This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/QSPZWdBj02_wXIuy1IGBOnPdy1w.roa File: QSPZWdBj02_wXIuy1IGBOnPdy1w.roa (raw, json) Hash identifier: bUbRWWpDUh0QcX+CtlV8kusXAQJDODXxvoAaGuQVCaM= Subject key identifier: 41:23:D9:59:D0:63:D3:6F:F0:5C:8B:B2:D4:81:81:3A:73:DD:CB:5C Certificate issuer: /CN=44d3cc591ceba386130f3c9f7426458b8887c2eb Certificate serial: 019B79109C8BEE78351165A15F3A05041052 Authority key identifier: 44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/QSPZWdBj02_wXIuy1IGBOnPdy1w.roa Signing time: Thu 01 Jan 2026 10:18:10 +0000 ROA not before: Thu 01 Jan 2026 10:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213220 IP address blocks: 194.61.25.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:9c:8b:ee:78:35:11:65:a1:5f:3a:05:04:10:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44d3cc591ceba386130f3c9f7426458b8887c2eb Validity Not Before: Jan 1 10:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4123d959d063d36ff05c8bb2d481813a73ddcb5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:fd:c7:28:63:36:1b:21:b9:43:4c:e2:cf: b2:d0:8b:59:5b:b6:28:05:61:4d:ca:1d:37:14:04: a0:a7:c1:e8:d6:74:21:6a:fc:23:47:8a:46:a1:9d: a7:7f:a1:c0:21:16:f7:2a:81:10:0b:41:ed:47:88: e1:ab:9c:cb:cc:68:b3:ab:84:3a:f3:e3:8a:f8:77: 0d:10:a3:74:f2:d7:4c:55:5a:59:95:c3:2f:ee:a6: cf:80:6e:43:9c:ec:6d:9f:29:75:2a:22:96:0e:a1: 5e:d8:31:8d:c7:ce:eb:15:41:23:83:73:d5:43:47: 88:76:41:a6:4f:46:96:b0:02:15:f4:92:cb:d2:b6: fd:49:41:cf:3a:94:ff:5b:67:bd:59:b1:a5:b2:c3: da:87:44:df:8d:b8:02:ae:07:e7:a3:7a:32:43:5d: 4c:c4:06:9c:bc:d2:96:59:3e:d0:36:d9:37:7a:60: 88:3c:44:37:73:8c:b2:2c:72:3f:d6:bf:83:b4:40: 7c:b1:8b:af:03:79:a5:54:0c:ea:e3:e7:46:9b:e5: 96:dc:ee:7d:c4:db:b8:e3:3b:bd:31:ff:6d:62:14: 70:2e:c7:62:38:0e:30:ec:4e:c1:22:d6:54:27:d8: d6:48:08:62:ee:d1:9b:d9:ca:29:20:d2:97:3e:60: d0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:23:D9:59:D0:63:D3:6F:F0:5C:8B:B2:D4:81:81:3A:73:DD:CB:5C X509v3 Authority Key Identifier: keyid:44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/QSPZWdBj02_wXIuy1IGBOnPdy1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.61.25.0/24 Signature Algorithm: sha256WithRSAEncryption 52:15:31:48:e1:14:1d:0e:10:e4:09:8c:a0:01:5e:6b:db:e5: f6:1e:f0:0c:a2:7e:9f:47:25:ee:a5:49:59:6b:22:b1:77:ac: 9d:97:51:7d:74:0b:b7:86:34:e5:cc:d5:43:89:20:73:b2:82: 3a:78:28:da:df:8d:4b:1d:4a:ce:1a:5f:02:c1:1d:a4:31:f9: d2:9b:91:4c:f4:70:cf:0a:ab:9d:35:f2:7f:84:74:44:e6:5d: 91:1d:5d:90:6f:69:61:2f:a4:f4:9b:67:cf:bc:41:17:2b:88: eb:8f:68:e3:cf:69:72:9c:0a:3f:92:db:53:bd:ef:bd:52:77: f8:47:ae:8e:07:ca:67:b9:ae:66:be:59:b1:4c:26:a0:5b:0c: 61:b0:b8:f3:ed:47:b3:45:eb:05:54:26:49:9b:87:89:97:33: e4:91:0e:0c:62:9c:16:57:f6:09:01:f9:32:fd:88:34:b1:f8: 52:ad:c0:bb:6a:01:90:00:c8:01:ac:d1:60:3e:c5:b6:c0:a0: 7b:80:51:9e:8d:61:4e:d5:e8:e0:aa:c5:61:76:7d:2f:47:b0: f3:61:57:1f:59:22:2f:29:9e:40:39:9b:bb:59:80:0a:49:9a: 7c:37:57:eb:8f:e9:bf:38:6e:d9:db:c4:09:b5:d9:18:76:08: 48:af:3b:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EJyL7ng1EWWhXzoFBBBSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZDNjYzU5MWNlYmEzODYxMzBmM2M5Zjc0MjY0NThiODg4 N2MyZWIwHhcNMjYwMTAxMTAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTIzZDk1OWQwNjNkMzZmZjA1YzhiYjJkNDgxODEzYTczZGRjYjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL/9xyhjNhshuUNM4s+y0ItZW7Yo BWFNyh03FASgp8Ho1nQhavwjR4pGoZ2nf6HAIRb3KoEQC0HtR4jhq5zLzGizq4Q6 8+OK+HcNEKN08tdMVVpZlcMv7qbPgG5DnOxtnyl1KiKWDqFe2DGNx87rFUEjg3PV Q0eIdkGmT0aWsAIV9JLL0rb9SUHPOpT/W2e9WbGlssPah0TfjbgCrgfno3oyQ11M xAacvNKWWT7QNtk3emCIPEQ3c4yyLHI/1r+DtEB8sYuvA3mlVAzq4+dGm+WW3O59 xNu44zu9Mf9tYhRwLsdiOA4w7E7BItZUJ9jWSAhi7tGb2copINKXPmDQ2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEEj2VnQY9Nv8FyLstSBgTpz3ctcMB8GA1UdIwQY MBaAFETTzFkc66OGEw88n3QmRYuIh8LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk5QTVdSenJvNFlURHp5ZmRDWkZpNGlId3VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My80MzYyOWEtNWE0ZC00YmRmLTk5Zjgt MmJiNjU0MDhkZjc0LzEvUVNQWldkQmowMl93WEl1eTFJR0JPblBkeTF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My80MzYyOWEtNWE0ZC00YmRmLTk5ZjgtMmJiNjU0MDhkZjc0 LzEvUk5QTVdSenJvNFlURHp5ZmRDWkZpNGlId3VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj0ZMA0G CSqGSIb3DQEBCwUAA4IBAQBSFTFI4RQdDhDkCYygAV5r2+X2HvAMon6fRyXupUlZ ayKxd6ydl1F9dAu3hjTlzNVDiSBzsoI6eCja341LHUrOGl8CwR2kMfnSm5FM9HDP CqudNfJ/hHRE5l2RHV2Qb2lhL6T0m2fPvEEXK4jrj2jjz2lynAo/kttTve+9Unf4 R66OB8pnua5mvlmxTCagWwxhsLjz7UezResFVCZJm4eJlzPkkQ4MYpwWV/YJAfky /Yg0sfhSrcC7agGQAMgBrNFgPsW2wKB7gFGejWFO1ejgqsVhdn0vR7DzYVcfWSIv KZ5AOZu7WYAKSZp8N1frj+m/OG7Z28QJtdkYdghIrzvF -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:41 2026 by rpki-client