This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/QcfJbIhPqqgO-dDA8_X0nInCy3M.roa File: QcfJbIhPqqgO-dDA8_X0nInCy3M.roa (raw, json) Hash identifier: u7+9bPFhJWpDCVdtEvIDFg0NxWO9sovh4aFRFFHarz0= Subject key identifier: 41:C7:C9:6C:88:4F:AA:A8:0E:F9:D0:C0:F3:F5:F4:9C:89:C2:CB:73 Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c Certificate serial: 019B7EA57377B3ABD7D34152254ED472C83B Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/QcfJbIhPqqgO-dDA8_X0nInCy3M.roa Signing time: Fri 02 Jan 2026 12:18:50 +0000 ROA not before: Fri 02 Jan 2026 12:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49632 IP address blocks: 188.125.160.0/24 maxlen: 24 188.125.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:73:77:b3:ab:d7:d3:41:52:25:4e:d4:72:c8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c Validity Not Before: Jan 2 12:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41c7c96c884faaa80ef9d0c0f3f5f49c89c2cb73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c4:04:0a:89:15:58:ea:ac:d1:0a:80:79:76: 90:93:33:55:90:db:8d:b3:4a:03:05:0e:2f:d9:d6: e6:92:0e:88:aa:96:df:03:a7:90:bc:03:9a:5d:a1: d3:4e:6e:33:e7:cd:ea:33:bd:28:bc:90:c2:e4:c7: 95:53:b2:0a:f9:d2:f0:62:bf:02:19:68:6e:c9:49: e5:23:e2:ef:9c:7f:9b:6c:f6:51:87:2c:1d:4f:fb: 7a:b8:e7:96:7e:7d:db:6e:3f:c6:21:db:f0:63:d9: 37:33:a1:69:41:d9:73:5f:5b:91:b0:69:63:6d:f4: 4a:e0:cb:a4:e2:64:22:8e:72:08:c2:db:41:73:20: ef:26:25:16:a1:ef:83:1b:51:f8:f1:64:7a:49:10: dd:9b:b6:b9:7f:4b:04:79:48:a2:33:52:d3:d4:3a: bb:98:a0:2f:80:2d:74:df:1e:1e:31:c2:12:15:0d: ce:69:c1:36:2a:bf:a2:93:6c:68:ab:fd:1e:1a:12: 78:7e:a4:2c:0b:c7:64:fd:91:76:d9:8e:ac:69:67: 0c:40:fa:e4:6d:22:24:85:47:ca:b9:46:16:51:e3: 26:7b:1b:1e:33:ea:8a:28:c3:b1:8a:ff:45:6b:70: d6:bb:99:75:93:bd:ba:fb:bb:f1:93:81:93:66:24: 16:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C7:C9:6C:88:4F:AA:A8:0E:F9:D0:C0:F3:F5:F4:9C:89:C2:CB:73 X509v3 Authority Key Identifier: keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/QcfJbIhPqqgO-dDA8_X0nInCy3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.125.160.0/24 188.125.168.0/24 Signature Algorithm: sha256WithRSAEncryption d0:96:c2:d6:1e:74:fa:7a:41:41:be:6f:13:49:57:52:28:6d: a1:47:38:4c:ea:de:a1:8c:17:20:cc:56:7d:5c:da:e7:24:3d: c1:4a:ae:34:2f:0d:96:4b:eb:c6:af:59:43:7d:56:6a:8f:24: 45:71:41:61:3a:75:6a:63:42:d8:ca:a7:8a:e9:ed:e3:0e:d4: da:cc:a9:d4:58:a4:ba:e5:dd:1e:1c:6d:d5:3d:46:08:46:f8: 93:79:78:fa:78:5d:10:fd:b1:cc:d7:3c:af:01:d1:cd:62:f5: ec:22:f9:7b:ba:26:97:d8:8b:f8:b2:4f:dd:ed:ee:ef:ee:c2: a4:a9:30:1d:fd:f6:8a:8f:3c:01:8b:a3:d4:b9:bc:cc:b2:70: b0:2e:82:fa:f7:51:c4:c1:6d:ad:d6:2f:5e:cc:ea:47:07:5b: 01:98:2c:cd:27:68:47:fc:e3:f5:ea:c9:17:80:c9:db:da:bb: 47:f8:27:64:41:08:ce:32:15:a8:f6:1b:20:e9:19:0e:9f:17: 8c:30:18:1c:5a:e0:7a:02:17:aa:0a:45:77:9f:d2:95:be:63: c1:06:60:ae:22:a4:00:93:6d:42:27:bf:fc:f1:2b:b9:7e:c1: d9:1b:c9:13:54:60:1f:c3:2e:41:12:41:f2:ef:d1:ed:18:a4: 45:cf:a7:ba -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pXN3s6vX00FSJU7Ucsg7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MmY2MzNmNzZlOGQ4YWFlYWEzMmI1YWNlMTZhM2RiMzk0 M2Q4MGMwHhcNMjYwMTAyMTIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWM3Yzk2Yzg4NGZhYWE4MGVmOWQwYzBmM2Y1ZjQ5Yzg5YzJjYjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08QECokVWOqs0QqAeXaQkzNVkNuN s0oDBQ4v2dbmkg6IqpbfA6eQvAOaXaHTTm4z583qM70ovJDC5MeVU7IK+dLwYr8C GWhuyUnlI+LvnH+bbPZRhywdT/t6uOeWfn3bbj/GIdvwY9k3M6FpQdlzX1uRsGlj bfRK4Muk4mQijnIIwttBcyDvJiUWoe+DG1H48WR6SRDdm7a5f0sEeUiiM1LT1Dq7 mKAvgC103x4eMcISFQ3OacE2Kr+ik2xoq/0eGhJ4fqQsC8dk/ZF22Y6saWcMQPrk bSIkhUfKuUYWUeMmexseM+qKKMOxiv9Fa3DWu5l1k726+7vxk4GTZiQWiQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEHHyWyIT6qoDvnQwPP19JyJwstzMB8GA1UdIwQY MBaAFFQvYz926Niq6qMrWs4Wo9s5Q9gMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDIt NjliOTUzYzlkNWFhLzEvUWNmSmJJaFBxcWdPLWREQThfWDBuSW5DeTNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDItNjliOTUzYzlkNWFh LzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvH2gAwQA vH2oMA0GCSqGSIb3DQEBCwUAA4IBAQDQlsLWHnT6ekFBvm8TSVdSKG2hRzhM6t6h jBcgzFZ9XNrnJD3BSq40Lw2WS+vGr1lDfVZqjyRFcUFhOnVqY0LYyqeK6e3jDtTa zKnUWKS65d0eHG3VPUYIRviTeXj6eF0Q/bHM1zyvAdHNYvXsIvl7uiaX2Iv4sk/d 7e7v7sKkqTAd/faKjzwBi6PUubzMsnCwLoL691HEwW2t1i9ezOpHB1sBmCzNJ2hH /OP16skXgMnb2rtH+CdkQQjOMhWo9hsg6RkOnxeMMBgcWuB6AheqCkV3n9KVvmPB BmCuIqQAk21CJ7/88Su5fsHZG8kTVGAfwy5BEkHy79HtGKRFz6e6 -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:09 2026 by rpki-client