This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/Q5zJR-gWRslSvJRuAC3XMlwqu_8.roa File: Q5zJR-gWRslSvJRuAC3XMlwqu_8.roa (raw, json) Hash identifier: ArKoVR1HvT27XmVZlqzha6BxLY/5mnRJvZnwQwU+NF4= Subject key identifier: 43:9C:C9:47:E8:16:46:C9:52:BC:94:6E:00:2D:D7:32:5C:2A:BB:FF Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150 Certificate serial: 019B7C11FFAEC800A657356A4A56EF2D62E0 Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/Q5zJR-gWRslSvJRuAC3XMlwqu_8.roa Signing time: Fri 02 Jan 2026 00:18:32 +0000 ROA not before: Fri 02 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30781 IP address blocks: 193.200.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:ff:ae:c8:00:a6:57:35:6a:4a:56:ef:2d:62:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150 Validity Not Before: Jan 2 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=439cc947e81646c952bc946e002dd7325c2abbff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:59:45:7f:92:1b:b5:e8:3a:3f:11:0e:77:55: 9b:28:d8:d0:46:c6:d4:ba:fb:17:02:8f:e4:5e:ab: 0d:00:5e:5d:e8:23:8e:8f:0e:d1:08:25:75:e0:2a: 50:7f:9b:1c:9d:ab:c4:33:b6:25:c9:e5:84:36:bf: bd:ce:86:64:b0:56:c6:df:79:06:94:7e:ab:ad:10: 63:ed:9d:88:48:62:fb:83:ed:7f:fe:5b:18:96:56: fd:5e:42:9c:65:18:8e:6f:ae:9b:14:17:6f:ce:86: d0:6a:0c:01:d5:b5:b8:2b:d4:80:ff:4c:63:ba:c4: 71:33:2b:4d:58:12:b4:59:02:f2:55:b1:03:62:e2: f0:ba:9d:b1:6c:06:39:c9:3c:76:08:98:16:15:ce: df:bb:7b:23:06:1c:28:e2:81:aa:3e:1b:ee:af:3d: 46:13:f6:c8:33:29:6c:e4:b5:3d:6c:53:96:de:33: 5a:ac:34:09:a4:d2:cd:54:51:68:7b:8f:a3:1e:a9: 31:c1:4f:c8:eb:7b:11:40:e5:c5:0f:7a:70:73:ed: 9e:55:67:12:bd:7e:ef:c2:cc:22:1c:d9:7a:8e:e3: cf:72:32:62:a4:b5:aa:93:b6:2b:78:85:f4:2a:ec: 2b:d7:95:be:3d:14:5d:e5:9c:fe:a7:50:d2:22:4d: c3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9C:C9:47:E8:16:46:C9:52:BC:94:6E:00:2D:D7:32:5C:2A:BB:FF X509v3 Authority Key Identifier: keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/Q5zJR-gWRslSvJRuAC3XMlwqu_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.60.0/24 Signature Algorithm: sha256WithRSAEncryption 73:02:98:c3:f9:3d:68:d3:f2:53:48:93:2e:bb:f0:bb:01:69: bb:fd:dd:62:ae:1f:d8:63:dc:87:98:f8:6f:4c:8e:95:45:ce: 9d:e2:1d:7c:80:b2:0d:2d:ac:28:02:22:4a:14:b8:94:40:32: bd:e8:e1:78:3f:16:8a:ac:5d:2b:4a:9e:5a:bd:67:4d:13:9d: a5:e6:c2:85:b1:c6:3f:85:99:83:ff:34:92:63:88:cb:c2:4f: 61:69:68:bc:e8:4b:6e:fd:b0:b3:dc:33:1c:85:d7:d2:5e:0c: 7b:2b:20:07:bc:0f:47:b5:59:e8:4a:c6:89:e6:87:9c:da:c3: ed:bf:ca:95:ce:2c:04:c1:5a:09:c1:ed:4f:14:0d:22:cc:4b: f8:e7:e1:3e:5c:80:d0:a2:4b:53:24:7c:cd:78:0f:81:4b:ed: 30:f3:6d:05:01:01:cd:c2:45:de:81:28:7f:ee:ad:15:a7:eb: 11:b5:8c:75:cd:c9:77:be:7b:e7:7a:d8:16:4c:1d:bb:dc:d7: 94:66:f8:7a:22:ef:0a:57:58:22:4c:3e:94:81:2b:6b:c4:a2: d4:ea:22:3e:b4:1c:6a:2b:b4:c0:20:5c:63:dc:05:0c:06:86: 11:af:0c:15:44:22:c4:76:66:15:74:31:ff:e5:3d:da:6d:2b: 38:7a:55:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ef+uyACmVzVqSlbvLWLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjkzMDg1YjVmNzVjMGYxMGRlMDhlMjJjYmU0YjA2MjQ1 MWIxNTAwHhcNMjYwMTAyMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzljYzk0N2U4MTY0NmM5NTJiYzk0NmUwMDJkZDczMjVjMmFiYmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8llFf5Ibteg6PxEOd1WbKNjQRsbU uvsXAo/kXqsNAF5d6COOjw7RCCV14CpQf5scnavEM7YlyeWENr+9zoZksFbG33kG lH6rrRBj7Z2ISGL7g+1//lsYllb9XkKcZRiOb66bFBdvzobQagwB1bW4K9SA/0xj usRxMytNWBK0WQLyVbEDYuLwup2xbAY5yTx2CJgWFc7fu3sjBhwo4oGqPhvurz1G E/bIMyls5LU9bFOW3jNarDQJpNLNVFFoe4+jHqkxwU/I63sRQOXFD3pwc+2eVWcS vX7vwswiHNl6juPPcjJipLWqk7YreIX0Kuwr15W+PRRd5Zz+p1DSIk3DXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEOcyUfoFkbJUryUbgAt1zJcKrv/MB8GA1UdIwQY MBaAFPJpMIW191wPEN4I4iy+SwYkUbFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNzMzMjctOTc0Mi00MzViLTg2YzAt NTVlODVlYTA5ZGRlLzEvUTV6SlItZ1dSc2xTdkpSdUFDM1hNbHdxdV84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xNzMzMjctOTc0Mi00MzViLTg2YzAtNTVlODVlYTA5ZGRl LzEvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcg8MA0G CSqGSIb3DQEBCwUAA4IBAQBzApjD+T1o0/JTSJMuu/C7AWm7/d1irh/YY9yHmPhv TI6VRc6d4h18gLINLawoAiJKFLiUQDK96OF4PxaKrF0rSp5avWdNE52l5sKFscY/ hZmD/zSSY4jLwk9haWi86Etu/bCz3DMchdfSXgx7KyAHvA9HtVnoSsaJ5oec2sPt v8qVziwEwVoJwe1PFA0izEv45+E+XIDQoktTJHzNeA+BS+0w820FAQHNwkXegSh/ 7q0Vp+sRtYx1zcl3vnvnetgWTB273NeUZvh6Iu8KV1giTD6UgStrxKLU6iI+tBxq K7TAIFxj3AUMBoYRrwwVRCLEdmYVdDH/5T3abSs4elW3 -----END CERTIFICATE-----Generated at Sun Jan 25 16:37:45 2026 by rpki-client