This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/qCla3aYy8lmkCd9GDBwAGdRopPY.roa File: qCla3aYy8lmkCd9GDBwAGdRopPY.roa (raw, json) Hash identifier: yq0d/UWqcKfbvqZVTTAHu+E8rSvKS7DJ77n7pL88Lw8= Subject key identifier: A8:29:5A:DD:A6:32:F2:59:A4:09:DF:46:0C:1C:00:19:D4:68:A4:F6 Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174 Certificate serial: 019B7A5AF9ABB7D126FE8832BD25D547ED99 Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/qCla3aYy8lmkCd9GDBwAGdRopPY.roa Signing time: Thu 01 Jan 2026 16:19:01 +0000 ROA not before: Thu 01 Jan 2026 16:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50300 IP address blocks: 92.118.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f9:ab:b7:d1:26:fe:88:32:bd:25:d5:47:ed:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174 Validity Not Before: Jan 1 16:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8295adda632f259a409df460c1c0019d468a4f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ff:30:32:74:2d:40:79:ed:d7:59:13:19:d5: 76:34:06:8d:f0:9a:1d:12:b3:64:f7:91:4f:4b:ac: 5c:e1:cf:06:d9:15:87:36:7f:5a:a0:5a:62:43:57: b8:2a:3a:08:28:33:85:87:80:2d:74:84:58:21:ce: bb:1f:eb:d0:49:d1:37:26:dd:29:08:22:97:c0:73: cd:94:6f:34:de:49:39:a2:b0:9b:62:0e:ec:8a:cc: 30:9a:72:e1:26:74:2b:99:7a:97:38:b5:51:17:b9: fc:5b:b6:83:7d:fb:23:c0:9c:87:11:4c:fe:93:bc: ff:08:1a:f4:0b:af:5e:8f:cd:03:d9:61:91:7c:bd: 8d:86:7f:5b:fe:21:b0:5b:77:c1:77:e7:51:bb:23: 4a:ef:25:a2:1f:89:c2:e3:6f:9e:c4:e9:e3:94:fa: a7:c1:0d:84:ec:27:d1:97:1a:aa:ae:54:97:62:de: 6f:9d:26:cf:f0:a9:54:96:e5:c5:63:c8:51:a1:2a: 04:24:c8:05:7e:5e:b0:d9:dd:c7:f5:7e:a7:d9:b7: 01:73:9d:5a:90:5f:d4:54:76:c1:8a:4b:f8:7d:62: 00:ae:5a:b4:d6:51:e6:3c:98:24:a0:7a:2b:70:d5: f9:7d:41:ff:cf:c7:a6:f1:a8:6a:a2:2a:2d:a5:86: d5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:29:5A:DD:A6:32:F2:59:A4:09:DF:46:0C:1C:00:19:D4:68:A4:F6 X509v3 Authority Key Identifier: keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/qCla3aYy8lmkCd9GDBwAGdRopPY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.16.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:fe:5a:93:37:65:e5:5f:8e:6e:e1:30:2c:22:bf:8f:0f:ce: 9a:e7:86:2d:aa:31:9a:bb:d3:b2:f4:6c:85:ea:95:41:8d:24: 13:17:56:95:75:a3:ef:91:19:dc:07:04:7d:b1:5a:e5:fe:21: 1a:20:47:d7:ed:d9:64:23:dc:bc:1a:1a:54:90:03:b3:56:1f: db:8a:f7:14:b2:44:1d:2a:be:80:40:e0:d4:c0:8d:13:2e:ae: 4a:b6:66:84:bf:7d:f0:06:9e:3b:b7:17:16:a2:25:44:7e:af: d0:11:0b:e0:78:2f:e3:a9:b8:8c:be:d3:81:74:bf:02:cf:ce: 5f:b2:08:e9:33:55:b8:99:82:e9:c4:26:c1:53:60:15:35:e0: 6d:a9:ed:eb:69:5c:e9:fe:2e:14:90:39:d0:8c:e8:9d:f8:61: 33:2c:fd:79:cb:3e:0e:3d:50:99:cc:2d:31:ca:a7:64:da:db: 3f:6b:a1:c2:b6:a7:41:a3:ea:b9:2d:57:ea:89:89:95:7d:6e: 9b:e6:67:86:fa:e1:ce:eb:5d:dc:58:fa:54:b6:4a:79:a7:2d: 89:f1:39:a8:9d:24:dd:0b:2a:f2:84:be:0c:9d:ab:20:c4:e9: 03:f5:4c:a2:ac:5c:c7:31:51:c7:28:ac:95:db:b6:9f:38:de: 8a:34:a0:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wvmrt9Em/ogyvSXVR+2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNTM4Y2RjYWY5ZjkyNDY0OTdkYzdhZTQ1ODQ1Mzc5ZmU2 YTcxNzQwHhcNMjYwMTAxMTYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODI5NWFkZGE2MzJmMjU5YTQwOWRmNDYwYzFjMDAxOWQ0NjhhNGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv8wMnQtQHnt11kTGdV2NAaN8Jod ErNk95FPS6xc4c8G2RWHNn9aoFpiQ1e4KjoIKDOFh4AtdIRYIc67H+vQSdE3Jt0p CCKXwHPNlG803kk5orCbYg7siswwmnLhJnQrmXqXOLVRF7n8W7aDffsjwJyHEUz+ k7z/CBr0C69ej80D2WGRfL2Nhn9b/iGwW3fBd+dRuyNK7yWiH4nC42+exOnjlPqn wQ2E7CfRlxqqrlSXYt5vnSbP8KlUluXFY8hRoSoEJMgFfl6w2d3H9X6n2bcBc51a kF/UVHbBikv4fWIArlq01lHmPJgkoHorcNX5fUH/z8em8ahqoiotpYbVnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKgpWt2mMvJZpAnfRgwcABnUaKT2MB8GA1UdIwQY MBaAFOxTjNyvn5JGSX3HrkWEU3n+anF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0ZPTTNLLWZra1pKZmNldVJZUlRlZjVxY1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS83ZDY0ZjgtZGRlMi00YTdmLTk1MWEt YzA2YzYyYWY5ZGE1LzEvcUNsYTNhWXk4bG1rQ2Q5R0RCd0FHZFJvcFBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS83ZDY0ZjgtZGRlMi00YTdmLTk1MWEtYzA2YzYyYWY5ZGE1 LzEvN0ZPTTNLLWZra1pKZmNldVJZUlRlZjVxY1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHYQMA0G CSqGSIb3DQEBCwUAA4IBAQAb/lqTN2XlX45u4TAsIr+PD86a54YtqjGau9Oy9GyF 6pVBjSQTF1aVdaPvkRncBwR9sVrl/iEaIEfX7dlkI9y8GhpUkAOzVh/bivcUskQd Kr6AQODUwI0TLq5KtmaEv33wBp47txcWoiVEfq/QEQvgeC/jqbiMvtOBdL8Cz85f sgjpM1W4mYLpxCbBU2AVNeBtqe3raVzp/i4UkDnQjOid+GEzLP15yz4OPVCZzC0x yqdk2ts/a6HCtqdBo+q5LVfqiYmVfW6b5meG+uHO613cWPpUtkp5py2J8TmonSTd CyryhL4MnasgxOkD9UyirFzHMVHHKKyV27afON6KNKDx -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:48 2026 by rpki-client