This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/T0Q1-_qD3Ki2609r9NZI0IvfjS4.roa File: T0Q1-_qD3Ki2609r9NZI0IvfjS4.roa (raw, json) Hash identifier: +nPlRWGkeYoja770vj9LfCl9js/SDYPB/SeIBGkWDVM= Subject key identifier: 4F:44:35:FB:FA:83:DC:A8:B6:EB:4F:6B:F4:D6:48:D0:8B:DF:8D:2E Certificate issuer: /CN=7331dbed0897cce85c148371b47cc80782e5e72b Certificate serial: 019B7A59CCD74833441CFF635FA72B75AC69 Authority key identifier: 73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/T0Q1-_qD3Ki2609r9NZI0IvfjS4.roa Signing time: Thu 01 Jan 2026 16:17:44 +0000 ROA not before: Thu 01 Jan 2026 16:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16789 IP address blocks: 93.93.203.0/24 maxlen: 24 94.127.116.0/23 maxlen: 23 94.127.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:cc:d7:48:33:44:1c:ff:63:5f:a7:2b:75:ac:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7331dbed0897cce85c148371b47cc80782e5e72b Validity Not Before: Jan 1 16:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f4435fbfa83dca8b6eb4f6bf4d648d08bdf8d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d7:dd:60:a6:93:9a:6b:16:36:ad:f8:00:ed: ab:2d:8f:c0:be:52:45:d9:bc:54:1e:20:5c:6b:38: 98:c7:89:54:f2:87:47:e4:3c:53:ef:b4:b3:67:ac: d7:3f:19:20:3b:c7:20:6f:8f:a4:72:d7:70:f7:2f: 30:77:d7:f6:f9:ec:b0:ef:c2:24:f4:9c:7d:cc:f4: 1d:9a:ea:0e:fe:aa:e1:56:a9:6c:7d:42:7d:31:37: a3:b2:59:e5:9e:7b:85:30:54:17:33:84:d8:1d:5f: da:0d:ef:56:3c:e8:b5:7d:e7:58:f4:1f:5c:89:6c: dc:cf:1e:cf:7b:25:fd:2b:f8:30:67:da:f6:bb:39: 19:c2:7d:91:8d:86:3a:d6:df:c4:09:3c:03:7c:ce: 2f:af:8d:cb:0c:9f:44:12:ba:7e:9b:6f:4e:b9:1d: 67:bf:22:13:4e:01:81:5f:a3:7a:d3:16:10:37:d8: 6d:03:1e:71:bc:3f:82:45:f6:f0:e0:dd:98:04:ba: e8:5e:e4:22:2a:c6:48:ec:4f:1e:20:ea:ad:4e:dd: e0:63:6c:15:a3:63:bf:61:63:dc:cd:19:20:1b:22: 03:78:b8:07:d6:18:a1:3a:3e:ee:22:58:e7:33:63: a4:41:74:f6:8b:f3:da:25:dc:31:12:cc:63:e6:54: 64:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:44:35:FB:FA:83:DC:A8:B6:EB:4F:6B:F4:D6:48:D0:8B:DF:8D:2E X509v3 Authority Key Identifier: keyid:73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/T0Q1-_qD3Ki2609r9NZI0IvfjS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.93.203.0/24 94.127.116.0/22 Signature Algorithm: sha256WithRSAEncryption 32:cd:83:e8:ba:52:fa:05:13:ce:c1:7c:89:d7:ea:3c:ab:a7: 7b:89:c8:f6:56:8e:16:2b:92:6c:90:04:c1:a9:51:c3:03:c1: 77:16:84:5a:3c:91:6c:ee:02:5d:ca:1e:b7:c5:e9:ee:c8:4f: 43:13:ac:ea:91:58:e7:10:c3:42:3a:27:88:70:93:aa:d8:0d: 55:7f:2f:d5:ef:f7:86:f8:8f:5a:54:4e:70:33:64:02:cf:78: b3:6d:09:09:cb:73:10:c5:7a:a3:50:77:30:2d:1e:12:74:68: e8:8e:0b:0c:50:9a:1a:cf:b1:21:75:39:d1:22:b8:ed:37:90: bf:43:5b:3f:f2:4c:11:9f:5e:14:37:80:ed:62:87:89:98:e4: 31:d5:39:de:4b:5b:d5:53:85:3b:b4:d7:8a:ac:9a:95:54:65: 76:74:07:ac:fb:7a:28:4d:83:01:2f:28:ce:3b:cf:e8:4b:09: 96:d7:05:13:7c:ca:59:4c:ff:ce:17:65:6f:2f:09:39:b0:6d: fb:09:14:49:20:86:93:28:f3:04:97:00:14:fb:48:7c:f9:20: 9e:d1:85:6c:f6:88:0d:53:95:e7:4c:41:d1:44:f9:76:8c:92: fb:a3:fa:d9:0c:f5:9f:58:45:6d:b2:18:da:4c:93:7d:e1:a3: 74:3d:7d:03 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WczXSDNEHP9jX6crdaxpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMzFkYmVkMDg5N2NjZTg1YzE0ODM3MWI0N2NjODA3ODJl NWU3MmIwHhcNMjYwMTAxMTYxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjQ0MzVmYmZhODNkY2E4YjZlYjRmNmJmNGQ2NDhkMDhiZGY4ZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdfdYKaTmmsWNq34AO2rLY/AvlJF 2bxUHiBcaziYx4lU8odH5DxT77SzZ6zXPxkgO8cgb4+kctdw9y8wd9f2+eyw78Ik 9Jx9zPQdmuoO/qrhVqlsfUJ9MTejslnlnnuFMFQXM4TYHV/aDe9WPOi1fedY9B9c iWzczx7PeyX9K/gwZ9r2uzkZwn2RjYY61t/ECTwDfM4vr43LDJ9EErp+m29OuR1n vyITTgGBX6N60xYQN9htAx5xvD+CRfbw4N2YBLroXuQiKsZI7E8eIOqtTt3gY2wV o2O/YWPczRkgGyIDeLgH1hihOj7uIljnM2OkQXT2i/PaJdwxEsxj5lRksQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE9ENfv6g9yotutPa/TWSNCL340uMB8GA1UdIwQY MBaAFHMx2+0Il8zoXBSDcbR8yAeC5ecrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3pIYjdRaVh6T2hjRklOeHRIeklCNExsNXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jNWYwYzMtMjJlNS00ODAxLTkwZmIt MDQ2NTA3MmU0MWEzLzEvVDBRMS1fcUQzS2kyNjA5cjlOWkkwSXZmalM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9jNWYwYzMtMjJlNS00ODAxLTkwZmItMDQ2NTA3MmU0MWEz LzEvY3pIYjdRaVh6T2hjRklOeHRIeklCNExsNXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXV3LAwQC Xn90MA0GCSqGSIb3DQEBCwUAA4IBAQAyzYPoulL6BRPOwXyJ1+o8q6d7icj2Vo4W K5JskATBqVHDA8F3FoRaPJFs7gJdyh63xenuyE9DE6zqkVjnEMNCOieIcJOq2A1V fy/V7/eG+I9aVE5wM2QCz3izbQkJy3MQxXqjUHcwLR4SdGjojgsMUJoaz7EhdTnR IrjtN5C/Q1s/8kwRn14UN4DtYoeJmOQx1TneS1vVU4U7tNeKrJqVVGV2dAes+3oo TYMBLyjOO8/oSwmW1wUTfMpZTP/OF2VvLwk5sG37CRRJIIaTKPMElwAU+0h8+SCe 0YVs9ogNU5XnTEHRRPl2jJL7o/rZDPWfWEVtshjaTJN94aN0PX0D -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:33 2026 by rpki-client