This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/Q3blDI4wrXCjaTFpenyLf0DAMPA.roa File: Q3blDI4wrXCjaTFpenyLf0DAMPA.roa (raw, json) Hash identifier: F0bx6XJTy3iA6AQ6s8pJaOAUtTyA4K1EgB6ztrarkJU= Subject key identifier: 43:76:E5:0C:8E:30:AD:70:A3:69:31:69:7A:7C:8B:7F:40:C0:30:F0 Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81 Certificate serial: 019B7E380B8FE0491C25C56CCECAD52FE857 Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/Q3blDI4wrXCjaTFpenyLf0DAMPA.roa Signing time: Fri 02 Jan 2026 10:19:20 +0000 ROA not before: Fri 02 Jan 2026 10:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49072 IP address blocks: 77.246.210.0/24 maxlen: 24 91.240.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0b:8f:e0:49:1c:25:c5:6c:ce:ca:d5:2f:e8:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81 Validity Not Before: Jan 2 10:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4376e50c8e30ad70a36931697a7c8b7f40c030f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a6:f2:e4:24:78:98:ff:be:2e:37:e3:5b:98: 3f:d1:c6:a3:ff:04:dd:f3:f4:1b:dc:3d:05:d6:d0: ad:2c:bb:a9:f6:c6:74:9e:f7:d3:5f:c9:c6:0a:c4: 38:c7:35:f6:ba:b5:66:c0:5d:bf:ce:73:54:68:87: e1:37:2a:8f:79:fc:15:59:13:c6:b1:3c:02:dd:77: ff:2b:fc:02:92:6a:94:b9:74:5a:88:8a:c9:41:96: d5:49:f1:9e:d2:c7:41:6e:23:1e:b5:4e:ef:85:ed: d9:08:42:08:f9:ff:3f:e1:a4:e6:9a:36:06:c7:43: 62:24:da:22:e9:e1:1d:ae:af:45:8a:88:3b:37:d0: ad:af:18:dc:90:e6:c8:6c:06:a6:ca:67:1c:01:1e: e2:42:3b:5f:e5:76:bf:8a:87:5b:af:b8:6b:12:5a: a4:61:21:98:fb:d2:78:71:f4:ea:a4:ba:bf:80:a2: 93:72:c7:f8:f3:8a:59:0a:e0:34:ea:34:95:7b:5b: f8:ff:84:42:e9:ab:eb:46:60:c6:35:e6:42:41:ab: 40:90:40:67:ae:85:32:81:7b:9c:5e:3c:8e:eb:5e: 87:2e:c8:78:ec:61:52:ca:2c:2d:c4:4d:f3:8b:a8: bd:29:ca:dc:07:0e:7e:ec:e3:bf:8a:5f:a0:67:ac: 4f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:76:E5:0C:8E:30:AD:70:A3:69:31:69:7A:7C:8B:7F:40:C0:30:F0 X509v3 Authority Key Identifier: keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/Q3blDI4wrXCjaTFpenyLf0DAMPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.246.210.0/24 91.240.69.0/24 Signature Algorithm: sha256WithRSAEncryption c7:03:bc:64:e3:f5:48:3a:2e:31:a0:92:ff:f6:5d:6f:d9:6e: 60:06:7c:b4:51:6f:72:52:41:09:d2:4b:90:a9:f2:68:64:3c: 5e:f0:2a:b2:c0:1e:5e:d8:b1:99:85:5c:97:ae:21:c6:1d:8b: 42:b1:c7:a1:cd:b4:b5:6d:a2:b1:49:72:d9:db:c0:1e:4b:1f: 08:c9:23:06:5d:a4:0a:8c:7b:01:cf:be:18:ba:cb:11:e5:eb: 7e:3c:b4:28:5d:fd:56:97:9b:51:aa:84:d1:df:13:2d:f9:6f: 9b:25:a2:5f:38:9a:17:d8:9a:e8:36:e5:f1:54:8a:04:05:d1: 7a:c6:4b:cb:0d:89:ea:07:34:cf:f8:bc:2c:e6:68:df:3e:92: 18:8e:14:d5:66:98:c9:ea:df:d7:3f:c7:a7:6b:83:f0:f0:0a: 87:0f:2f:8e:38:41:0b:6f:86:f3:88:b7:bd:bd:7c:8a:1b:d6: fe:a8:50:5d:75:56:d4:65:f5:e8:f1:2e:16:c6:8e:e4:3d:24: d9:57:c7:32:8b:07:43:5e:6f:dd:74:f8:dd:c8:1b:20:09:8a: 40:3e:f5:2d:0a:4e:de:99:99:e0:ff:d2:1b:9c:af:a8:9a:e0: ab:44:a9:34:be:85:42:77:80:57:ed:b9:53:48:00:57:55:db: 7d:a3:32:7b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OAuP4EkcJcVszsrVL+hXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OWY1ZDJiN2RiZjUyNDQ5YjAxMjUzYjBmODI3ZjQwMWE4 YTdjODEwHhcNMjYwMTAyMTAxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Mzc2ZTUwYzhlMzBhZDcwYTM2OTMxNjk3YTdjOGI3ZjQwYzAzMGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaby5CR4mP++LjfjW5g/0caj/wTd 8/Qb3D0F1tCtLLup9sZ0nvfTX8nGCsQ4xzX2urVmwF2/znNUaIfhNyqPefwVWRPG sTwC3Xf/K/wCkmqUuXRaiIrJQZbVSfGe0sdBbiMetU7vhe3ZCEII+f8/4aTmmjYG x0NiJNoi6eEdrq9Fiog7N9CtrxjckObIbAamymccAR7iQjtf5Xa/iodbr7hrElqk YSGY+9J4cfTqpLq/gKKTcsf484pZCuA06jSVe1v4/4RC6avrRmDGNeZCQatAkEBn roUygXucXjyO616HLsh47GFSyiwtxE3zi6i9KcrcBw5+7OO/il+gZ6xP4wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEN25QyOMK1wo2kxaXp8i39AwDDwMB8GA1UdIwQY MBaAFEmfXSt9v1JEmwElOw+Cf0AainyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYt YjlkY2NhYjZkZjJlLzEvUTNibERJNHdyWENqYVRGcGVueUxmMERBTVBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYtYjlkY2NhYjZkZjJl LzEvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATfbSAwQA W/BFMA0GCSqGSIb3DQEBCwUAA4IBAQDHA7xk4/VIOi4xoJL/9l1v2W5gBny0UW9y UkEJ0kuQqfJoZDxe8CqywB5e2LGZhVyXriHGHYtCscehzbS1baKxSXLZ28AeSx8I ySMGXaQKjHsBz74YussR5et+PLQoXf1Wl5tRqoTR3xMt+W+bJaJfOJoX2JroNuXx VIoEBdF6xkvLDYnqBzTP+Lws5mjfPpIYjhTVZpjJ6t/XP8ena4Pw8AqHDy+OOEEL b4bziLe9vXyKG9b+qFBddVbUZfXo8S4Wxo7kPSTZV8cyiwdDXm/ddPjdyBsgCYpA PvUtCk7emZng/9IbnK+omuCrRKk0voVCd4BX7blTSABXVdt9ozJ7 -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:58 2026 by rpki-client