This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/nq8_lKkxUGSnEnuUf5aIJh8XOp8.roa File: nq8_lKkxUGSnEnuUf5aIJh8XOp8.roa (raw, json) Hash identifier: 4zAGZ6DVsgtkjmO+59u3bkrnGCMoQnzivE/ro2iUVRA= Subject key identifier: 9E:AF:3F:94:A9:31:50:64:A7:12:7B:94:7F:96:88:26:1F:17:3A:9F Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80 Certificate serial: 019B7DC9F49DE1B4BC8EC34DB9DB431DBC04 Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/nq8_lKkxUGSnEnuUf5aIJh8XOp8.roa Signing time: Fri 02 Jan 2026 08:19:05 +0000 ROA not before: Fri 02 Jan 2026 08:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212707 IP address blocks: 193.163.47.0/24 maxlen: 24 2a10:5bc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f4:9d:e1:b4:bc:8e:c3:4d:b9:db:43:1d:bc:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80 Validity Not Before: Jan 2 08:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9eaf3f94a9315064a7127b947f9688261f173a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:30:5f:84:e9:5b:af:84:09:99:be:5c:57:22: a1:12:a0:81:4f:29:1b:cb:04:e5:a9:b2:00:6b:16: 8f:7e:80:02:91:0a:23:ac:0b:51:ad:5c:61:4b:3a: e4:c0:a2:9f:36:dd:68:80:04:40:08:66:95:12:5a: ee:42:ab:c2:e6:e8:45:1e:ea:37:89:4f:79:1d:a2: c8:25:a4:39:67:58:2c:63:b4:b0:90:55:01:0f:9f: 66:bf:7e:05:d4:d8:c5:01:1d:0f:e1:99:3d:59:81: 99:b7:64:48:ea:97:4b:f5:61:5d:55:88:95:d0:60: 74:93:5f:11:93:0a:c5:72:24:a5:dc:4d:72:b8:6d: da:d7:63:99:31:26:fe:06:cf:7c:29:14:17:87:fe: 5c:a4:46:ab:df:40:89:a3:db:7d:fa:06:b5:ac:b1: b0:5e:11:13:dc:ec:59:38:98:a1:c6:72:e0:fc:c7: 30:77:97:d5:16:24:bc:d5:96:26:80:fd:8e:c1:17: df:38:54:46:ce:e3:ec:ac:08:5c:1c:52:d0:9f:dd: 5f:3d:47:c4:25:ac:e2:0d:b5:d2:c0:56:30:94:5f: 4d:cb:a8:d1:9f:c7:7c:bd:06:02:99:5c:25:48:35: a1:58:74:49:12:48:13:c9:16:6c:93:8f:12:77:d8: 95:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AF:3F:94:A9:31:50:64:A7:12:7B:94:7F:96:88:26:1F:17:3A:9F X509v3 Authority Key Identifier: keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/nq8_lKkxUGSnEnuUf5aIJh8XOp8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.47.0/24 IPv6: 2a10:5bc0::/29 Signature Algorithm: sha256WithRSAEncryption 35:56:e3:58:90:52:63:46:45:89:ff:20:52:72:e0:c9:bb:92: ac:e7:2a:30:38:07:91:9e:b8:4e:ee:d3:67:07:54:4a:a5:49: c3:99:77:35:8e:e6:8e:c8:44:41:59:50:8d:29:f1:ab:58:29: 0e:4f:46:5d:d0:77:95:1c:fe:55:bf:0a:af:15:e9:c6:40:a2: d8:27:b4:bc:81:c8:bc:85:70:a0:c0:95:38:06:97:00:18:82: 00:de:7e:4c:bd:4c:f8:82:bc:15:e7:ef:d7:78:d5:46:c0:05: 6e:ca:ed:ea:a1:14:45:eb:7c:d4:05:f4:63:be:65:b6:c6:54: 58:df:f3:11:da:f5:f0:ff:73:b4:bf:9c:12:4c:f7:49:54:2b: 51:b3:aa:4b:e5:7d:17:6c:d7:cd:04:61:b6:05:4d:f5:2d:43: bf:fd:78:6d:59:d2:9e:44:f2:ec:75:6d:25:e8:db:d3:9d:e4: 91:2c:04:02:17:a6:3d:98:13:53:db:93:49:d5:c9:08:30:1c: c1:42:cc:9a:e8:d3:e5:9f:7a:5f:33:dd:96:b6:6b:38:b0:a0: d9:b4:5d:cd:36:bf:ea:f5:30:5f:ec:c8:2c:8c:3c:a2:d8:a8: d6:8b:a7:f6:82:13:2e:37:f6:f3:87:34:d3:b1:69:a9:77:fc: 55:6e:4c:64 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yfSd4bS8jsNNudtDHbwEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZGEwMTk2MDk2YzExYzIzMWU0OWJiMzA4OTY3MGI5NGRi ZjVlODAwHhcNMjYwMTAyMDgxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWFmM2Y5NGE5MzE1MDY0YTcxMjdiOTQ3Zjk2ODgyNjFmMTczYTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjBfhOlbr4QJmb5cVyKhEqCBTykb ywTlqbIAaxaPfoACkQojrAtRrVxhSzrkwKKfNt1ogARACGaVElruQqvC5uhFHuo3 iU95HaLIJaQ5Z1gsY7SwkFUBD59mv34F1NjFAR0P4Zk9WYGZt2RI6pdL9WFdVYiV 0GB0k18RkwrFciSl3E1yuG3a12OZMSb+Bs98KRQXh/5cpEar30CJo9t9+ga1rLGw XhET3OxZOJihxnLg/Mcwd5fVFiS81ZYmgP2OwRffOFRGzuPsrAhcHFLQn91fPUfE JaziDbXSwFYwlF9Ny6jRn8d8vQYCmVwlSDWhWHRJEkgTyRZsk48Sd9iVkQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJ6vP5SpMVBkpxJ7lH+WiCYfFzqfMB8GA1UdIwQY MBaAFKPaAZYJbBHCMeSbswiWcLlNv16AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83ZDk4NTQtOTY5ZS00ZTM0LWExZGYt YTMwMmY2YTc0YjA4LzEvbnE4X2xLa3hVR1NuRW51VWY1YUlKaDhYT3A4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83ZDk4NTQtOTY5ZS00ZTM0LWExZGYtYTMwMmY2YTc0YjA4 LzEvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwaMvMA0E AgACMAcDBQMqEFvAMA0GCSqGSIb3DQEBCwUAA4IBAQA1VuNYkFJjRkWJ/yBScuDJ u5Ks5yowOAeRnrhO7tNnB1RKpUnDmXc1juaOyERBWVCNKfGrWCkOT0Zd0HeVHP5V vwqvFenGQKLYJ7S8gci8hXCgwJU4BpcAGIIA3n5MvUz4grwV5+/XeNVGwAVuyu3q oRRF63zUBfRjvmW2xlRY3/MR2vXw/3O0v5wSTPdJVCtRs6pL5X0XbNfNBGG2BU31 LUO//XhtWdKeRPLsdW0l6NvTneSRLAQCF6Y9mBNT25NJ1ckIMBzBQsya6NPln3pf M92Wtms4sKDZtF3NNr/q9TBf7MgsjDyi2KjWi6f2ghMuN/bzhzTTsWmpd/xVbkxk -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:08 2026 by rpki-client