This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/QSDUixaMhnAjJT7MiLzynIup4QE.roa File: QSDUixaMhnAjJT7MiLzynIup4QE.roa (raw, json) Hash identifier: C1ALae2bSbaid/4pUu3vPVVQH1cH+56P62UzbCKJSRE= Subject key identifier: 41:20:D4:8B:16:8C:86:70:23:25:3E:CC:88:BC:F2:9C:8B:A9:E1:01 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 019B7F823C87F0FA81FE6093CD372948B048 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/QSDUixaMhnAjJT7MiLzynIup4QE.roa Signing time: Fri 02 Jan 2026 16:20:00 +0000 ROA not before: Fri 02 Jan 2026 16:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29286 IP address blocks: 86.107.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:3c:87:f0:fa:81:fe:60:93:cd:37:29:48:b0:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Jan 2 16:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4120d48b168c867023253ecc88bcf29c8ba9e101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:92:0c:0e:0c:36:a8:07:b2:f2:02:2d:3a:32: c6:d2:31:78:09:78:e5:3f:6f:da:a7:64:33:34:88: 2c:6d:ad:f4:d6:42:2d:05:3b:ca:f9:15:d6:90:c2: 87:b7:2b:f6:42:3b:52:d6:60:1d:dc:5c:ab:3e:1a: 93:90:33:6a:5f:10:51:41:66:28:d5:fc:88:9b:3c: 62:0b:d7:d2:a7:52:bf:1a:a7:ad:1b:71:72:c9:d8: 4b:ef:9b:52:f3:ce:6b:6b:f1:99:90:fa:d4:01:4b: c2:8f:dd:bb:55:44:c8:9e:f7:0a:11:d5:70:9f:8c: c4:53:23:b5:e0:1d:af:2a:c8:8b:d7:1b:74:76:09: b3:78:a2:ff:f7:cb:3c:13:91:ed:4d:43:1e:c2:db: 99:50:1a:02:f7:95:74:ab:20:b9:bc:6e:b2:a9:09: a1:8b:93:36:0e:14:02:9e:66:94:6f:26:5b:de:d8: 95:7a:76:ac:7d:0a:05:06:2c:90:1e:01:dc:4c:34: aa:c9:f7:07:86:1b:01:fc:c6:8b:f0:3a:6b:11:43: c3:59:af:78:8b:1b:89:01:f7:6b:fb:26:48:3c:b4: b5:1a:24:c4:5f:f9:e7:c2:69:78:cc:70:cc:70:a2: 98:23:f0:ba:bf:ae:71:8c:52:44:f8:be:99:30:44: fa:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:20:D4:8B:16:8C:86:70:23:25:3E:CC:88:BC:F2:9C:8B:A9:E1:01 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/QSDUixaMhnAjJT7MiLzynIup4QE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.107.22.0/24 Signature Algorithm: sha256WithRSAEncryption 72:fc:47:9a:d9:26:f2:84:4e:45:0f:c6:85:4e:fe:e5:62:25: e3:02:99:65:b8:0a:ae:78:18:9e:92:91:ef:7a:5d:cd:85:04: 39:cc:b3:4f:6b:07:8e:4d:29:b0:36:35:9a:c9:53:19:ec:ab: 3a:79:37:b6:be:d3:b0:12:4a:9a:cd:f2:6e:cf:be:bf:68:cd: 9c:1b:d8:cd:a0:67:d4:1e:6f:d5:85:29:37:2a:96:83:96:83: be:6c:fe:c1:bf:5b:8b:7c:38:5a:8d:af:af:64:cd:54:73:35: bd:3b:63:c5:1c:23:7c:f9:ef:f9:c7:09:5b:e5:cd:57:46:fb: 9f:35:f6:81:19:31:ed:01:65:4f:8e:de:0c:c0:89:82:1b:6f: 60:d7:11:b0:d8:c8:2e:af:37:02:e6:8a:ba:54:86:ab:62:78: 13:68:a7:12:26:ca:cf:c8:c8:88:fc:4b:ca:95:7b:73:86:9f: d2:8a:c9:49:f4:f3:d7:d5:ba:b0:27:3a:0f:7e:1c:08:7c:09: ea:4c:d4:86:8d:82:3f:ef:66:45:f7:aa:d9:e4:54:7e:1a:1a: 5e:20:6f:d9:1e:4d:36:fa:c9:f1:20:3d:66:0a:26:b2:6c:00: a8:f0:04:09:04:f8:7a:51:f2:81:cd:d6:31:4c:2e:fa:f6:fe: 86:54:1f:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gjyH8PqB/mCTzTcpSLBIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjYwMTAyMTYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTIwZDQ4YjE2OGM4NjcwMjMyNTNlY2M4OGJjZjI5YzhiYTllMTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJIMDgw2qAey8gItOjLG0jF4CXjl P2/ap2QzNIgsba301kItBTvK+RXWkMKHtyv2QjtS1mAd3FyrPhqTkDNqXxBRQWYo 1fyImzxiC9fSp1K/GqetG3FyydhL75tS885ra/GZkPrUAUvCj927VUTInvcKEdVw n4zEUyO14B2vKsiL1xt0dgmzeKL/98s8E5HtTUMewtuZUBoC95V0qyC5vG6yqQmh i5M2DhQCnmaUbyZb3tiVenasfQoFBiyQHgHcTDSqyfcHhhsB/MaL8DprEUPDWa94 ixuJAfdr+yZIPLS1GiTEX/nnwml4zHDMcKKYI/C6v65xjFJE+L6ZMET6EQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEEg1IsWjIZwIyU+zIi88pyLqeEBMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvUVNEVWl4YU1obkFqSlQ3TWlMenluSXVwNFFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVmsWMA0G CSqGSIb3DQEBCwUAA4IBAQBy/Eea2SbyhE5FD8aFTv7lYiXjAplluAqueBiekpHv el3NhQQ5zLNPaweOTSmwNjWayVMZ7Ks6eTe2vtOwEkqazfJuz76/aM2cG9jNoGfU Hm/VhSk3KpaDloO+bP7Bv1uLfDhaja+vZM1UczW9O2PFHCN8+e/5xwlb5c1XRvuf NfaBGTHtAWVPjt4MwImCG29g1xGw2MgurzcC5oq6VIarYngTaKcSJsrPyMiI/EvK lXtzhp/SislJ9PPX1bqwJzoPfhwIfAnqTNSGjYI/72ZF96rZ5FR+GhpeIG/ZHk02 +snxID1mCiaybACo8AQJBPh6UfKBzdYxTC769v6GVB+W -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:36 2026 by rpki-client