This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/RQO_LmTpcF6RDmMYZxn24ZfpcEI.roa File: RQO_LmTpcF6RDmMYZxn24ZfpcEI.roa (raw, json) Hash identifier: bKbLY5d9ZhHhcSI9cPlryPqGLtUgv5OwLq161+ZKhKM= Subject key identifier: 45:03:BF:2E:64:E9:70:5E:91:0E:63:18:67:19:F6:E1:97:E9:70:42 Certificate issuer: /CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7 Certificate serial: 019B7C116DB2CBE93B943E653D14E358E5CA Authority key identifier: BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/RQO_LmTpcF6RDmMYZxn24ZfpcEI.roa Signing time: Fri 02 Jan 2026 00:17:55 +0000 ROA not before: Fri 02 Jan 2026 00:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273384 IP address blocks: 194.38.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:6d:b2:cb:e9:3b:94:3e:65:3d:14:e3:58:e5:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7 Validity Not Before: Jan 2 00:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4503bf2e64e9705e910e63186719f6e197e97042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e8:e2:a7:69:fc:db:9f:73:e6:92:46:69:bc: 6e:cb:a7:e3:71:31:bb:48:06:3d:05:57:8d:70:c6: da:92:6b:9a:54:88:19:7b:10:83:b6:7c:67:d2:b5: 57:36:f1:2a:0c:94:2c:57:4c:f6:93:8c:7d:8f:2c: e1:83:af:72:39:2a:5d:ac:70:66:53:50:9c:28:c5: d6:a3:da:52:37:3e:e1:bd:72:16:91:2e:78:a6:7a: eb:d6:33:be:be:93:0d:6a:de:66:ba:d9:be:89:34: c2:50:dd:8a:f2:b9:d6:b7:20:05:34:8b:0a:29:1a: b7:dc:b2:aa:ef:2b:07:26:69:8f:29:1e:74:6e:56: 11:49:21:8c:70:53:0a:9a:35:90:4a:90:89:12:f9: b9:e7:2a:d8:d9:34:2e:ce:f8:97:f4:cf:2e:32:f5: dd:a3:f0:57:12:14:4c:54:3b:fa:65:d9:69:59:63: b7:96:ef:eb:f6:4a:70:55:9d:1c:f3:97:69:52:a1: 07:81:02:eb:7d:35:76:1a:a5:0c:0c:3f:ad:78:09: 59:06:ee:60:07:dd:99:d6:50:8c:54:1f:ef:00:b4: 4a:ce:78:a8:a2:a9:56:2e:5c:9a:f5:7d:3d:a8:4d: 20:e3:be:4f:0c:34:d3:b3:66:93:8e:4d:4e:9f:0b: 19:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:03:BF:2E:64:E9:70:5E:91:0E:63:18:67:19:F6:E1:97:E9:70:42 X509v3 Authority Key Identifier: keyid:BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/RQO_LmTpcF6RDmMYZxn24ZfpcEI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.38.194.0/24 Signature Algorithm: sha256WithRSAEncryption ae:de:02:33:1e:35:da:e7:4f:5f:b4:07:0d:e3:bb:04:93:df: dd:2c:b4:1f:d2:4d:d0:b6:9c:67:e3:60:a1:27:2f:d9:60:78: d5:94:38:b4:c4:ac:8e:8b:0f:bd:da:7d:79:52:35:a2:c7:cf: 2e:00:cc:21:d5:e3:cf:3f:49:6b:8a:9a:aa:69:b6:8b:67:8b: bb:d8:a0:fb:2b:8e:93:4c:3b:c8:81:05:2a:8d:37:53:12:1f: d0:1e:ea:82:cf:61:a4:5f:27:f2:e7:5e:8c:2f:08:80:ca:77: 34:89:03:ca:18:10:e2:2c:89:2b:1e:32:84:a4:91:7b:e2:e7: 88:8b:13:16:db:b2:1f:f4:ce:31:ea:ff:0a:f7:17:7b:f0:6b: ae:2b:a1:2e:f7:6e:de:e0:60:11:1d:da:f2:24:e4:37:21:6a: 68:90:6f:c6:84:d6:7c:82:26:31:a4:91:20:3e:c6:68:0d:7b: 75:5e:4d:89:4d:eb:72:5b:52:89:72:ea:dc:a6:6a:0b:f2:3d: ee:ad:62:85:09:3b:c5:8c:fd:28:13:c0:0b:7b:c4:b7:88:37: c4:94:36:29:d6:e6:66:ac:1a:bf:c4:93:9e:35:46:17:4e:33: c5:d9:06:36:81:73:32:06:ef:37:28:1f:2e:0a:48:fe:b7:69: 6d:e0:3e:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EW2yy+k7lD5lPRTjWOXKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTdlZDA4YjhlOWU4ZWVmNWY4M2UzY2NiMjY3NDVmOGIz ODg1ZTcwHhcNMjYwMTAyMDAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTAzYmYyZTY0ZTk3MDVlOTEwZTYzMTg2NzE5ZjZlMTk3ZTk3MDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+jip2n8259z5pJGabxuy6fjcTG7 SAY9BVeNcMbakmuaVIgZexCDtnxn0rVXNvEqDJQsV0z2k4x9jyzhg69yOSpdrHBm U1CcKMXWo9pSNz7hvXIWkS54pnrr1jO+vpMNat5mutm+iTTCUN2K8rnWtyAFNIsK KRq33LKq7ysHJmmPKR50blYRSSGMcFMKmjWQSpCJEvm55yrY2TQuzviX9M8uMvXd o/BXEhRMVDv6ZdlpWWO3lu/r9kpwVZ0c85dpUqEHgQLrfTV2GqUMDD+teAlZBu5g B92Z1lCMVB/vALRKzniooqlWLlya9X09qE0g475PDDTTs2aTjk1OnwsZZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEUDvy5k6XBekQ5jGGcZ9uGX6XBCMB8GA1UdIwQY MBaAFLqn7Qi46eju9fg+PMsmdF+LOIXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84MzMxZTAtZThhYi00YTZlLTkyYjct OGE5NmYwM2JjNjE3LzEvUlFPX0xtVHBjRjZSRG1NWVp4bjI0WmZwY0VJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84MzMxZTAtZThhYi00YTZlLTkyYjctOGE5NmYwM2JjNjE3 LzEvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwibCMA0G CSqGSIb3DQEBCwUAA4IBAQCu3gIzHjXa509ftAcN47sEk9/dLLQf0k3Qtpxn42Ch Jy/ZYHjVlDi0xKyOiw+92n15UjWix88uAMwh1ePPP0lripqqabaLZ4u72KD7K46T TDvIgQUqjTdTEh/QHuqCz2GkXyfy516MLwiAync0iQPKGBDiLIkrHjKEpJF74ueI ixMW27If9M4x6v8K9xd78GuuK6Eu927e4GARHdryJOQ3IWpokG/GhNZ8giYxpJEg PsZoDXt1Xk2JTetyW1KJcurcpmoL8j3urWKFCTvFjP0oE8ALe8S3iDfElDYp1uZm rBq/xJOeNUYXTjPF2QY2gXMyBu83KB8uCkj+t2lt4D4r -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:44 2026 by rpki-client