This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/QM8VI98PqlANgb9tPw2FAs0LwAM.roa File: QM8VI98PqlANgb9tPw2FAs0LwAM.roa (raw, json) Hash identifier: JeUyAKH1L4usZx4jxBTMv0q5gpiSUok50P68tyWxjhI= Subject key identifier: 40:CF:15:23:DF:0F:AA:50:0D:81:BF:6D:3F:0D:85:02:CD:0B:C0:03 Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 019B7B36AC5308E3C67C8FA949DA10121CBC Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/QM8VI98PqlANgb9tPw2FAs0LwAM.roa Signing time: Thu 01 Jan 2026 20:18:59 +0000 ROA not before: Thu 01 Jan 2026 20:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21416 IP address blocks: 62.76.253.0/24 maxlen: 24 212.193.104.0/24 maxlen: 24 212.193.105.0/24 maxlen: 24 212.193.106.0/24 maxlen: 24 212.193.107.0/24 maxlen: 24 212.193.108.0/24 maxlen: 24 212.193.109.0/24 maxlen: 24 212.193.110.0/24 maxlen: 24 212.193.111.0/24 maxlen: 24 212.193.112.0/24 maxlen: 24 212.193.113.0/24 maxlen: 24 212.193.114.0/24 maxlen: 24 212.193.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ac:53:08:e3:c6:7c:8f:a9:49:da:10:12:1c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Jan 1 20:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40cf1523df0faa500d81bf6d3f0d8502cd0bc003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:66:74:e9:04:a4:fa:3e:bf:9f:b4:92:7f:05: cc:1a:a0:12:1c:74:17:4f:52:b6:8a:18:ae:f0:07: bd:36:e1:50:95:f1:3b:ea:57:f2:63:90:bc:c0:80: 7b:ac:93:ec:55:63:8c:41:b2:5c:3e:eb:42:00:9f: a9:a1:68:54:0f:2a:97:e4:7b:b6:38:6e:a3:4e:a9: 31:e8:27:f5:3b:80:07:14:e5:7a:af:c0:78:06:9f: bc:79:ab:f8:af:06:36:c6:7e:ea:b2:80:6d:3c:c1: 77:6f:e2:18:ee:19:40:eb:f6:fa:65:e5:f9:bd:43: d4:97:4c:9a:a5:6d:d0:56:bc:bb:77:9c:01:ae:03: 4e:40:62:cb:b9:dc:ff:e2:e6:9e:1d:e4:8e:48:da: 8e:c6:93:9e:55:a0:16:7f:ac:66:31:8f:f6:9a:0a: fb:bb:0a:2a:a5:f9:1f:6c:d9:4d:b6:25:20:03:cc: 0f:70:11:3a:47:de:cd:1f:67:54:89:50:70:6b:de: 47:69:51:66:79:ec:af:ab:92:c8:93:e0:be:2d:87: 85:d4:d1:ba:6e:4b:08:2c:78:d7:e9:fa:c5:19:78: 18:4b:5d:7e:5e:cb:77:c4:a5:5a:c5:40:fe:5f:a5: 2e:ec:fe:59:e6:90:8f:26:7a:d6:89:89:a3:24:6f: 5d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CF:15:23:DF:0F:AA:50:0D:81:BF:6D:3F:0D:85:02:CD:0B:C0:03 X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/QM8VI98PqlANgb9tPw2FAs0LwAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.253.0/24 212.193.104.0-212.193.115.255 Signature Algorithm: sha256WithRSAEncryption 43:28:fc:54:33:e7:e6:22:f9:89:f2:5d:68:24:ae:f7:0f:4b: 7f:1e:ba:f0:b9:cc:a7:3f:89:7e:77:b5:e2:cb:f8:27:19:b1: 78:7a:c9:32:de:80:39:54:a1:d9:e2:a2:18:cb:0b:3b:c9:55: bb:bf:59:1b:75:20:a7:84:09:02:7c:2d:0f:e2:31:c3:c9:cc: 5c:8d:61:fe:ce:0a:07:6c:0d:db:e6:5c:32:1f:62:f4:dd:9a: 46:d2:d3:93:c1:2c:9a:ea:1c:33:49:a3:24:96:3a:05:1d:3d: 34:a7:43:c9:62:bc:b8:c6:54:68:02:dd:1f:1e:a3:b5:79:84: cb:19:84:53:4c:23:85:6a:30:88:4e:49:3b:1d:50:e1:e7:f7: 14:97:d1:dc:b7:5e:0f:ec:d7:9a:2f:1f:d8:b3:e5:b0:b9:ee: a6:01:f2:eb:9a:7e:10:74:c6:9a:e3:c8:d3:60:aa:09:d8:84: d9:0d:2b:16:f8:25:43:cd:c4:30:7c:e7:a9:7a:4b:88:59:b2: 40:60:65:96:c3:b7:84:67:d4:59:13:4f:cc:3e:7d:3c:d5:e6: 42:68:c0:47:e5:bd:2f:eb:5c:71:78:46:65:57:ac:48:2d:5d: 52:e6:64:4b:b4:3c:2c:64:46:3e:44:3c:f7:c3:46:7e:1a:8b: 9b:87:4a:1c -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7NqxTCOPGfI+pSdoQEhy8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjYwMTAxMjAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGNmMTUyM2RmMGZhYTUwMGQ4MWJmNmQzZjBkODUwMmNkMGJjMDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGZ06QSk+j6/n7SSfwXMGqASHHQX T1K2ihiu8Ae9NuFQlfE76lfyY5C8wIB7rJPsVWOMQbJcPutCAJ+poWhUDyqX5Hu2 OG6jTqkx6Cf1O4AHFOV6r8B4Bp+8eav4rwY2xn7qsoBtPMF3b+IY7hlA6/b6ZeX5 vUPUl0yapW3QVry7d5wBrgNOQGLLudz/4uaeHeSOSNqOxpOeVaAWf6xmMY/2mgr7 uwoqpfkfbNlNtiUgA8wPcBE6R97NH2dUiVBwa95HaVFmeeyvq5LIk+C+LYeF1NG6 bksILHjX6frFGXgYS11+Xst3xKVaxUD+X6Uu7P5Z5pCPJnrWiYmjJG9dnQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFEDPFSPfD6pQDYG/bT8NhQLNC8ADMB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvUU04Vkk5OFBxbEFOZ2I5dFB3MkZBczBMd0FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAPkz9MAwD BAPUwWgDBALUwXAwDQYJKoZIhvcNAQELBQADggEBAEMo/FQz5+Yi+YnyXWgkrvcP S38euvC5zKc/iX53teLL+CcZsXh6yTLegDlUodniohjLCzvJVbu/WRt1IKeECQJ8 LQ/iMcPJzFyNYf7OCgdsDdvmXDIfYvTdmkbS05PBLJrqHDNJoySWOgUdPTSnQ8li vLjGVGgC3R8eo7V5hMsZhFNMI4VqMIhOSTsdUOHn9xSX0dy3Xg/s15ovH9iz5bC5 7qYB8uuafhB0xprjyNNgqgnYhNkNKxb4JUPNxDB856l6S4hZskBgZZbDt4Rn1FkT T8w+fTzV5kJowEflvS/rXHF4RmVXrEgtXVLmZEu0PCxkRj5EPPfDRn4ai5uHShw= -----END CERTIFICATE-----Generated at Mon Jan 26 05:54:45 2026 by rpki-client