This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/QguY6sNw_4yrqydTBsOIYz60GsQ.roa File: QguY6sNw_4yrqydTBsOIYz60GsQ.roa (raw, json) Hash identifier: MwsRxWqp1y4l7li+nXNmzcRZf3idKS20ILN1jbY4EjI= Subject key identifier: 42:0B:98:EA:C3:70:FF:8C:AB:AB:27:53:06:C3:88:63:3E:B4:1A:C4 Certificate issuer: /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771 Certificate serial: 019B79EC9FBB1478DB2C5BAFF0E2C1DBE143 Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/QguY6sNw_4yrqydTBsOIYz60GsQ.roa Signing time: Thu 01 Jan 2026 14:18:29 +0000 ROA not before: Thu 01 Jan 2026 14:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57817 IP address blocks: 89.184.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:9f:bb:14:78:db:2c:5b:af:f0:e2:c1:db:e1:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771 Validity Not Before: Jan 1 14:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=420b98eac370ff8cabab275306c388633eb41ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:02:ec:ce:92:d7:96:33:d2:d2:31:7b:5c:01: 8b:74:98:3a:c4:10:1f:f6:c9:b7:81:89:e1:ce:ce: 49:d0:21:e6:fb:61:6a:5f:d6:cb:7f:f0:af:ce:a5: 68:6f:b5:19:d8:ce:e3:ba:8c:b2:01:8f:0e:59:35: 23:81:64:e4:f0:36:1e:5b:ff:97:2d:41:46:f8:4f: 1c:91:dc:92:d7:b5:40:3f:14:07:4a:73:fd:c8:31: 4b:c6:f9:a4:69:de:3f:9c:f0:47:63:49:9a:ac:ab: 56:5e:da:e9:9f:94:5a:95:91:97:6c:bd:d5:cd:1c: 2a:3d:4d:25:46:ca:eb:eb:3d:be:b2:c1:f6:db:79: d8:39:60:07:d3:8f:92:d3:70:df:46:1d:6a:ac:21: f8:07:54:9b:4c:ea:51:34:b8:12:2e:cf:76:35:d0: d6:27:62:97:13:72:44:38:1a:3b:5f:be:16:9f:d0: c9:b3:8a:ca:c7:33:0f:98:0c:5a:bd:6b:28:4b:c1: 4d:c5:f8:46:17:6b:a0:6b:cf:5b:f0:71:a5:45:aa: f1:ea:c3:b9:cf:c3:f9:39:db:cf:7f:51:7b:42:17: ef:15:cb:0f:b0:8a:8f:3f:6a:4e:f9:c7:ff:e7:3f: f5:0e:da:bf:9c:b3:42:86:b6:ae:89:76:17:2b:9d: 64:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0B:98:EA:C3:70:FF:8C:AB:AB:27:53:06:C3:88:63:3E:B4:1A:C4 X509v3 Authority Key Identifier: keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/QguY6sNw_4yrqydTBsOIYz60GsQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.184.107.0/24 Signature Algorithm: sha256WithRSAEncryption 92:52:08:cb:02:25:49:7c:d7:06:68:9e:32:06:ca:ce:f4:1d: 36:da:af:cd:93:e8:13:97:91:5e:94:e6:3b:0a:c7:19:42:9a: fd:de:0f:f4:d2:d5:8f:01:4c:84:b0:d8:3b:fe:0b:a4:63:06: 0e:45:ad:3b:31:a1:c0:0a:2b:1b:9a:3c:da:4c:fb:67:9b:ca: f8:1f:c7:bf:e5:a5:2b:b6:e5:85:e9:3b:3a:d1:92:9b:4c:ae: 23:74:28:31:96:2e:e5:85:e7:92:ec:d8:e0:f1:1c:54:2c:1a: a8:18:00:b0:29:c7:9c:72:21:24:07:95:5e:4e:21:c1:3f:0e: 6d:86:f2:93:b3:7a:b0:bf:f8:82:34:a8:f4:28:2c:9a:45:5b: e7:0d:bc:54:c6:ac:ca:49:76:6d:c1:04:cf:dc:4b:c7:55:f2: fd:9f:84:10:cc:20:2b:8d:ec:d7:8f:24:4f:47:71:eb:10:cd: 20:11:50:3f:f0:77:69:17:6e:c1:3b:dc:e2:c9:54:b9:99:95: 62:6f:89:a8:c6:ab:ca:4f:42:75:f2:ba:06:65:bb:88:1d:0d: 60:28:17:4c:7c:0d:19:76:9f:ee:f4:65:1e:d2:52:ba:59:1d: 68:fa:46:36:8e:8e:4c:a7:e4:dc:a7:93:7a:b7:1a:57:9a:eb: 8d:70:ba:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57J+7FHjbLFuv8OLB2+FDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MDFjODQ1ZjEzZGQ0YWQ2ZTlkYWU0NzBkNWZmNjljNWNj YTM3NzEwHhcNMjYwMTAxMTQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjBiOThlYWMzNzBmZjhjYWJhYjI3NTMwNmMzODg2MzNlYjQxYWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQLszpLXljPS0jF7XAGLdJg6xBAf 9sm3gYnhzs5J0CHm+2FqX9bLf/CvzqVob7UZ2M7juoyyAY8OWTUjgWTk8DYeW/+X LUFG+E8ckdyS17VAPxQHSnP9yDFLxvmkad4/nPBHY0marKtWXtrpn5RalZGXbL3V zRwqPU0lRsrr6z2+ssH223nYOWAH04+S03DfRh1qrCH4B1SbTOpRNLgSLs92NdDW J2KXE3JEOBo7X74Wn9DJs4rKxzMPmAxavWsoS8FNxfhGF2uga89b8HGlRarx6sO5 z8P5OdvPf1F7QhfvFcsPsIqPP2pO+cf/5z/1Dtq/nLNChrauiXYXK51kywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEILmOrDcP+Mq6snUwbDiGM+tBrEMB8GA1UdIwQY MBaAFBUByEXxPdStbp2uRw1f9pxcyjdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEt ZWQ3OTE1NDM2YjI3LzEvUWd1WTZzTndfNHlycXlkVEJzT0lZejYwR3NRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEtZWQ3OTE1NDM2YjI3 LzEvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbhrMA0G CSqGSIb3DQEBCwUAA4IBAQCSUgjLAiVJfNcGaJ4yBsrO9B022q/Nk+gTl5FelOY7 CscZQpr93g/00tWPAUyEsNg7/gukYwYORa07MaHACisbmjzaTPtnm8r4H8e/5aUr tuWF6Ts60ZKbTK4jdCgxli7lheeS7Njg8RxULBqoGACwKcecciEkB5VeTiHBPw5t hvKTs3qwv/iCNKj0KCyaRVvnDbxUxqzKSXZtwQTP3EvHVfL9n4QQzCArjezXjyRP R3HrEM0gEVA/8HdpF27BO9ziyVS5mZVib4moxqvKT0J18roGZbuIHQ1gKBdMfA0Z dp/u9GUe0lK6WR1o+kY2jo5Mp+Tcp5N6txpXmuuNcLoN -----END CERTIFICATE-----Generated at Mon Jan 26 13:13:32 2026 by rpki-client