This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/q_0JuquKdY-SMKTsswahjU0TRj8.roa File: q_0JuquKdY-SMKTsswahjU0TRj8.roa (raw, json) Hash identifier: oGR6DtwHAbzXeQnpsnvIXuSP2Pj0AihP5fyO1Wt+hv0= Subject key identifier: AB:FD:09:BA:AB:8A:75:8F:92:30:A4:EC:B3:06:A1:8D:4D:13:46:3F Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Certificate serial: 019B7910000CD8442CEE778C849A352972F2 Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/q_0JuquKdY-SMKTsswahjU0TRj8.roa Signing time: Thu 01 Jan 2026 10:17:30 +0000 ROA not before: Thu 01 Jan 2026 10:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200918 IP address blocks: 185.30.160.0/23 maxlen: 23 185.32.182.0/23 maxlen: 23 185.91.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:00:0c:d8:44:2c:ee:77:8c:84:9a:35:29:72:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Validity Not Before: Jan 1 10:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abfd09baab8a758f9230a4ecb306a18d4d13463f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:62:89:55:fc:fb:53:e1:a4:61:f1:30:20:7c: 7d:eb:0c:64:65:53:54:8a:97:8f:a3:ad:9a:01:ba: a3:5c:b6:53:db:09:21:c5:3d:79:1b:c7:7a:45:13: f9:19:d1:60:87:7e:f9:1e:69:48:bf:32:9c:0e:3f: 9f:d7:54:ab:29:2f:c9:ea:36:8e:1c:6c:e7:25:82: 60:b5:ca:9d:30:c9:38:f4:c3:92:ef:93:2f:43:cc: 03:53:bd:2c:72:eb:03:4a:bb:aa:65:9b:3b:c5:4c: c5:9a:d4:ac:73:df:a7:82:c1:63:52:8e:e7:b7:a8: 0d:b8:4f:5d:26:9e:0c:14:c4:19:e7:1a:d8:20:72: ae:e9:50:b0:57:39:d2:0d:0a:0c:b7:7a:fc:55:36: cd:77:42:ab:48:41:14:bf:d7:07:72:45:34:bf:ad: 54:f4:0a:6c:17:70:01:93:c3:d7:72:c4:91:b4:72: 2b:23:7f:db:c2:7f:f0:7d:5b:9f:f3:6c:79:f8:d2: 46:9d:67:1a:12:b5:60:30:c5:51:03:05:ee:eb:95: 00:14:4c:8f:c0:12:6e:c2:17:ac:3d:2d:57:0c:41: 51:fe:8a:9c:6f:e3:07:24:a1:3c:40:54:bd:34:e6: 03:bb:10:02:d1:72:6a:28:40:14:b7:8e:65:a4:12: 3a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FD:09:BA:AB:8A:75:8F:92:30:A4:EC:B3:06:A1:8D:4D:13:46:3F X509v3 Authority Key Identifier: keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/q_0JuquKdY-SMKTsswahjU0TRj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.160.0/23 185.32.182.0/23 185.91.116.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:ed:5f:00:0f:22:4c:8d:3a:c9:06:27:7c:7b:ae:3c:18:8c: d7:79:1a:0c:23:e7:a9:63:38:89:09:59:f7:18:ec:85:0f:1a: c6:91:5d:60:d4:fd:f9:6c:06:92:2c:af:6b:96:6c:ad:13:c3: c0:74:9e:99:9d:c2:dc:57:a5:57:e3:89:f5:14:d6:cf:88:a6: 4f:e1:64:31:a7:b7:e1:fc:a5:55:58:f8:6b:23:b6:2b:a8:79: 12:5a:4d:6b:ec:4e:f5:a9:6d:c4:fb:10:e2:fe:7b:68:84:63: 12:d5:3c:e1:73:9b:d6:8e:bd:72:e5:75:16:e5:46:46:f1:15: 85:9e:fd:86:a6:9a:6b:4d:fd:22:1a:82:42:01:86:f2:47:cf: 7a:dd:4e:85:55:79:d8:ab:3a:47:fb:72:5a:0b:55:e3:66:11: 8a:a3:d9:ca:d6:3a:c9:bf:a6:e3:b1:c3:ec:02:75:71:dc:db: 9f:31:2f:f5:43:a3:f1:9c:50:d0:72:40:34:6c:48:41:08:ae: 21:01:81:82:e3:97:b1:3e:3d:2c:63:35:22:49:67:9a:8e:9b: a6:3e:d9:81:59:b6:2f:30:52:94:5e:70:c9:c8:6d:20:54:fc: 9d:0a:fa:0f:72:1b:ab:a8:af:e3:6f:c3:31:94:ac:4a:d4:41: c0:17:9b:44 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EAAM2EQs7neMhJo1KXLyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh ODBlOWUwHhcNMjYwMTAxMTAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmZkMDliYWFiOGE3NThmOTIzMGE0ZWNiMzA2YTE4ZDRkMTM0NjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmKJVfz7U+GkYfEwIHx96wxkZVNU ipePo62aAbqjXLZT2wkhxT15G8d6RRP5GdFgh375HmlIvzKcDj+f11SrKS/J6jaO HGznJYJgtcqdMMk49MOS75MvQ8wDU70scusDSruqZZs7xUzFmtSsc9+ngsFjUo7n t6gNuE9dJp4MFMQZ5xrYIHKu6VCwVznSDQoMt3r8VTbNd0KrSEEUv9cHckU0v61U 9ApsF3ABk8PXcsSRtHIrI3/bwn/wfVuf82x5+NJGnWcaErVgMMVRAwXu65UAFEyP wBJuwhesPS1XDEFR/oqcb+MHJKE8QFS9NOYDuxAC0XJqKEAUt45lpBI6IQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKv9CbqrinWPkjCk7LMGoY1NE0Y/MB8GA1UdIwQY MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt OWU3MWRjMjRhNjgzLzEvcV8wSnVxdUtkWS1TTUtUc3N3YWhqVTBUUmo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBuR6gAwQB uSC2AwQCuVt0MA0GCSqGSIb3DQEBCwUAA4IBAQBN7V8ADyJMjTrJBid8e648GIzX eRoMI+epYziJCVn3GOyFDxrGkV1g1P35bAaSLK9rlmytE8PAdJ6ZncLcV6VX44n1 FNbPiKZP4WQxp7fh/KVVWPhrI7YrqHkSWk1r7E71qW3E+xDi/ntohGMS1Tzhc5vW jr1y5XUW5UZG8RWFnv2GppprTf0iGoJCAYbyR8963U6FVXnYqzpH+3JaC1XjZhGK o9nK1jrJv6bjscPsAnVx3NufMS/1Q6PxnFDQckA0bEhBCK4hAYGC45exPj0sYzUi SWeajpumPtmBWbYvMFKUXnDJyG0gVPydCvoPchurqK/jb8MxlKxK1EHAF5tE -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:33 2026 by rpki-client