This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/pq9eJdbCOIfrvaynnbQZJhA8zQw.roa File: pq9eJdbCOIfrvaynnbQZJhA8zQw.roa (raw, json) Hash identifier: t54wtf6PQVEtTTtm1PsZ+Xtd8yxn24JYaMP23lf02Rw= Subject key identifier: A6:AF:5E:25:D6:C2:38:87:EB:BD:AC:A7:9D:B4:19:26:10:3C:CD:0C Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019B79ED289C20F32AA78F8A950F42313B2E Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/pq9eJdbCOIfrvaynnbQZJhA8zQw.roa Signing time: Thu 01 Jan 2026 14:19:04 +0000 ROA not before: Thu 01 Jan 2026 14:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209316 IP address blocks: 193.59.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:28:9c:20:f3:2a:a7:8f:8a:95:0f:42:31:3b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Jan 1 14:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6af5e25d6c23887ebbdaca79db41926103ccd0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bb:b8:13:24:09:a7:ec:cc:7c:63:e5:c6:d6: eb:13:4e:f8:72:2d:14:88:b1:a9:b5:4b:f3:6a:33: 8c:eb:ef:51:39:94:45:fe:d0:47:2f:32:b3:a6:51: dc:2e:99:d1:25:90:e6:e8:2b:aa:ab:7a:ac:13:ec: 8d:fa:49:37:17:74:cb:80:a9:f2:4a:ce:56:11:03: de:d9:c4:a6:b8:3e:bb:75:67:ef:c9:15:01:5f:4e: db:cf:2d:9d:df:a7:15:c2:12:ff:22:6d:91:cc:35: a3:c1:f7:ef:9f:70:45:19:b2:f6:f7:ac:12:70:39: 45:14:b3:92:bf:b7:f3:3c:a3:0f:50:41:7b:66:27: a9:df:91:c4:0a:bc:c9:52:2d:f0:cb:19:d2:70:dc: 60:ef:b3:9f:6f:9c:3d:df:6d:04:7c:9d:13:b6:8d: 55:2a:91:3a:d8:54:e0:d2:62:e7:3b:94:71:1b:95: f4:52:07:d1:a7:ea:f6:9c:d4:f3:78:af:ff:00:21: 32:23:fc:92:6c:b6:49:9b:a1:c2:96:c9:56:55:49: 09:69:80:64:a4:87:ba:56:12:13:49:b3:8b:af:28: 4e:4d:4d:b1:1a:dc:51:47:f8:6e:d9:92:dc:72:94: ca:31:4f:a5:f2:eb:3d:2d:0d:49:7c:fb:45:b6:e1: d5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AF:5E:25:D6:C2:38:87:EB:BD:AC:A7:9D:B4:19:26:10:3C:CD:0C X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/pq9eJdbCOIfrvaynnbQZJhA8zQw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.59.132.0/22 Signature Algorithm: sha256WithRSAEncryption 10:69:9e:85:30:cf:bb:4a:31:67:6c:ba:aa:21:02:47:0e:a2: de:17:61:f7:3d:14:93:18:3b:66:27:bb:6a:6d:41:dd:05:b5: 91:dd:95:67:0d:b1:d0:c8:b8:9e:31:22:49:62:8e:13:48:9d: cb:8d:b0:9e:84:40:75:8a:1a:18:46:ec:34:5e:2c:26:05:2c: 82:7a:18:10:58:0c:c6:c1:10:32:3e:7c:fb:ea:50:d2:ae:40: 98:b3:60:21:b8:81:f0:0e:2b:aa:f7:31:92:7a:0b:3e:6d:1c: 71:21:71:96:4a:4c:3d:a5:43:1e:38:0d:d2:08:bf:15:93:db: bc:b2:8d:18:54:a9:f6:8d:60:e2:67:b4:e3:00:f9:ca:6f:62: 7e:6d:fd:1f:99:8f:91:5f:bc:0f:f4:fe:05:89:86:38:96:37: ef:35:60:f9:e9:c7:a4:2c:18:6c:eb:69:b3:e7:e0:de:fc:4d: 85:c7:2e:06:9b:8c:cd:cb:ef:d6:76:cf:a1:11:14:32:8b:c6: e9:90:ef:c6:79:99:14:ed:ef:e6:14:98:6f:d1:34:83:e6:76: 26:52:ad:b0:f4:e2:ff:60:d2:d9:e1:89:be:90:b0:b6:b0:c3: 83:f5:e7:3a:cc:fb:c2:7b:16:fa:a9:aa:c3:6a:3d:ff:f7:57: 33:24:9f:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SicIPMqp4+KlQ9CMTsuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjYwMTAxMTQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmFmNWUyNWQ2YzIzODg3ZWJiZGFjYTc5ZGI0MTkyNjEwM2NjZDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7u4EyQJp+zMfGPlxtbrE074ci0U iLGptUvzajOM6+9ROZRF/tBHLzKzplHcLpnRJZDm6Cuqq3qsE+yN+kk3F3TLgKny Ss5WEQPe2cSmuD67dWfvyRUBX07bzy2d36cVwhL/Im2RzDWjwffvn3BFGbL296wS cDlFFLOSv7fzPKMPUEF7Ziep35HECrzJUi3wyxnScNxg77Ofb5w9320EfJ0Tto1V KpE62FTg0mLnO5RxG5X0UgfRp+r2nNTzeK//ACEyI/ySbLZJm6HClslWVUkJaYBk pIe6VhITSbOLryhOTU2xGtxRR/hu2ZLccpTKMU+l8us9LQ1JfPtFtuHVfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKavXiXWwjiH672sp520GSYQPM0MMB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEvcHE5ZUpkYkNPSWZydmF5bm5iUVpKaEE4elF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwTuEMA0G CSqGSIb3DQEBCwUAA4IBAQAQaZ6FMM+7SjFnbLqqIQJHDqLeF2H3PRSTGDtmJ7tq bUHdBbWR3ZVnDbHQyLieMSJJYo4TSJ3LjbCehEB1ihoYRuw0XiwmBSyCehgQWAzG wRAyPnz76lDSrkCYs2AhuIHwDiuq9zGSegs+bRxxIXGWSkw9pUMeOA3SCL8Vk9u8 so0YVKn2jWDiZ7TjAPnKb2J+bf0fmY+RX7wP9P4FiYY4ljfvNWD56cekLBhs62mz 5+De/E2Fxy4Gm4zNy+/Wds+hERQyi8bpkO/GeZkU7e/mFJhv0TSD5nYmUq2w9OL/ YNLZ4Ym+kLC2sMOD9ec6zPvCexb6qarDaj3/91czJJ+9 -----END CERTIFICATE-----Generated at Mon Jan 26 11:29:58 2026 by rpki-client