This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/QJxbOK_00ICL24h1uRjuo3GbyiI.roa File: QJxbOK_00ICL24h1uRjuo3GbyiI.roa (raw, json) Hash identifier: /706whWQ3ST/KlzD42n/41A8kEnHqJ1lVJ4bmV5FV04= Subject key identifier: 40:9C:5B:38:AF:F4:D0:80:8B:DB:88:75:B9:18:EE:A3:71:9B:CA:22 Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B7F811350611ADE6DE18765321AD3AAF3 Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/QJxbOK_00ICL24h1uRjuo3GbyiI.roa Signing time: Fri 02 Jan 2026 16:18:43 +0000 ROA not before: Fri 02 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207913 IP address blocks: 128.0.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:13:50:61:1a:de:6d:e1:87:65:32:1a:d3:aa:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Jan 2 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=409c5b38aff4d0808bdb8875b918eea3719bca22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ad:19:0a:66:f4:4a:f5:bf:91:6c:e5:68:91: b7:90:fa:0f:42:ec:11:af:20:04:f5:aa:41:35:88: aa:0c:fd:73:ca:e4:28:f3:60:6a:e1:2b:79:b2:f4: a9:77:93:a8:b0:37:04:26:01:48:a6:85:51:70:02: 49:23:38:48:c0:00:c2:b6:2b:36:00:9f:72:d2:b9: 3e:d7:a4:4a:97:60:89:e2:64:47:ff:eb:3f:63:86: 27:f1:70:c8:c3:62:61:3f:23:57:3a:22:36:49:e5: 1f:49:85:d8:f7:24:c7:a4:c4:e3:fc:23:31:6f:28: d5:2d:88:c9:46:87:e0:f7:e9:1f:a6:05:1d:db:b5: d9:0b:e0:7f:75:85:dd:6c:bd:aa:85:d2:f0:b5:fa: 31:09:21:96:db:73:af:c3:82:0a:a4:a2:1c:a5:e8: 67:72:9a:b3:ff:1b:39:ad:d6:0b:14:74:15:4c:fb: 0c:42:9c:99:f6:85:19:77:fb:f8:e1:94:75:ed:d9: ec:28:c6:31:74:b7:92:df:c9:22:29:76:44:f8:cd: 96:01:ea:e2:4e:0e:33:6b:9c:a0:7c:7b:4d:7b:8c: 50:83:a4:ff:02:95:aa:b6:a3:3a:2c:0f:21:53:41: 18:27:c4:fb:5c:c9:9f:6e:52:81:9e:5e:76:48:32: 92:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9C:5B:38:AF:F4:D0:80:8B:DB:88:75:B9:18:EE:A3:71:9B:CA:22 X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/QJxbOK_00ICL24h1uRjuo3GbyiI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.0.58.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:d8:46:35:0c:5f:5c:54:44:1c:a0:59:f4:74:8e:6a:0e:d1: bf:78:ac:c1:9f:db:b1:4c:ac:d4:99:8a:26:bd:8c:13:39:1c: c1:ec:c0:ea:a7:ba:ac:63:5f:f1:f4:2d:5f:c1:72:d7:a9:15: e1:82:b9:4f:af:3c:d2:9e:80:57:0b:fd:64:94:65:aa:0f:6f: 7b:9c:f2:29:c5:46:18:ee:c8:36:97:75:c8:f4:82:41:ed:fb: 54:ed:b5:b2:0f:67:d7:fc:b0:43:37:f8:79:1f:f4:7e:a7:54: 11:91:0d:ea:c4:29:bc:eb:f8:81:56:ab:20:a6:b7:dc:0d:3a: 5a:96:55:65:ff:78:5c:48:da:2a:45:d2:f5:f9:d6:77:0e:49: 7e:d8:f5:a8:4b:a2:33:68:9d:82:38:c5:50:7f:41:fd:9a:90: 4c:4f:4c:35:85:97:6a:a9:9e:1f:a6:e7:d0:c8:fe:fe:ec:47: d7:54:37:e0:76:c9:c7:57:3a:b1:6d:ff:3f:cc:e5:79:c2:d2: 7b:d7:db:d7:fb:db:18:87:ff:62:8f:4a:2e:1b:db:43:8b:5d: a4:36:bc:65:78:01:2d:a0:db:b5:76:5d:8b:f4:54:f7:d9:20: 3c:15:fb:43:47:89:59:cf:f1:2c:17:87:68:06:5b:b8:2c:b9: 05:e7:3c:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gRNQYRrebeGHZTIa06rzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjYwMTAyMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDljNWIzOGFmZjRkMDgwOGJkYjg4NzViOTE4ZWVhMzcxOWJjYTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn60ZCmb0SvW/kWzlaJG3kPoPQuwR ryAE9apBNYiqDP1zyuQo82Bq4St5svSpd5OosDcEJgFIpoVRcAJJIzhIwADCtis2 AJ9y0rk+16RKl2CJ4mRH/+s/Y4Yn8XDIw2JhPyNXOiI2SeUfSYXY9yTHpMTj/CMx byjVLYjJRofg9+kfpgUd27XZC+B/dYXdbL2qhdLwtfoxCSGW23Ovw4IKpKIcpehn cpqz/xs5rdYLFHQVTPsMQpyZ9oUZd/v44ZR17dnsKMYxdLeS38kiKXZE+M2WAeri Tg4za5ygfHtNe4xQg6T/ApWqtqM6LA8hU0EYJ8T7XMmfblKBnl52SDKS8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFECcWziv9NCAi9uIdbkY7qNxm8oiMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvUUp4Yk9LXzAwSUNMMjRoMXVSanVvM0dieWlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgAA6MA0G CSqGSIb3DQEBCwUAA4IBAQAL2EY1DF9cVEQcoFn0dI5qDtG/eKzBn9uxTKzUmYom vYwTORzB7MDqp7qsY1/x9C1fwXLXqRXhgrlPrzzSnoBXC/1klGWqD297nPIpxUYY 7sg2l3XI9IJB7ftU7bWyD2fX/LBDN/h5H/R+p1QRkQ3qxCm86/iBVqsgprfcDTpa llVl/3hcSNoqRdL1+dZ3Dkl+2PWoS6IzaJ2COMVQf0H9mpBMT0w1hZdqqZ4fpufQ yP7+7EfXVDfgdsnHVzqxbf8/zOV5wtJ719vX+9sYh/9ij0ouG9tDi12kNrxleAEt oNu1dl2L9FT32SA8FftDR4lZz/EsF4doBlu4LLkF5zxS -----END CERTIFICATE-----Generated at Sun Jan 25 13:04:50 2026 by rpki-client