This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/fqTbi0RgE-7D6SKzQWOs1v9kD84.roa File: fqTbi0RgE-7D6SKzQWOs1v9kD84.roa (raw, json) Hash identifier: WZR3ueqxzI32wKwkJGwTbu9WI2FMxl/49YxT+UAs7do= Subject key identifier: 7E:A4:DB:8B:44:60:13:EE:C3:E9:22:B3:41:63:AC:D6:FF:64:0F:CE Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2 Certificate serial: 019B7910B06A9BA38EEBBD9030190118CBCC Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/fqTbi0RgE-7D6SKzQWOs1v9kD84.roa Signing time: Thu 01 Jan 2026 10:18:15 +0000 ROA not before: Thu 01 Jan 2026 10:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5528 IP address blocks: 188.92.22.0/24 maxlen: 32 188.92.23.0/24 maxlen: 32 195.130.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b0:6a:9b:a3:8e:eb:bd:90:30:19:01:18:cb:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2 Validity Not Before: Jan 1 10:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ea4db8b446013eec3e922b34163acd6ff640fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:18:5f:c6:0e:91:8c:53:82:84:5e:31:b3: 07:09:78:5e:25:20:19:32:be:60:37:79:95:c8:59: ff:71:9d:28:5d:77:a4:1e:e1:f4:28:5c:c0:9c:7c: a7:68:5a:92:59:48:67:61:ca:59:6a:c7:8c:8c:e9: a8:ae:76:f8:30:d2:43:af:24:a2:9a:ed:48:c4:9a: 49:41:f6:76:be:8a:4a:fa:6f:17:02:c5:f7:12:dc: 25:1c:f6:8a:b2:1d:a1:4a:9a:4f:6a:ce:02:b9:d8: 4c:2f:8a:a3:9a:8f:8b:24:53:8b:ed:10:6c:7b:05: 03:b5:ad:fd:90:1b:41:7a:67:89:c9:59:68:81:1a: 4c:9c:1f:29:96:52:b2:7e:34:c6:31:38:70:9b:f0: a1:79:d3:d0:4f:14:6e:e4:be:9e:63:64:c0:b8:5f: 05:12:ce:fa:5e:cc:8a:45:10:24:ab:50:9b:be:02: 55:94:46:af:c3:2c:82:09:4b:dd:28:10:91:3c:83: 21:38:6b:b0:35:cf:66:6c:16:4e:1f:95:39:50:09: cf:24:10:05:95:91:dd:59:4d:42:38:36:60:36:a4: b5:f1:65:fe:4d:67:95:13:44:f4:b1:62:b6:d3:02: 9c:45:b5:f1:94:d9:1c:c8:04:d7:ec:d5:4d:7e:a1: 0e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A4:DB:8B:44:60:13:EE:C3:E9:22:B3:41:63:AC:D6:FF:64:0F:CE X509v3 Authority Key Identifier: keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/fqTbi0RgE-7D6SKzQWOs1v9kD84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.92.22.0/23 195.130.205.0/24 Signature Algorithm: sha256WithRSAEncryption 05:0b:bf:2e:09:24:fe:ea:ab:b5:ac:6c:db:a7:bd:5c:d8:7a: 49:4a:1d:5d:a6:4c:ed:71:19:1f:c2:1b:a3:d8:d5:7b:7e:27: 00:0f:81:7e:06:0a:50:ef:21:de:a3:48:11:b9:69:f2:ce:da: ac:c6:f3:d4:24:fa:e0:3f:1b:0e:6c:f5:c2:36:a7:14:2b:1e: 8e:c8:78:3f:fa:a6:67:54:67:46:d7:ea:4e:93:73:7c:01:68: 2e:d6:52:fe:53:08:9f:42:8e:5a:23:2d:ac:21:3d:cd:d6:33: f8:af:54:dc:d2:94:aa:17:4e:3f:2d:d6:6c:34:1a:0f:6a:47: 69:b4:b5:2e:42:73:c7:68:b2:bf:ef:bd:cf:18:19:da:77:3f: c1:83:a5:b8:e2:d8:60:3e:9c:38:4a:bd:df:57:e4:b9:ad:16: 51:75:0c:ba:4b:7a:ea:c2:4d:88:0f:07:51:b4:89:c5:e3:98: 5a:e5:22:a7:d2:45:b4:21:5e:1c:80:ea:94:4e:4f:cd:c9:ef: 85:aa:57:47:56:3f:58:f8:63:48:d9:39:ac:b9:fc:73:bb:7a: b9:b9:e2:53:1c:84:97:02:c0:49:2f:04:61:72:a8:7d:21:4c: 3d:2f:04:dd:92:16:0a:c8:4a:03:f0:2f:aa:83:09:10:69:22: 99:b8:3e:9d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ELBqm6OO672QMBkBGMvMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTFiMzY1NTJmOWRhY2NiOTJhYzVjM2I0NGI0MjZkNjQz NzQ5ZTIwHhcNMjYwMTAxMTAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWE0ZGI4YjQ0NjAxM2VlYzNlOTIyYjM0MTYzYWNkNmZmNjQwZmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLEYX8YOkYxTgoReMbMHCXheJSAZ Mr5gN3mVyFn/cZ0oXXekHuH0KFzAnHynaFqSWUhnYcpZaseMjOmornb4MNJDrySi mu1IxJpJQfZ2vopK+m8XAsX3EtwlHPaKsh2hSppPas4CudhML4qjmo+LJFOL7RBs ewUDta39kBtBemeJyVlogRpMnB8pllKyfjTGMThwm/ChedPQTxRu5L6eY2TAuF8F Es76XsyKRRAkq1CbvgJVlEavwyyCCUvdKBCRPIMhOGuwNc9mbBZOH5U5UAnPJBAF lZHdWU1CODZgNqS18WX+TWeVE0T0sWK20wKcRbXxlNkcyATX7NVNfqEO2wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH6k24tEYBPuw+kis0FjrNb/ZA/OMB8GA1UdIwQY MBaAFOWhs2VS+drMuSrFw7RLQm1kN0niMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMt YzVlNmQyM2Y4YjA5LzEvZnFUYmkwUmdFLTdENlNLelFXT3MxdjlrRDg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMtYzVlNmQyM2Y4YjA5 LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBvFwWAwQA w4LNMA0GCSqGSIb3DQEBCwUAA4IBAQAFC78uCST+6qu1rGzbp71c2HpJSh1dpkzt cRkfwhuj2NV7ficAD4F+BgpQ7yHeo0gRuWnyztqsxvPUJPrgPxsObPXCNqcUKx6O yHg/+qZnVGdG1+pOk3N8AWgu1lL+UwifQo5aIy2sIT3N1jP4r1Tc0pSqF04/LdZs NBoPakdptLUuQnPHaLK/773PGBnadz/Bg6W44thgPpw4Sr3fV+S5rRZRdQy6S3rq wk2IDwdRtInF45ha5SKn0kW0IV4cgOqUTk/Nye+FqldHVj9Y+GNI2Tmsufxzu3q5 ueJTHISXAsBJLwRhcqh9IUw9LwTdkhYKyEoD8C+qgwkQaSKZuD6d -----END CERTIFICATE-----Generated at Mon Jan 26 11:44:41 2026 by rpki-client