This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/qs5BbUrcjNGkn1IyHaNO2qwvsX4.roa File: qs5BbUrcjNGkn1IyHaNO2qwvsX4.roa (raw, json) Hash identifier: +kBh2Q5AIS4bNQDqb8gqEUXElQy/YYijI/TvUWFnReE= Subject key identifier: AA:CE:41:6D:4A:DC:8C:D1:A4:9F:52:32:1D:A3:4E:DA:AC:2F:B1:7E Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019BEC0DE07E2CBB087A33889D529DB39A0A Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/qs5BbUrcjNGkn1IyHaNO2qwvsX4.roa Signing time: Fri 23 Jan 2026 18:11:30 +0000 ROA not before: Fri 23 Jan 2026 18:11:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212701 IP address blocks: 144.31.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ec:0d:e0:7e:2c:bb:08:7a:33:88:9d:52:9d:b3:9a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 23 18:11:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aace416d4adc8cd1a49f52321da34edaac2fb17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9b:91:7b:7b:fe:06:b6:cf:a5:fc:87:82:d5: df:d2:44:90:07:7f:d4:f3:ea:8e:03:38:52:42:27: 49:78:ce:08:01:1f:a9:9a:60:b0:1b:48:ab:aa:e2: 4b:6a:f3:9d:3f:10:8c:d1:0b:3d:f6:b6:27:a8:b5: a7:74:a7:59:67:9f:49:e0:d1:ed:57:bd:7f:fe:8d: 6b:d5:14:df:10:39:c7:bb:b7:8a:36:aa:b7:99:e5: ed:a1:fb:bf:00:ce:04:77:ec:80:26:e4:c2:b7:80: 4e:48:2e:86:4a:ae:0d:66:57:a0:ab:5e:28:ad:77: 42:e3:a3:5f:b4:93:50:b9:9b:77:8c:36:96:19:a1: 65:f6:94:31:69:71:9b:40:56:10:a0:e7:71:5d:1d: d9:98:fc:b2:15:a4:62:8d:4e:c4:ad:b0:1b:79:25: b6:c2:70:ea:28:2b:3e:e6:51:43:fc:ff:5c:9c:8b: 1e:cc:7e:36:7f:85:02:7d:7b:a8:25:5f:69:13:a0: 94:b4:72:d7:97:73:3c:84:f0:33:c9:9c:8a:ca:3c: fd:5a:8f:3e:26:f5:47:a9:8c:0a:e3:d3:f9:2e:86: f4:3b:74:1c:9d:c1:a5:56:6b:cf:20:9f:32:50:7e: 35:ac:6e:40:cc:01:66:ac:38:ec:2a:3b:fe:7d:54: fc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CE:41:6D:4A:DC:8C:D1:A4:9F:52:32:1D:A3:4E:DA:AC:2F:B1:7E X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/qs5BbUrcjNGkn1IyHaNO2qwvsX4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.180.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:55:46:4d:f8:42:ba:ae:e4:f4:0f:75:e0:67:e4:ca:33:ee: bf:80:84:d9:b2:a5:26:52:00:dc:11:20:a7:09:cb:8a:37:39: 47:f5:da:91:fd:56:ee:f8:40:dc:2f:6c:9d:41:db:84:ea:48: 0c:47:9e:f1:25:01:35:e3:48:bc:5a:06:e0:53:fd:8e:f8:36: 18:21:4e:02:3c:c4:4e:c9:03:f1:7b:60:e4:ce:f1:e2:fd:4a: 41:ee:8e:4d:b3:27:c9:63:19:20:0b:61:4d:48:dd:ce:7a:7d: a9:41:c8:b7:a1:90:b7:28:52:3f:ff:80:46:69:ea:9c:36:76: 90:16:75:08:4e:c3:01:4e:8e:81:e7:2d:6d:95:dd:9b:77:82: dd:17:91:16:8b:bd:99:0e:27:54:c7:35:e8:03:b8:30:ec:73: 01:03:58:ab:09:a8:10:29:28:00:cb:7e:36:fa:18:cd:66:29: 63:60:72:5c:01:50:c7:fe:d7:7a:e4:06:81:df:e2:bf:f3:9a: b7:cd:3d:ad:ce:6d:0c:3c:3b:6d:18:95:29:8e:b3:a0:04:f6: 76:e8:18:15:5e:b4:34:8f:a1:a8:7c:91:aa:2e:31:59:fe:fb: 5e:fa:81:1e:28:25:d0:21:99:fd:aa:64:12:78:f8:29:49:20: 57:af:8c:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvsDeB+LLsIejOInVKds5oKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTIzMTgxMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWNlNDE2ZDRhZGM4Y2QxYTQ5ZjUyMzIxZGEzNGVkYWFjMmZiMTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZuRe3v+BrbPpfyHgtXf0kSQB3/U 8+qOAzhSQidJeM4IAR+pmmCwG0irquJLavOdPxCM0Qs99rYnqLWndKdZZ59J4NHt V71//o1r1RTfEDnHu7eKNqq3meXtofu/AM4Ed+yAJuTCt4BOSC6GSq4NZlegq14o rXdC46NftJNQuZt3jDaWGaFl9pQxaXGbQFYQoOdxXR3ZmPyyFaRijU7ErbAbeSW2 wnDqKCs+5lFD/P9cnIsezH42f4UCfXuoJV9pE6CUtHLXl3M8hPAzyZyKyjz9Wo8+ JvVHqYwK49P5Lob0O3QcncGlVmvPIJ8yUH41rG5AzAFmrDjsKjv+fVT8IQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKrOQW1K3IzRpJ9SMh2jTtqsL7F+MB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvcXM1QmJVcmNqTkdrbjFJeUhhTk8ycXd2c1g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkB+0MA0G CSqGSIb3DQEBCwUAA4IBAQCMVUZN+EK6ruT0D3XgZ+TKM+6/gITZsqUmUgDcESCn CcuKNzlH9dqR/Vbu+EDcL2ydQduE6kgMR57xJQE140i8WgbgU/2O+DYYIU4CPMRO yQPxe2DkzvHi/UpB7o5NsyfJYxkgC2FNSN3Oen2pQci3oZC3KFI//4BGaeqcNnaQ FnUITsMBTo6B5y1tld2bd4LdF5EWi72ZDidUxzXoA7gw7HMBA1irCagQKSgAy342 +hjNZiljYHJcAVDH/td65AaB3+K/85q3zT2tzm0MPDttGJUpjrOgBPZ26BgVXrQ0 j6GofJGqLjFZ/vte+oEeKCXQIZn9qmQSePgpSSBXr4zg -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:21 2026 by rpki-client