This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Q_vP-YEcZPE9fwp6RFiqYxaYeCY.roa File: Q_vP-YEcZPE9fwp6RFiqYxaYeCY.roa (raw, json) Hash identifier: oKbHLHO5QMSZlvDtTiYs3Lx2o3XoyOCWWHA7tzc5Mog= Subject key identifier: 43:FB:CF:F9:81:1C:64:F1:3D:7F:0A:7A:44:58:AA:63:16:98:78:26 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C138CA828789FBAF551041D9FFE1727 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Q_vP-YEcZPE9fwp6RFiqYxaYeCY.roa Signing time: Fri 02 Jan 2026 00:20:14 +0000 ROA not before: Fri 02 Jan 2026 00:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208769 IP address blocks: 92.60.32.0/23 maxlen: 24 193.17.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:8c:a8:28:78:9f:ba:f5:51:04:1d:9f:fe:17:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43fbcff9811c64f13d7f0a7a4458aa6316987826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:bc:21:21:3e:42:8b:f3:86:b2:31:9d:3f:ed: d0:3a:03:69:f3:21:e0:de:b6:49:2f:7c:dd:a2:16: 88:f1:6d:0b:28:94:af:3e:68:41:ed:c0:9c:80:7f: a9:1f:bd:0d:04:d6:ea:49:34:a7:c0:26:57:b3:04: c5:8e:6a:98:32:02:23:6f:7c:0c:dd:59:8a:ce:f4: d4:a9:59:b0:2c:85:d4:39:74:a1:14:89:0b:2b:17: 3c:9d:00:85:c7:fd:b1:92:9f:5e:73:cc:fa:66:be: a3:5b:66:b4:71:0c:5f:24:56:bd:87:ce:af:36:58: 48:f9:79:b1:e3:19:fd:e8:5c:91:dc:75:4c:a3:d8: 8a:78:76:de:2e:ca:ed:88:05:59:9e:f8:39:9b:36: 53:b8:a7:db:c9:2a:40:d2:3d:7c:fc:da:98:59:1e: ea:4b:0a:c9:2b:91:69:c8:16:0a:d4:08:e9:58:1d: 1b:a5:23:83:c3:f0:3b:bb:68:73:91:b6:80:79:7a: 75:8e:8c:9d:6c:e7:7c:7c:c4:d6:b2:75:ed:3b:a9: 52:58:06:1c:68:4a:9f:fd:79:13:af:bf:53:17:f1: 4e:85:a8:b5:1a:bc:46:01:86:6f:01:51:0a:f3:21: c2:81:7d:f6:b8:5e:e3:47:4b:74:ce:48:52:50:ff: 10:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FB:CF:F9:81:1C:64:F1:3D:7F:0A:7A:44:58:AA:63:16:98:78:26 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Q_vP-YEcZPE9fwp6RFiqYxaYeCY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.60.32.0/23 193.17.180.0/24 Signature Algorithm: sha256WithRSAEncryption ae:3f:aa:83:5b:0c:49:77:d4:ed:96:80:32:1c:74:2c:96:62: 0a:0d:91:91:9f:8c:3b:86:dc:78:42:c2:c4:64:e6:9b:90:b6: 98:80:99:9b:74:7e:91:aa:74:a5:69:33:91:3f:78:e5:f7:44: a9:4e:ec:07:aa:69:d5:f7:fd:d6:a6:3a:51:be:4e:13:e2:24: 73:1e:8f:6a:7c:cd:a8:b3:60:c1:24:90:f7:f0:27:44:b6:9f: 56:64:b7:34:7c:76:e0:af:d7:d4:7c:25:d5:5f:43:eb:ee:38: 01:15:4e:a3:36:b2:88:d8:e1:38:7b:31:d5:e8:af:8f:71:0d: ae:d3:58:ac:4c:49:cf:9f:8a:ab:dd:f3:d1:4c:9a:fc:da:54: da:0f:b4:c1:61:25:db:84:e2:a4:c5:4e:78:dc:00:b0:0e:9f: ba:29:27:0a:51:da:d4:c7:65:b8:3c:a5:ad:10:38:0b:d4:6f: b5:a5:aa:c9:65:d0:18:c8:12:35:4a:c4:ac:5c:8a:e3:07:21: 64:d3:81:d0:95:71:fa:eb:54:84:45:b7:7b:7b:fb:88:9e:5f: 6c:a8:05:e4:f6:31:69:b6:ec:4d:3c:8d:1a:99:73:7a:d3:5a: 2a:a6:61:34:20:b2:ef:0a:2b:1a:1e:5d:c9:b0:93:3c:d0:41: 4d:ca:5a:f2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E4yoKHifuvVRBB2f/hcnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2ZiY2ZmOTgxMWM2NGYxM2Q3ZjBhN2E0NDU4YWE2MzE2OTg3ODI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LwhIT5Ci/OGsjGdP+3QOgNp8yHg 3rZJL3zdohaI8W0LKJSvPmhB7cCcgH+pH70NBNbqSTSnwCZXswTFjmqYMgIjb3wM 3VmKzvTUqVmwLIXUOXShFIkLKxc8nQCFx/2xkp9ec8z6Zr6jW2a0cQxfJFa9h86v NlhI+Xmx4xn96FyR3HVMo9iKeHbeLsrtiAVZnvg5mzZTuKfbySpA0j18/NqYWR7q SwrJK5FpyBYK1AjpWB0bpSODw/A7u2hzkbaAeXp1joydbOd8fMTWsnXtO6lSWAYc aEqf/XkTr79TF/FOhai1GrxGAYZvAVEK8yHCgX32uF7jR0t0zkhSUP8QrwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEP7z/mBHGTxPX8KekRYqmMWmHgmMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvUV92UC1ZRWNaUEU5ZndwNlJGaXFZeGFZZUNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXDwgAwQA wRG0MA0GCSqGSIb3DQEBCwUAA4IBAQCuP6qDWwxJd9TtloAyHHQslmIKDZGRn4w7 htx4QsLEZOabkLaYgJmbdH6RqnSlaTORP3jl90SpTuwHqmnV9/3WpjpRvk4T4iRz Ho9qfM2os2DBJJD38CdEtp9WZLc0fHbgr9fUfCXVX0Pr7jgBFU6jNrKI2OE4ezHV 6K+PcQ2u01isTEnPn4qr3fPRTJr82lTaD7TBYSXbhOKkxU543ACwDp+6KScKUdrU x2W4PKWtEDgL1G+1parJZdAYyBI1SsSsXIrjByFk04HQlXH661SERbd7e/uInl9s qAXk9jFptuxNPI0amXN601oqpmE0ILLvCisaHl3JsJM80EFNylry -----END CERTIFICATE-----Generated at Sun Jan 25 14:37:27 2026 by rpki-client