This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/QcKzyCOMPTjAzdtEHWSZIQPXWTY.roa File: QcKzyCOMPTjAzdtEHWSZIQPXWTY.roa (raw, json) Hash identifier: q6REhdk2/z8f63MlyAEiLr/0oQ0zIK2tSS3WmI/QIxA= Subject key identifier: 41:C2:B3:C8:23:8C:3D:38:C0:CD:DB:44:1D:64:99:21:03:D7:59:36 Certificate issuer: /CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5 Certificate serial: 019B7A5B89E2A7937F3A8F29CF6C2B96351E Authority key identifier: BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/QcKzyCOMPTjAzdtEHWSZIQPXWTY.roa Signing time: Thu 01 Jan 2026 16:19:37 +0000 ROA not before: Thu 01 Jan 2026 16:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 394256 IP address blocks: 193.188.2.0/23 maxlen: 24 193.188.14.0/23 maxlen: 24 193.188.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:89:e2:a7:93:7f:3a:8f:29:cf:6c:2b:96:35:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5 Validity Not Before: Jan 1 16:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41c2b3c8238c3d38c0cddb441d64992103d75936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:01:b5:52:d6:2f:ba:0c:a7:37:00:d2:08:d2: da:9f:27:56:f0:dd:8e:b0:65:e0:81:fa:f5:41:2e: 0c:9a:fb:eb:b1:10:24:c0:05:c7:68:33:11:d2:f3: 5a:4d:26:10:24:01:de:af:31:94:bc:f5:02:08:e4: 29:66:c9:6c:7a:ac:33:ae:2e:9e:f5:be:b8:71:3f: 8a:24:7c:aa:39:a5:d3:95:6d:12:50:32:8a:10:44: b9:9d:9c:a7:c3:54:ee:ae:a5:38:5f:b6:89:c5:27: 5c:1a:d6:c5:b8:ae:83:26:dc:ca:e6:ca:15:a0:54: b5:e8:ae:9c:11:e4:51:cc:c7:6b:81:e3:c9:02:7b: c1:ab:30:f8:87:cc:9a:83:3f:d2:54:9b:46:5a:51: d8:36:87:97:8a:dd:65:4f:8c:9e:d8:86:ea:20:24: da:ad:7c:d0:18:fc:47:09:7c:09:d1:0b:b6:26:93: 35:97:2f:6c:f9:18:e1:c1:c0:92:ff:5f:6e:fb:54: 01:c2:5d:c4:21:61:d9:7a:9c:fe:95:0c:ff:03:9e: 1b:2e:f3:7b:3a:a8:94:29:42:f8:a9:f4:a7:46:03: 50:a9:7d:52:f9:81:01:28:35:46:db:f0:ec:68:38: b3:59:f4:65:29:8d:ff:61:09:01:65:dc:80:85:97: 30:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C2:B3:C8:23:8C:3D:38:C0:CD:DB:44:1D:64:99:21:03:D7:59:36 X509v3 Authority Key Identifier: keyid:BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/QcKzyCOMPTjAzdtEHWSZIQPXWTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.188.2.0/23 193.188.14.0/23 Signature Algorithm: sha256WithRSAEncryption 97:9b:c2:fb:0d:63:3b:e0:c9:89:d6:58:20:ff:27:bb:c2:5c: a3:a8:99:db:71:cb:27:d5:d0:58:d8:4e:5c:c5:d9:fd:ec:fc: e5:8d:4a:c7:6b:e2:11:50:45:12:2f:e6:72:26:ed:65:fe:e9: f6:82:41:4f:76:7d:04:a9:90:ea:60:44:21:9c:05:fa:1e:5c: ef:02:f0:1c:69:7f:56:27:a1:e2:9c:76:05:f5:66:d1:de:8e: 5a:49:5d:66:e1:05:81:47:67:2a:21:9a:f8:50:b6:c1:49:1c: 9d:da:f9:67:3b:37:ae:96:e3:46:3b:d0:b3:83:4e:db:0c:4a: 26:e4:18:40:7e:7b:3a:e9:6b:b4:18:86:c1:b0:70:20:a4:5d: 7f:4b:99:1d:25:2c:3e:61:79:e0:d4:7b:34:cb:e5:3b:3e:45: 61:fb:22:79:ed:13:0e:46:4b:de:94:db:3d:cc:f1:8a:22:77: 79:3a:be:3b:69:af:5d:4e:f9:2b:2f:61:9e:19:d2:82:bd:66: 2d:57:76:e1:3d:01:83:66:5e:57:cc:b7:e9:d4:c3:9d:be:05: 22:43:6e:e4:47:47:4c:89:f5:4c:11:7a:24:f4:81:dc:43:01: f0:6a:1d:18:5a:50:8a:fe:20:f4:ec:14:e0:d6:1c:53:6c:82: 70:12:92:76 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W4nip5N/Oo8pz2wrljUeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNjViNGJhNGQ3ODY5ZDVjYjhmOTU3NGYwZjRmZWVlNzBl YmM2YzUwHhcNMjYwMTAxMTYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWMyYjNjODIzOGMzZDM4YzBjZGRiNDQxZDY0OTkyMTAzZDc1OTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgG1UtYvugynNwDSCNLanydW8N2O sGXggfr1QS4MmvvrsRAkwAXHaDMR0vNaTSYQJAHerzGUvPUCCOQpZslseqwzri6e 9b64cT+KJHyqOaXTlW0SUDKKEES5nZynw1TurqU4X7aJxSdcGtbFuK6DJtzK5soV oFS16K6cEeRRzMdrgePJAnvBqzD4h8yagz/SVJtGWlHYNoeXit1lT4ye2IbqICTa rXzQGPxHCXwJ0Qu2JpM1ly9s+RjhwcCS/19u+1QBwl3EIWHZepz+lQz/A54bLvN7 OqiUKUL4qfSnRgNQqX1S+YEBKDVG2/DsaDizWfRlKY3/YQkBZdyAhZcw4wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEHCs8gjjD04wM3bRB1kmSED11k2MB8GA1UdIwQY MBaAFLxltLpNeGnVy4+VdPD0/u5w68bFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkdXMHVrMTRhZFhMajVWMDhQVC03bkRyeHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NDIxMDEtNzgwYi00N2FjLTg1N2Qt ZjllN2NiMDNjNTI3LzEvUWNLenlDT01QVGpBemR0RUhXU1pJUVBYV1RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80NDIxMDEtNzgwYi00N2FjLTg1N2QtZjllN2NiMDNjNTI3 LzEvdkdXMHVrMTRhZFhMajVWMDhQVC03bkRyeHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwbwCAwQB wbwOMA0GCSqGSIb3DQEBCwUAA4IBAQCXm8L7DWM74MmJ1lgg/ye7wlyjqJnbccsn 1dBY2E5cxdn97PzljUrHa+IRUEUSL+ZyJu1l/un2gkFPdn0EqZDqYEQhnAX6Hlzv AvAcaX9WJ6HinHYF9WbR3o5aSV1m4QWBR2cqIZr4ULbBSRyd2vlnOzeuluNGO9Cz g07bDEom5BhAfns66Wu0GIbBsHAgpF1/S5kdJSw+YXng1Hs0y+U7PkVh+yJ57RMO RkvelNs9zPGKInd5Or47aa9dTvkrL2GeGdKCvWYtV3bhPQGDZl5XzLfp1MOdvgUi Q27kR0dMifVMEXok9IHcQwHwah0YWlCK/iD07BTg1hxTbIJwEpJ2 -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:20 2026 by rpki-client