This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/QHPyg5iWbWbbW5gr34naY63NDvo.roa File: QHPyg5iWbWbbW5gr34naY63NDvo.roa (raw, json) Hash identifier: yEtOkw8pnNFWUem/+gYHXLql4MYn18HzTEqZKWbEw9U= Subject key identifier: 40:73:F2:83:98:96:6D:66:DB:5B:98:2B:DF:89:DA:63:AD:CD:0E:FA Certificate issuer: /CN=e2110acce33ac85011ca8c22d2001666e45b9377 Certificate serial: 019B7CEE47773B2DA23225B62636778F9A3F Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/QHPyg5iWbWbbW5gr34naY63NDvo.roa Signing time: Fri 02 Jan 2026 04:19:09 +0000 ROA not before: Fri 02 Jan 2026 04:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29550 IP address blocks: 193.111.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:47:77:3b:2d:a2:32:25:b6:26:36:77:8f:9a:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377 Validity Not Before: Jan 2 04:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4073f28398966d66db5b982bdf89da63adcd0efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2d:19:8e:43:8a:d5:a6:d6:4f:18:b6:96:3c: b2:65:0c:63:7d:38:e8:35:a4:4a:41:77:2c:47:c3: d7:e2:70:db:e9:77:e4:b2:b9:66:32:e0:15:26:01: 09:72:6c:1f:b0:cc:8b:87:8d:57:39:55:e8:ce:7e: 03:0f:fc:2a:d0:88:49:41:f8:1f:90:e9:e4:4c:a7: b4:9c:c7:4a:f6:49:d9:e7:c4:9b:5b:3a:fb:2b:21: 80:f5:fc:41:0f:b9:28:9d:b5:50:01:5e:ac:3e:77: 56:1b:5c:df:8b:f8:46:fe:34:ef:e8:eb:91:c9:a6: 47:e3:c4:e6:c0:66:0e:27:de:d5:49:08:9c:2f:25: 4b:00:db:bf:68:9f:a2:42:8c:93:9a:17:f3:6b:41: d7:86:d0:cf:ce:44:62:fe:26:0c:e4:05:d9:8b:e5: 00:f4:03:5e:91:5f:4d:a8:74:c3:f5:0a:a7:71:d2: 7f:65:8f:91:31:c1:4c:33:f2:06:a9:1b:ea:6a:a6: 28:df:17:dc:af:ba:65:e1:0e:b1:d7:91:40:11:fb: 98:ca:6f:ab:51:8c:fb:65:b5:3c:ba:f5:5d:f5:ff: 2f:30:8d:24:6d:5b:4b:3a:35:c2:e2:5e:ed:0e:29: c8:64:f8:c9:4d:88:e3:c9:0a:6b:7d:ed:5e:d7:9c: 6f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:73:F2:83:98:96:6D:66:DB:5B:98:2B:DF:89:DA:63:AD:CD:0E:FA X509v3 Authority Key Identifier: keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/QHPyg5iWbWbbW5gr34naY63NDvo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.95.0/24 Signature Algorithm: sha256WithRSAEncryption a4:7a:32:c7:98:16:b1:7a:10:75:9b:e5:30:50:32:26:b8:43: 49:be:58:70:a7:1a:b2:50:55:bf:1f:8c:d7:6e:91:ef:4e:9f: aa:38:e0:85:f5:d7:93:e1:ce:4d:02:21:0b:c7:93:9c:e1:43: bb:84:51:ab:59:16:e0:a7:06:e2:30:9c:ad:10:3a:47:28:a5: 79:03:fe:bb:d2:2d:c0:d5:24:6a:ef:0a:19:04:14:61:bd:e6: b2:8d:75:45:20:6e:08:35:43:58:dd:c5:d1:78:fe:e6:df:5d: 0d:b5:b6:ce:4a:e3:f2:da:f9:f3:1b:74:5b:91:8b:db:d3:02: 2f:bb:da:14:ce:a0:b7:2f:e5:f3:02:4c:4c:af:60:00:3a:09: 3b:8c:14:d9:83:85:50:03:e3:d6:3e:3e:eb:42:78:dd:9b:0a: 2c:a0:c1:ec:ed:90:87:d6:01:e2:96:bb:85:4c:d6:c0:5f:c9: 3c:4d:b7:c1:6d:3f:32:91:2f:4c:6f:58:47:f1:a8:aa:3d:1c: 17:d9:66:67:c1:9d:9c:c9:49:c3:2d:36:2f:7e:7c:b9:83:8b: a3:da:da:3e:ff:b3:c4:04:f8:13:18:37:c5:22:7a:db:ec:fd: ad:e7:20:82:25:b2:6f:1d:8b:79:fc:4e:d3:c6:f3:16:bf:27: e3:6c:86:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87kd3Oy2iMiW2JjZ3j5o/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMTEwYWNjZTMzYWM4NTAxMWNhOGMyMmQyMDAxNjY2ZTQ1 YjkzNzcwHhcNMjYwMTAyMDQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDczZjI4Mzk4OTY2ZDY2ZGI1Yjk4MmJkZjg5ZGE2M2FkY2QwZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji0ZjkOK1abWTxi2ljyyZQxjfTjo NaRKQXcsR8PX4nDb6XfksrlmMuAVJgEJcmwfsMyLh41XOVXozn4DD/wq0IhJQfgf kOnkTKe0nMdK9knZ58SbWzr7KyGA9fxBD7konbVQAV6sPndWG1zfi/hG/jTv6OuR yaZH48TmwGYOJ97VSQicLyVLANu/aJ+iQoyTmhfza0HXhtDPzkRi/iYM5AXZi+UA 9ANekV9NqHTD9QqncdJ/ZY+RMcFMM/IGqRvqaqYo3xfcr7pl4Q6x15FAEfuYym+r UYz7ZbU8uvVd9f8vMI0kbVtLOjXC4l7tDinIZPjJTYjjyQprfe1e15xv3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEBz8oOYlm1m21uYK9+J2mOtzQ76MB8GA1UdIwQY MBaAFOIRCszjOshQEcqMItIAFmbkW5N3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGhFS3pPTTZ5RkFSeW93aTBnQVdadVJiazNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8wNTEwMzUtMjAwZC00MWU4LWFkZjEt ZDMzZjA4ZjNhNDhkLzEvUUhQeWc1aVdiV2JiVzVncjM0bmFZNjNORHZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8wNTEwMzUtMjAwZC00MWU4LWFkZjEtZDMzZjA4ZjNhNDhk LzEvNGhFS3pPTTZ5RkFSeW93aTBnQVdadVJiazNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW9fMA0G CSqGSIb3DQEBCwUAA4IBAQCkejLHmBaxehB1m+UwUDImuENJvlhwpxqyUFW/H4zX bpHvTp+qOOCF9deT4c5NAiELx5Oc4UO7hFGrWRbgpwbiMJytEDpHKKV5A/670i3A 1SRq7woZBBRhveayjXVFIG4INUNY3cXReP7m310NtbbOSuPy2vnzG3RbkYvb0wIv u9oUzqC3L+XzAkxMr2AAOgk7jBTZg4VQA+PWPj7rQnjdmwosoMHs7ZCH1gHilruF TNbAX8k8TbfBbT8ykS9Mb1hH8aiqPRwX2WZnwZ2cyUnDLTYvfny5g4uj2to+/7PE BPgTGDfFInrb7P2t5yCCJbJvHYt5/E7TxvMWvyfjbIZr -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:56 2026 by rpki-client