This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/QRd4aPFV9jlBuWiqVWId4f78nwU.roa File: QRd4aPFV9jlBuWiqVWId4f78nwU.roa (raw, json) Hash identifier: z76kR0ZXpWXElfaEyx2j2tbap+nSUCRwRkiT2NmSfmM= Subject key identifier: 41:17:78:68:F1:55:F6:39:41:B9:68:AA:55:62:1D:E1:FE:FC:9F:05 Certificate issuer: /CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4 Certificate serial: 019B7FF291ED4AE0CAA459F4230B3DECEDBB Authority key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/QRd4aPFV9jlBuWiqVWId4f78nwU.roa Signing time: Fri 02 Jan 2026 18:22:42 +0000 ROA not before: Fri 02 Jan 2026 18:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7979 IP address blocks: 87.76.25.0/24 maxlen: 24 87.76.26.0/24 maxlen: 24 165.84.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:91:ed:4a:e0:ca:a4:59:f4:23:0b:3d:ec:ed:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4 Validity Not Before: Jan 2 18:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41177868f155f63941b968aa55621de1fefc9f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:de:36:fb:ae:b2:63:95:27:6d:72:26:cf: 21:d1:16:7d:8a:b6:50:9c:47:23:35:d5:a7:76:1e: 7b:92:c7:b5:b2:16:63:a1:fb:a2:b9:b0:ad:f9:46: c1:e8:8b:e0:a4:09:b5:74:81:09:9e:70:c0:71:ef: 2d:23:d4:ca:1f:c1:25:c9:f3:da:77:a5:41:5c:28: 26:37:82:16:0b:72:9b:6e:54:7b:36:7e:c1:da:ec: 5d:65:80:41:f9:8e:01:89:ab:61:5a:bf:1a:ef:0b: cc:5b:f2:2a:21:b9:7e:ed:3e:5a:f5:2c:1b:d3:06: 97:8e:14:e6:21:0c:65:5a:0b:22:d7:03:75:b9:7e: 54:5c:82:6a:56:e4:ca:73:d0:48:2f:41:a8:b9:e8: f8:ef:7d:ff:6e:63:0e:69:d4:43:4f:00:07:77:ed: 90:6e:ee:cc:35:d2:35:0b:71:0c:88:b6:6a:d9:39: 48:ec:c3:5d:f8:eb:2e:f3:12:54:e1:3f:a2:8b:bd: 40:c1:cf:bc:ce:a9:75:ad:bf:2a:00:15:8a:79:6f: 76:ca:ad:74:a9:24:34:78:08:52:3f:d4:0c:c3:ff: 3e:20:f9:cd:5b:de:e5:53:ee:bf:c0:13:06:32:5f: 67:e3:af:61:4d:93:e4:84:45:7f:66:05:b9:5b:af: e6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:17:78:68:F1:55:F6:39:41:B9:68:AA:55:62:1D:E1:FE:FC:9F:05 X509v3 Authority Key Identifier: keyid:AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/QRd4aPFV9jlBuWiqVWId4f78nwU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.76.25.0-87.76.26.255 165.84.212.0/22 Signature Algorithm: sha256WithRSAEncryption 73:56:3d:01:54:b3:db:c3:57:ee:40:57:d7:ed:5f:6d:5b:bc: e6:14:d9:64:b4:26:d6:ab:19:1c:84:5e:c0:cf:e9:74:be:0b: c1:66:f2:55:40:d0:3d:db:36:d0:6c:fe:cb:8c:8f:42:70:c0: d1:68:86:3b:5d:00:ed:35:42:40:ef:17:8a:9f:69:a8:8e:76: 3a:e8:59:24:1f:3a:09:57:51:a4:53:e8:6c:a4:71:6c:08:09: d1:89:9a:e6:cd:fc:91:bc:43:8f:cb:08:66:b7:5f:fe:4a:b0: da:11:18:22:9b:dd:c1:f6:35:37:3f:64:43:5a:53:83:b6:b9: c4:a1:73:2b:da:32:60:4f:a1:5a:ae:69:23:f2:37:47:ca:0c: 3a:6d:fb:a4:ba:95:38:c7:aa:5b:2d:94:62:24:82:70:ed:8a: 59:f1:cb:9a:36:ab:3f:e2:e9:8a:c0:19:02:fa:a9:b0:d6:6e: eb:4f:bc:a3:1c:68:77:ca:67:63:a5:98:42:9b:68:33:4e:b1: 97:03:a6:6b:fc:6f:f2:cc:6f:d5:ba:21:4e:6e:5e:3e:34:56: 54:10:8c:41:08:8b:6d:88:eb:bf:6f:7c:c9:ec:6e:b6:36:99: 12:4e:61:b4:a1:78:9e:91:12:fd:50:aa:27:a6:c1:c0:80:25: d7:69:33:df -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/8pHtSuDKpFn0Iws97O27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNGFhYzE5NDhjZWUyM2RkZjRkNzE1ZjgwMzUyMmY5M2Iw Y2RkYjQwHhcNMjYwMTAyMTgyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTE3Nzg2OGYxNTVmNjM5NDFiOTY4YWE1NTYyMWRlMWZlZmM5ZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyfeNvuusmOVJ21yJs8h0RZ9irZQ nEcjNdWndh57kse1shZjofuiubCt+UbB6IvgpAm1dIEJnnDAce8tI9TKH8ElyfPa d6VBXCgmN4IWC3KbblR7Nn7B2uxdZYBB+Y4BiathWr8a7wvMW/IqIbl+7T5a9Swb 0waXjhTmIQxlWgsi1wN1uX5UXIJqVuTKc9BIL0Gouej4733/bmMOadRDTwAHd+2Q bu7MNdI1C3EMiLZq2TlI7MNd+Osu8xJU4T+ii71Awc+8zql1rb8qABWKeW92yq10 qSQ0eAhSP9QMw/8+IPnNW97lU+6/wBMGMl9n469hTZPkhEV/ZgW5W6/mkQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFEEXeGjxVfY5QbloqlViHeH+/J8FMB8GA1UdIwQY MBaAFKpKrBlIzuI9301xX4A1Ivk7DN20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWtxc0dVak80ajNmVFhGZmdEVWktVHNNM2JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNmIyNDEtNmRlNy00ODVjLTk4YWUt ZjliZDY0Y2E2ZTRjLzEvUVJkNGFQRlY5amxCdVdpcVZXSWQ0Zjc4bndVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNmIyNDEtNmRlNy00ODVjLTk4YWUtZjliZDY0Y2E2ZTRj LzEvcWtxc0dVak80ajNmVFhGZmdEVWktVHNNM2JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABXTBkD BABXTBoDBAKlVNQwDQYJKoZIhvcNAQELBQADggEBAHNWPQFUs9vDV+5AV9ftX21b vOYU2WS0JtarGRyEXsDP6XS+C8Fm8lVA0D3bNtBs/suMj0JwwNFohjtdAO01QkDv F4qfaaiOdjroWSQfOglXUaRT6GykcWwICdGJmubN/JG8Q4/LCGa3X/5KsNoRGCKb 3cH2NTc/ZENaU4O2ucShcyvaMmBPoVquaSPyN0fKDDpt+6S6lTjHqlstlGIkgnDt ilnxy5o2qz/i6YrAGQL6qbDWbutPvKMcaHfKZ2OlmEKbaDNOsZcDpmv8b/LMb9W6 IU5uXj40VlQQjEEIi22I679vfMnsbrY2mRJOYbSheJ6REv1QqiemwcCAJddpM98= -----END CERTIFICATE-----Generated at Sun Jan 25 10:11:21 2026 by rpki-client