This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/qFiCxh3aqGRiTHlAE8R6CypWxxA.roa File: qFiCxh3aqGRiTHlAE8R6CypWxxA.roa (raw, json) Hash identifier: qTGUCQxg5guNxXSx54wI9tHE5XtAyyVgtIaDkeC2FVg= Subject key identifier: A8:58:82:C6:1D:DA:A8:64:62:4C:79:40:13:C4:7A:0B:2A:56:C7:10 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77593C760D75BE492F67DA34D862BA67 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/qFiCxh3aqGRiTHlAE8R6CypWxxA.roa Signing time: Thu 01 Jan 2026 02:18:15 +0000 ROA not before: Thu 01 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5606 IP address blocks: 89.38.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3c:76:0d:75:be:49:2f:67:da:34:d8:62:ba:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a85882c61ddaa864624c794013c47a0b2a56c710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9f:f0:24:a1:b5:b5:02:b9:8f:e0:5e:c8:1b: 07:e3:fc:82:15:65:f4:c0:9c:b6:e6:3f:bb:b0:03: 7b:cb:9a:37:d7:c9:1e:d6:ee:90:0f:cb:ec:95:8b: d8:09:e0:9c:96:e5:19:e6:25:82:e4:e5:d0:80:fc: ae:6e:12:dd:94:db:80:4c:33:f9:d7:6a:8d:6c:92: 1c:99:7b:48:2e:66:c5:4d:11:ff:fc:24:f1:8d:59: 72:2b:ca:97:3f:bf:73:ad:ca:ad:a6:ea:e6:5f:e9: da:56:85:01:9f:57:3d:6b:64:8b:8f:4b:a3:f0:29: 88:9b:9e:b1:21:7a:fd:8a:70:b0:df:e8:59:49:ca: f4:ab:b1:38:49:31:28:07:0d:98:a4:d8:be:4f:70: c3:58:f6:54:a0:99:b9:a2:95:7d:24:8a:5e:d0:99: 38:36:2b:e3:31:84:a9:37:ad:26:27:ae:31:b1:3d: c8:75:db:54:a5:ca:1e:32:0a:16:5d:43:27:db:d7: 51:e8:bd:22:1c:70:1f:79:bd:5b:11:88:1c:18:18: ca:01:11:f2:86:c8:fa:1b:8e:48:83:0c:bc:5b:84: cd:d1:85:16:9c:82:90:2a:b4:d8:e2:bc:a7:5d:c7: 34:0e:68:ef:ac:6c:12:91:a4:4b:f4:d1:58:7e:04: 9a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:58:82:C6:1D:DA:A8:64:62:4C:79:40:13:C4:7A:0B:2A:56:C7:10 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/qFiCxh3aqGRiTHlAE8R6CypWxxA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.38.57.0/24 Signature Algorithm: sha256WithRSAEncryption 73:0a:a4:2c:5a:15:d6:32:a0:d3:de:6c:00:e1:55:8e:46:57: e3:f0:01:02:d3:42:a2:a1:2a:ea:a2:da:17:dc:09:b5:16:08: 34:09:1f:54:6c:e6:98:14:8a:2f:a1:7d:bf:59:26:9c:e1:d7: 42:34:fe:b2:93:44:66:3a:39:62:20:9d:88:ef:92:1b:ce:23: ca:f5:a7:11:8e:7e:ce:22:0b:6c:3a:7a:51:4b:fb:2a:f3:ed: cf:7a:4f:3a:1a:02:a9:46:d4:d2:66:60:9d:b3:55:c7:c8:88: c2:f6:79:90:88:0a:fe:be:2c:2f:d0:96:5e:68:90:28:32:b1: 91:60:2c:1d:49:db:5b:dd:b9:b0:21:ba:9e:2b:56:20:2b:98: 0a:0d:da:47:f0:a1:f7:52:5b:a2:3d:68:05:fa:d2:a5:c0:0b: 22:07:7e:0e:f5:a3:83:ae:19:c2:17:cd:a2:07:97:f5:3a:5a: a4:df:17:db:8d:c0:1c:71:0a:f6:cb:d6:d0:a8:e8:ef:1b:a2: fb:b0:6c:87:88:d8:f7:4b:66:16:4b:85:34:1d:03:9e:7d:44: 97:74:04:26:88:01:fa:fe:be:ad:e0:a3:32:5b:94:1e:f6:a4: 97:00:33:02:87:da:d8:d1:8a:11:f9:be:fe:b2:b6:64:47:18: b6:80:d0:20 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WTx2DXW+SS9n2jTYYrpnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODU4ODJjNjFkZGFhODY0NjI0Yzc5NDAxM2M0N2EwYjJhNTZjNzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5/wJKG1tQK5j+BeyBsH4/yCFWX0 wJy25j+7sAN7y5o318ke1u6QD8vslYvYCeCcluUZ5iWC5OXQgPyubhLdlNuATDP5 12qNbJIcmXtILmbFTRH//CTxjVlyK8qXP79zrcqtpurmX+naVoUBn1c9a2SLj0uj 8CmIm56xIXr9inCw3+hZScr0q7E4STEoBw2YpNi+T3DDWPZUoJm5opV9JIpe0Jk4 NivjMYSpN60mJ64xsT3IddtUpcoeMgoWXUMn29dR6L0iHHAfeb1bEYgcGBjKARHy hsj6G45Igwy8W4TN0YUWnIKQKrTY4rynXcc0DmjvrGwSkaRL9NFYfgSaCwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKhYgsYd2qhkYkx5QBPEegsqVscQMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL3FGaUN4aDNhcUdSaVRIbEFFOFI2Q3lwV3h4QS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZJjkw DQYJKoZIhvcNAQELBQADggEBAHMKpCxaFdYyoNPebADhVY5GV+PwAQLTQqKhKuqi 2hfcCbUWCDQJH1Rs5pgUii+hfb9ZJpzh10I0/rKTRGY6OWIgnYjvkhvOI8r1pxGO fs4iC2w6elFL+yrz7c96TzoaAqlG1NJmYJ2zVcfIiML2eZCICv6+LC/Qll5okCgy sZFgLB1J21vdubAhup4rViArmAoN2kfwofdSW6I9aAX60qXACyIHfg71o4OuGcIX zaIHl/U6WqTfF9uNwBxxCvbL1tCo6O8bovuwbIeI2PdLZhZLhTQdA559RJd0BCaI Afr+vq3gozJblB72pJcAMwKH2tjRihH5vv6ytmRHGLaA0CA= -----END CERTIFICATE-----Generated at Sun Jan 25 13:05:28 2026 by rpki-client