This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/qI5GOetXdKYh8lrEqXZOEzNWNgs.roa File: qI5GOetXdKYh8lrEqXZOEzNWNgs.roa (raw, json) Hash identifier: gOg5TzYEps9BVyLryEBMecl6jyfHJAcCMKO+ZNmQ0RI= Subject key identifier: A8:8E:46:39:EB:57:74:A6:21:F2:5A:C4:A9:76:4E:13:33:56:36:0B Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Certificate serial: 019B78A222B8AD277EDE321FFDB257C43AC3 Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/qI5GOetXdKYh8lrEqXZOEzNWNgs.roa Signing time: Thu 01 Jan 2026 08:17:30 +0000 ROA not before: Thu 01 Jan 2026 08:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59623 IP address blocks: 195.214.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:22:b8:ad:27:7e:de:32:1f:fd:b2:57:c4:3a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Validity Not Before: Jan 1 08:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a88e4639eb5774a621f25ac4a9764e133356360b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:46:96:62:ec:1d:38:66:9f:8e:29:32:5f:91: 04:ee:ae:11:8b:bb:8f:8a:11:84:5b:77:88:e9:a1: 75:37:7d:90:94:d7:56:40:4b:3d:67:e7:51:7b:93: bf:09:d6:44:fa:69:0f:c7:6f:57:3a:bc:a3:11:19: fd:b8:60:76:f0:8b:f0:0a:5f:2b:2f:1a:c4:a1:a3: 91:67:09:71:07:39:24:ba:bc:0c:00:79:22:ce:bb: c7:e1:af:10:bb:da:d3:c8:dd:a3:59:42:90:c5:2a: 3c:af:bd:dc:25:41:06:a6:f3:17:3d:4f:29:c3:fd: 60:86:c3:f3:df:a1:8f:b5:a8:0b:e0:4c:cf:26:3b: 11:9e:2a:1a:01:6b:ee:b6:3f:be:5d:04:ec:dc:41: fa:f8:62:17:45:53:59:8a:8b:df:e2:a5:34:9c:ca: f4:0c:c2:38:b2:87:f1:64:7f:db:2a:13:60:8c:90: 10:dc:b1:78:26:e1:be:9d:fc:d2:07:42:01:d1:64: af:39:7a:ba:cf:b9:55:5f:0a:58:ff:fa:ff:72:97: 70:03:53:a3:8f:38:9a:b4:5a:2f:cf:97:5a:15:78: 80:dc:d5:a9:c5:4c:98:a5:13:8b:d5:9a:f5:d3:12: 1f:09:8b:d7:66:ae:e6:ea:0c:2f:5a:14:95:fb:97: 9b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8E:46:39:EB:57:74:A6:21:F2:5A:C4:A9:76:4E:13:33:56:36:0B X509v3 Authority Key Identifier: keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/qI5GOetXdKYh8lrEqXZOEzNWNgs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.214.235.0/24 Signature Algorithm: sha256WithRSAEncryption 09:99:8d:1c:a9:d2:3e:cc:db:17:1b:9f:8c:62:65:c0:72:fe: 34:d6:ea:c4:fa:c1:0e:c5:6b:ce:3b:78:be:bd:19:00:63:72: b4:96:cb:18:9c:45:cd:6d:96:7b:49:b5:d9:ab:41:ab:45:db: fe:ed:a8:03:4c:d5:6c:92:c1:9b:a4:be:42:a0:f4:bb:46:13: 11:ae:6d:6a:d4:5a:2d:00:26:6b:cf:57:a5:88:61:95:48:fa: ba:6d:11:82:8e:66:95:21:81:aa:fb:ca:68:a2:28:12:68:d6: 49:a3:df:7a:9d:f6:5e:2c:36:c2:2c:b4:69:c4:88:f7:59:49: c0:78:f1:e1:6d:81:59:60:70:88:5a:c7:e6:08:5b:e1:4e:2f: 13:f0:7e:fc:97:8b:bb:db:52:a6:04:9b:d7:b2:8e:7f:57:1a: dd:1d:37:75:f6:d6:43:07:9d:6e:b1:46:f0:d1:1d:d0:73:4c: 8a:0d:c2:13:ce:16:4e:8d:b4:3a:69:cb:95:46:05:e2:48:35: c3:a1:1c:1b:4c:ae:e9:cf:32:5e:18:95:f6:7e:95:79:b5:bc: cc:d5:a3:e8:87:2c:46:19:16:9e:ec:44:d0:17:03:31:b1:94: 82:c6:94:a1:70:b3:80:8f:27:06:f5:21:cc:d5:28:b7:c7:90: 2c:6f:13:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oiK4rSd+3jIf/bJXxDrDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4 NGU1NWQwHhcNMjYwMTAxMDgxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODhlNDYzOWViNTc3NGE2MjFmMjVhYzRhOTc2NGUxMzMzNTYzNjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0aWYuwdOGafjikyX5EE7q4Ri7uP ihGEW3eI6aF1N32QlNdWQEs9Z+dRe5O/CdZE+mkPx29XOryjERn9uGB28IvwCl8r LxrEoaORZwlxBzkkurwMAHkizrvH4a8Qu9rTyN2jWUKQxSo8r73cJUEGpvMXPU8p w/1ghsPz36GPtagL4EzPJjsRnioaAWvutj++XQTs3EH6+GIXRVNZiovf4qU0nMr0 DMI4sofxZH/bKhNgjJAQ3LF4JuG+nfzSB0IB0WSvOXq6z7lVXwpY//r/cpdwA1Oj jziatFovz5daFXiA3NWpxUyYpROL1Zr10xIfCYvXZq7m6gwvWhSV+5eb1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKiORjnrV3SmIfJaxKl2ThMzVjYLMB8GA1UdIwQY MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt NTAwMTUzOWQ3MTg1LzEvcUk1R09ldFhkS1loOGxyRXFYWk9Fek5XTmdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1 LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9brMA0G CSqGSIb3DQEBCwUAA4IBAQAJmY0cqdI+zNsXG5+MYmXAcv401urE+sEOxWvOO3i+ vRkAY3K0lssYnEXNbZZ7SbXZq0GrRdv+7agDTNVsksGbpL5CoPS7RhMRrm1q1Fot ACZrz1eliGGVSPq6bRGCjmaVIYGq+8pooigSaNZJo996nfZeLDbCLLRpxIj3WUnA ePHhbYFZYHCIWsfmCFvhTi8T8H78l4u721KmBJvXso5/VxrdHTd19tZDB51usUbw 0R3Qc0yKDcITzhZOjbQ6acuVRgXiSDXDoRwbTK7pzzJeGJX2fpV5tbzM1aPohyxG GRae7ETQFwMxsZSCxpShcLOAjycG9SHM1Si3x5AsbxOi -----END CERTIFICATE-----Generated at Mon Jan 26 05:59:51 2026 by rpki-client