This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/QtPx4ap949xN5arcMJRpZvFzTfM.roa File: QtPx4ap949xN5arcMJRpZvFzTfM.roa (raw, json) Hash identifier: KaudJcjJFvIdlbff02gWZxLZI4bRcA90hXhml9h/ITE= Subject key identifier: 42:D3:F1:E1:AA:7D:E3:DC:4D:E5:AA:DC:30:94:69:66:F1:73:4D:F3 Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 019B78354324E55A2A76B8C7990384C45A18 Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/QtPx4ap949xN5arcMJRpZvFzTfM.roa Signing time: Thu 01 Jan 2026 06:18:35 +0000 ROA not before: Thu 01 Jan 2026 06:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48642 IP address blocks: 83.217.14.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:43:24:e5:5a:2a:76:b8:c7:99:03:84:c4:5a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Jan 1 06:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42d3f1e1aa7de3dc4de5aadc30946966f1734df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:38:62:d0:44:a5:dd:f9:6f:0d:55:b2:dd:eb: 68:25:6a:e5:27:ef:90:2b:e8:9e:39:61:7e:4a:4b: c6:e8:6d:a8:8d:52:1f:ef:c0:a2:ec:a4:45:0c:45: a1:3d:48:b5:7d:e8:67:90:53:29:f7:bd:f7:40:bf: 0f:cb:0a:29:4f:4e:ff:3e:4f:bc:eb:93:80:ac:08: cd:10:2a:0b:56:7e:4c:27:c2:76:d6:ff:fd:d5:79: 04:1a:f6:f4:b9:e8:1d:53:17:93:59:8a:b0:2c:5b: de:7c:9b:bf:7c:42:fe:40:4c:07:5f:db:f8:7c:c6: 4d:5b:d3:33:68:16:a4:8e:8a:ea:49:df:40:d2:27: f6:8a:14:05:29:d6:a0:6b:55:05:9e:15:c4:37:c5: cf:78:ea:cc:bf:bd:fa:ba:21:f3:dd:26:06:3f:2d: 6a:88:f4:ce:e8:99:96:d2:63:7f:d9:13:f9:15:eb: 59:2e:54:f1:bc:cf:0e:83:83:50:83:c1:67:19:f2: de:91:62:e3:6e:26:da:f7:1c:c9:2b:bc:46:55:a4: 4d:19:86:98:f8:d9:14:c9:3f:9b:d8:88:92:14:44: bd:b9:ef:ac:d7:6b:2e:c6:b6:45:60:d1:de:75:d0: 82:d5:cb:89:34:c9:0b:8c:27:10:4f:55:a4:91:4c: c6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D3:F1:E1:AA:7D:E3:DC:4D:E5:AA:DC:30:94:69:66:F1:73:4D:F3 X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/QtPx4ap949xN5arcMJRpZvFzTfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.217.14.0/23 Signature Algorithm: sha256WithRSAEncryption 69:88:aa:8d:a3:c6:bd:1c:22:2f:b3:c5:8f:a9:96:f1:1d:70: 66:88:2a:d9:29:97:6e:3a:d9:4d:b7:d7:55:98:b0:93:80:36: 97:b7:ca:4b:e8:0a:40:db:8c:c3:79:1f:4d:08:53:4d:36:db: d0:32:0b:6b:a3:33:aa:b6:bf:c9:cb:f0:7c:72:ac:7c:02:a1: c1:ac:d5:ce:7b:64:45:9d:fd:64:cf:54:29:a1:75:8c:52:eb: e0:b6:8b:52:06:f3:4f:96:1b:cf:1e:90:f7:85:d4:a3:97:ec: 5c:76:60:29:9d:e7:27:35:4f:56:33:4d:69:16:8c:d2:31:55: da:8c:8d:99:88:46:de:3e:6b:f5:3a:b2:a5:76:a1:e1:21:01: 6b:9c:62:be:11:25:a6:93:fc:35:07:a0:da:30:50:4a:ba:31: 48:0f:1c:0f:98:7f:84:86:6b:d5:b5:22:5a:d7:b3:51:f4:3d: 97:f1:ad:2d:d8:61:bb:98:be:87:b0:56:33:5d:d7:c9:ed:5c: d0:c9:6c:6d:7c:98:bd:6a:65:f9:07:dc:99:35:4c:e2:60:c1: f9:29:14:ba:7f:13:b3:f1:8f:e2:ac:79:1e:84:9f:72:be:6b: d3:0e:df:44:ee:61:e8:d8:ca:91:eb:6a:72:f6:52:fa:79:82: 8a:46:a7:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NUMk5VoqdrjHmQOExFoYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjYwMTAxMDYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmQzZjFlMWFhN2RlM2RjNGRlNWFhZGMzMDk0Njk2NmYxNzM0ZGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzhi0ESl3flvDVWy3etoJWrlJ++Q K+ieOWF+SkvG6G2ojVIf78Ci7KRFDEWhPUi1fehnkFMp9733QL8PywopT07/Pk+8 65OArAjNECoLVn5MJ8J21v/91XkEGvb0uegdUxeTWYqwLFvefJu/fEL+QEwHX9v4 fMZNW9MzaBakjorqSd9A0if2ihQFKdaga1UFnhXEN8XPeOrMv736uiHz3SYGPy1q iPTO6JmW0mN/2RP5FetZLlTxvM8Og4NQg8FnGfLekWLjbiba9xzJK7xGVaRNGYaY +NkUyT+b2IiSFES9ue+s12suxrZFYNHeddCC1cuJNMkLjCcQT1WkkUzGAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFELT8eGqfePcTeWq3DCUaWbxc03zMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvUXRQeDRhcDk0OXhONWFyY01KUnBadkZ6VGZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBU9kOMA0G CSqGSIb3DQEBCwUAA4IBAQBpiKqNo8a9HCIvs8WPqZbxHXBmiCrZKZduOtlNt9dV mLCTgDaXt8pL6ApA24zDeR9NCFNNNtvQMgtrozOqtr/Jy/B8cqx8AqHBrNXOe2RF nf1kz1QpoXWMUuvgtotSBvNPlhvPHpD3hdSjl+xcdmApnecnNU9WM01pFozSMVXa jI2ZiEbePmv1OrKldqHhIQFrnGK+ESWmk/w1B6DaMFBKujFIDxwPmH+EhmvVtSJa 17NR9D2X8a0t2GG7mL6HsFYzXdfJ7VzQyWxtfJi9amX5B9yZNUziYMH5KRS6fxOz 8Y/irHkehJ9yvmvTDt9E7mHo2MqR62py9lL6eYKKRqd4 -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:07 2026 by rpki-client