This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/Qq92xrncKE3gNgTmvbBvBWPB6qI.roa File: Qq92xrncKE3gNgTmvbBvBWPB6qI.roa (raw, json) Hash identifier: /9Dleb0yfYmR0zXREW6ew7jssIDQZBndb1NlB/cFqO8= Subject key identifier: 42:AF:76:C6:B9:DC:28:4D:E0:36:04:E6:BD:B0:6F:05:63:C1:EA:A2 Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c Certificate serial: 019B7CECF22FD6BC95F5B355A5BD3979834C Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/Qq92xrncKE3gNgTmvbBvBWPB6qI.roa Signing time: Fri 02 Jan 2026 04:17:41 +0000 ROA not before: Fri 02 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1935 IP address blocks: 193.160.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f2:2f:d6:bc:95:f5:b3:55:a5:bd:39:79:83:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c Validity Not Before: Jan 2 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42af76c6b9dc284de03604e6bdb06f0563c1eaa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d0:18:e8:30:0d:37:6c:8d:42:69:11:a9:45: b5:cd:d8:7a:6a:62:c1:f2:f2:b7:5b:ed:ac:27:56: 46:b4:47:f0:e6:7b:b9:82:5b:68:e1:e9:f6:17:9c: ed:63:1b:ab:3b:74:4e:03:9f:9c:11:bf:20:9d:a8: 45:0b:b7:cc:a9:b0:43:80:6e:dd:06:3b:c8:b8:97: 04:99:be:cd:cb:fc:e7:90:78:ca:e0:a1:1b:66:48: ce:e4:d1:96:0b:b2:14:70:19:90:84:b1:20:e5:96: ae:89:66:a4:df:e2:52:2d:e4:76:a9:a0:b1:77:19: b0:b7:d9:22:78:94:84:d3:de:91:38:ab:dd:43:31: c1:c0:45:42:18:72:37:9a:b9:b7:94:c0:1a:08:a7: f8:0b:d1:c5:cd:4e:e5:bf:65:f4:81:b3:af:7f:a2: e6:a8:6a:b4:71:df:3d:b0:98:45:67:cf:df:10:9b: 9a:94:ab:4c:53:6c:59:6e:e5:52:1f:3f:5b:32:7b: 50:a7:cd:64:de:0d:16:3b:97:20:9d:2e:1a:f0:66: 84:fe:5a:3b:29:c8:c0:bd:54:fa:39:8d:ac:9d:17: 4b:d4:4b:4d:ec:0d:c5:b1:b6:bd:99:25:22:01:5e: 76:67:13:a1:ad:d5:2e:62:40:b1:9b:f1:d9:6a:91: 00:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AF:76:C6:B9:DC:28:4D:E0:36:04:E6:BD:B0:6F:05:63:C1:EA:A2 X509v3 Authority Key Identifier: keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/Qq92xrncKE3gNgTmvbBvBWPB6qI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.160.0.0/24 Signature Algorithm: sha256WithRSAEncryption 24:b2:7c:48:e7:9e:05:ef:08:9c:3c:2c:90:41:5c:77:c7:5d: 59:5d:b7:33:a1:19:9d:ec:0d:c6:cc:11:a8:8e:cd:b7:ae:c1: 12:70:f5:7b:16:72:e7:37:4b:9f:c3:b3:43:ce:d5:a2:60:dd: 31:8f:86:fe:f2:09:3a:c9:20:3d:d4:20:a4:09:61:07:bb:4b: 3a:ef:f0:71:ce:86:9f:73:8a:03:26:4d:cd:6a:4a:b6:4d:e9: 40:1e:da:43:d6:9d:1d:25:15:f8:01:6d:ec:72:a2:73:7f:82: 98:c1:5a:5a:5f:26:50:24:f6:b0:06:e4:15:6c:be:16:17:64: 1b:c6:e6:97:08:35:43:fc:0e:d4:b5:42:40:cc:6d:b1:09:bb: 31:8b:dc:3a:d1:b8:56:64:e5:85:f0:14:47:91:08:86:1f:07: c6:48:9f:2d:3d:51:7c:97:b0:9b:90:b5:76:dd:48:ac:9e:4b: d3:14:a2:d5:bb:e8:21:c2:7d:95:a8:2d:59:6c:e5:9c:a0:50: ef:75:c0:b1:a8:60:c4:38:11:e2:80:e8:9e:bc:ab:c2:b5:16: 6e:da:56:0e:97:a7:9b:f3:61:20:01:4d:3b:42:8b:58:70:f9: d1:7f:aa:d3:5c:4d:a2:b1:49:b7:99:8d:9a:a3:8b:fe:ab:dc: 41:69:df:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87PIv1ryV9bNVpb05eYNMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMGUyMTZlNTc5MWUxYjAxZGEyMWJjYWYzMzAwNDFhZDcy YTdlNmMwHhcNMjYwMTAyMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmFmNzZjNmI5ZGMyODRkZTAzNjA0ZTZiZGIwNmYwNTYzYzFlYWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dAY6DANN2yNQmkRqUW1zdh6amLB 8vK3W+2sJ1ZGtEfw5nu5glto4en2F5ztYxurO3ROA5+cEb8gnahFC7fMqbBDgG7d BjvIuJcEmb7Ny/znkHjK4KEbZkjO5NGWC7IUcBmQhLEg5ZauiWak3+JSLeR2qaCx dxmwt9kieJSE096ROKvdQzHBwEVCGHI3mrm3lMAaCKf4C9HFzU7lv2X0gbOvf6Lm qGq0cd89sJhFZ8/fEJualKtMU2xZbuVSHz9bMntQp81k3g0WO5cgnS4a8GaE/lo7 KcjAvVT6OY2snRdL1EtN7A3Fsba9mSUiAV52ZxOhrdUuYkCxm/HZapEAKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEKvdsa53ChN4DYE5r2wbwVjweqiMB8GA1UdIwQY MBaAFBwOIW5XkeGwHaIbyvMwBBrXKn5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEt MmMwZmM2YmUxZTU3LzEvUXE5MnhybmNLRTNnTmdUbXZiQnZCV1BCNnFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEtMmMwZmM2YmUxZTU3 LzEvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaAAMA0G CSqGSIb3DQEBCwUAA4IBAQAksnxI554F7wicPCyQQVx3x11ZXbczoRmd7A3GzBGo js23rsEScPV7FnLnN0ufw7NDztWiYN0xj4b+8gk6ySA91CCkCWEHu0s67/Bxzoaf c4oDJk3Nakq2TelAHtpD1p0dJRX4AW3scqJzf4KYwVpaXyZQJPawBuQVbL4WF2Qb xuaXCDVD/A7UtUJAzG2xCbsxi9w60bhWZOWF8BRHkQiGHwfGSJ8tPVF8l7CbkLV2 3UisnkvTFKLVu+ghwn2VqC1ZbOWcoFDvdcCxqGDEOBHigOievKvCtRZu2lYOl6eb 82EgAU07QotYcPnRf6rTXE2isUm3mY2ao4v+q9xBad/E -----END CERTIFICATE-----Generated at Mon Jan 26 13:46:26 2026 by rpki-client