This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/tqA8MnPED0zVZqFPU0EtU7Uh-p8.roa File: tqA8MnPED0zVZqFPU0EtU7Uh-p8.roa (raw, json) Hash identifier: nbXmQvCUG27Q3g4mguFw6ecZllhpCxpa9WaI9lGnt70= Subject key identifier: B6:A0:3C:32:73:C4:0F:4C:D5:66:A1:4F:53:41:2D:53:B5:21:FA:9F Certificate issuer: /CN=1120a0ce013e2d52a6ff354a270894bb998e4547 Certificate serial: 019B7AC8A0F59E3B94C895C4B4D840B01B34 Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/tqA8MnPED0zVZqFPU0EtU7Uh-p8.roa Signing time: Thu 01 Jan 2026 18:18:47 +0000 ROA not before: Thu 01 Jan 2026 18:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11003 IP address blocks: 193.17.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a0:f5:9e:3b:94:c8:95:c4:b4:d8:40:b0:1b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547 Validity Not Before: Jan 1 18:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6a03c3273c40f4cd566a14f53412d53b521fa9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7e:87:d7:51:85:00:15:45:ca:e6:e2:9d:db: 6e:4a:89:7e:32:da:3f:c8:36:91:46:ea:d3:c8:e0: c6:8f:ef:9f:51:12:c8:4d:5a:31:18:d9:d0:a7:90: 33:5c:c5:d9:48:6e:5f:85:1e:e7:e4:15:5b:fb:d0: f5:1d:68:ab:32:f7:cc:35:32:9c:f7:00:6d:b9:c9: fd:33:55:b6:fd:67:9a:2a:66:14:e4:ac:14:55:4e: ca:5b:47:a4:aa:2a:d7:8a:e1:ae:ac:dc:f7:3a:1d: 35:c7:9e:39:e5:62:5f:9f:ae:82:83:25:51:6e:41: 49:d8:b5:e6:8d:c4:07:d0:e6:cf:ac:0f:af:48:24: 1e:42:b8:67:58:45:85:33:86:09:58:2a:4e:e5:84: 31:77:e4:8d:52:6f:c7:63:c8:5b:b0:a2:ea:55:7e: 68:35:9c:88:64:7d:23:bd:28:fb:37:67:00:23:01: a5:cb:90:22:b1:10:bd:7a:35:6b:c9:66:60:58:35: 6b:af:c1:f2:ba:64:0e:e7:9c:96:8b:43:28:cb:00: ff:cc:27:0e:9b:1d:80:36:7c:4e:bd:0c:0e:d3:c2: a1:ba:11:74:9b:53:f0:99:aa:5c:1e:b4:d4:59:1d: 82:30:be:78:7c:dc:d7:e4:fa:3b:a1:22:c4:ad:ef: 9d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A0:3C:32:73:C4:0F:4C:D5:66:A1:4F:53:41:2D:53:B5:21:FA:9F X509v3 Authority Key Identifier: keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/tqA8MnPED0zVZqFPU0EtU7Uh-p8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.96.0/19 Signature Algorithm: sha256WithRSAEncryption 63:88:f6:2e:86:3a:50:22:04:93:93:70:d8:38:a7:6b:2d:96: 2a:cb:77:e6:1c:85:f2:f1:1b:49:9f:87:32:58:53:91:f4:78: 1a:92:90:01:2f:54:9e:08:f8:20:a5:db:19:2c:60:1f:46:0a: 2e:1f:b3:8d:a2:5d:52:a9:83:0b:a6:a7:ab:cb:ab:c3:dc:6b: 2b:52:a9:b0:ab:38:99:87:c7:f6:19:92:23:27:ca:42:54:6d: 68:06:a9:75:ed:41:63:6f:d5:85:bb:11:81:22:34:0f:b6:be: a5:de:8b:40:f8:26:bb:68:1f:8d:f2:06:87:82:df:fa:97:2a: db:4e:85:db:a8:6c:62:8d:97:78:1f:fb:36:f5:01:31:90:a9: 5c:9b:53:06:3d:78:89:e8:78:c9:a6:7e:d3:ef:c9:a1:98:16: 0f:ae:8c:10:21:60:14:06:e9:b3:ac:e6:b3:f4:78:a3:b6:ab: a1:72:b4:88:16:a3:07:25:ed:39:c5:9e:66:67:64:63:b1:b6: c2:93:8a:1a:4f:a9:4c:61:0a:b2:4f:1e:81:1f:e2:59:83:95: 0f:71:b5:3c:c1:59:86:e0:b8:0d:eb:be:4c:9b:ec:b5:d1:21: 01:32:d7:4e:e4:37:43:db:17:06:b1:54:c6:f6:64:e5:13:a2: bd:ce:04:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yKD1njuUyJXEtNhAsBs0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMjBhMGNlMDEzZTJkNTJhNmZmMzU0YTI3MDg5NGJiOTk4 ZTQ1NDcwHhcNMjYwMTAxMTgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmEwM2MzMjczYzQwZjRjZDU2NmExNGY1MzQxMmQ1M2I1MjFmYTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX6H11GFABVFyubindtuSol+Mto/ yDaRRurTyODGj++fURLITVoxGNnQp5AzXMXZSG5fhR7n5BVb+9D1HWirMvfMNTKc 9wBtucn9M1W2/WeaKmYU5KwUVU7KW0ekqirXiuGurNz3Oh01x5455WJfn66CgyVR bkFJ2LXmjcQH0ObPrA+vSCQeQrhnWEWFM4YJWCpO5YQxd+SNUm/HY8hbsKLqVX5o NZyIZH0jvSj7N2cAIwGly5AisRC9ejVryWZgWDVrr8HyumQO55yWi0MoywD/zCcO mx2ANnxOvQwO08KhuhF0m1PwmapcHrTUWR2CML54fNzX5Po7oSLEre+dcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLagPDJzxA9M1WahT1NBLVO1IfqfMB8GA1UdIwQY MBaAFBEgoM4BPi1Spv81SicIlLuZjkVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVNDZ3pnRS1MVkttX3pWS0p3aVV1NW1PUlVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MjE0OTgtMjhkMy00Mzc2LWI2MjUt MzFhZjNlMjk0NjcxLzEvdHFBOE1uUEVEMHpWWnFGUFUwRXRVN1VoLXA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MjE0OTgtMjhkMy00Mzc2LWI2MjUtMzFhZjNlMjk0Njcx LzEvRVNDZ3pnRS1MVkttX3pWS0p3aVV1NW1PUlVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwRFgMA0G CSqGSIb3DQEBCwUAA4IBAQBjiPYuhjpQIgSTk3DYOKdrLZYqy3fmHIXy8RtJn4cy WFOR9HgakpABL1SeCPggpdsZLGAfRgouH7ONol1SqYMLpqery6vD3GsrUqmwqziZ h8f2GZIjJ8pCVG1oBql17UFjb9WFuxGBIjQPtr6l3otA+Ca7aB+N8gaHgt/6lyrb ToXbqGxijZd4H/s29QExkKlcm1MGPXiJ6HjJpn7T78mhmBYProwQIWAUBumzrOaz 9HijtquhcrSIFqMHJe05xZ5mZ2RjsbbCk4oaT6lMYQqyTx6BH+JZg5UPcbU8wVmG 4LgN675Mm+y10SEBMtdO5DdD2xcGsVTG9mTlE6K9zgS9 -----END CERTIFICATE-----Generated at Sun Jan 25 15:53:02 2026 by rpki-client