This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/CQE3Ua-6p5IOmLVZBdiochWyjps.roa File: CQE3Ua-6p5IOmLVZBdiochWyjps.roa (raw, json) Hash identifier: gNg92KVIAocfXOKmJRK5kb9MA5JxKznIoERJBi3d7ws= Subject key identifier: 09:01:37:51:AF:BA:A7:92:0E:98:B5:59:05:D8:A8:72:15:B2:8E:9B Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607 Certificate serial: 019B7C7FBE61178D89A4FA73D92E2068A0F8 Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/CQE3Ua-6p5IOmLVZBdiochWyjps.roa Signing time: Fri 02 Jan 2026 02:18:25 +0000 ROA not before: Fri 02 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197874 IP address blocks: 194.246.156.0/24 maxlen: 24 194.246.159.0/24 maxlen: 24 2001:67c:22ec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:be:61:17:8d:89:a4:fa:73:d9:2e:20:68:a0:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607 Validity Not Before: Jan 2 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09013751afbaa7920e98b55905d8a87215b28e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2f:b7:28:8d:7f:42:f7:0c:e5:de:19:fa:8e: 35:a5:57:9e:96:09:66:10:00:70:77:e0:d4:33:a0: 91:82:57:3c:3b:2e:a5:8c:e5:d8:4c:d6:e9:8f:b1: ad:10:a4:42:b3:fe:cc:b3:1e:62:e7:46:81:31:ab: fb:6a:ab:8c:48:de:a4:42:2d:36:69:1a:5a:2a:32: 9d:50:ee:23:dc:b1:c2:43:44:8b:7d:05:92:fa:19: 7f:b3:a1:52:b2:43:13:52:a5:fe:17:89:01:1c:9c: 74:04:83:f8:7a:86:ae:8c:5a:be:d5:3b:ef:0b:eb: f5:4a:7d:04:eb:29:1c:f3:71:8f:d0:07:33:ae:79: c7:c5:c5:f3:70:b3:1f:99:0f:90:14:d0:2a:39:bb: eb:7a:be:79:4d:73:e5:c7:2b:02:be:05:2f:82:8a: b7:17:a9:7a:23:20:e8:5c:8e:2c:38:e2:99:8c:3a: ab:5b:c8:1d:40:25:55:29:5d:89:88:de:dc:70:ef: 15:8f:50:30:61:28:7f:48:59:0c:84:6d:2c:cb:dd: 5f:2c:51:77:41:72:0d:2c:2c:fe:5c:86:fb:e3:4c: c5:2a:fc:07:38:de:7e:e5:ae:f6:d9:03:e3:2b:c6: b1:e6:74:1a:bd:f5:29:4d:04:af:7c:e0:69:f0:36: 2a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:01:37:51:AF:BA:A7:92:0E:98:B5:59:05:D8:A8:72:15:B2:8E:9B X509v3 Authority Key Identifier: keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/CQE3Ua-6p5IOmLVZBdiochWyjps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.246.156.0/24 194.246.159.0/24 IPv6: 2001:67c:22ec::/48 Signature Algorithm: sha256WithRSAEncryption 4d:7f:45:93:85:5a:0c:f2:3e:aa:27:f3:98:bb:46:79:3a:9a: 92:12:f0:4e:10:a0:51:91:88:0f:57:db:c4:99:49:d6:0a:49: 8e:af:2b:d3:27:61:bd:72:6c:00:4b:52:49:52:2d:42:a7:e7: 0c:43:13:a6:6b:44:d8:30:9f:47:e9:9d:39:62:10:50:f6:b8: b7:73:78:9e:1e:30:94:e4:d3:54:8f:ed:21:77:43:45:97:c2: 20:0d:08:62:b9:ba:a0:2b:07:21:0a:41:32:de:a9:00:a8:08: 92:ff:85:57:63:ee:ac:6e:4c:84:f6:26:fe:50:80:75:e9:ab: ec:d1:74:ca:c6:2d:a8:45:86:82:be:29:ca:c3:dd:20:36:ad: 7c:12:38:29:3e:ac:aa:02:c7:ac:35:11:ff:d3:cd:4c:da:54: 67:9b:65:b6:c5:0a:7a:89:41:b4:e1:46:8c:1e:32:74:73:34: 2f:9d:db:fb:ed:6c:39:1b:b2:cd:05:77:dd:34:b8:fb:47:46: 6a:df:72:6a:93:43:d5:dd:85:5e:44:da:65:ee:90:e6:c4:13: 38:5b:d3:31:b4:e7:10:31:c7:ec:d4:e9:fa:f7:64:32:45:09: 23:df:6a:96:b3:4a:32:78:35:94:f7:cb:52:c6:99:07:2f:9e: 2d:ee:25:dd -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt8f75hF42JpPpz2S4gaKD4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMTIwYzZhNmM4Y2YxNzI2ZTdkNDhlMzE0YTE2Y2NkMDVl Zjg2MDcwHhcNMjYwMTAyMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTAxMzc1MWFmYmFhNzkyMGU5OGI1NTkwNWQ4YTg3MjE1YjI4ZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty+3KI1/QvcM5d4Z+o41pVeelglm EABwd+DUM6CRglc8Oy6ljOXYTNbpj7GtEKRCs/7Msx5i50aBMav7aquMSN6kQi02 aRpaKjKdUO4j3LHCQ0SLfQWS+hl/s6FSskMTUqX+F4kBHJx0BIP4eoaujFq+1Tvv C+v1Sn0E6ykc83GP0AczrnnHxcXzcLMfmQ+QFNAqObvrer55TXPlxysCvgUvgoq3 F6l6IyDoXI4sOOKZjDqrW8gdQCVVKV2JiN7ccO8Vj1AwYSh/SFkMhG0sy91fLFF3 QXINLCz+XIb740zFKvwHON5+5a722QPjK8ax5nQavfUpTQSvfOBp8DYqbwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFAkBN1GvuqeSDpi1WQXYqHIVso6bMB8GA1UdIwQY MBaAFCMSDGpsjPFybn1I4xShbM0F74YHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXhJTWFteU04WEp1ZlVqakZLRnN6UVh2aGdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xZmFkY2UtN2ZhNy00YzRjLWJkZWQt ZTRiNzAyZjE2MTE2LzEvQ1FFM1VhLTZwNUlPbUxWWkJkaW9jaFd5anBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xZmFkY2UtN2ZhNy00YzRjLWJkZWQtZTRiNzAyZjE2MTE2 LzEvSXhJTWFteU04WEp1ZlVqakZLRnN6UVh2aGdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwvacAwQA wvafMA8EAgACMAkDBwAgAQZ8IuwwDQYJKoZIhvcNAQELBQADggEBAE1/RZOFWgzy Pqon85i7Rnk6mpIS8E4QoFGRiA9X28SZSdYKSY6vK9MnYb1ybABLUklSLUKn5wxD E6ZrRNgwn0fpnTliEFD2uLdzeJ4eMJTk01SP7SF3Q0WXwiANCGK5uqArByEKQTLe qQCoCJL/hVdj7qxuTIT2Jv5QgHXpq+zRdMrGLahFhoK+KcrD3SA2rXwSOCk+rKoC x6w1Ef/TzUzaVGebZbbFCnqJQbThRoweMnRzNC+d2/vtbDkbss0Fd900uPtHRmrf cmqTQ9XdhV5E2mXukObEEzhb0zG05xAxx+zU6fr3ZDJFCSPfapazSjJ4NZT3y1LG mQcvni3uJd0= -----END CERTIFICATE-----Generated at Mon Jan 26 16:23:29 2026 by rpki-client