This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/QzNYXaK9Heg5iwI0_fdSvPsjX10.roa File: QzNYXaK9Heg5iwI0_fdSvPsjX10.roa (raw, json) Hash identifier: 7DicMrMZcYWPra55/EcMga9qpWnVA1JBNRCO/E/beAo= Subject key identifier: 43:33:58:5D:A2:BD:1D:E8:39:8B:02:34:FD:F7:52:BC:FB:23:5F:5D Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578 Certificate serial: 019B7BA3760609E85603DB109C329E80DCA8 Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/QzNYXaK9Heg5iwI0_fdSvPsjX10.roa Signing time: Thu 01 Jan 2026 22:17:48 +0000 ROA not before: Thu 01 Jan 2026 22:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15739 IP address blocks: 82.146.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:76:06:09:e8:56:03:db:10:9c:32:9e:80:dc:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578 Validity Not Before: Jan 1 22:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4333585da2bd1de8398b0234fdf752bcfb235f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:09:be:fa:3d:64:fa:c5:17:ef:7d:bc:13:b0: 6c:b2:89:c6:e9:2c:11:4a:3d:fb:bc:d6:a2:f8:9d: e9:bf:31:87:b3:81:f1:91:4b:f6:2d:65:0d:e9:d7: 74:99:c5:82:8e:f5:f1:d9:96:a4:9d:17:f7:ab:3c: 0f:63:5a:8e:a2:4d:21:47:c7:5c:55:1e:f3:3e:89: ba:38:6d:2f:ea:9c:df:fd:6c:75:34:0a:57:01:67: 93:e2:c0:71:c2:62:21:87:56:31:ea:6c:08:c2:60: b0:2b:30:3a:fe:90:85:8c:a0:cb:f9:32:9b:96:4f: 67:ee:1f:8d:52:ce:65:c3:10:37:29:99:f8:3c:ed: ff:72:c3:7d:1a:10:a3:7b:d3:b1:b2:8e:e7:63:50: 2a:dd:ea:99:f2:91:a4:6d:d8:21:f4:d8:35:a3:c9: 8c:85:ad:0e:e0:43:8b:65:5d:51:22:45:bd:e2:81: e2:ac:26:fa:ff:de:39:33:c3:a4:c0:53:e9:ad:a3: 6e:15:7e:e4:e4:c8:b5:d2:54:f4:d6:79:b4:c6:54: e5:7f:d3:54:51:39:c7:50:b7:23:53:59:5c:64:6a: 8d:f4:59:01:c5:b8:83:6a:5f:c7:9c:50:06:db:87: 28:60:d4:c1:1f:2c:f5:e8:79:6f:22:07:18:74:d4: 74:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:33:58:5D:A2:BD:1D:E8:39:8B:02:34:FD:F7:52:BC:FB:23:5F:5D X509v3 Authority Key Identifier: keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/QzNYXaK9Heg5iwI0_fdSvPsjX10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.146.170.0/24 Signature Algorithm: sha256WithRSAEncryption ab:21:cd:96:5f:3d:30:57:fb:9a:78:3e:06:13:39:36:b2:df: 33:41:df:9e:e5:d9:d7:fb:c5:56:c8:2d:c5:55:75:16:e7:2b: 29:38:6e:e7:af:25:10:2e:75:01:24:67:02:10:87:47:18:b2: ec:2a:dd:4c:ed:85:b8:0e:02:5a:b1:09:f2:9e:e6:3e:12:13: c7:b0:cf:b7:bd:b8:37:23:e0:b0:53:3e:b4:50:11:cf:e5:0a: 90:e2:0a:c3:c2:46:f7:a4:a0:36:ac:f1:29:49:47:20:7a:57: 74:60:c6:e6:bd:32:f6:18:0f:49:5d:61:06:03:6d:8d:78:c7: 70:0e:a3:41:6a:c6:37:8c:74:fb:c8:9f:5e:6b:a4:f7:df:f9: 2a:60:a2:c3:5d:60:d5:79:de:1b:a2:20:24:59:fa:c5:e2:a5: ce:8c:db:90:b0:59:cc:78:af:40:a7:b7:0d:bd:18:0c:dd:db: 76:39:e0:d5:a2:7d:46:b8:19:7f:4f:4c:4e:11:32:89:f2:fb: 41:62:1e:32:e8:13:a7:8c:d4:db:be:80:7b:f6:e5:bc:38:31: 55:41:e1:63:6f:f3:86:a6:b9:4f:39:19:76:f1:4a:5d:a8:8b: 00:e7:84:f0:31:a8:37:4c:67:42:c5:d1:29:77:ec:87:b5:c1: e5:dc:dc:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o3YGCehWA9sQnDKegNyoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzg4OTk2NGIzNWI1MWJhOGU1ZTY3OWExNWIxOWEzMWYx MzM1NzgwHhcNMjYwMTAxMjIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzMzNTg1ZGEyYmQxZGU4Mzk4YjAyMzRmZGY3NTJiY2ZiMjM1ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQm++j1k+sUX7328E7BssonG6SwR Sj37vNai+J3pvzGHs4HxkUv2LWUN6dd0mcWCjvXx2ZaknRf3qzwPY1qOok0hR8dc VR7zPom6OG0v6pzf/Wx1NApXAWeT4sBxwmIhh1Yx6mwIwmCwKzA6/pCFjKDL+TKb lk9n7h+NUs5lwxA3KZn4PO3/csN9GhCje9Oxso7nY1Aq3eqZ8pGkbdgh9Ng1o8mM ha0O4EOLZV1RIkW94oHirCb6/945M8OkwFPpraNuFX7k5Mi10lT01nm0xlTlf9NU UTnHULcjU1lcZGqN9FkBxbiDal/HnFAG24coYNTBHyz16HlvIgcYdNR0FwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEMzWF2ivR3oOYsCNP33Urz7I19dMB8GA1UdIwQY MBaAFBLIiZZLNbUbqOXmeaFbGaMfEzV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYt YWQ2ZjBiZjg4NDM4LzEvUXpOWVhhSzlIZWc1aXdJMF9mZFN2UHNqWDEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYtYWQ2ZjBiZjg4NDM4 LzEvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpKqMA0G CSqGSIb3DQEBCwUAA4IBAQCrIc2WXz0wV/uaeD4GEzk2st8zQd+e5dnX+8VWyC3F VXUW5yspOG7nryUQLnUBJGcCEIdHGLLsKt1M7YW4DgJasQnynuY+EhPHsM+3vbg3 I+CwUz60UBHP5QqQ4grDwkb3pKA2rPEpSUcgeld0YMbmvTL2GA9JXWEGA22NeMdw DqNBasY3jHT7yJ9ea6T33/kqYKLDXWDVed4boiAkWfrF4qXOjNuQsFnMeK9Ap7cN vRgM3dt2OeDVon1GuBl/T0xOETKJ8vtBYh4y6BOnjNTbvoB79uW8ODFVQeFjb/OG prlPORl28UpdqIsA54TwMag3TGdCxdEpd+yHtcHl3Nxp -----END CERTIFICATE-----Generated at Mon Jan 26 06:20:34 2026 by rpki-client