This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QxFOkYbUzHrtxxdtwU_Ta-mJDTI.roa File: QxFOkYbUzHrtxxdtwU_Ta-mJDTI.roa (raw, json) Hash identifier: wK05TnE+W0Rrwn2BRuXre5mG1P6T/IHMKs96M8Wi7Rk= Subject key identifier: 43:11:4E:91:86:D4:CC:7A:ED:C7:17:6D:C1:4F:D3:6B:E9:89:0D:32 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AB5F12E9E78D95A1EBDAEC7C137B6 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QxFOkYbUzHrtxxdtwU_Ta-mJDTI.roa Signing time: Thu 01 Jan 2026 16:18:43 +0000 ROA not before: Thu 01 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198990 IP address blocks: 89.28.237.0/24 maxlen: 24 89.213.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b5:f1:2e:9e:78:d9:5a:1e:bd:ae:c7:c1:37:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43114e9186d4cc7aedc7176dc14fd36be9890d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:05:98:f0:75:fd:0e:d5:b2:15:3c:38:c4:66: ff:1a:3b:3d:cc:63:a6:de:a1:3f:dc:38:a1:38:f3: fb:38:df:81:5c:05:7c:cc:c5:e6:03:32:6e:56:03: 6f:0b:59:72:31:8e:5b:4c:e4:c2:87:fe:10:cd:78: 4e:5f:ff:83:4c:85:41:72:78:7d:32:8c:dd:24:cf: 03:f7:e9:4c:b3:22:8e:b5:8e:09:bb:0d:6c:2d:97: ea:b5:c3:90:3b:e1:83:a8:43:e5:21:b7:02:c1:44: 23:58:66:30:bf:f2:d2:c7:8f:d8:fd:df:f7:f3:52: b3:7c:b9:d1:41:1c:40:b5:06:71:76:8b:70:81:6b: 70:f5:70:93:2e:88:ea:81:5f:04:10:2f:89:e1:33: a6:bd:74:76:2b:55:84:02:d7:84:bf:78:18:b3:fc: ee:59:d4:46:72:bd:9c:fd:47:02:45:42:64:b2:42: a4:a1:60:64:a8:0d:84:be:0d:bf:24:e6:00:35:c7: 71:2a:c0:8e:09:2a:0e:6f:70:7c:c6:54:7d:3d:bc: 7d:1b:f9:3a:a3:91:dd:75:98:f1:e6:c2:5b:3c:a0: 61:e4:c4:b0:f3:08:0e:a8:8d:8c:46:3c:b5:35:aa: a0:ab:bf:78:ec:7a:eb:6a:3b:66:2a:5e:00:49:67: f5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:11:4E:91:86:D4:CC:7A:ED:C7:17:6D:C1:4F:D3:6B:E9:89:0D:32 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QxFOkYbUzHrtxxdtwU_Ta-mJDTI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.28.237.0/24 89.213.214.0/24 Signature Algorithm: sha256WithRSAEncryption a5:36:12:17:03:8e:fa:6b:6f:fb:c8:6e:a7:d0:d0:9c:1f:51: d4:66:63:63:40:43:6e:b7:d2:c1:3f:b0:bf:5b:ca:48:8e:55: db:5a:01:01:d5:07:15:6e:ee:2f:9d:66:79:59:90:4c:6e:dd: 46:90:bb:bc:87:53:dd:32:da:ce:ed:a7:dc:72:ba:24:de:be: f7:9d:b0:47:5b:d7:4b:14:67:69:f5:ec:20:a9:b7:0a:ee:13: 32:51:62:be:b2:22:52:f5:a1:e2:98:ac:9f:69:71:2f:fc:e1: b6:a5:3b:7b:0d:ec:76:e4:1b:7a:ff:90:03:1e:c6:f1:46:4f: ed:b5:68:54:d6:4e:cf:9a:3c:16:fc:7e:e1:f6:e5:b0:ac:bd: f1:45:d2:d8:f4:5c:06:eb:72:8e:83:f2:d1:1c:ad:f7:37:a3: 9e:e8:ec:57:cf:12:d2:f1:6d:e9:6b:90:47:df:44:00:57:12: 3f:bd:b9:ed:e3:ef:f8:24:e7:f2:23:30:ee:4d:a5:cb:56:1f: 2c:f4:4a:5a:36:04:0e:ec:f3:7b:34:11:c9:e1:b8:b6:6a:70: 2e:08:1f:97:9b:13:03:60:53:7c:4e:a0:88:95:29:d9:a8:aa: 10:d2:d7:5d:06:67:9d:10:2c:b0:da:0f:24:43:3b:6c:84:4c: f3:e3:ec:3a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WrXxLp542Voeva7HwTe2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzExNGU5MTg2ZDRjYzdhZWRjNzE3NmRjMTRmZDM2YmU5ODkwZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwWY8HX9DtWyFTw4xGb/Gjs9zGOm 3qE/3DihOPP7ON+BXAV8zMXmAzJuVgNvC1lyMY5bTOTCh/4QzXhOX/+DTIVBcnh9 MozdJM8D9+lMsyKOtY4Juw1sLZfqtcOQO+GDqEPlIbcCwUQjWGYwv/LSx4/Y/d/3 81KzfLnRQRxAtQZxdotwgWtw9XCTLojqgV8EEC+J4TOmvXR2K1WEAteEv3gYs/zu WdRGcr2c/UcCRUJkskKkoWBkqA2Evg2/JOYANcdxKsCOCSoOb3B8xlR9Pbx9G/k6 o5HddZjx5sJbPKBh5MSw8wgOqI2MRjy1Naqgq7947HrrajtmKl4ASWf1PwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEMRTpGG1Mx67ccXbcFP02vpiQ0yMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvUXhGT2tZYlV6SHJ0eHhkdHdVX1RhLW1KRFRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWRztAwQA WdXWMA0GCSqGSIb3DQEBCwUAA4IBAQClNhIXA476a2/7yG6n0NCcH1HUZmNjQENu t9LBP7C/W8pIjlXbWgEB1QcVbu4vnWZ5WZBMbt1GkLu8h1PdMtrO7afccrok3r73 nbBHW9dLFGdp9ewgqbcK7hMyUWK+siJS9aHimKyfaXEv/OG2pTt7Dex25Bt6/5AD HsbxRk/ttWhU1k7PmjwW/H7h9uWwrL3xRdLY9FwG63KOg/LRHK33N6Oe6OxXzxLS 8W3pa5BH30QAVxI/vbnt4+/4JOfyIzDuTaXLVh8s9EpaNgQO7PN7NBHJ4bi2anAu CB+XmxMDYFN8TqCIlSnZqKoQ0tddBmedECyw2g8kQztshEzz4+w6 -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:28 2026 by rpki-client