This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/qIEvRyug51NtPOqrvZlLTZ5-EIQ.roa File: qIEvRyug51NtPOqrvZlLTZ5-EIQ.roa (raw, json) Hash identifier: BsW/+9betY20XfYjkexlN+8vCvy84YAaJnRdNAcmTYE= Subject key identifier: A8:81:2F:47:2B:A0:E7:53:6D:3C:EA:AB:BD:99:4B:4D:9E:7E:10:84 Certificate issuer: /CN=db05360e9873825f75d671daf1624a52e985390c Certificate serial: 019B77C6C32B8B6F065EB63D9AE38E447031 Authority key identifier: DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/qIEvRyug51NtPOqrvZlLTZ5-EIQ.roa Signing time: Thu 01 Jan 2026 04:17:53 +0000 ROA not before: Thu 01 Jan 2026 04:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5413 IP address blocks: 195.49.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c3:2b:8b:6f:06:5e:b6:3d:9a:e3:8e:44:70:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db05360e9873825f75d671daf1624a52e985390c Validity Not Before: Jan 1 04:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8812f472ba0e7536d3ceaabbd994b4d9e7e1084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:37:4f:b1:e0:6e:df:13:1c:ce:67:a8:88:6a: 79:0b:09:b1:28:17:5c:a1:03:b9:fc:44:b5:78:4f: 84:52:f5:48:a5:33:62:3b:06:5f:74:c1:44:40:9a: dc:6d:65:a5:a8:2c:99:a0:6b:c1:28:1a:9d:85:b8: 0a:11:89:72:16:c9:2b:1f:c3:83:16:a7:3c:cd:c5: d4:2e:34:ce:b3:20:44:e1:a4:60:88:ea:ab:0f:8e: 43:d6:cb:a8:4e:ae:2b:d3:d0:90:1e:49:67:8d:48: 6c:76:15:c2:89:83:bb:8b:60:cb:60:0b:03:a7:7e: a2:1b:9c:40:00:d9:91:51:96:7a:7b:42:77:fd:30: c7:6c:e7:e2:bf:af:d7:d9:c3:9b:88:4a:d2:8c:56: 7b:77:c1:cb:fe:49:d4:7d:c8:fa:e9:cf:8d:0e:c5: 4d:69:71:98:92:e6:2b:e5:72:e2:25:b6:a4:d7:f9: 6d:34:6d:1a:a0:b9:dd:01:77:79:66:ac:0b:f9:16: 15:9e:fb:98:50:c7:31:e7:31:45:cf:f8:42:c3:97: ed:c6:d5:fe:6b:7b:21:e4:65:3f:89:fb:e2:fe:0b: 8a:8a:59:61:de:d2:35:99:b3:cd:e7:83:0e:0d:73: d4:a4:af:aa:c2:44:dc:2c:fd:ea:9d:6d:f2:d4:87: 87:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:81:2F:47:2B:A0:E7:53:6D:3C:EA:AB:BD:99:4B:4D:9E:7E:10:84 X509v3 Authority Key Identifier: keyid:DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/qIEvRyug51NtPOqrvZlLTZ5-EIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.49.180.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:86:70:2b:ae:55:a4:7c:ff:93:c1:48:e6:2d:b5:59:2d:6e: 85:4c:8d:0c:d6:06:78:1f:b6:1a:dd:6e:5b:42:7c:0d:df:e4: d2:1e:72:9d:c1:4c:89:f5:13:1d:9d:a5:42:83:54:35:65:78: c7:2e:af:68:8c:85:36:af:47:a0:6b:33:63:05:0e:ce:9b:b6: 90:d9:dd:94:64:93:6b:48:28:9f:66:fc:2d:cb:e4:26:cd:5c: 9a:bd:6b:43:1b:2a:fa:bc:f0:ca:06:6b:b4:ba:c6:3c:8a:99: 10:2b:d2:09:14:22:38:34:3f:26:76:c1:77:31:00:57:84:46: 92:e0:75:6e:6e:4a:24:96:fe:6e:d5:88:1c:72:6a:a4:6b:a4: 75:66:cc:ac:26:50:21:4d:cd:59:e1:f0:4a:12:ba:93:79:ae: 18:70:9d:0e:47:51:2c:05:39:68:63:22:88:11:46:46:cd:4b: cd:d0:03:82:f4:b4:5d:87:62:80:b4:8e:b7:2f:ab:e9:0b:2d: 59:ad:7b:29:66:07:51:ac:20:27:59:21:2d:eb:8c:8e:75:ee: 40:e0:ef:83:7e:07:e2:4f:d1:05:64:ed:fa:5e:b9:4f:ca:8a: 8e:a1:85:45:4c:06:c4:87:4d:0e:85:17:f6:16:c1:89:19:ff: 3b:12:5f:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsMri28GXrY9muOORHAxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMDUzNjBlOTg3MzgyNWY3NWQ2NzFkYWYxNjI0YTUyZTk4 NTM5MGMwHhcNMjYwMTAxMDQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODgxMmY0NzJiYTBlNzUzNmQzY2VhYWJiZDk5NGI0ZDllN2UxMDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjdPseBu3xMczmeoiGp5CwmxKBdc oQO5/ES1eE+EUvVIpTNiOwZfdMFEQJrcbWWlqCyZoGvBKBqdhbgKEYlyFskrH8OD Fqc8zcXULjTOsyBE4aRgiOqrD45D1suoTq4r09CQHklnjUhsdhXCiYO7i2DLYAsD p36iG5xAANmRUZZ6e0J3/TDHbOfiv6/X2cObiErSjFZ7d8HL/knUfcj66c+NDsVN aXGYkuYr5XLiJbak1/ltNG0aoLndAXd5ZqwL+RYVnvuYUMcx5zFFz/hCw5ftxtX+ a3sh5GU/ifvi/guKillh3tI1mbPN54MODXPUpK+qwkTcLP3qnW3y1IeHwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKiBL0croOdTbTzqq72ZS02efhCEMB8GA1UdIwQY MBaAFNsFNg6Yc4JfddZx2vFiSlLphTkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMndVMkRwaHpnbDkxMW5IYThXSktVdW1GT1F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84ZmMxZTItNDFkNy00ZjM1LWExM2Ut ZDYyZDIyNGUzY2FmLzEvcUlFdlJ5dWc1MU50UE9xcnZabExUWjUtRUlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS84ZmMxZTItNDFkNy00ZjM1LWExM2UtZDYyZDIyNGUzY2Fm LzEvMndVMkRwaHpnbDkxMW5IYThXSktVdW1GT1F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwzG0MA0G CSqGSIb3DQEBCwUAA4IBAQANhnArrlWkfP+TwUjmLbVZLW6FTI0M1gZ4H7Ya3W5b QnwN3+TSHnKdwUyJ9RMdnaVCg1Q1ZXjHLq9ojIU2r0egazNjBQ7Om7aQ2d2UZJNr SCifZvwty+QmzVyavWtDGyr6vPDKBmu0usY8ipkQK9IJFCI4ND8mdsF3MQBXhEaS 4HVubkoklv5u1Ygccmqka6R1ZsysJlAhTc1Z4fBKErqTea4YcJ0OR1EsBTloYyKI EUZGzUvN0AOC9LRdh2KAtI63L6vpCy1ZrXspZgdRrCAnWSEt64yOde5A4O+Dfgfi T9EFZO36XrlPyoqOoYVFTAbEh00OhRf2FsGJGf87El9L -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:42 2026 by rpki-client