This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/q5ijRhsoQMXQqvexZ__tLFhWfbE.roa File: q5ijRhsoQMXQqvexZ__tLFhWfbE.roa (raw, json) Hash identifier: RKODKNUK1hXqxPnqoVYe1vULFOrntBOl4JYsmeK1KQ4= Subject key identifier: AB:98:A3:46:1B:28:40:C5:D0:AA:F7:B1:67:FF:ED:2C:58:56:7D:B1 Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e Certificate serial: 019B7BA4AE9798ED44222CB9BC56C4DDAA4C Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/q5ijRhsoQMXQqvexZ__tLFhWfbE.roa Signing time: Thu 01 Jan 2026 22:19:08 +0000 ROA not before: Thu 01 Jan 2026 22:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133499 IP address blocks: 89.184.192.0/20 maxlen: 32 89.184.208.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ae:97:98:ed:44:22:2c:b9:bc:56:c4:dd:aa:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e Validity Not Before: Jan 1 22:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab98a3461b2840c5d0aaf7b167ffed2c58567db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e4:94:6b:d6:32:a6:50:2b:af:55:45:69:3f: f9:7b:83:b2:7f:c3:df:b1:3e:f2:e5:34:63:62:12: b1:d9:38:d8:10:53:57:cb:5d:bd:42:e5:80:cc:52: 76:f1:fe:9d:b7:b0:77:b1:78:5e:34:e3:40:37:54: 5e:35:4c:95:bb:af:a3:c2:26:28:61:ce:1a:34:79: b3:90:59:01:75:5f:75:e8:54:35:2e:d3:74:4c:43: 66:af:6f:38:a5:1f:03:f4:f9:d6:dc:c1:d4:92:b1: cd:f2:1e:44:1b:53:59:a0:0b:f1:ab:b2:38:76:a0: ab:ca:7f:a0:c4:e0:bf:a8:55:a2:09:8f:d7:aa:b2: 49:92:19:bb:e6:f6:21:70:eb:66:77:13:63:44:2d: aa:e8:d7:48:30:46:04:60:2c:a1:86:ce:68:91:84: 51:ed:ba:06:2e:62:16:be:fc:8c:c2:38:1f:ff:14: 8e:2b:0a:c6:f5:9c:e9:c6:42:4d:73:78:c7:1c:68: 28:46:ab:0c:32:c2:6c:b8:71:bf:47:5e:00:0a:fb: e2:b2:2d:06:75:a5:e1:6d:3c:ff:c6:85:d7:68:0a: 12:1b:49:7a:09:7a:c8:bb:9f:b6:ea:82:0a:de:90: ea:45:24:48:c4:09:fb:c5:8b:c4:86:7d:44:78:22: 6f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:98:A3:46:1B:28:40:C5:D0:AA:F7:B1:67:FF:ED:2C:58:56:7D:B1 X509v3 Authority Key Identifier: keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/q5ijRhsoQMXQqvexZ__tLFhWfbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.184.192.0/19 Signature Algorithm: sha256WithRSAEncryption 21:b1:5a:6a:e1:da:d0:b8:83:87:b9:61:c1:0d:a8:65:9b:4f: 78:18:b0:e7:2f:85:a9:dd:8e:6c:9b:c5:ba:55:80:c8:5a:62: e9:72:2c:45:bf:43:39:4b:ce:d3:cd:83:6d:82:db:a8:a0:d8: 08:3b:11:c7:7b:b2:00:2b:ef:16:70:28:38:98:41:52:a7:0c: 8d:d8:1a:fa:04:9d:e9:03:6e:36:31:32:c0:18:20:8e:04:30: 2c:96:9c:8f:31:33:1c:d7:ee:90:69:4b:c5:9f:ba:31:19:b4: 74:ed:88:61:d1:12:84:19:e2:35:fe:5b:08:22:38:01:8f:72: 1e:63:ff:45:a6:8e:2c:8a:dc:49:22:f9:d3:0d:97:cb:4d:9d: e5:ee:99:83:9a:fb:46:9a:44:d6:83:f1:74:e5:49:7e:e2:5c: f9:86:df:ed:fa:87:d9:db:1c:df:84:ac:78:dc:1b:94:08:d3: 9f:59:c0:cc:b0:42:ba:30:71:10:fc:02:41:14:06:b5:d6:29: 87:14:76:49:cf:08:59:43:81:8e:2a:95:63:f7:1d:c0:e0:da: 71:02:fd:95:3e:aa:68:bf:6f:66:c6:71:9f:8f:53:f4:f2:1f: 69:bc:66:6b:e9:cb:f4:6e:cb:17:a2:ba:37:1d:b0:bb:68:b9: 53:fe:79:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pK6XmO1EIiy5vFbE3apMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMGI0MTlmMGMxN2I0YzhiZTIxN2Y2NDM4OGQyNjhkMTRk YzI2MWUwHhcNMjYwMTAxMjIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjk4YTM0NjFiMjg0MGM1ZDBhYWY3YjE2N2ZmZWQyYzU4NTY3ZGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+SUa9YyplArr1VFaT/5e4Oyf8Pf sT7y5TRjYhKx2TjYEFNXy129QuWAzFJ28f6dt7B3sXheNONAN1ReNUyVu6+jwiYo Yc4aNHmzkFkBdV916FQ1LtN0TENmr284pR8D9PnW3MHUkrHN8h5EG1NZoAvxq7I4 dqCryn+gxOC/qFWiCY/XqrJJkhm75vYhcOtmdxNjRC2q6NdIMEYEYCyhhs5okYRR 7boGLmIWvvyMwjgf/xSOKwrG9ZzpxkJNc3jHHGgoRqsMMsJsuHG/R14ACvvisi0G daXhbTz/xoXXaAoSG0l6CXrIu5+26oIK3pDqRSRIxAn7xYvEhn1EeCJvIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKuYo0YbKEDF0Kr3sWf/7SxYVn2xMB8GA1UdIwQY MBaAFFELQZ8MF7TIviF/ZDiNJo0U3CYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYt MTRhMDk5OTNkNjcxLzEvcTVpalJoc29RTVhRcXZleFpfX3RMRmhXZmJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYtMTRhMDk5OTNkNjcx LzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFWbjAMA0G CSqGSIb3DQEBCwUAA4IBAQAhsVpq4drQuIOHuWHBDahlm094GLDnL4Wp3Y5sm8W6 VYDIWmLpcixFv0M5S87TzYNtgtuooNgIOxHHe7IAK+8WcCg4mEFSpwyN2Br6BJ3p A242MTLAGCCOBDAslpyPMTMc1+6QaUvFn7oxGbR07Yhh0RKEGeI1/lsIIjgBj3Ie Y/9Fpo4sitxJIvnTDZfLTZ3l7pmDmvtGmkTWg/F05Ul+4lz5ht/t+ofZ2xzfhKx4 3BuUCNOfWcDMsEK6MHEQ/AJBFAa11imHFHZJzwhZQ4GOKpVj9x3A4NpxAv2VPqpo v29mxnGfj1P08h9pvGZr6cv0bssXoro3HbC7aLlT/nnS -----END CERTIFICATE-----Generated at Sun Jan 25 13:42:47 2026 by rpki-client