This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/qFCsaANcR70aOKdL9jcGSnp3Nd0.roa File: qFCsaANcR70aOKdL9jcGSnp3Nd0.roa (raw, json) Hash identifier: ru6fgoLPFWNbB/rS7n0ntPU242iXsQuLTOqT36UGbKY= Subject key identifier: A8:50:AC:68:03:5C:47:BD:1A:38:A7:4B:F6:37:06:4A:7A:77:35:DD Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d Certificate serial: 019B7DCAF037F3051B2067EA16C4845067B6 Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/qFCsaANcR70aOKdL9jcGSnp3Nd0.roa Signing time: Fri 02 Jan 2026 08:20:10 +0000 ROA not before: Fri 02 Jan 2026 08:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30781 IP address blocks: 195.189.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:f0:37:f3:05:1b:20:67:ea:16:c4:84:50:67:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d Validity Not Before: Jan 2 08:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a850ac68035c47bd1a38a74bf637064a7a7735dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e9:32:cf:45:5d:0b:3a:bc:fd:bc:7f:ab:a0: ac:b9:0b:fd:3f:49:8a:9e:d9:7b:8c:8a:bc:b0:ba: ca:7c:58:9b:bf:89:50:85:a7:d5:0f:8a:94:6b:e7: 77:6a:a8:da:57:6c:47:25:a0:67:af:5a:ac:a4:98: 4d:49:e6:7a:5a:7d:a0:85:a2:2c:af:69:15:ce:41: 76:75:4f:3a:d3:73:ae:ff:bf:fd:c0:4f:6a:36:89: 48:12:bb:b2:35:25:6f:ba:5b:75:d2:64:7a:9b:ba: 2a:7a:24:0f:0f:7f:9b:39:a1:84:df:6d:f9:19:ad: 87:fb:8a:ce:63:5f:2f:16:6b:8e:be:c6:40:f5:0b: f2:df:af:a6:3b:b3:3f:80:7c:71:a3:e4:10:0f:8e: b2:6b:9b:5e:51:74:2d:de:3a:3c:b5:cb:f2:34:bf: 75:b2:7a:5e:ce:ed:6a:8e:4b:dc:44:3c:00:e8:4b: 02:5c:49:14:2d:9d:93:16:84:a5:28:e1:85:35:bf: 97:40:08:9d:e3:5a:af:03:87:3b:c7:c1:0b:5d:6b: dc:3b:b7:83:b8:86:91:a0:7d:3f:97:16:9d:b7:94: 24:c3:90:f9:42:b8:af:36:a0:91:80:b3:82:0b:c8: 68:89:fe:b3:25:a7:9a:57:a5:e6:e8:c4:ce:9a:5f: 9d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:50:AC:68:03:5C:47:BD:1A:38:A7:4B:F6:37:06:4A:7A:77:35:DD X509v3 Authority Key Identifier: keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/qFCsaANcR70aOKdL9jcGSnp3Nd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.189.36.0/22 Signature Algorithm: sha256WithRSAEncryption 99:e0:3f:f1:82:43:e6:b5:de:5a:22:2d:45:f3:4c:83:78:82: 8a:5e:a7:b6:e8:68:43:12:21:af:88:14:d1:a0:da:3f:db:c1: 7f:f3:ee:28:92:d3:6f:2a:40:d6:22:96:e4:5e:b0:d1:cd:3a: 93:51:8c:97:ec:e0:e5:f2:31:63:55:5c:fe:b6:01:cf:da:fd: 10:b0:b0:36:bd:1c:75:95:3e:d9:80:d7:46:11:bc:eb:ef:9a: 66:9f:92:fd:fb:35:d3:2f:e6:1a:48:33:62:cb:90:d5:a2:8b: 5c:df:b2:14:d3:7a:5b:8b:65:5f:2f:01:06:cd:27:e8:24:d0: a8:ee:d1:cc:4b:b6:9e:d7:61:6d:c3:c4:2c:01:69:52:d2:32: 7d:22:89:3f:44:9a:ff:64:47:02:b8:65:04:89:1d:50:a6:e2: c5:34:c7:14:a6:ad:13:7d:0a:82:4f:f7:dc:02:91:d6:f1:bc: b8:f4:e8:bb:2b:30:0c:21:b0:ee:f8:8b:53:57:f0:f1:7d:e5: 32:bc:4a:16:33:41:e7:fd:d8:3d:53:d1:06:01:00:6c:a2:0c: 8b:f0:47:5d:5e:96:73:c6:10:d8:f7:8a:7f:d0:0a:d1:d5:ef: 39:30:2a:0d:0e:f7:c6:61:b6:5d:28:a6:2b:5d:05:45:15:2d: da:62:24:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yvA38wUbIGfqFsSEUGe2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNjk0YTYyMjg2NmFlMTU4ZWQyODdkMjUzM2Q0MGJhYWJl YTZkN2QwHhcNMjYwMTAyMDgyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODUwYWM2ODAzNWM0N2JkMWEzOGE3NGJmNjM3MDY0YTdhNzczNWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOkyz0VdCzq8/bx/q6CsuQv9P0mK ntl7jIq8sLrKfFibv4lQhafVD4qUa+d3aqjaV2xHJaBnr1qspJhNSeZ6Wn2ghaIs r2kVzkF2dU8603Ou/7/9wE9qNolIEruyNSVvult10mR6m7oqeiQPD3+bOaGE3235 Ga2H+4rOY18vFmuOvsZA9Qvy36+mO7M/gHxxo+QQD46ya5teUXQt3jo8tcvyNL91 snpezu1qjkvcRDwA6EsCXEkULZ2TFoSlKOGFNb+XQAid41qvA4c7x8ELXWvcO7eD uIaRoH0/lxadt5Qkw5D5QrivNqCRgLOCC8hoif6zJaeaV6Xm6MTOml+dRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKhQrGgDXEe9GjinS/Y3Bkp6dzXdMB8GA1UdIwQY MBaAFJBpSmIoZq4VjtKH0lM9QLqr6m19MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iOWUyZjctMjFkYy00MmMwLTk0YjAt MTNjMGE2MzNlOWY0LzEvcUZDc2FBTmNSNzBhT0tkTDlqY0dTbnAzTmQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iOWUyZjctMjFkYy00MmMwLTk0YjAtMTNjMGE2MzNlOWY0 LzEva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw70kMA0G CSqGSIb3DQEBCwUAA4IBAQCZ4D/xgkPmtd5aIi1F80yDeIKKXqe26GhDEiGviBTR oNo/28F/8+4oktNvKkDWIpbkXrDRzTqTUYyX7ODl8jFjVVz+tgHP2v0QsLA2vRx1 lT7ZgNdGEbzr75pmn5L9+zXTL+YaSDNiy5DVootc37IU03pbi2VfLwEGzSfoJNCo 7tHMS7ae12Ftw8QsAWlS0jJ9Iok/RJr/ZEcCuGUEiR1QpuLFNMcUpq0TfQqCT/fc ApHW8by49Oi7KzAMIbDu+ItTV/DxfeUyvEoWM0Hn/dg9U9EGAQBsogyL8EddXpZz xhDY94p/0ArR1e85MCoNDvfGYbZdKKYrXQVFFS3aYiRq -----END CERTIFICATE-----Generated at Sun Jan 25 16:36:29 2026 by rpki-client