This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/qJgbNRVZDZgsaCTgcYDVdqoZi2o.roa File: qJgbNRVZDZgsaCTgcYDVdqoZi2o.roa (raw, json) Hash identifier: 1zdrqfB7Ye900CEu4KQ1GQxkoI0CFxA0D17oCktb3Eg= Subject key identifier: A8:98:1B:35:15:59:0D:98:2C:68:24:E0:71:80:D5:76:AA:19:8B:6A Certificate issuer: /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b Certificate serial: 019B78A22EAB40CC0663B37222BDA94B834F Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/qJgbNRVZDZgsaCTgcYDVdqoZi2o.roa Signing time: Thu 01 Jan 2026 08:17:33 +0000 ROA not before: Thu 01 Jan 2026 08:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16236 IP address blocks: 194.104.188.0/24 maxlen: 24 194.104.189.0/24 maxlen: 24 194.104.190.0/24 maxlen: 24 194.104.191.0/24 maxlen: 24 2a00:ec20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2e:ab:40:cc:06:63:b3:72:22:bd:a9:4b:83:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b Validity Not Before: Jan 1 08:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8981b3515590d982c6824e07180d576aa198b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:89:4f:f6:a4:65:2f:fd:b2:02:42:be:d6:6c: ca:40:91:55:19:89:90:60:dc:8f:71:41:8c:c0:88: 20:ba:9e:c0:8e:ef:2b:e6:57:47:37:35:65:6e:14: 99:e7:3d:3e:aa:ce:27:b1:9e:ed:6f:90:a5:a8:eb: 50:1c:a2:98:92:43:b2:47:d7:4c:e8:74:33:a8:78: bd:00:67:14:61:dc:d7:ce:9c:59:06:59:03:a0:4a: cf:2e:a2:25:be:95:91:83:80:0d:72:62:dd:89:c1: ee:2d:a3:79:5f:da:18:54:77:fb:23:e1:3d:cb:d3: da:03:7c:da:b3:3c:d6:89:e7:e6:a6:55:0c:cd:24: 3b:13:d0:cc:8b:a0:bb:4b:12:89:96:04:88:19:fc: 3b:e3:a6:c5:6b:cb:cc:76:6c:9d:e1:9d:4f:60:95: 66:ab:62:db:36:2d:08:56:9e:8d:c7:22:a1:0f:94: 71:5b:3d:06:0e:cb:b2:18:6d:fe:67:c3:ab:3f:03: c1:e1:11:11:5d:8e:36:e3:6c:91:1f:a2:d8:1c:72: 21:c3:d5:21:52:e2:40:fe:88:84:09:a6:44:d9:b5: 04:98:e2:41:6d:d2:e8:4a:ce:26:c9:8e:c7:d3:94: 7d:e7:52:11:33:5f:f0:51:7d:0c:51:69:1c:69:21: 0b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:98:1B:35:15:59:0D:98:2C:68:24:E0:71:80:D5:76:AA:19:8B:6A X509v3 Authority Key Identifier: keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/qJgbNRVZDZgsaCTgcYDVdqoZi2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.188.0/22 IPv6: 2a00:ec20::/32 Signature Algorithm: sha256WithRSAEncryption 97:70:03:74:6e:47:e5:3f:08:18:ed:47:34:05:3a:02:06:a9: c6:2f:62:6c:f1:00:4c:9b:0e:3a:94:ea:da:3a:5f:a7:eb:1b: c3:f9:97:ec:58:95:b7:21:52:97:d0:06:5f:e5:16:d6:21:ed: f5:2e:1a:f8:a7:ab:4c:a8:97:4a:39:b3:38:44:79:82:57:e9: 81:ad:ac:77:1d:30:63:a1:0b:04:01:d0:d6:60:b0:42:01:55: 0f:8b:9e:fa:82:ff:92:45:33:c5:b5:06:5f:60:8f:d9:af:eb: 2e:7c:98:e4:3f:d0:da:d7:a6:fd:fe:35:38:e6:1b:66:64:e7: a2:d7:94:31:e4:ed:12:27:70:d2:30:0c:17:a2:7d:f1:10:ec: 98:1f:76:a8:08:9d:7f:56:61:7b:5a:8b:4f:a8:cc:e1:2c:35: 9a:fa:64:f9:8a:76:b7:e2:d3:a7:75:47:14:72:10:de:03:ff: 7d:fd:df:0b:cb:ac:5a:55:17:0c:f7:4d:99:8e:49:cc:8d:74: b5:3d:0e:e8:cc:e9:35:dc:32:d6:e4:aa:ea:cc:a1:4f:c0:d2: b8:ca:ef:fd:6f:0c:fb:4e:75:b5:7b:1a:d3:b2:7e:a1:a1:82: dc:47:9c:09:b6:7f:8c:c7:75:08:c0:ff:c6:ac:78:15:66:15: 48:84:85:74 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4oi6rQMwGY7NyIr2pS4NPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NDliMzFlYmI2ZTRjYmJkMGNjNzcwY2M2ZjRkNTBmNzhm MGViN2IwHhcNMjYwMTAxMDgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODk4MWIzNTE1NTkwZDk4MmM2ODI0ZTA3MTgwZDU3NmFhMTk4YjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4olP9qRlL/2yAkK+1mzKQJFVGYmQ YNyPcUGMwIggup7Aju8r5ldHNzVlbhSZ5z0+qs4nsZ7tb5ClqOtQHKKYkkOyR9dM 6HQzqHi9AGcUYdzXzpxZBlkDoErPLqIlvpWRg4ANcmLdicHuLaN5X9oYVHf7I+E9 y9PaA3zaszzWiefmplUMzSQ7E9DMi6C7SxKJlgSIGfw746bFa8vMdmyd4Z1PYJVm q2LbNi0IVp6NxyKhD5RxWz0GDsuyGG3+Z8OrPwPB4RERXY4242yRH6LYHHIhw9Uh UuJA/oiECaZE2bUEmOJBbdLoSs4myY7H05R951IRM1/wUX0MUWkcaSELCQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKiYGzUVWQ2YLGgk4HGA1XaqGYtqMB8GA1UdIwQY MBaAFFlJsx67bky70Mx3DMb01Q948Ot7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTkt MzE4MGFlNDI3NGYzLzEvcUpnYk5SVlpEWmdzYUNUZ2NZRFZkcW9aaTJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTktMzE4MGFlNDI3NGYz LzEvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwmi8MA0E AgACMAcDBQAqAOwgMA0GCSqGSIb3DQEBCwUAA4IBAQCXcAN0bkflPwgY7Uc0BToC BqnGL2Js8QBMmw46lOraOl+n6xvD+ZfsWJW3IVKX0AZf5RbWIe31Lhr4p6tMqJdK ObM4RHmCV+mBrax3HTBjoQsEAdDWYLBCAVUPi576gv+SRTPFtQZfYI/Zr+sufJjk P9Da16b9/jU45htmZOei15Qx5O0SJ3DSMAwXon3xEOyYH3aoCJ1/VmF7WotPqMzh LDWa+mT5ina34tOndUcUchDeA/99/d8Ly6xaVRcM902ZjknMjXS1PQ7ozOk13DLW 5KrqzKFPwNK4yu/9bwz7TnW1exrTsn6hoYLcR5wJtn+Mx3UIwP/GrHgVZhVIhIV0 -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:03 2026 by rpki-client