This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/Qa4j2vggkqNGhqUJxufFEhTXf1Q.roa File: Qa4j2vggkqNGhqUJxufFEhTXf1Q.roa (raw, json) Hash identifier: /qjjWw69vtyAWOv6PADeDd1WN8SkDOm5Fp4obHAorbY= Subject key identifier: 41:AE:23:DA:F8:20:92:A3:46:86:A5:09:C6:E7:C5:12:14:D7:7F:54 Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Certificate serial: 019B7B36D138AED9C132BBA8A15DF21693B8 Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/Qa4j2vggkqNGhqUJxufFEhTXf1Q.roa Signing time: Thu 01 Jan 2026 20:19:08 +0000 ROA not before: Thu 01 Jan 2026 20:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204337 IP address blocks: 77.232.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d1:38:ae:d9:c1:32:bb:a8:a1:5d:f2:16:93:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Validity Not Before: Jan 1 20:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41ae23daf82092a34686a509c6e7c51214d77f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:28:33:bc:e4:74:aa:28:14:dc:52:af:2f:84: be:df:85:be:70:1a:15:19:6f:e1:e0:4d:e8:80:8a: a3:d4:0b:d0:98:0f:c4:c0:ce:23:c6:24:84:92:1e: a7:34:10:92:20:2c:7f:f3:d7:16:0a:21:88:54:b6: d1:87:38:20:7d:21:bd:7d:ce:9b:45:ed:34:c9:54: e7:51:2f:e8:99:1d:4a:54:86:90:fc:6c:7f:10:2d: f2:04:99:2f:52:40:16:3b:cd:2c:f4:0d:64:8a:6a: bf:3d:97:97:aa:35:23:9b:5b:34:2d:59:13:e9:1d: ba:ea:e3:e7:dd:0e:75:1f:61:fa:90:88:1e:1b:5d: 9a:b4:08:bb:92:ef:12:5d:db:ca:11:6c:65:bb:05: d4:83:14:13:a6:d5:d3:14:6a:82:a0:52:33:6b:36: 76:84:e2:ec:76:e1:c2:6a:fd:71:c7:70:94:1d:bd: 38:48:1d:3b:69:cd:cf:65:ce:6b:75:e8:0e:05:38: a4:75:86:25:38:74:a7:76:a3:ac:80:57:26:41:22: 84:8f:3c:8c:0d:a9:78:20:91:20:48:d4:76:58:d0: e7:b1:16:ff:e9:02:7c:09:96:ac:77:0b:07:4b:bf: a3:07:dc:d3:a5:3f:77:ac:18:c1:12:64:4f:7c:51: 81:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AE:23:DA:F8:20:92:A3:46:86:A5:09:C6:E7:C5:12:14:D7:7F:54 X509v3 Authority Key Identifier: keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/Qa4j2vggkqNGhqUJxufFEhTXf1Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.232.34.0/24 Signature Algorithm: sha256WithRSAEncryption 48:ac:23:83:dd:85:1c:04:93:0f:20:2d:d5:e4:ef:e3:67:44: e0:58:1e:c5:cd:54:4c:7f:78:ff:13:fb:fd:d2:cd:7e:d7:ed: 78:bb:0b:8c:ac:92:bb:c6:5b:b1:22:a5:21:49:43:22:8d:e3: 2d:7a:1a:10:26:27:79:5f:a6:55:c0:8f:3b:c9:a3:43:36:35: 1c:a5:a5:8e:3e:cf:63:82:ed:6b:6f:1a:1e:9a:15:b4:d1:c0: a9:1a:67:74:c0:74:bd:a8:88:c5:b9:fe:8f:48:36:eb:c4:ca: f0:fb:8c:90:8f:67:f5:e1:78:96:2a:fb:f6:72:9b:42:4a:e6: da:85:df:c8:32:72:fb:d7:e3:40:b0:8a:37:36:60:f4:4e:c4: c7:f8:80:ca:00:64:31:81:99:8e:da:03:f3:3d:87:5e:11:0b: a4:3d:a1:49:f3:a9:57:3e:3e:8c:2b:bf:6f:ee:34:14:34:b4: 6c:5a:14:fb:ab:23:5f:21:4d:15:86:02:b0:8c:83:8f:2a:ed: a5:c3:1a:e9:d0:f3:15:ee:21:30:8c:7d:df:55:0f:b6:b5:6f: 2e:99:40:c8:9d:e6:d8:0f:f7:92:48:b6:dc:0d:e8:94:a8:be: 54:43:c8:7d:7a:3a:9f:78:60:89:e2:37:e4:7f:27:c1:27:ee: 3f:3d:a7:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NtE4rtnBMruooV3yFpO4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz YjJjYTIwHhcNMjYwMTAxMjAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWFlMjNkYWY4MjA5MmEzNDY4NmE1MDljNmU3YzUxMjE0ZDc3ZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0igzvOR0qigU3FKvL4S+34W+cBoV GW/h4E3ogIqj1AvQmA/EwM4jxiSEkh6nNBCSICx/89cWCiGIVLbRhzggfSG9fc6b Re00yVTnUS/omR1KVIaQ/Gx/EC3yBJkvUkAWO80s9A1kimq/PZeXqjUjm1s0LVkT 6R266uPn3Q51H2H6kIgeG12atAi7ku8SXdvKEWxluwXUgxQTptXTFGqCoFIzazZ2 hOLsduHCav1xx3CUHb04SB07ac3PZc5rdegOBTikdYYlOHSndqOsgFcmQSKEjzyM Dal4IJEgSNR2WNDnsRb/6QJ8CZasdwsHS7+jB9zTpT93rBjBEmRPfFGBQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEGuI9r4IJKjRoalCcbnxRIU139UMB8GA1UdIwQY MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct NTk3NTkxM2Y1MmM1LzEvUWE0ajJ2Z2drcU5HaHFVSnh1ZkZFaFRYZjFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1 LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATegiMA0G CSqGSIb3DQEBCwUAA4IBAQBIrCOD3YUcBJMPIC3V5O/jZ0TgWB7FzVRMf3j/E/v9 0s1+1+14uwuMrJK7xluxIqUhSUMijeMtehoQJid5X6ZVwI87yaNDNjUcpaWOPs9j gu1rbxoemhW00cCpGmd0wHS9qIjFuf6PSDbrxMrw+4yQj2f14XiWKvv2cptCSuba hd/IMnL71+NAsIo3NmD0TsTH+IDKAGQxgZmO2gPzPYdeEQukPaFJ86lXPj6MK79v 7jQUNLRsWhT7qyNfIU0VhgKwjIOPKu2lwxrp0PMV7iEwjH3fVQ+2tW8umUDInebY D/eSSLbcDeiUqL5UQ8h9ejqfeGCJ4jfkfyfBJ+4/Padv -----END CERTIFICATE-----Generated at Mon Jan 26 07:43:23 2026 by rpki-client