This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/QJ9BmvbVTtS7A8Ks_kSD4dd3-hw.roa File: QJ9BmvbVTtS7A8Ks_kSD4dd3-hw.roa (raw, json) Hash identifier: YikTmuc2uFJ3g6A35GBcQPgqdQmjHo//OB0ZeNSHvUk= Subject key identifier: 40:9F:41:9A:F6:D5:4E:D4:BB:03:C2:AC:FE:44:83:E1:D7:77:FA:1C Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc Certificate serial: 019B78A26E433E3F5CD74381F32331E9FC8C Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/QJ9BmvbVTtS7A8Ks_kSD4dd3-hw.roa Signing time: Thu 01 Jan 2026 08:17:49 +0000 ROA not before: Thu 01 Jan 2026 08:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42923 IP address blocks: 217.79.144.0/23 maxlen: 23 217.79.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:6e:43:3e:3f:5c:d7:43:81:f3:23:31:e9:fc:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc Validity Not Before: Jan 1 08:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=409f419af6d54ed4bb03c2acfe4483e1d777fa1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:26:4d:64:f9:ec:14:70:40:a9:8a:83:35:86: bd:d2:b1:53:4b:65:c3:db:af:ef:6a:85:83:68:d8: 8c:e0:3d:37:0b:48:d5:e0:6e:97:ca:85:fc:89:32: 99:c6:60:7e:43:f4:a9:54:cf:14:40:8c:5d:09:13: 48:65:94:1e:99:a0:27:19:ee:5b:0a:c8:86:db:b8: c8:00:ce:e4:80:c9:e3:3b:6b:5f:a7:7e:a0:7d:ca: bc:52:8d:31:e0:f4:2c:52:f8:48:cf:6d:15:18:97: c8:c8:df:bb:c3:09:ee:16:bb:cf:bc:72:34:d1:fc: 4a:be:7c:0f:8a:b5:84:b7:87:4f:df:5f:4b:c6:fc: c7:a9:4b:96:7b:01:58:57:6b:a6:01:c6:18:4c:50: a4:3c:0f:76:0b:01:da:1d:cb:88:c3:8c:ba:63:eb: d1:64:e4:7a:76:4d:1a:97:13:90:e0:73:76:c9:03: 95:0b:50:2c:0f:85:6f:fb:18:05:b8:66:95:c1:53: 77:95:30:e5:34:09:67:26:78:a8:0c:db:70:9b:97: f1:12:da:7c:ca:a2:77:c2:35:48:51:24:16:8a:1d: 6c:fb:40:57:d7:af:38:d0:5f:c1:88:d4:0f:72:cd: 80:3c:15:43:17:4d:39:50:20:97:1b:f8:a7:87:1e: 80:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9F:41:9A:F6:D5:4E:D4:BB:03:C2:AC:FE:44:83:E1:D7:77:FA:1C X509v3 Authority Key Identifier: keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/QJ9BmvbVTtS7A8Ks_kSD4dd3-hw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.79.144.0/22 Signature Algorithm: sha256WithRSAEncryption a0:5d:b7:ad:25:3f:cd:ef:d2:90:6d:ea:ba:00:a0:c4:4c:bf: 40:b8:7b:ab:4a:74:93:3d:1c:11:60:ad:b0:52:bf:cf:a4:d5: ff:99:33:8b:14:08:2c:42:80:cf:76:26:7b:6d:e1:41:63:af: ad:2d:26:2c:b0:7d:f1:4c:f4:27:06:3d:42:30:bd:35:dc:9d: f5:d6:43:c5:5f:31:26:f5:dc:b2:c9:f1:41:e8:93:c5:7e:ad: fe:1e:6f:4b:f6:3c:f7:90:37:e1:33:50:32:f3:ba:cf:c5:cc: f8:8b:e7:ac:4e:28:ad:10:65:d7:69:1b:dc:81:db:b2:fe:81: 99:d8:82:f5:a3:fe:38:09:77:0c:df:89:e7:45:94:92:79:89: e8:96:ba:3f:c3:7c:cd:64:3e:63:95:91:45:05:4f:ef:0e:de: a4:a1:af:6c:87:c8:d0:a7:62:f8:9c:46:fd:4a:a8:31:81:76: 66:32:26:b1:8b:35:1c:da:dd:6e:a2:69:e5:3f:60:b8:74:f3: 0a:d8:11:03:f4:ad:f4:50:30:b4:f2:2f:1f:6d:8b:b1:d0:c3: f0:88:b8:0b:62:76:d7:81:cb:12:0b:e0:f2:d1:17:1b:16:56: cd:b5:eb:1c:2f:10:bf:7f:09:60:f8:77:27:ad:9b:66:a3:d8: 81:5c:f2:92 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4om5DPj9c10OB8yMx6fyMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMWU5YjRlOGRjNDliZTNhYmE1OTc0MjVhZWZkOGIzYTUz NjJmZmMwHhcNMjYwMTAxMDgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDlmNDE5YWY2ZDU0ZWQ0YmIwM2MyYWNmZTQ0ODNlMWQ3NzdmYTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiZNZPnsFHBAqYqDNYa90rFTS2XD 26/vaoWDaNiM4D03C0jV4G6XyoX8iTKZxmB+Q/SpVM8UQIxdCRNIZZQemaAnGe5b CsiG27jIAM7kgMnjO2tfp36gfcq8Uo0x4PQsUvhIz20VGJfIyN+7wwnuFrvPvHI0 0fxKvnwPirWEt4dP319LxvzHqUuWewFYV2umAcYYTFCkPA92CwHaHcuIw4y6Y+vR ZOR6dk0alxOQ4HN2yQOVC1AsD4Vv+xgFuGaVwVN3lTDlNAlnJnioDNtwm5fxEtp8 yqJ3wjVIUSQWih1s+0BX16840F/BiNQPcs2APBVDF005UCCXG/inhx6AGwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFECfQZr21U7UuwPCrP5Eg+HXd/ocMB8GA1UdIwQY MBaAFPoem06NxJvjq6WXQlrv2LOlNi/8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oNmJUbzNFbS1PcnBaZENXdV9ZczZVMkxfdy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvNDcwN2I0LTAwMzItNGFjNy1iY2M3 LTQwYzFhNzI3MDJlZi8xL1FKOUJtdmJWVHRTN0E4S3Nfa1NENGRkMy1ody5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzUvNDcwN2I0LTAwMzItNGFjNy1iY2M3LTQwYzFhNzI3MDJl Zi8xLzEtaDZiVG8zRW0tT3JwWmRDV3VfWXM2VTJMX3cuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALZT5Aw DQYJKoZIhvcNAQELBQADggEBAKBdt60lP83v0pBt6roAoMRMv0C4e6tKdJM9HBFg rbBSv8+k1f+ZM4sUCCxCgM92Jntt4UFjr60tJiywffFM9CcGPUIwvTXcnfXWQ8Vf MSb13LLJ8UHok8V+rf4eb0v2PPeQN+EzUDLzus/FzPiL56xOKK0QZddpG9yB27L+ gZnYgvWj/jgJdwzfiedFlJJ5ieiWuj/DfM1kPmOVkUUFT+8O3qShr2yHyNCnYvic Rv1KqDGBdmYyJrGLNRza3W6iaeU/YLh08wrYEQP0rfRQMLTyLx9ti7HQw/CIuAti dteByxIL4PLRFxsWVs216xwvEL9/CWD4dyetm2aj2IFc8pI= -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:13 2026 by rpki-client