This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Q8ms6dHOqhiwDxEc5idzqyyZRUk.roa File: Q8ms6dHOqhiwDxEc5idzqyyZRUk.roa (raw, json) Hash identifier: 2GXJ33Dr4S4I4v3yZpn2MEA0G+YkALmc+OG+HXlP1Uo= Subject key identifier: 43:C9:AC:E9:D1:CE:AA:18:B0:0F:11:1C:E6:27:73:AB:2C:99:45:49 Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019B77C7773504377140B939394C47940BC9 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Q8ms6dHOqhiwDxEc5idzqyyZRUk.roa Signing time: Thu 01 Jan 2026 04:18:39 +0000 ROA not before: Thu 01 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57841 IP address blocks: 195.245.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:77:35:04:37:71:40:b9:39:39:4c:47:94:0b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jan 1 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43c9ace9d1ceaa18b00f111ce62773ab2c994549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:fb:bd:a2:72:7a:42:2d:7e:08:19:9c:aa: 21:0f:da:2e:be:78:16:cb:6d:72:cf:f7:5f:f6:04: 9d:b9:c3:72:18:9a:0e:75:b0:6c:06:e2:2a:02:72: f1:07:a0:ef:ac:49:6c:45:d6:ee:38:d1:05:65:a3: 6f:65:90:65:f2:21:ec:59:ba:e6:23:b0:61:3d:4f: c5:ce:7d:b4:43:7a:cc:25:c8:1d:1b:5e:8a:4e:17: ff:d0:92:1e:e8:5e:f6:21:61:ff:4e:3c:45:85:61: dc:b3:28:ba:dc:b0:0f:ca:9a:fb:e4:75:de:7d:fd: 2d:f8:d8:83:93:4e:7d:30:ec:c1:41:f2:7d:22:e6: 86:2b:45:8b:31:bc:3c:b8:ff:3d:39:20:cc:14:47: 85:60:7d:6c:b1:89:c4:1f:b1:01:2c:b0:7b:c5:98: e9:10:be:fe:7c:4a:59:3b:24:f3:be:06:18:88:e8: bb:76:45:c7:fd:57:60:5d:b2:ab:be:c8:94:0d:82: fb:5e:cf:d1:6f:15:50:e2:ce:30:1b:05:76:fa:e5: 48:9e:ba:1b:8c:88:36:60:ba:17:42:61:28:f8:7c: 47:2a:f5:5c:5a:14:ae:3a:76:ee:42:0a:1e:e5:e8: 21:a8:4e:cd:61:57:3e:91:f3:20:e8:89:29:06:fd: 41:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C9:AC:E9:D1:CE:AA:18:B0:0F:11:1C:E6:27:73:AB:2C:99:45:49 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Q8ms6dHOqhiwDxEc5idzqyyZRUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.245.194.0/24 Signature Algorithm: sha256WithRSAEncryption 75:25:b5:11:60:f6:8f:88:55:ba:a4:c4:79:1e:2d:4b:56:10: 6d:2e:b5:c8:20:92:79:64:35:70:75:1b:a3:c3:ba:f1:c5:8f: 07:33:25:ac:67:d0:c3:32:96:5b:f7:46:62:32:72:bc:f8:63: 76:50:31:97:ce:08:0e:96:fb:dd:9e:f0:2d:65:a6:6a:30:f6: ed:3a:ba:bb:f3:e6:f4:d4:28:76:f6:4e:2a:54:13:8e:70:17: 7d:07:3d:62:8a:34:10:db:7f:c7:33:45:d4:a9:ea:a7:d1:9f: f8:9b:24:cd:d5:5f:ae:fd:9b:9a:7d:1d:44:3d:86:ad:fb:2c: 25:bd:75:c3:fb:80:c0:a6:e5:dd:1a:89:fa:28:8d:ea:31:f5: 22:52:fc:e3:12:13:14:13:ba:63:12:55:79:89:29:7d:38:15: bf:63:df:60:63:ca:c9:87:ef:65:77:09:75:f3:46:7c:6b:64: f1:75:6c:eb:70:a8:de:74:17:47:4e:f0:63:8f:67:0a:72:d3: 97:3e:27:7d:1f:c7:d9:96:ed:d1:ef:b5:59:35:7c:bd:b3:ad: da:60:51:7b:05:d7:2f:9e:6c:92:c5:7c:24:30:d3:42:fc:2d: 18:a9:5d:9d:f4:8f:92:e2:29:9c:05:2b:31:5f:67:c9:b8:50: 07:be:92:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3c1BDdxQLk5OUxHlAvJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMTAxMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2M5YWNlOWQxY2VhYTE4YjAwZjExMWNlNjI3NzNhYjJjOTk0NTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+D7vaJyekItfggZnKohD9ouvngW y21yz/df9gSducNyGJoOdbBsBuIqAnLxB6DvrElsRdbuONEFZaNvZZBl8iHsWbrm I7BhPU/Fzn20Q3rMJcgdG16KThf/0JIe6F72IWH/TjxFhWHcsyi63LAPypr75HXe ff0t+NiDk059MOzBQfJ9IuaGK0WLMbw8uP89OSDMFEeFYH1ssYnEH7EBLLB7xZjp EL7+fEpZOyTzvgYYiOi7dkXH/VdgXbKrvsiUDYL7Xs/RbxVQ4s4wGwV2+uVInrob jIg2YLoXQmEo+HxHKvVcWhSuOnbuQgoe5eghqE7NYVc+kfMg6IkpBv1BUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEPJrOnRzqoYsA8RHOYnc6ssmUVJMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvUThtczZkSE9xaGl3RHhFYzVpZHpxeXlaUlVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/XCMA0G CSqGSIb3DQEBCwUAA4IBAQB1JbURYPaPiFW6pMR5Hi1LVhBtLrXIIJJ5ZDVwdRuj w7rxxY8HMyWsZ9DDMpZb90ZiMnK8+GN2UDGXzggOlvvdnvAtZaZqMPbtOrq78+b0 1Ch29k4qVBOOcBd9Bz1iijQQ23/HM0XUqeqn0Z/4myTN1V+u/ZuafR1EPYat+ywl vXXD+4DApuXdGon6KI3qMfUiUvzjEhMUE7pjElV5iSl9OBW/Y99gY8rJh+9ldwl1 80Z8a2TxdWzrcKjedBdHTvBjj2cKctOXPid9H8fZlu3R77VZNXy9s63aYFF7Bdcv nmySxXwkMNNC/C0YqV2d9I+S4imcBSsxX2fJuFAHvpIm -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:48 2026 by rpki-client