This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/QQ5S1kn00ChCgstLW3aRVKkKIS4.roa File: QQ5S1kn00ChCgstLW3aRVKkKIS4.roa (raw, json) Hash identifier: X5JipwgBz71sKHnS2t/k7iUruR1RHoHrGOPn5Rwy9nI= Subject key identifier: 41:0E:52:D6:49:F4:D0:28:42:82:CB:4B:5B:76:91:54:A9:0A:21:2E Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232 Certificate serial: 019B7D5CE15D1A19707F41A4B162074246BA Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/QQ5S1kn00ChCgstLW3aRVKkKIS4.roa Signing time: Fri 02 Jan 2026 06:19:57 +0000 ROA not before: Fri 02 Jan 2026 06:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 188.213.84.0/23 maxlen: 24 2a11:e687::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e1:5d:1a:19:70:7f:41:a4:b1:62:07:42:46:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232 Validity Not Before: Jan 2 06:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=410e52d649f4d0284282cb4b5b769154a90a212e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:da:99:23:0b:ef:cc:ac:25:7b:56:68:7b:2b: fb:66:75:ca:c9:bd:51:a6:56:17:1a:ab:03:61:25: d0:06:a2:fb:5a:f5:b7:7e:64:f6:96:1f:57:62:13: f0:54:e4:94:e1:9e:61:36:7d:ea:ad:52:7b:76:b0: 76:c4:bb:c7:a3:d4:70:0a:9a:5d:55:5e:df:e1:7b: 1d:bb:43:64:90:f5:de:ff:d1:fe:a1:75:6e:b7:6a: de:87:df:73:90:4c:e4:9c:60:fa:e2:6a:4e:94:3d: 27:55:aa:67:5f:1b:f4:ba:77:9a:85:20:52:94:35: ac:de:45:b2:83:e2:d6:03:74:ed:4f:9e:05:2d:74: e8:4a:31:e7:ef:fd:73:86:f3:38:e8:48:38:58:b1: f1:39:dd:8b:38:57:c5:15:f4:f3:a4:ae:57:b6:bd: c2:49:99:f9:66:3b:93:15:8f:39:46:34:b8:29:8b: b4:8d:25:ba:b3:a0:ba:be:e8:2b:5e:20:c9:2e:bb: 8b:2e:4e:fd:24:35:3d:58:96:da:68:94:16:aa:10: 42:ab:cc:e2:41:5d:0d:14:d0:72:c3:6d:e7:b3:c4: bb:70:ad:a1:7c:4b:e3:74:b7:4f:9c:c9:73:d0:6b: d7:f8:92:99:19:e7:c2:74:26:00:25:b9:bf:3f:1e: 62:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0E:52:D6:49:F4:D0:28:42:82:CB:4B:5B:76:91:54:A9:0A:21:2E X509v3 Authority Key Identifier: keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/QQ5S1kn00ChCgstLW3aRVKkKIS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.213.84.0/23 IPv6: 2a11:e687::/32 Signature Algorithm: sha256WithRSAEncryption 02:c9:1b:af:e3:9e:6e:bb:6c:da:f0:cf:a5:25:65:49:bb:c7: 95:4e:e1:d3:e9:a4:50:fa:4b:87:3e:12:f2:15:c9:9d:11:9e: 46:77:50:21:98:cf:3c:58:4c:a0:76:3f:53:d7:51:2d:b1:2e: d2:b2:29:45:ce:e9:1a:4a:e9:02:11:4f:c5:9d:c4:c9:31:d5: f5:b9:e1:4b:46:1d:31:53:06:fb:27:3c:4a:85:65:2e:b0:c7: 53:43:e1:fe:8d:6c:9f:b2:d1:c6:fa:03:3c:7f:10:9d:53:ee: d0:f5:90:cc:60:dd:0e:8c:0a:ad:08:88:d2:0c:a3:82:b6:e3: 00:ac:7b:1b:c7:f7:46:31:37:09:b6:fe:a4:ab:ae:04:64:56: af:20:44:42:52:d4:1d:d7:bf:59:37:4d:0e:a4:be:c9:54:31: 38:04:69:0b:40:2d:a7:37:97:4b:61:d5:8f:41:c4:a9:dd:ef: 15:46:0b:83:73:f7:37:da:ae:58:26:6e:7d:56:99:fd:1b:05: fa:9b:33:79:9b:cd:c8:59:77:0b:62:54:25:44:e7:69:f1:2c: c0:01:98:d8:70:ce:4d:d4:0e:bd:b3:69:04:25:a3:11:a0:af: 18:9c:04:a0:71:bf:9a:aa:04:61:1a:93:45:3b:b2:e2:02:a0: 52:ae:eb:cc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XOFdGhlwf0GksWIHQka6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZTIzNDBlZjVjNGE0OTUyZWI0MTNkMjg4YzI5ZDkzNzgz NDIyMzIwHhcNMjYwMTAyMDYxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTBlNTJkNjQ5ZjRkMDI4NDI4MmNiNGI1Yjc2OTE1NGE5MGEyMTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09qZIwvvzKwle1Zoeyv7ZnXKyb1R plYXGqsDYSXQBqL7WvW3fmT2lh9XYhPwVOSU4Z5hNn3qrVJ7drB2xLvHo9RwCppd VV7f4Xsdu0NkkPXe/9H+oXVut2reh99zkEzknGD64mpOlD0nVapnXxv0uneahSBS lDWs3kWyg+LWA3TtT54FLXToSjHn7/1zhvM46Eg4WLHxOd2LOFfFFfTzpK5Xtr3C SZn5ZjuTFY85RjS4KYu0jSW6s6C6vugrXiDJLruLLk79JDU9WJbaaJQWqhBCq8zi QV0NFNByw23ns8S7cK2hfEvjdLdPnMlz0GvX+JKZGefCdCYAJbm/Px5ihwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEEOUtZJ9NAoQoLLS1t2kVSpCiEuMB8GA1UdIwQY MBaAFIPiNA71xKSVLrQT0ojCnZN4NCIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kNGQyZjgtOGRjMS00MDcwLTk3N2Ut YTZjZWMwNDU5NWY4LzEvUVE1UzFrbjAwQ2hDZ3N0TFczYVJWS2tLSVM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9kNGQyZjgtOGRjMS00MDcwLTk3N2UtYTZjZWMwNDU5NWY4 LzEvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBvNVUMA0E AgACMAcDBQAqEeaHMA0GCSqGSIb3DQEBCwUAA4IBAQACyRuv455uu2za8M+lJWVJ u8eVTuHT6aRQ+kuHPhLyFcmdEZ5Gd1AhmM88WEygdj9T11EtsS7SsilFzukaSukC EU/FncTJMdX1ueFLRh0xUwb7JzxKhWUusMdTQ+H+jWyfstHG+gM8fxCdU+7Q9ZDM YN0OjAqtCIjSDKOCtuMArHsbx/dGMTcJtv6kq64EZFavIERCUtQd179ZN00OpL7J VDE4BGkLQC2nN5dLYdWPQcSp3e8VRguDc/c32q5YJm59Vpn9GwX6mzN5m83IWXcL YlQlROdp8SzAAZjYcM5N1A69s2kEJaMRoK8YnASgcb+aqgRhGpNFO7LiAqBSruvM -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:47 2026 by rpki-client