This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/Q_JnpghBEdCLh0xBHJB-tx_t2gw.roa File: Q_JnpghBEdCLh0xBHJB-tx_t2gw.roa (raw, json) Hash identifier: Ab9wt6TXLrpI0IOi098sXRGVv7NV4z8Pe9YK/pyc2Mc= Subject key identifier: 43:F2:67:A6:08:41:11:D0:8B:87:4C:41:1C:90:7E:B7:1F:ED:DA:0C Certificate issuer: /CN=e204a1c2ca4a4db033375e360de323790ba6a5b9 Certificate serial: 019B7A5AE8760DFA7477CE6413EAEB469C9C Authority key identifier: E2:04:A1:C2:CA:4A:4D:B0:33:37:5E:36:0D:E3:23:79:0B:A6:A5:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gShwspKTbAzN142DeMjeQumpbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/Q_JnpghBEdCLh0xBHJB-tx_t2gw.roa Signing time: Thu 01 Jan 2026 16:18:56 +0000 ROA not before: Thu 01 Jan 2026 16:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8412 IP address blocks: 193.84.112.0/24 maxlen: 24 195.248.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.crl rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.mft rsync://rpki.ripe.net/repository/DEFAULT/4gShwspKTbAzN142DeMjeQumpbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e8:76:0d:fa:74:77:ce:64:13:ea:eb:46:9c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e204a1c2ca4a4db033375e360de323790ba6a5b9 Validity Not Before: Jan 1 16:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43f267a6084111d08b874c411c907eb71fedda0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:57:1f:b8:72:fd:36:2d:f4:f0:cf:8b:55:3f: 56:f2:9f:0b:e9:7c:c3:38:e4:b5:37:0f:21:9e:69: d6:6b:7e:7d:b7:a8:af:12:13:df:4a:6a:28:0c:95: 16:ff:e6:ba:8f:6e:a5:00:16:6c:22:ec:3d:93:a6: 77:fc:94:67:a4:8f:fa:95:1a:9a:b6:8a:58:ab:93: fa:da:5d:bc:f3:60:0d:ec:5e:b6:2f:3b:b0:86:fb: f2:10:e3:1f:ea:d6:63:53:48:bf:88:a0:77:49:41: 63:c9:d4:6a:af:51:66:31:f5:cb:d6:a4:3f:06:67: ee:0d:56:08:2c:64:83:7c:9d:f8:f9:30:e1:db:68: 2c:7c:12:51:95:af:0e:11:cf:08:2c:64:68:2d:e9: 84:73:ca:e4:7c:f0:36:68:53:c8:20:33:b0:dd:92: 43:47:fe:e7:0f:a8:4b:0b:9c:8f:24:97:ea:2a:77: c4:8b:0f:ce:63:25:c7:4d:50:80:d8:93:f7:c3:fc: 82:2a:bb:f8:3e:b7:c1:b5:a2:69:46:1f:6b:42:17: db:3e:ce:f3:2a:78:9b:01:fb:16:c3:9d:7d:da:84: 60:ff:0a:f4:26:a9:19:fc:09:c5:6a:f5:af:31:ff: a9:7f:a4:3a:04:bd:79:b1:2c:30:d6:70:4d:36:2f: 8f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F2:67:A6:08:41:11:D0:8B:87:4C:41:1C:90:7E:B7:1F:ED:DA:0C X509v3 Authority Key Identifier: keyid:E2:04:A1:C2:CA:4A:4D:B0:33:37:5E:36:0D:E3:23:79:0B:A6:A5:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gShwspKTbAzN142DeMjeQumpbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/Q_JnpghBEdCLh0xBHJB-tx_t2gw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.84.112.0/24 195.248.73.0/24 Signature Algorithm: sha256WithRSAEncryption c4:a7:9c:cb:7c:76:02:c4:96:44:e2:aa:86:42:de:26:8f:d1: 3e:41:03:58:ef:40:13:81:ab:a3:2c:20:9e:6f:9f:f6:22:00: d7:5a:48:e1:1b:0b:69:99:32:22:ea:e1:7d:97:bf:bf:f4:a4: 93:81:a6:8b:04:34:5e:9c:20:5e:c8:6a:f2:11:7f:bc:d6:34: fe:8e:9f:5c:64:67:28:f2:03:dc:14:09:2a:ae:16:28:77:2c: 92:f5:7e:a9:4c:a5:45:f5:a7:1a:9b:a9:63:3d:32:2a:7e:70: 95:bc:64:03:70:ac:5e:ef:cf:1c:cc:46:49:25:de:7d:91:e9: d5:52:ca:35:86:0d:29:2a:a7:03:94:70:85:a4:49:57:d8:54: cf:66:de:9d:01:ec:6a:bf:0b:f1:77:57:41:07:5b:8f:53:7f: 13:9f:0e:e1:8e:24:d0:35:42:10:a4:2a:24:ec:26:85:47:23: 3b:ba:7a:f6:19:5d:fd:8e:93:0f:34:65:6f:9a:95:34:b9:05: 97:89:97:2e:1d:27:9a:7a:ce:2f:ed:84:1e:1d:ca:c8:62:9d: 19:15:80:57:44:14:2a:85:d1:66:1e:d6:12:7a:90:2b:9b:fa: 78:ba:b7:a1:e7:64:01:cc:aa:ad:11:25:8d:f2:49:42:80:cd: 1d:44:41:d9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6Wuh2Dfp0d85kE+rrRpycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMDRhMWMyY2E0YTRkYjAzMzM3NWUzNjBkZTMyMzc5MGJh NmE1YjkwHhcNMjYwMTAxMTYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2YyNjdhNjA4NDExMWQwOGI4NzRjNDExYzkwN2ViNzFmZWRkYTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlcfuHL9Ni308M+LVT9W8p8L6XzD OOS1Nw8hnmnWa359t6ivEhPfSmooDJUW/+a6j26lABZsIuw9k6Z3/JRnpI/6lRqa topYq5P62l2882AN7F62LzuwhvvyEOMf6tZjU0i/iKB3SUFjydRqr1FmMfXL1qQ/ BmfuDVYILGSDfJ34+TDh22gsfBJRla8OEc8ILGRoLemEc8rkfPA2aFPIIDOw3ZJD R/7nD6hLC5yPJJfqKnfEiw/OYyXHTVCA2JP3w/yCKrv4PrfBtaJpRh9rQhfbPs7z KnibAfsWw5192oRg/wr0JqkZ/AnFavWvMf+pf6Q6BL15sSww1nBNNi+PVwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEPyZ6YIQRHQi4dMQRyQfrcf7doMMB8GA1UdIwQY MBaAFOIEocLKSk2wMzdeNg3jI3kLpqW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGdTaHdzcEtUYkF6TjE0MkRlTWplUXVtcGJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xMmU5MDUtNzg1NC00NzNjLTk1MGIt Y2Y0YmQ0ZjNmMjlkLzEvUV9KbnBnaEJFZENMaDB4QkhKQi10eF90Mmd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8xMmU5MDUtNzg1NC00NzNjLTk1MGItY2Y0YmQ0ZjNmMjlk LzEvNGdTaHdzcEtUYkF6TjE0MkRlTWplUXVtcGJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwVRwAwQA w/hJMA0GCSqGSIb3DQEBCwUAA4IBAQDEp5zLfHYCxJZE4qqGQt4mj9E+QQNY70AT gaujLCCeb5/2IgDXWkjhGwtpmTIi6uF9l7+/9KSTgaaLBDRenCBeyGryEX+81jT+ jp9cZGco8gPcFAkqrhYodyyS9X6pTKVF9acam6ljPTIqfnCVvGQDcKxe788czEZJ Jd59kenVUso1hg0pKqcDlHCFpElX2FTPZt6dAexqvwvxd1dBB1uPU38Tnw7hjiTQ NUIQpCok7CaFRyM7unr2GV39jpMPNGVvmpU0uQWXiZcuHSeaes4v7YQeHcrIYp0Z FYBXRBQqhdFmHtYSepArm/p4ureh52QBzKqtESWN8klCgM0dREHZ -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:00 2026 by rpki-client