This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/QehD96f5TABcvSMwJKFdikzIbO8.roa File: QehD96f5TABcvSMwJKFdikzIbO8.roa (raw, json) Hash identifier: SRLpbEp6q6uyhKVlw7Pt60kWZXK8snPed5qV+0O6aV8= Subject key identifier: 41:E8:43:F7:A7:F9:4C:00:5C:BD:23:30:24:A1:5D:8A:4C:C8:6C:EF Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6 Certificate serial: 019B7D5C9D86AC162C3751B3BA08A9BAAD20 Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/QehD96f5TABcvSMwJKFdikzIbO8.roa Signing time: Fri 02 Jan 2026 06:19:40 +0000 ROA not before: Fri 02 Jan 2026 06:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201228 IP address blocks: 93.185.216.0/21 maxlen: 24 193.29.10.0/23 maxlen: 24 193.29.20.0/23 maxlen: 24 193.110.20.0/22 maxlen: 24 2a0f:a580::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:9d:86:ac:16:2c:37:51:b3:ba:08:a9:ba:ad:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6 Validity Not Before: Jan 2 06:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41e843f7a7f94c005cbd233024a15d8a4cc86cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:be:52:45:f1:10:d9:11:21:4c:eb:83:f6: 88:bc:bc:4e:e8:de:e4:2c:99:d2:2b:3a:e0:9c:e1: 84:07:2b:2b:39:55:5c:96:de:cf:46:e9:83:20:c7: 47:e7:45:2d:83:a3:03:5b:41:e9:63:9b:13:58:73: f1:15:c6:b3:56:95:dd:95:24:ac:c8:7a:f3:cc:90: ee:11:65:5d:fd:47:7d:25:0b:1f:e1:7e:67:93:d3: d8:6f:ab:bc:f1:61:e8:86:42:42:47:16:0f:28:c1: e4:89:e5:33:e7:8d:97:f3:95:09:3c:48:b1:f7:b0: 7f:24:8e:a1:a8:9f:f8:e2:a9:17:c0:71:b2:95:c6: 4f:83:3a:56:c1:9c:e8:32:4e:ec:31:23:cb:74:82: 9d:ed:d2:99:92:00:a8:35:b1:71:04:91:04:d0:4d: 52:35:6f:14:07:8c:2f:53:63:8f:96:85:e8:a6:dc: 46:48:bd:7d:22:08:e3:01:ca:d7:57:97:7d:dd:70: c4:28:63:40:31:18:03:5e:9f:b2:cc:99:29:a3:ff: f8:37:0e:ee:3e:f0:54:25:94:36:1f:fd:80:12:e0: 45:12:1e:cb:aa:74:f2:f9:ed:16:81:99:fc:94:78: d7:41:3f:d4:9a:d3:77:72:d8:0c:49:a9:a4:39:10: e0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E8:43:F7:A7:F9:4C:00:5C:BD:23:30:24:A1:5D:8A:4C:C8:6C:EF X509v3 Authority Key Identifier: keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/QehD96f5TABcvSMwJKFdikzIbO8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.185.216.0/21 193.29.10.0/23 193.29.20.0/23 193.110.20.0/22 IPv6: 2a0f:a580::/29 Signature Algorithm: sha256WithRSAEncryption 50:2d:32:86:73:f6:ab:bd:1c:7c:25:f4:cf:5d:cb:47:a9:03: 9f:b1:1c:cd:96:34:55:06:59:a9:5f:99:0c:d3:84:ea:18:8c: 46:5f:75:43:bc:a4:11:1f:67:cd:f1:c4:87:43:f0:5d:f6:f9: f1:51:d5:a0:08:f9:ad:64:29:15:88:86:61:0b:77:fd:f9:e9: 60:49:36:32:85:d6:de:dd:db:83:0a:e7:72:ba:23:f3:44:01: a0:30:72:ec:0d:54:06:70:30:85:c4:86:fc:9c:9e:c2:ff:7d: 3b:8b:19:ef:55:d1:28:dd:4c:5b:fd:46:07:0c:38:4c:5e:4b: 47:2a:8a:b3:8c:4f:47:55:8c:26:d6:11:86:08:d5:a1:09:b6: aa:3b:4e:84:64:c9:e2:66:78:86:53:0c:5d:12:a7:73:15:13: 4b:d8:6d:b1:06:10:e3:52:e9:24:92:c0:94:91:68:07:2e:22: 54:d6:fc:9e:14:2d:d0:96:ae:65:8b:59:92:d7:38:5b:c2:ec: bc:81:a4:25:39:21:4c:7b:f6:a7:fd:a5:a5:60:63:d7:4c:db: 3a:06:ab:fc:4b:8f:fd:c7:f1:93:75:ca:9b:6e:9b:47:70:61: be:2b:de:cc:0c:50:1a:fb:52:5d:3a:ab:42:7e:a0:70:ad:58: 8f:25:a6:4a -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt9XJ2GrBYsN1Gzugipuq0gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2IyOTE3MGI1NmE4NDI0MWY0Yjg0ZmQ0ZGFmZjA4MzZk NTAzYzYwHhcNMjYwMTAyMDYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWU4NDNmN2E3Zjk0YzAwNWNiZDIzMzAyNGExNWQ4YTRjYzg2Y2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFu+UkXxENkRIUzrg/aIvLxO6N7k LJnSKzrgnOGEBysrOVVclt7PRumDIMdH50Utg6MDW0HpY5sTWHPxFcazVpXdlSSs yHrzzJDuEWVd/Ud9JQsf4X5nk9PYb6u88WHohkJCRxYPKMHkieUz542X85UJPEix 97B/JI6hqJ/44qkXwHGylcZPgzpWwZzoMk7sMSPLdIKd7dKZkgCoNbFxBJEE0E1S NW8UB4wvU2OPloXoptxGSL19IgjjAcrXV5d93XDEKGNAMRgDXp+yzJkpo//4Nw7u PvBUJZQ2H/2AEuBFEh7LqnTy+e0WgZn8lHjXQT/UmtN3ctgMSamkORDgWQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFEHoQ/en+UwAXL0jMCShXYpMyGzvMB8GA1UdIwQY MBaAFMU7KRcLVqhCQfS4T9Ta/wg21QPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTkt N2RmYmJhZTAzNjhlLzEvUWVoRDk2ZjVUQUJjdlNNd0pLRmRpa3pJYk84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTktN2RmYmJhZTAzNjhl LzEveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDXbnYAwQB wR0KAwQBwR0UAwQCwW4UMA0EAgACMAcDBQMqD6WAMA0GCSqGSIb3DQEBCwUAA4IB AQBQLTKGc/arvRx8JfTPXctHqQOfsRzNljRVBlmpX5kM04TqGIxGX3VDvKQRH2fN 8cSHQ/Bd9vnxUdWgCPmtZCkViIZhC3f9+elgSTYyhdbe3duDCudyuiPzRAGgMHLs DVQGcDCFxIb8nJ7C/307ixnvVdEo3Uxb/UYHDDhMXktHKoqzjE9HVYwm1hGGCNWh CbaqO06EZMniZniGUwxdEqdzFRNL2G2xBhDjUukkksCUkWgHLiJU1vyeFC3Qlq5l i1mS1zhbwuy8gaQlOSFMe/an/aWlYGPXTNs6Bqv8S4/9x/GTdcqbbptHcGG+K97M DFAa+1JdOqtCfqBwrViPJaZK -----END CERTIFICATE-----Generated at Mon Jan 26 12:55:41 2026 by rpki-client