This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/Qq0k4K7fGZnP4f3tLeCmDtkyQ7w.roa File: Qq0k4K7fGZnP4f3tLeCmDtkyQ7w.roa (raw, json) Hash identifier: xl3H7Ui7pyYxDCWSICK+n2RNpa4LQr31FnkPCNajMaE= Subject key identifier: 42:AD:24:E0:AE:DF:19:99:CF:E1:FD:ED:2D:E0:A6:0E:D9:32:43:BC Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364 Certificate serial: 019B797E3475EF89760EA1C0BAF0EF0340C1 Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/Qq0k4K7fGZnP4f3tLeCmDtkyQ7w.roa Signing time: Thu 01 Jan 2026 12:17:52 +0000 ROA not before: Thu 01 Jan 2026 12:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49127 IP address blocks: 83.98.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:34:75:ef:89:76:0e:a1:c0:ba:f0:ef:03:40:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364 Validity Not Before: Jan 1 12:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42ad24e0aedf1999cfe1fded2de0a60ed93243bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0a:cc:c8:ff:0e:0d:71:2f:88:6f:bc:a7:68: 83:05:db:fb:ea:18:39:f6:12:5e:86:99:9f:71:e0: fc:5c:d5:af:e4:1f:84:f5:e2:ab:1f:6a:2e:3b:a5: 0e:65:bc:dc:b1:f9:6c:10:f3:5d:fb:15:82:67:95: 16:7c:64:c8:62:6c:77:a7:c0:f7:b9:07:21:46:94: e3:91:ff:0a:7e:45:f3:d3:60:f2:cf:bc:d5:bb:85: 1b:8c:8e:73:24:f1:81:60:88:43:ca:b6:ba:0d:75: 26:72:d7:4d:f0:70:dd:7a:ec:c4:d3:69:ae:76:cd: 22:d7:67:33:92:1c:d6:27:65:33:c5:16:b3:ed:10: f3:c3:6f:a1:75:63:87:ea:ff:4b:47:2c:89:a1:5e: 2a:aa:ca:d2:61:2d:bc:57:a4:73:69:40:50:13:83: 67:e4:97:76:f5:6d:28:0b:bf:a8:80:c3:f8:c9:e5: 69:4a:c0:0d:d1:f2:ff:7c:b6:2e:62:50:dc:71:bf: db:33:eb:d5:0b:9e:e6:7c:34:ea:a3:b4:74:53:70: 66:cc:28:87:89:cc:79:f8:e0:48:ff:1c:08:e0:ac: bd:1b:c8:3b:f3:1b:68:1d:31:05:3a:69:29:35:3f: 05:25:cc:2b:67:13:c2:5a:36:23:ee:a4:25:37:b0: c0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AD:24:E0:AE:DF:19:99:CF:E1:FD:ED:2D:E0:A6:0E:D9:32:43:BC X509v3 Authority Key Identifier: keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/Qq0k4K7fGZnP4f3tLeCmDtkyQ7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.98.157.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:71:3f:9d:cf:6e:e0:46:1e:6a:e4:e5:c8:75:2a:7d:fa:9a: f1:67:b7:9c:8b:0d:5f:4e:a9:73:05:a4:e9:cf:d0:47:82:9b: bb:8e:85:69:7f:76:d1:f4:b4:42:d3:84:de:c3:b4:24:61:cb: 5d:dd:9d:a0:99:36:42:e3:17:d2:54:ca:45:8f:23:eb:9e:36: 54:db:1c:e2:48:b4:4e:d7:0e:82:00:89:66:6f:12:d6:5e:d9: 00:a9:ab:c2:8e:da:2f:9f:75:1d:9c:0b:19:eb:68:96:bc:fb: d6:16:43:36:3c:72:cb:d3:2b:a7:2d:64:41:63:fb:8f:cb:c9: 52:18:4f:ce:26:6f:0e:7e:d1:84:81:3b:2a:0c:f5:52:f3:50: bc:7f:9d:b3:69:64:2e:d8:17:be:e4:4d:b0:3f:4f:05:c6:24: a7:47:80:95:fe:41:5e:43:62:ee:a7:45:c0:79:f4:19:87:db: 60:28:b0:36:54:62:ea:bd:86:75:ef:ce:6f:9f:5c:2e:32:8c: 49:c2:99:d4:7d:4e:a0:8a:92:32:74:69:a1:00:a4:c6:ea:21: ed:9d:33:87:82:06:27:01:e7:92:b6:05:77:e6:b1:15:1e:5c: 92:21:2f:0a:31:04:91:1c:05:36:03:ce:0d:a5:f8:f8:21:94: 1a:8e:7e:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fjR174l2DqHAuvDvA0DBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNjI2ZmZkODAwZWFmYTMzNmJkZjM0MzE0MWYwM2Y3YzM5 M2MzNjQwHhcNMjYwMTAxMTIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmFkMjRlMGFlZGYxOTk5Y2ZlMWZkZWQyZGUwYTYwZWQ5MzI0M2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQrMyP8ODXEviG+8p2iDBdv76hg5 9hJehpmfceD8XNWv5B+E9eKrH2ouO6UOZbzcsflsEPNd+xWCZ5UWfGTIYmx3p8D3 uQchRpTjkf8KfkXz02Dyz7zVu4UbjI5zJPGBYIhDyra6DXUmctdN8HDdeuzE02mu ds0i12czkhzWJ2UzxRaz7RDzw2+hdWOH6v9LRyyJoV4qqsrSYS28V6RzaUBQE4Nn 5Jd29W0oC7+ogMP4yeVpSsAN0fL/fLYuYlDccb/bM+vVC57mfDTqo7R0U3BmzCiH icx5+OBI/xwI4Ky9G8g78xtoHTEFOmkpNT8FJcwrZxPCWjYj7qQlN7DAAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEKtJOCu3xmZz+H97S3gpg7ZMkO8MB8GA1UdIwQY MBaAFAFib/2ADq+jNr3zQxQfA/fDk8NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODct MWY0YmVhMjNlNGM3LzEvUXEwazRLN2ZHWm5QNGYzdExlQ21EdGt5UTd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODctMWY0YmVhMjNlNGM3 LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU2KdMA0G CSqGSIb3DQEBCwUAA4IBAQCOcT+dz27gRh5q5OXIdSp9+prxZ7eciw1fTqlzBaTp z9BHgpu7joVpf3bR9LRC04Tew7QkYctd3Z2gmTZC4xfSVMpFjyPrnjZU2xziSLRO 1w6CAIlmbxLWXtkAqavCjtovn3UdnAsZ62iWvPvWFkM2PHLL0yunLWRBY/uPy8lS GE/OJm8OftGEgTsqDPVS81C8f52zaWQu2Be+5E2wP08FxiSnR4CV/kFeQ2Lup0XA efQZh9tgKLA2VGLqvYZ1785vn1wuMoxJwpnUfU6gipIydGmhAKTG6iHtnTOHggYn AeeStgV35rEVHlySIS8KMQSRHAU2A84Npfj4IZQajn7k -----END CERTIFICATE-----Generated at Sun Jan 25 17:39:21 2026 by rpki-client