This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/QIZGTfbJUZSEUBIh0AL9MtcH9Xk.roa File: QIZGTfbJUZSEUBIh0AL9MtcH9Xk.roa (raw, json) Hash identifier: qB6jDuwQY99D5/eZYxuakQfw/gXp3nXt1jFtFS50sAY= Subject key identifier: 40:86:46:4D:F6:C9:51:94:84:50:12:21:D0:02:FD:32:D7:07:F5:79 Certificate issuer: /CN=365b4abab716ad1407a902e5176560ecc37c966d Certificate serial: 019B797EDE230299E2774187A1DD2E4CD1C5 Authority key identifier: 36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/QIZGTfbJUZSEUBIh0AL9MtcH9Xk.roa Signing time: Thu 01 Jan 2026 12:18:36 +0000 ROA not before: Thu 01 Jan 2026 12:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24971 IP address blocks: 130.193.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:de:23:02:99:e2:77:41:87:a1:dd:2e:4c:d1:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=365b4abab716ad1407a902e5176560ecc37c966d Validity Not Before: Jan 1 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4086464df6c9519484501221d002fd32d707f579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:c0:f1:00:4c:37:a5:0a:56:f6:77:ac:f9:2c: dc:b3:46:26:15:f9:13:78:91:5b:25:3e:54:c3:5f: 26:40:da:b1:88:2f:5a:e8:d4:35:ea:d5:e3:a2:44: d0:4b:cb:c0:09:da:da:32:70:fc:38:07:61:c2:4e: 4a:43:82:e3:e9:e9:58:86:82:8a:e5:8e:cf:d6:25: 74:60:4c:5b:60:58:dd:d0:c5:2e:dc:b4:1a:25:39: 47:7e:37:3d:06:54:af:05:24:c7:60:68:1f:ba:e7: e8:01:53:20:5d:b2:ab:75:9c:a4:f2:47:f1:95:63: 26:b7:7b:c9:15:31:9d:28:16:6d:f2:5d:c9:7e:0c: ab:f0:ba:3b:a8:95:81:18:96:9c:15:b6:c7:2c:3a: cc:af:d1:9f:57:e5:43:4f:dc:fd:44:bd:ad:fb:f5: a1:50:0b:38:f4:02:3a:48:71:f6:88:9b:10:99:7e: 60:37:1e:fe:68:0d:1a:1c:f9:82:1c:39:5d:f0:63: ef:fe:29:f2:70:d0:d4:1f:ed:6d:3f:66:40:a5:0a: 64:c1:86:a2:19:c7:f4:dd:c8:22:99:94:e7:a5:26: 6f:bb:4b:97:b7:a6:49:23:71:15:f8:b8:05:e5:bc: 01:ba:aa:14:8f:73:9a:14:00:7c:68:d1:21:bb:a3: 92:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:86:46:4D:F6:C9:51:94:84:50:12:21:D0:02:FD:32:D7:07:F5:79 X509v3 Authority Key Identifier: keyid:36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/QIZGTfbJUZSEUBIh0AL9MtcH9Xk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.193.16.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:1e:ec:b4:63:7a:3a:c7:da:50:78:db:09:ec:43:c7:6d:0a: a6:f6:73:d0:ab:7a:fa:80:f2:ea:fe:bb:f5:f2:b8:f5:bc:ca: 84:7a:19:e2:de:c8:7b:e7:aa:0c:3d:74:eb:a9:e7:ad:81:3b: 7e:b6:e3:4f:25:f5:8a:e7:c5:40:62:06:c5:72:0b:6d:ab:84: 86:90:5a:0d:fb:d4:48:ed:26:35:cb:f4:24:f7:7f:ea:39:db: 57:15:df:94:ec:a4:08:a8:76:c9:e0:a7:0a:8d:e0:a8:37:12: b2:a9:2f:b4:7d:43:61:16:f9:b2:30:1a:6d:27:3d:96:69:3f: f5:bb:18:8a:89:60:76:b4:da:c6:80:c8:88:f1:88:83:1d:09: 57:da:0e:14:ef:02:ba:82:53:6e:a3:a4:b4:69:e6:bc:30:ad: 3f:fe:85:8c:44:d7:6f:77:db:db:b4:e7:72:81:01:b3:58:ee: b9:18:54:73:bc:fc:cb:b1:68:d8:99:ee:a6:c9:97:d6:da:55: aa:c0:ec:00:13:40:ca:1b:5a:8b:58:83:c6:06:b1:cf:a7:a9: 2d:51:19:40:78:e4:e7:7f:ee:c9:a3:5b:92:ec:4b:d1:2f:1b: 30:10:1f:3e:b0:90:33:dd:24:de:b5:cc:32:bb:29:f7:53:07: e9:f0:21:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ft4jApnid0GHod0uTNHFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NWI0YWJhYjcxNmFkMTQwN2E5MDJlNTE3NjU2MGVjYzM3 Yzk2NmQwHhcNMjYwMTAxMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDg2NDY0ZGY2Yzk1MTk0ODQ1MDEyMjFkMDAyZmQzMmQ3MDdmNTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+8DxAEw3pQpW9nes+Szcs0YmFfkT eJFbJT5Uw18mQNqxiC9a6NQ16tXjokTQS8vACdraMnD8OAdhwk5KQ4Lj6elYhoKK 5Y7P1iV0YExbYFjd0MUu3LQaJTlHfjc9BlSvBSTHYGgfuufoAVMgXbKrdZyk8kfx lWMmt3vJFTGdKBZt8l3Jfgyr8Lo7qJWBGJacFbbHLDrMr9GfV+VDT9z9RL2t+/Wh UAs49AI6SHH2iJsQmX5gNx7+aA0aHPmCHDld8GPv/inycNDUH+1tP2ZApQpkwYai Gcf03cgimZTnpSZvu0uXt6ZJI3EV+LgF5bwBuqoUj3OaFAB8aNEhu6OSUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFECGRk32yVGUhFASIdAC/TLXB/V5MB8GA1UdIwQY MBaAFDZbSrq3Fq0UB6kC5RdlYOzDfJZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmx0S3VyY1dyUlFIcVFMbEYyVmc3TU44bG0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lMzVhYzEtMDVkMS00MDZkLWI2Njgt MzZlYWY3OTQ4NTMxLzEvUUlaR1RmYkpVWlNFVUJJaDBBTDlNdGNIOVhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9lMzVhYzEtMDVkMS00MDZkLWI2NjgtMzZlYWY3OTQ4NTMx LzEvTmx0S3VyY1dyUlFIcVFMbEYyVmc3TU44bG0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgsEQMA0G CSqGSIb3DQEBCwUAA4IBAQAKHuy0Y3o6x9pQeNsJ7EPHbQqm9nPQq3r6gPLq/rv1 8rj1vMqEehni3sh756oMPXTrqeetgTt+tuNPJfWK58VAYgbFcgttq4SGkFoN+9RI 7SY1y/Qk93/qOdtXFd+U7KQIqHbJ4KcKjeCoNxKyqS+0fUNhFvmyMBptJz2WaT/1 uxiKiWB2tNrGgMiI8YiDHQlX2g4U7wK6glNuo6S0aea8MK0//oWMRNdvd9vbtOdy gQGzWO65GFRzvPzLsWjYme6myZfW2lWqwOwAE0DKG1qLWIPGBrHPp6ktURlAeOTn f+7Jo1uS7EvRLxswEB8+sJAz3STetcwyuyn3Uwfp8CHm -----END CERTIFICATE-----Generated at Mon Jan 26 09:24:18 2026 by rpki-client