This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/qTChY0Kq_uA6L6Hi5pDRavsPyQk.roa File: qTChY0Kq_uA6L6Hi5pDRavsPyQk.roa (raw, json) Hash identifier: UhoY5Jxel6+XTofYPqKQ5kLj+eG01D/abRAxNfVn9cQ= Subject key identifier: A9:30:A1:63:42:AA:FE:E0:3A:2F:A1:E2:E6:90:D1:6A:FB:0F:C9:09 Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95 Certificate serial: 019B78A352042A537C8202D92E482865E54D Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/qTChY0Kq_uA6L6Hi5pDRavsPyQk.roa Signing time: Thu 01 Jan 2026 08:18:47 +0000 ROA not before: Thu 01 Jan 2026 08:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215691 IP address blocks: 78.40.111.0/24 maxlen: 24 171.22.18.0/24 maxlen: 24 2a14:8880::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:52:04:2a:53:7c:82:02:d9:2e:48:28:65:e5:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95 Validity Not Before: Jan 1 08:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a930a16342aafee03a2fa1e2e690d16afb0fc909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:82:76:ac:e3:71:f6:60:e7:33:48:64:7a:87: 61:b6:b6:b5:56:07:ab:2e:23:f3:08:de:9d:b5:b3: 5c:68:91:ba:6e:f4:60:a9:a3:82:19:fe:c9:df:94: 80:18:bf:94:ce:b2:78:c5:77:74:ef:14:65:70:2f: ee:09:8c:7e:e6:a4:6a:d9:97:41:32:ab:95:29:c9: 0b:1a:61:94:56:47:57:86:fc:5d:c1:97:bd:fb:a7: 09:56:09:95:b8:a9:ff:d0:df:c9:89:aa:c4:48:a5: bf:47:fd:d3:13:e1:07:4c:81:ec:5e:f4:43:97:fd: 6b:10:1e:a8:4a:4f:d0:fc:23:30:f7:32:1e:16:00: ba:c4:89:08:a9:83:20:51:d0:9a:8f:ac:90:63:b6: 1c:86:61:79:c8:08:c8:e3:24:79:33:04:9f:cb:cb: a6:cf:25:09:f9:24:19:b3:dc:4d:4c:59:46:fd:7b: 1e:59:fc:24:21:5e:29:b9:0e:f9:81:81:31:4d:a8: ce:2d:42:2f:48:00:b9:fe:6b:52:50:83:94:a6:e8: 7d:16:9c:31:5a:85:20:9c:99:0e:1f:95:7b:fd:b7: c4:b3:1a:81:65:fb:47:07:55:ca:aa:0e:07:b6:88: e2:fc:5e:3f:27:ba:ff:b0:4f:45:c6:90:d6:aa:c1: 24:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:30:A1:63:42:AA:FE:E0:3A:2F:A1:E2:E6:90:D1:6A:FB:0F:C9:09 X509v3 Authority Key Identifier: keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/qTChY0Kq_uA6L6Hi5pDRavsPyQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.111.0/24 171.22.18.0/24 IPv6: 2a14:8880::/29 Signature Algorithm: sha256WithRSAEncryption 8a:89:f6:7a:1a:ba:a3:0b:f0:24:18:ae:69:5b:2e:90:94:b0: 16:ab:2e:a3:62:d7:39:7c:ce:b5:f9:6d:86:48:e1:d1:f3:2d: d7:d8:c8:01:1d:dd:a1:72:1b:77:09:35:05:a2:1d:00:73:ce: 2c:3c:34:68:41:b1:ff:24:c9:fa:08:1d:61:56:7e:d7:ce:b0: 66:df:7c:4e:c3:95:48:f5:c4:32:35:27:65:04:0e:91:f6:0b: dc:4d:b9:d3:d4:4d:74:85:db:3d:23:23:04:f5:e9:60:a2:1e: d3:74:a6:35:cb:94:3d:a2:f1:48:3b:ff:c6:b1:51:08:63:99: 24:ce:83:be:cc:13:ea:38:69:f3:a9:e4:64:b7:f6:61:6b:10: e8:25:36:c0:f4:ba:79:01:f0:d0:ae:81:63:f9:cb:d7:64:3d: 0c:54:d4:41:b4:c4:91:af:54:3a:08:8e:21:cf:3c:99:26:4e: 94:c4:5d:8e:25:4f:c1:69:b6:3d:d8:aa:30:b9:98:f4:0d:9c: 0f:2b:31:67:83:06:e2:50:e3:e9:0f:e7:98:34:a5:a7:a7:78: 17:cd:5c:1e:08:79:73:85:c2:30:b4:0b:ea:af:cd:1b:2c:cb: 6b:56:bd:8a:be:4a:fd:72:aa:d1:82:7a:31:51:76:4e:37:3a: 78:61:bb:e6 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4o1IEKlN8ggLZLkgoZeVNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxODE0NDBhMzY3YTM0ZDMwNmJjMGY2ODVhZTljZDg2OTUy ZjdmOTUwHhcNMjYwMTAxMDgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTMwYTE2MzQyYWFmZWUwM2EyZmExZTJlNjkwZDE2YWZiMGZjOTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoJ2rONx9mDnM0hkeodhtra1Vger LiPzCN6dtbNcaJG6bvRgqaOCGf7J35SAGL+UzrJ4xXd07xRlcC/uCYx+5qRq2ZdB MquVKckLGmGUVkdXhvxdwZe9+6cJVgmVuKn/0N/JiarESKW/R/3TE+EHTIHsXvRD l/1rEB6oSk/Q/CMw9zIeFgC6xIkIqYMgUdCaj6yQY7YchmF5yAjI4yR5MwSfy8um zyUJ+SQZs9xNTFlG/XseWfwkIV4puQ75gYExTajOLUIvSAC5/mtSUIOUpuh9Fpwx WoUgnJkOH5V7/bfEsxqBZftHB1XKqg4Htoji/F4/J7r/sE9FxpDWqsEkcwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKkwoWNCqv7gOi+h4uaQ0Wr7D8kJMB8GA1UdIwQY MBaAFIGBRAo2ejTTBrwPaFrpzYaVL3+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xNjJmOGYtNjg3Zi00NjcxLWE1MjQt NTU2OTFhNTY5NzIwLzEvcVRDaFkwS3FfdUE2TDZIaTVwRFJhdnNQeVFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8xNjJmOGYtNjg3Zi00NjcxLWE1MjQtNTU2OTFhNTY5NzIw LzEvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQATihvAwQA qxYSMA0EAgACMAcDBQMqFIiAMA0GCSqGSIb3DQEBCwUAA4IBAQCKifZ6GrqjC/Ak GK5pWy6QlLAWqy6jYtc5fM61+W2GSOHR8y3X2MgBHd2hcht3CTUFoh0Ac84sPDRo QbH/JMn6CB1hVn7XzrBm33xOw5VI9cQyNSdlBA6R9gvcTbnT1E10hds9IyME9elg oh7TdKY1y5Q9ovFIO//GsVEIY5kkzoO+zBPqOGnzqeRkt/ZhaxDoJTbA9Lp5AfDQ roFj+cvXZD0MVNRBtMSRr1Q6CI4hzzyZJk6UxF2OJU/BabY92KowuZj0DZwPKzFn gwbiUOPpD+eYNKWnp3gXzVweCHlzhcIwtAvqr80bLMtrVr2Kvkr9cqrRgnoxUXZO Nzp4Ybvm -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:01 2026 by rpki-client