This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/qqChK2CC--XfiqQ3itiiXN4ZaLk.roa File: qqChK2CC--XfiqQ3itiiXN4ZaLk.roa (raw, json) Hash identifier: vw2QX5EDda3N6rfxeaGaRSjR39gSe4erxpGMw/tBzeU= Subject key identifier: AA:A0:A1:2B:60:82:FB:E5:DF:8A:A4:37:8A:D8:A2:5C:DE:19:68:B9 Certificate issuer: /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262 Certificate serial: 019BDAEBBFD063250020AE034D542D4BB575 Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/qqChK2CC--XfiqQ3itiiXN4ZaLk.roa Signing time: Tue 20 Jan 2026 10:20:41 +0000 ROA not before: Tue 20 Jan 2026 10:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39686 IP address blocks: 193.247.198.0/24 maxlen: 24 2a05:b2c4::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:eb:bf:d0:63:25:00:20:ae:03:4d:54:2d:4b:b5:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262 Validity Not Before: Jan 20 10:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aaa0a12b6082fbe5df8aa4378ad8a25cde1968b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2c:e4:ef:12:f5:75:53:62:d2:45:c8:10:e2: 3d:32:73:c6:fd:b2:07:fd:0e:6a:ac:05:5e:40:f0: 0d:f4:f0:74:99:d3:ba:58:14:0d:c3:e1:7b:ff:ba: ef:20:20:b0:dc:f7:bf:e5:4a:a7:cf:7d:09:9e:0f: 31:a4:9b:a8:52:fc:27:6a:3d:a8:68:2f:c6:48:cf: 8b:8f:77:ea:83:d0:22:8a:09:3f:5f:80:2d:8a:ef: f5:9c:e6:1c:70:29:8c:78:b9:37:86:26:e5:0e:6f: 1b:a4:05:7a:ae:09:fe:b1:81:69:92:e5:18:42:9b: b7:d9:77:3f:0c:cd:3f:07:c6:6c:9a:8d:f0:a5:8a: 5a:ec:e6:3f:ea:f3:1b:07:a8:37:6d:c2:b4:18:84: c6:2c:41:91:71:5b:d2:a4:17:0b:09:e9:7a:8b:f6: 79:f6:20:55:c0:8e:fa:5e:cc:ed:c3:63:49:fc:eb: 82:93:bb:98:01:87:ad:6b:b5:81:89:ff:62:3a:d6: 4e:bc:3b:42:f2:66:41:09:8c:99:8e:54:24:e2:f0: 1a:bf:aa:a6:5a:2e:fe:4f:cd:91:7c:f5:b0:3d:08: 99:90:6d:d4:54:e5:21:0e:06:6c:7b:d9:8a:86:81: da:21:5a:83:c0:5c:e4:1d:59:c6:fa:3d:a1:2b:1a: a5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A0:A1:2B:60:82:FB:E5:DF:8A:A4:37:8A:D8:A2:5C:DE:19:68:B9 X509v3 Authority Key Identifier: keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/qqChK2CC--XfiqQ3itiiXN4ZaLk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.247.198.0/24 IPv6: 2a05:b2c4::/31 Signature Algorithm: sha256WithRSAEncryption 10:be:7c:6c:23:a8:85:82:1c:e9:20:e3:75:6d:cf:e6:36:e4: 54:c4:98:82:61:c5:e3:3e:e9:62:10:73:a5:b2:08:70:8b:8d: e9:b0:83:99:65:d8:f3:e5:62:d6:dd:c6:41:32:0c:1f:f1:1b: 0e:c5:a0:39:80:49:91:c5:3b:10:a0:bf:38:a6:1a:3d:31:bb: 30:0e:fa:65:8f:46:9f:d2:06:2a:84:94:89:36:49:0d:da:bc: 16:98:5b:90:ed:5d:b0:d2:38:ca:b5:d5:c1:2a:5f:0c:a1:a5: f3:39:31:6a:fa:d9:40:01:19:2f:fe:fb:3a:f9:d0:09:1f:f5: 5f:f2:cb:51:6e:df:0c:07:9e:a6:ca:8d:ec:e7:22:a2:a4:e5: 0f:ac:34:69:5b:76:c7:e8:8e:37:19:bb:d6:6e:01:05:56:e6: 61:a0:3b:4f:19:a3:10:c4:9b:67:2c:8a:b9:01:83:ff:c9:a3: 5a:e2:d9:8c:12:5c:26:94:79:89:5a:17:91:47:4f:db:13:d3: fd:61:63:ce:4e:cb:a8:78:44:a8:bd:af:d9:e1:a1:e2:f7:1a: 20:50:fa:b3:1b:e8:68:28:6c:27:4e:e1:38:f3:b9:93:a5:f3: 89:39:98:53:d6:db:4b:c9:0a:0a:e3:ac:36:45:a5:bb:6e:f3: 7d:9f:3a:1e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZva67/QYyUAIK4DTVQtS7V1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNWNhZjI2MmZkYmZjYzVmZjMwZTI4YTUxMDQ2NDZlMjdh ODkyNjIwHhcNMjYwMTIwMTAyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWEwYTEyYjYwODJmYmU1ZGY4YWE0Mzc4YWQ4YTI1Y2RlMTk2OGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyzk7xL1dVNi0kXIEOI9MnPG/bIH /Q5qrAVeQPAN9PB0mdO6WBQNw+F7/7rvICCw3Pe/5Uqnz30Jng8xpJuoUvwnaj2o aC/GSM+Lj3fqg9Aiigk/X4Atiu/1nOYccCmMeLk3hiblDm8bpAV6rgn+sYFpkuUY Qpu32Xc/DM0/B8Zsmo3wpYpa7OY/6vMbB6g3bcK0GITGLEGRcVvSpBcLCel6i/Z5 9iBVwI76Xsztw2NJ/OuCk7uYAYeta7WBif9iOtZOvDtC8mZBCYyZjlQk4vAav6qm Wi7+T82RfPWwPQiZkG3UVOUhDgZse9mKhoHaIVqDwFzkHVnG+j2hKxqlcwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKqgoStggvvl34qkN4rYolzeGWi5MB8GA1UdIwQY MBaAFAtcryYv2/zF/zDiilEEZG4nqJJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mNGI4ZTktNjg2ZC00MWJlLTk4OTEt ZGYxZTk1ZDdlZGQ5LzEvcXFDaEsyQ0MtLVhmaXFRM2l0aWlYTjRaYUxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mNGI4ZTktNjg2ZC00MWJlLTk4OTEtZGYxZTk1ZDdlZGQ5 LzEvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwffGMA0E AgACMAcDBQEqBbLEMA0GCSqGSIb3DQEBCwUAA4IBAQAQvnxsI6iFghzpION1bc/m NuRUxJiCYcXjPuliEHOlsghwi43psIOZZdjz5WLW3cZBMgwf8RsOxaA5gEmRxTsQ oL84pho9MbswDvplj0af0gYqhJSJNkkN2rwWmFuQ7V2w0jjKtdXBKl8MoaXzOTFq +tlAARkv/vs6+dAJH/Vf8stRbt8MB56myo3s5yKipOUPrDRpW3bH6I43GbvWbgEF VuZhoDtPGaMQxJtnLIq5AYP/yaNa4tmMElwmlHmJWheRR0/bE9P9YWPOTsuoeESo va/Z4aHi9xogUPqzG+hoKGwnTuE487mTpfOJOZhT1ttLyQoK46w2RaW7bvN9nzoe -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:36 2026 by rpki-client