This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Q0FYrPKVMh5kkSRmFyVQJj0e1Rw.roa File: Q0FYrPKVMh5kkSRmFyVQJj0e1Rw.roa (raw, json) Hash identifier: WPIh6hbyuuhuP5KMCKvJ7WqPLV4IVG0JUTQFgBQuqzg= Subject key identifier: 43:41:58:AC:F2:95:32:1E:64:91:24:66:17:25:50:26:3D:1E:D5:1C Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 019B78A377F45D44AC35BB04B9D3BD2ECE4C Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Q0FYrPKVMh5kkSRmFyVQJj0e1Rw.roa Signing time: Thu 01 Jan 2026 08:18:57 +0000 ROA not before: Thu 01 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44703 IP address blocks: 195.229.12.240/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:77:f4:5d:44:ac:35:bb:04:b9:d3:bd:2e:ce:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=434158acf295321e64912466172550263d1ed51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:67:a2:21:b6:63:a5:e1:b6:5c:5c:f8:fc:4a: e0:29:88:d2:42:a6:e9:23:15:cc:fc:50:08:05:58: 7d:c7:f6:9d:fb:27:44:fc:22:7c:26:d9:a5:bc:59: 39:7a:29:28:3b:8d:15:f6:10:0b:89:6e:b7:d3:3e: 16:a4:35:38:20:1c:13:d6:23:65:5a:09:36:ed:8d: 45:99:af:69:a8:f3:51:aa:bd:35:f3:a9:22:06:68: 8a:bd:2b:1e:8c:9b:18:28:3a:9a:5d:ae:6d:8f:8d: 53:0a:d9:67:9f:dd:ef:29:ea:e5:8f:70:e4:74:6a: 34:af:f9:ec:0c:64:c2:f0:90:da:ed:71:8b:0e:c9: 27:f0:fc:49:31:b4:dc:7b:25:00:02:d9:a7:52:78: f1:33:18:02:16:91:13:b4:11:e3:63:52:6c:da:c5: 5e:70:39:01:52:cf:89:b9:8f:76:97:cf:d6:59:cb: cc:c8:5d:9c:4c:cb:2c:7a:5c:3c:76:33:73:a1:69: fe:8e:a0:d0:75:5f:19:5f:89:ed:1d:d4:11:3b:a1: d8:68:dc:30:5f:65:a7:30:8b:22:00:dd:95:32:5e: 72:66:c9:ec:46:e5:57:0f:c5:8e:e2:be:bc:1d:08: 7b:93:82:05:3a:a7:fe:03:4f:2b:92:b5:2e:d6:52: c6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:41:58:AC:F2:95:32:1E:64:91:24:66:17:25:50:26:3D:1E:D5:1C X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Q0FYrPKVMh5kkSRmFyVQJj0e1Rw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.229.12.240/29 Signature Algorithm: sha256WithRSAEncryption 6b:f1:5b:84:ce:da:c7:07:62:a8:42:55:44:1e:1a:15:f8:10: 23:cd:d2:08:af:93:14:7d:ee:14:d9:2f:30:c2:4b:e5:db:5c: 7f:61:5d:67:1e:4e:5c:7d:77:6b:2d:09:65:37:69:63:c7:cd: 8f:73:05:44:40:9d:cc:97:17:01:e5:3f:b0:1d:85:8f:3b:62: 1a:f8:60:93:6f:7c:8c:1f:06:b1:b6:d1:3a:46:6a:94:ec:a1: 3f:fe:59:b1:10:4b:58:c0:f3:8d:0a:5f:7f:39:ae:33:02:6d: b2:5f:35:eb:d9:80:e2:ed:24:ae:ac:76:21:27:3c:f4:72:4b: 37:05:4b:57:a3:29:89:64:28:7c:74:c5:b7:a4:82:13:0c:f6: 27:8e:39:22:e1:b7:e8:dd:82:a9:70:49:29:de:d3:1f:9b:f0: a7:03:af:51:85:ff:e0:a4:08:06:88:cc:1f:aa:97:a8:2e:08: 50:e4:0f:01:ea:c9:f7:ec:6e:b5:69:99:0d:d6:66:56:d4:5c: 67:f9:51:4b:38:41:d0:ad:1a:34:06:ba:4f:9c:ab:75:f7:f4: e7:93:69:25:6b:f1:04:12:fc:a8:cc:a5:47:79:9a:2e:98:4a: 97:73:47:85:e0:b1:80:97:de:de:2c:cb:52:7b:c4:fd:b4:4c: eb:f9:bd:26 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4o3f0XUSsNbsEudO9Ls5MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzQxNThhY2YyOTUzMjFlNjQ5MTI0NjYxNzI1NTAyNjNkMWVkNTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02eiIbZjpeG2XFz4/ErgKYjSQqbp IxXM/FAIBVh9x/ad+ydE/CJ8JtmlvFk5eikoO40V9hALiW630z4WpDU4IBwT1iNl Wgk27Y1Fma9pqPNRqr0186kiBmiKvSsejJsYKDqaXa5tj41TCtlnn93vKerlj3Dk dGo0r/nsDGTC8JDa7XGLDskn8PxJMbTceyUAAtmnUnjxMxgCFpETtBHjY1Js2sVe cDkBUs+JuY92l8/WWcvMyF2cTMsselw8djNzoWn+jqDQdV8ZX4ntHdQRO6HYaNww X2WnMIsiAN2VMl5yZsnsRuVXD8WO4r68HQh7k4IFOqf+A08rkrUu1lLGswIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFENBWKzylTIeZJEkZhclUCY9HtUcMB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvUTBGWXJQS1ZNaDVra1NSbUZ5VlFKajBlMVJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDw+UM8DAN BgkqhkiG9w0BAQsFAAOCAQEAa/FbhM7axwdiqEJVRB4aFfgQI83SCK+TFH3uFNkv MMJL5dtcf2FdZx5OXH13ay0JZTdpY8fNj3MFRECdzJcXAeU/sB2FjztiGvhgk298 jB8GsbbROkZqlOyhP/5ZsRBLWMDzjQpffzmuMwJtsl8169mA4u0krqx2ISc89HJL NwVLV6MpiWQofHTFt6SCEwz2J445IuG36N2CqXBJKd7TH5vwpwOvUYX/4KQIBojM H6qXqC4IUOQPAerJ9+xutWmZDdZmVtRcZ/lRSzhB0K0aNAa6T5yrdff055NpJWvx BBL8qMylR3maLphKl3NHheCxgJfe3izLUnvE/bRM6/m9Jg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:52 2026 by rpki-client