This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/QqpB-pPCdLcvlp0chJtebr8iQ8g.roa File: QqpB-pPCdLcvlp0chJtebr8iQ8g.roa (raw, json) Hash identifier: 3PNhNejnP/vyR7oxxC9sQTT6mAe5MpH3OIg2Wk9bOdU= Subject key identifier: 42:AA:41:FA:93:C2:74:B7:2F:96:9D:1C:84:9B:5E:6E:BF:22:43:C8 Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019B7CEE077168DCA69A235D598BAA905363 Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/QqpB-pPCdLcvlp0chJtebr8iQ8g.roa Signing time: Fri 02 Jan 2026 04:18:52 +0000 ROA not before: Fri 02 Jan 2026 04:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212815 IP address blocks: 80.71.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:07:71:68:dc:a6:9a:23:5d:59:8b:aa:90:53:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Jan 2 04:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42aa41fa93c274b72f969d1c849b5e6ebf2243c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c3:6c:e7:a3:a4:32:fa:c1:da:fc:ba:03:9d: d9:fa:e1:4d:72:ef:0a:2c:b4:8e:02:16:29:7b:28: d6:78:24:45:67:9e:35:1e:03:1f:fd:f8:24:d3:96: 19:cd:5a:6a:36:5e:02:70:ec:78:aa:7f:c8:80:4f: 6b:76:67:2a:63:a7:f5:78:db:d7:f1:fc:36:d4:47: 9c:2f:19:07:ad:82:92:14:de:16:d0:cb:b9:e9:f3: 93:31:5c:f9:bc:83:79:c1:7e:1d:c1:ed:da:41:d2: 18:f4:a2:92:94:5b:ab:cd:9c:21:b7:8a:06:80:ee: 93:18:32:9a:e3:d5:3b:00:7d:cb:d6:c4:6c:5a:d8: aa:85:59:20:e4:b6:4a:14:bb:fa:78:a0:05:19:30: 70:e3:c9:37:8b:d5:8e:c2:62:f0:b0:9a:24:a0:fd: b5:b5:b5:71:54:c1:48:73:1b:ed:ff:6b:9c:88:0d: ce:9f:ec:51:a8:32:15:b1:a4:a5:4d:52:b0:d2:cd: 87:f4:08:a9:0d:1d:54:9a:ef:2a:2f:22:60:e7:60: 88:03:d0:fa:af:d2:ce:bf:68:66:88:a7:21:1d:09: 61:08:d5:0e:20:bb:a1:58:83:da:c4:45:9d:12:9c: 38:a7:3c:95:07:3b:d0:ed:c2:00:cf:80:fd:45:9f: 27:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AA:41:FA:93:C2:74:B7:2F:96:9D:1C:84:9B:5E:6E:BF:22:43:C8 X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/QqpB-pPCdLcvlp0chJtebr8iQ8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.71.237.0/24 Signature Algorithm: sha256WithRSAEncryption 39:cf:37:c6:f6:2a:2e:a2:86:ee:16:f6:68:73:bd:75:af:52: 2c:34:ea:31:a2:0f:d0:3e:48:5e:15:e4:1f:45:6a:0a:34:cf: d5:66:32:77:df:aa:5d:ed:fb:92:e7:a4:2c:60:75:34:87:3e: 3e:5c:b9:87:c1:1b:9f:82:a1:2e:de:e4:06:db:ed:e9:51:d9: a0:94:38:8c:f6:5a:a7:48:db:d8:1d:46:52:c8:50:5d:35:72: 24:ba:cf:06:15:5f:5a:a6:05:28:d6:2f:61:33:95:75:68:aa: 2f:63:e6:f7:68:c8:6c:42:65:48:3e:c8:d9:9f:53:49:c1:1d: 52:a4:f2:2a:41:7b:25:60:4d:a4:45:61:c6:05:6c:1d:d8:2d: de:51:cb:54:7d:de:e2:e4:66:1f:95:c5:51:c9:48:fb:8e:92: ea:eb:ff:0a:f9:73:4c:a9:e1:4e:52:0e:6d:df:4b:5c:9f:6a: 20:86:d9:29:43:2d:43:a3:2e:a6:73:ee:91:63:27:54:af:a0: 3c:5e:cc:ab:97:33:c4:69:8d:1c:5d:d7:fb:64:92:4b:be:b8: e8:3c:9a:25:03:97:35:cb:93:3b:7a:29:2e:ae:6b:a4:db:aa: 8f:4b:45:ea:36:f6:73:a5:69:12:62:b6:3d:7e:d8:12:9f:54: 89:c3:f7:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gdxaNymmiNdWYuqkFNjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjYwMTAyMDQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmFhNDFmYTkzYzI3NGI3MmY5NjlkMWM4NDliNWU2ZWJmMjI0M2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8Ns56OkMvrB2vy6A53Z+uFNcu8K LLSOAhYpeyjWeCRFZ541HgMf/fgk05YZzVpqNl4CcOx4qn/IgE9rdmcqY6f1eNvX 8fw21EecLxkHrYKSFN4W0Mu56fOTMVz5vIN5wX4dwe3aQdIY9KKSlFurzZwht4oG gO6TGDKa49U7AH3L1sRsWtiqhVkg5LZKFLv6eKAFGTBw48k3i9WOwmLwsJokoP21 tbVxVMFIcxvt/2uciA3On+xRqDIVsaSlTVKw0s2H9AipDR1Umu8qLyJg52CIA9D6 r9LOv2hmiKchHQlhCNUOILuhWIPaxEWdEpw4pzyVBzvQ7cIAz4D9RZ8nrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEKqQfqTwnS3L5adHISbXm6/IkPIMB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvUXFwQi1wUENkTGN2bHAwY2hKdGVicjhpUThnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEftMA0G CSqGSIb3DQEBCwUAA4IBAQA5zzfG9iouoobuFvZoc711r1IsNOoxog/QPkheFeQf RWoKNM/VZjJ336pd7fuS56QsYHU0hz4+XLmHwRufgqEu3uQG2+3pUdmglDiM9lqn SNvYHUZSyFBdNXIkus8GFV9apgUo1i9hM5V1aKovY+b3aMhsQmVIPsjZn1NJwR1S pPIqQXslYE2kRWHGBWwd2C3eUctUfd7i5GYflcVRyUj7jpLq6/8K+XNMqeFOUg5t 30tcn2oghtkpQy1Doy6mc+6RYydUr6A8XsyrlzPEaY0cXdf7ZJJLvrjoPJolA5c1 y5M7eikurmuk26qPS0XqNvZzpWkSYrY9ftgSn1SJw/dB -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:29 2026 by rpki-client