This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/qG_zm-_87cXSw0_LhJiatFGZjco.roa File: qG_zm-_87cXSw0_LhJiatFGZjco.roa (raw, json) Hash identifier: 845weVVX02y1u2NuqLxhj3PGe6p4QBfV9nv+gr8bpog= Subject key identifier: A8:6F:F3:9B:EF:FC:ED:C5:D2:C3:4F:CB:84:98:9A:B4:51:99:8D:CA Certificate issuer: /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6 Certificate serial: 019B7C80D0AF26C0FAE57DC2194A5DE0E936 Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/qG_zm-_87cXSw0_LhJiatFGZjco.roa Signing time: Fri 02 Jan 2026 02:19:35 +0000 ROA not before: Fri 02 Jan 2026 02:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48920 IP address blocks: 195.88.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d0:af:26:c0:fa:e5:7d:c2:19:4a:5d:e0:e9:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6 Validity Not Before: Jan 2 02:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a86ff39beffcedc5d2c34fcb84989ab451998dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:40:b6:28:c6:d2:51:74:09:6c:5d:b2:23:88: 35:d6:95:a7:40:10:f9:ba:29:16:10:a4:12:49:7d: 68:0f:1b:60:55:26:3f:b4:bb:59:89:a0:05:13:b7: fc:a0:03:a5:2f:41:56:02:4e:85:5b:8c:1e:8d:c1: fb:84:5b:9e:a4:96:46:46:87:76:5f:33:9e:74:87: 34:ca:3a:dd:4c:26:29:72:c3:57:83:33:b6:42:4f: bc:f0:aa:cc:48:82:f5:41:6a:c4:e8:dc:cc:e5:96: 54:2b:cc:37:af:5d:cc:87:46:d5:d3:61:fb:f5:f7: c7:78:1f:3a:63:fa:fe:de:a1:8c:46:61:b5:ae:c7: fb:9f:38:2a:55:8a:01:10:f1:29:1e:0f:66:5a:ea: 5a:e7:0d:a0:cf:a4:1a:62:86:2b:48:8d:84:95:52: d8:6a:4a:50:3e:b1:dc:1d:e7:66:27:5b:27:9e:ce: 51:3d:04:ce:f4:83:2e:a2:28:d0:83:f5:b3:03:4a: c9:b6:9d:15:22:68:a0:aa:4b:67:44:45:b9:49:6c: 6d:94:c9:10:23:c4:07:11:b0:8b:11:4d:9d:75:20: 06:9e:03:55:6a:f6:d9:4f:2e:6e:bb:b7:72:0c:4f: c7:63:ad:2a:b8:fc:ac:4f:1b:75:26:4c:7b:2c:51: 22:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6F:F3:9B:EF:FC:ED:C5:D2:C3:4F:CB:84:98:9A:B4:51:99:8D:CA X509v3 Authority Key Identifier: keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/qG_zm-_87cXSw0_LhJiatFGZjco.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.84.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:ba:bf:eb:9a:6a:b5:80:58:5f:51:47:b8:1a:8a:45:8a:b4: 7a:ab:34:95:c8:e5:e2:ef:ab:bd:ad:4c:cf:bf:65:c3:bf:dc: 2a:85:db:28:99:59:71:08:7e:02:e5:d6:11:e2:42:66:bb:bf: d0:21:c4:dc:9b:e3:9e:fd:44:cd:14:ba:df:3e:a5:30:e8:7a: f5:d4:ed:38:a5:1b:f3:06:05:47:12:ff:f4:c0:39:d0:26:74: 85:6c:02:b6:e8:9b:76:65:4c:e8:a5:b4:ab:55:6e:42:79:c6: bc:76:59:2f:da:4e:55:71:c8:7b:16:a1:88:f6:9c:10:b7:dc: c9:f3:34:e1:37:91:3f:44:9d:58:92:ae:34:f9:da:cb:6d:29: 3a:60:96:16:54:1b:86:94:3d:f8:1b:e3:ae:5f:23:38:3c:50: d7:c9:6e:91:42:5a:f4:96:75:cf:b7:87:74:28:2c:d2:a9:8e: 9a:3a:32:5c:54:5c:b4:f0:2d:2d:0e:59:30:9d:60:a3:75:49: d1:41:a9:46:d6:b7:62:39:53:e3:4f:86:23:49:72:4a:59:e5: c2:ea:73:d3:ca:c9:b0:79:bc:4f:ed:03:12:17:fb:82:4b:41: b7:c5:e2:34:de:96:18:1d:8d:36:0d:20:81:b3:fa:84:b3:f0: 1f:a4:0b:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gNCvJsD65X3CGUpd4Ok2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZmU3ZDAwZTk0Y2QyYTdjYmY3ZjllODJjZjA5OTI0MTc0 MThkZjYwHhcNMjYwMTAyMDIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODZmZjM5YmVmZmNlZGM1ZDJjMzRmY2I4NDk4OWFiNDUxOTk4ZGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kC2KMbSUXQJbF2yI4g11pWnQBD5 uikWEKQSSX1oDxtgVSY/tLtZiaAFE7f8oAOlL0FWAk6FW4wejcH7hFuepJZGRod2 XzOedIc0yjrdTCYpcsNXgzO2Qk+88KrMSIL1QWrE6NzM5ZZUK8w3r13Mh0bV02H7 9ffHeB86Y/r+3qGMRmG1rsf7nzgqVYoBEPEpHg9mWupa5w2gz6QaYoYrSI2ElVLY akpQPrHcHedmJ1snns5RPQTO9IMuoijQg/WzA0rJtp0VImigqktnREW5SWxtlMkQ I8QHEbCLEU2ddSAGngNVavbZTy5uu7dyDE/HY60quPysTxt1Jkx7LFEiwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKhv85vv/O3F0sNPy4SYmrRRmY3KMB8GA1UdIwQY MBaAFIL+fQDpTNKny/f56CzwmSQXQY32MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yMGM3ZTctYTQ5Zi00MDMxLWJhNzct NjNkZjYwMzE2MWM5LzEvcUdfem0tXzg3Y1hTdzBfTGhKaWF0RkdaamNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8yMGM3ZTctYTQ5Zi00MDMxLWJhNzctNjNkZjYwMzE2MWM5 LzEvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1hUMA0G CSqGSIb3DQEBCwUAA4IBAQBeur/rmmq1gFhfUUe4GopFirR6qzSVyOXi76u9rUzP v2XDv9wqhdsomVlxCH4C5dYR4kJmu7/QIcTcm+Oe/UTNFLrfPqUw6Hr11O04pRvz BgVHEv/0wDnQJnSFbAK26Jt2ZUzopbSrVW5Ceca8dlkv2k5Vcch7FqGI9pwQt9zJ 8zThN5E/RJ1Ykq40+drLbSk6YJYWVBuGlD34G+OuXyM4PFDXyW6RQlr0lnXPt4d0 KCzSqY6aOjJcVFy08C0tDlkwnWCjdUnRQalG1rdiOVPjT4YjSXJKWeXC6nPTysmw ebxP7QMSF/uCS0G3xeI03pYYHY02DSCBs/qEs/AfpAvF -----END CERTIFICATE-----Generated at Mon Jan 26 12:56:52 2026 by rpki-client