This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/Q11uKj3FZslGnPxLmnv1hIW3b48.roa File: Q11uKj3FZslGnPxLmnv1hIW3b48.roa (raw, json) Hash identifier: czmZUe0UuJfveUL66FQWbR/8EoerZBPm+456KZ7ESgU= Subject key identifier: 43:5D:6E:2A:3D:C5:66:C9:46:9C:FC:4B:9A:7B:F5:84:85:B7:6F:8F Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d Certificate serial: 019B7E376BC65E2FC10B6AC7C297CB801BD7 Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/Q11uKj3FZslGnPxLmnv1hIW3b48.roa Signing time: Fri 02 Jan 2026 10:18:39 +0000 ROA not before: Fri 02 Jan 2026 10:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14544 IP address blocks: 81.208.192.0/19 maxlen: 19 130.110.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:6b:c6:5e:2f:c1:0b:6a:c7:c2:97:cb:80:1b:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d Validity Not Before: Jan 2 10:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=435d6e2a3dc566c9469cfc4b9a7bf58485b76f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:59:5b:88:06:97:05:09:83:50:cd:fb:62:4e: 1b:a0:5a:1d:e2:64:0f:ad:78:7e:f3:18:42:e0:d1: 54:00:7e:fe:08:e2:18:b0:ed:2d:16:7c:15:52:28: 90:29:21:5d:d7:35:9c:c7:7c:b7:13:23:43:d5:ad: c4:44:55:68:b2:62:68:d9:5d:a7:90:82:59:87:fd: 4f:e4:64:b2:c8:33:da:7a:7a:7e:4d:8e:25:d9:f7: e3:f1:8b:85:07:14:f2:be:1d:20:ff:35:5d:8f:d6: 2b:1c:11:06:12:9d:09:94:ae:9d:de:3a:3f:18:98: 9c:27:79:25:a1:62:0d:5a:9b:ca:a3:80:7f:2a:af: 55:a4:f1:8f:32:72:aa:d2:d2:19:24:3f:40:7b:3a: 8c:be:b8:2d:0c:88:5a:51:a8:ea:41:13:47:1a:5c: b7:4e:48:8f:a5:0d:c6:25:e7:21:47:43:47:78:a6: dd:2f:f4:e1:fa:6d:99:4f:08:e9:23:6f:e3:85:ba: 9b:0e:86:af:e3:fa:2f:29:4b:ba:a6:04:6a:dc:0f: ab:28:c3:ef:b7:53:37:73:87:63:67:f4:9d:23:84: fa:83:59:30:04:52:20:30:5e:f9:83:87:52:55:18: 93:a2:19:e2:c8:55:b5:fa:8e:c0:83:95:b6:d6:8d: 03:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5D:6E:2A:3D:C5:66:C9:46:9C:FC:4B:9A:7B:F5:84:85:B7:6F:8F X509v3 Authority Key Identifier: keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/Q11uKj3FZslGnPxLmnv1hIW3b48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.208.192.0/19 130.110.30.0/23 Signature Algorithm: sha256WithRSAEncryption 24:41:fb:8b:de:9b:41:6e:af:6a:e8:26:5d:6b:0b:09:bf:08: 3a:10:c3:78:de:18:22:19:42:1c:ee:32:e0:65:81:dd:01:1a: e3:e8:13:67:b6:8e:70:4d:51:69:11:5a:9d:0b:f1:e6:05:1e: 5d:03:2d:eb:11:cc:1d:b6:f7:04:d7:37:44:66:12:e7:62:31: a9:0d:ee:9d:e2:14:cb:d3:52:38:28:9a:e8:a7:75:bf:05:92: 58:6d:e7:54:23:af:3e:fd:d8:1d:1b:36:39:8a:3d:c2:56:e4: 5c:d5:58:83:95:4a:a3:54:4a:7f:82:d8:00:93:19:cd:e0:26: 5a:79:ca:21:94:7e:78:3d:2a:54:b6:43:e8:92:ee:ac:a0:03: 06:9e:6b:1e:05:f2:e6:d9:e4:d4:13:c0:c4:22:20:a3:b3:c1: 49:33:d1:97:dd:91:5f:be:f2:c7:05:bb:d6:ba:c6:f4:52:9e: c2:df:3f:8c:07:f0:f8:e2:09:0a:4b:bd:07:ea:95:63:42:f9: 73:5f:d2:f4:c0:c4:b7:a5:3e:81:b7:d1:be:d8:bd:6b:6c:6c: 01:68:23:fa:1f:d0:1e:19:6f:ea:b1:55:06:72:0e:df:2d:0d: 1f:83:82:78:ba:18:69:32:9c:17:86:cf:d0:c7:cd:67:9b:09: 95:f8:70:b3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N2vGXi/BC2rHwpfLgBvXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzN2M4MzQ0N2QxNzE4MzM4MGY0ODliYzk0NmM4YjllMzAw ZmZiMWQwHhcNMjYwMTAyMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzVkNmUyYTNkYzU2NmM5NDY5Y2ZjNGI5YTdiZjU4NDg1Yjc2ZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFlbiAaXBQmDUM37Yk4boFod4mQP rXh+8xhC4NFUAH7+COIYsO0tFnwVUiiQKSFd1zWcx3y3EyND1a3ERFVosmJo2V2n kIJZh/1P5GSyyDPaenp+TY4l2ffj8YuFBxTyvh0g/zVdj9YrHBEGEp0JlK6d3jo/ GJicJ3kloWINWpvKo4B/Kq9VpPGPMnKq0tIZJD9AezqMvrgtDIhaUajqQRNHGly3 TkiPpQ3GJechR0NHeKbdL/Th+m2ZTwjpI2/jhbqbDoav4/ovKUu6pgRq3A+rKMPv t1M3c4djZ/SdI4T6g1kwBFIgMF75g4dSVRiTohniyFW1+o7Ag5W21o0DpQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFENdbio9xWbJRpz8S5p79YSFt2+PMB8GA1UdIwQY MBaAFCN8g0R9FxgzgPSJvJRsi54wD/sdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEt OGIzMzcyMjM0ZGMwLzEvUTExdUtqM0Zac2xHblB4TG1udjFoSVczYjQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEtOGIzMzcyMjM0ZGMw LzEvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFUdDAAwQB gm4eMA0GCSqGSIb3DQEBCwUAA4IBAQAkQfuL3ptBbq9q6CZdawsJvwg6EMN43hgi GUIc7jLgZYHdARrj6BNnto5wTVFpEVqdC/HmBR5dAy3rEcwdtvcE1zdEZhLnYjGp De6d4hTL01I4KJrop3W/BZJYbedUI68+/dgdGzY5ij3CVuRc1ViDlUqjVEp/gtgA kxnN4CZaecohlH54PSpUtkPoku6soAMGnmseBfLm2eTUE8DEIiCjs8FJM9GX3ZFf vvLHBbvWusb0Up7C3z+MB/D44gkKS70H6pVjQvlzX9L0wMS3pT6Bt9G+2L1rbGwB aCP6H9AeGW/qsVUGcg7fLQ0fg4J4uhhpMpwXhs/Qx81nmwmV+HCz -----END CERTIFICATE-----Generated at Mon Jan 26 02:21:59 2026 by rpki-client