This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/q0ALQuHroSW_3FQGSOGHYgUYG5c.roa File: q0ALQuHroSW_3FQGSOGHYgUYG5c.roa (raw, json) Hash identifier: qqKxC8V4TAM2iSQG4qNlur8kt+QsGJ32WWgj42tFCr4= Subject key identifier: AB:40:0B:42:E1:EB:A1:25:BF:DC:54:06:48:E1:87:62:05:18:1B:97 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C73E1D215ECF42B3AD8DA0B940EF65 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/q0ALQuHroSW_3FQGSOGHYgUYG5c.roa Signing time: Thu 01 Jan 2026 04:18:24 +0000 ROA not before: Thu 01 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57503 IP address blocks: 195.209.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3e:1d:21:5e:cf:42:b3:ad:8d:a0:b9:40:ef:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab400b42e1eba125bfdc540648e1876205181b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:63:b1:5d:84:d7:ac:96:0c:cc:ae:e9:1c:f9: f4:ed:01:26:01:9a:08:cd:4a:62:6c:d5:42:13:4a: cc:a1:3c:f3:ab:a4:bd:4b:5a:66:f0:e5:4e:58:9e: f4:d3:ef:6a:40:53:c9:44:a9:95:1c:31:00:53:0f: cb:89:ff:b2:4b:da:09:d0:cd:0d:bc:a6:15:7b:3b: 4d:ba:f2:c9:9b:81:af:4e:b1:c9:77:22:ea:6d:d1: ce:1d:f8:32:e9:d3:7a:d6:8c:2e:74:11:10:fd:93: ce:92:12:df:f4:2d:f8:33:ff:e9:5c:6f:db:3d:7e: 53:09:ef:9b:79:3c:7a:b8:9c:7b:fb:b8:c3:11:51: 33:53:45:26:8d:6d:c0:8e:44:f6:48:86:4d:4c:5c: 4f:df:07:08:20:ff:13:53:49:b4:38:73:87:85:94: 92:87:ac:02:5b:5f:0d:ed:61:f7:cd:db:c6:b1:fd: 69:77:9b:35:26:e6:6f:85:64:7e:2b:52:25:77:ae: 4e:e1:69:c8:1d:7d:22:82:6b:47:a5:e6:35:96:e6: 89:c8:bb:81:43:b6:b3:f8:dd:36:bb:54:a9:00:bf: 7d:40:7d:b6:bd:9d:82:50:53:9e:92:20:a9:73:57: bc:90:84:26:1d:3e:6a:45:84:98:b7:7c:e4:81:0b: ab:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:40:0B:42:E1:EB:A1:25:BF:DC:54:06:48:E1:87:62:05:18:1B:97 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/q0ALQuHroSW_3FQGSOGHYgUYG5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.209.116.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:b1:e6:fb:77:93:c9:31:c5:ba:dc:f2:34:91:7f:41:08:16: ca:41:23:97:b0:8f:df:dc:10:5a:8e:a3:11:d9:80:ff:a8:2c: ff:9e:bf:df:e6:4e:1e:76:30:e8:17:5d:a6:05:62:40:60:23: f7:c1:6d:9c:0c:51:76:df:f1:96:a3:6a:5e:c1:f7:12:03:26: e1:51:b5:5a:a0:45:54:c2:cc:82:6b:33:44:72:24:45:e5:89: 73:e2:f5:a7:2a:7a:7e:29:66:8a:7c:8a:c4:f6:fd:9a:32:74: 7d:31:5b:80:d3:88:36:40:09:c6:c8:c1:ec:54:d7:4c:9a:59: 88:ed:ae:4d:d5:ca:8d:9a:82:29:67:ef:5c:c5:e7:2e:d6:02: 10:7f:a5:fb:b2:1e:19:97:d4:e4:63:46:d3:12:73:35:09:3d: 46:a5:a9:fe:c1:7e:bc:6a:b0:e8:d7:1c:55:ed:22:56:f6:f3: de:83:92:08:b3:fa:0d:e8:06:20:cb:37:f8:d4:48:ee:d0:d4: 4b:f4:a9:eb:80:16:88:7c:95:9f:5e:85:a3:4a:df:99:f9:34: 9f:54:2d:bf:80:62:e5:03:5f:bb:99:aa:cb:e4:c1:04:63:f9: 0c:fa:2c:05:c3:37:56:8a:9b:c2:69:8b:e5:8f:6b:b9:f3:0e: 03:a3:6a:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xz4dIV7PQrOtjaC5QO9lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjQwMGI0MmUxZWJhMTI1YmZkYzU0MDY0OGUxODc2MjA1MTgxYjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2OxXYTXrJYMzK7pHPn07QEmAZoI zUpibNVCE0rMoTzzq6S9S1pm8OVOWJ700+9qQFPJRKmVHDEAUw/Lif+yS9oJ0M0N vKYVeztNuvLJm4GvTrHJdyLqbdHOHfgy6dN61owudBEQ/ZPOkhLf9C34M//pXG/b PX5TCe+beTx6uJx7+7jDEVEzU0UmjW3AjkT2SIZNTFxP3wcIIP8TU0m0OHOHhZSS h6wCW18N7WH3zdvGsf1pd5s1JuZvhWR+K1Ild65O4WnIHX0igmtHpeY1luaJyLuB Q7az+N02u1SpAL99QH22vZ2CUFOekiCpc1e8kIQmHT5qRYSYt3zkgQurEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKtAC0Lh66Elv9xUBkjhh2IFGBuXMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvcTBBTFF1SHJvU1dfM0ZRR1NPR0hZZ1VZRzVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw9F0MA0G CSqGSIb3DQEBCwUAA4IBAQBNseb7d5PJMcW63PI0kX9BCBbKQSOXsI/f3BBajqMR 2YD/qCz/nr/f5k4edjDoF12mBWJAYCP3wW2cDFF23/GWo2pewfcSAybhUbVaoEVU wsyCazNEciRF5Ylz4vWnKnp+KWaKfIrE9v2aMnR9MVuA04g2QAnGyMHsVNdMmlmI 7a5N1cqNmoIpZ+9cxecu1gIQf6X7sh4Zl9TkY0bTEnM1CT1Gpan+wX68arDo1xxV 7SJW9vPeg5IIs/oN6AYgyzf41Eju0NRL9KnrgBaIfJWfXoWjSt+Z+TSfVC2/gGLl A1+7marL5MEEY/kM+iwFwzdWipvCaYvlj2u58w4Do2qn -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:12 2026 by rpki-client