d5:77:9c:f3:ec:ab:fd:f3:31: 51:75:54:8b:a5:48:43:d7:30:96:d2:12:e8:0f:5b: d9:9e:c6:76:77:49:4e:44:82:59:4e:d4:56:60:0c: 0c:04:ba:68:b9:e7:9d:9e:56:30:4b:cf:78:33:3f: c4:eb:fc:38:85:a5:a9:02:36:09:09:3f:30:ac:c4: 04:70:5a:64:26:20:23:5a:52:bf:91:08:6e:76:7b: 13:32:4d:3e:6a:48:74:d0:d3:c5:ae:4d:df:4b:cf: 4d:32:11:a7:13:ba:d8:7e:70:90:c8:40:cd:fa:a1: 6e:2b:22:75:af:01:a2:89:5a:29:25:34:e7:04:be: 71:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:09:19:D1:F0:4D:92:34:31:10:1B:B3:D2:42:39:F4:DE:DD:8C:A7 X509v3 Authority Key Identifier: keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/qQkZ0fBNkjQxEBuz0kI59N7djKc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.143.224.0/24 Signature Algorithm: sha256WithRSAEncryption 08:94:46:df:50:e2:d2:d2:12:17:73:11:26:e2:be:33:a9:49: 9a:e6:56:7d:66:31:66:f0:b3:f3:e0:d3:7e:ae:d9:a6:ea:78: 7c:b4:0a:a0:b1:54:20:14:bf:27:b2:54:f4:b1:50:17:f3:79: 81:e9:c6:b3:56:64:19:19:86:ff:2a:ac:3e:24:e7:ed:0c:86: 01:43:38:b0:78:b3:06:b6:31:db:a7:c3:3d:7c:6f:ae:c5:42: eb:ed:1f:c9:af:a0:12:6c:3e:13:4a:f6:5a:a5:c1:b3:2c:3c: 88:3a:17:c7:9a:76:ca:9a:af:b0:54:83:cd:97:a1:92:26:a0: 22:52:5d:2e:c4:f6:6a:a3:53:6c:a1:58:23:2b:14:44:04:6c: 9a:84:8e:20:a3:16:a7:c3:db:3f:dc:a8:0f:d3:a6:b6:43:cd: 84:7e:e6:19:41:22:d3:3a:b8:fe:d9:90:6f:6d:65:d2:6f:ed: 06:51:67:f0:34:79:1f:60:04:49:fd:f0:b1:1e:ac:45:4f:25: d3:f5:41:a8:74:02:f9:8c:63:15:8c:17:30:87:91:0f:1e:77: 1d:2b:8f:2f:94:d8:93:94:83:6d:21:24:5f:34:c8:8f:fc:40: 86:63:b0:98:3a:15:a2:4f:44:4b:d6:0c:34:4a:ec:4a:76:f9: 4c:25:eb:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o2hQpGiTvSrL2RnBQzgIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx ZjlkZDMwHhcNMjYwMTAxMDgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTA5MTlkMWYwNGQ5MjM0MzExMDFiYjNkMjQyMzlmNGRlZGQ4Y2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSMnW732s+/HRFFwm+iLh3XhMe0Y DO6QEwy3Sg3zkEkult89xtSZUJ4D/cyivY0w3UZkgHtg89ODiIgCteHsHrpiVggA CEAFJzAmT5CXkDeOZ6g59PsP8pIt+RYzxl2nfWtWNN54UBxACX7FhExq7gmuEvo6 G/7kOIlPNe7Vd5zz7Kv98zFRdVSLpUhD1zCW0hLoD1vZnsZ2d0lORIJZTtRWYAwM BLpoueednlYwS894Mz/E6/w4haWpAjYJCT8wrMQEcFpkJiAjWlK/kQhudnsTMk0+ akh00NPFrk3fS89NMhGnE7rYfnCQyEDN+qFuKyJ1rwGiiVopJTTnBL5x9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKkJGdHwTZI0MRAbs9JCOfTe3YynMB8GA1UdIwQY MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt MzJhYTY3MzFjMjkxLzEvcVFrWjBmQk5ralF4RUJ1ejBrSTU5TjdkaktjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Y/gMA0G CSqGSIb3DQEBCwUAA4IBAQAIlEbfUOLS0hIXcxEm4r4zqUma5lZ9ZjFm8LPz4NN+ rtmm6nh8tAqgsVQgFL8nslT0sVAX83mB6cazVmQZGYb/Kqw+JOftDIYBQziweLMG tjHbp8M9fG+uxULr7R/Jr6ASbD4TSvZapcGzLDyIOhfHmnbKmq+wVIPNl6GSJqAi Ul0uxPZqo1NsoVgjKxREBGyahI4goxanw9s/3KgP06a2Q82EfuYZQSLTOrj+2ZBv bWXSb+0GUWfwNHkfYARJ/fCxHqxFTyXT9UGodAL5jGMVjBcwh5EPHncdK48vlNiT lINtISRfNMiP/ECGY7CYOhWiT0RL1gw0SuxKdvlMJesP -----END CERTIFICATE-----Generated at Sun Jan 25 20:31:01 2026 by rpki-client