This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/Q419CMj39itEx5d1rZmvp11tEJo.roa File: Q419CMj39itEx5d1rZmvp11tEJo.roa (raw, json) Hash identifier: aVTyR4miZff0FyNpx215JRudcRdWaUXQlchw+P/x8P0= Subject key identifier: 43:8D:7D:08:C8:F7:F6:2B:44:C7:97:75:AD:99:AF:A7:5D:6D:10:9A Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e Certificate serial: 019B7910D42EB23EEA5FDA6BAE45D97F9C1A Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/Q419CMj39itEx5d1rZmvp11tEJo.roa Signing time: Thu 01 Jan 2026 10:18:24 +0000 ROA not before: Thu 01 Jan 2026 10:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3360 IP address blocks: 195.203.156.0/22 maxlen: 22 217.27.4.0/24 maxlen: 24 217.27.6.0/24 maxlen: 24 217.27.7.0/24 maxlen: 24 2a03:5000:1::/48 maxlen: 48 2a03:5000:2::/48 maxlen: 48 2a03:5000:7::/48 maxlen: 48 2a03:5000:11::/48 maxlen: 48 2a03:5000:12::/48 maxlen: 48 2a03:5000:20::/48 maxlen: 48 2a03:5000:21::/48 maxlen: 48 2a03:5000:22::/48 maxlen: 48 2a03:5000:30::/48 maxlen: 48 2a03:5000:31::/48 maxlen: 48 2a03:5000:32::/48 maxlen: 48 2a03:5000:41::/48 maxlen: 48 2a03:5000:42::/48 maxlen: 48 2a03:5000:51::/48 maxlen: 48 2a03:5000:52::/48 maxlen: 48 2a03:5000:61::/48 maxlen: 48 2a03:5000:62::/48 maxlen: 48 2a03:5000:71::/48 maxlen: 48 2a03:5000:72::/48 maxlen: 48 2a03:5000:81::/48 maxlen: 48 2a03:5000:82::/48 maxlen: 48 2a03:5000:91::/48 maxlen: 48 2a03:5000:92::/48 maxlen: 48 2a03:5000:101::/48 maxlen: 48 2a03:5000:102::/48 maxlen: 48 2a03:5000:111::/48 maxlen: 48 2a03:5000:112::/48 maxlen: 48 2a03:5000:121::/48 maxlen: 48 2a03:5000:122::/48 maxlen: 48 2a03:5000:127::/48 maxlen: 48 2a03:5000:131::/48 maxlen: 48 2a03:5000:132::/48 maxlen: 48 2a03:5000:141::/48 maxlen: 48 2a03:5000:142::/48 maxlen: 48 2a03:5000:151::/48 maxlen: 48 2a03:5000:152::/48 maxlen: 48 2a03:5000:161::/48 maxlen: 48 2a03:5000:162::/48 maxlen: 48 2a03:5000:171::/48 maxlen: 48 2a03:5000:172::/48 maxlen: 48 2a03:5000:181::/48 maxlen: 48 2a03:5000:182::/48 maxlen: 48 2a03:5000:191::/48 maxlen: 48 2a03:5000:192::/48 maxlen: 48 2a03:5000:197::/48 maxlen: 48 2a03:5000:201::/48 maxlen: 48 2a03:5000:202::/48 maxlen: 48 2a03:5000:211::/48 maxlen: 48 2a03:5000:212::/48 maxlen: 48 2a03:5000:221::/48 maxlen: 48 2a03:5000:222::/48 maxlen: 48 2a03:5000:227::/48 maxlen: 48 2a03:5000:231::/48 maxlen: 48 2a03:5000:232::/48 maxlen: 48 2a03:5000:241::/48 maxlen: 48 2a03:5000:242::/48 maxlen: 48 2a03:5000:247::/48 maxlen: 48 2a03:5000:251::/48 maxlen: 48 2a03:5000:252::/48 maxlen: 48 2a03:5000:271::/48 maxlen: 48 2a03:5000:272::/48 maxlen: 48 2a03:5000:291::/48 maxlen: 48 2a03:5000:292::/48 maxlen: 48 2a03:5000:311::/48 maxlen: 48 2a03:5000:312::/48 maxlen: 48 2a03:5000:421::/48 maxlen: 48 2a03:5000:441::/48 maxlen: 48 2a03:5000:442::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d4:2e:b2:3e:ea:5f:da:6b:ae:45:d9:7f:9c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e Validity Not Before: Jan 1 10:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=438d7d08c8f7f62b44c79775ad99afa75d6d109a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a1:36:51:76:79:df:e2:0c:e5:79:47:db:4d: 93:49:1c:eb:48:6f:a9:67:89:4d:21:d9:72:d3:ed: 42:70:b1:0c:48:20:e6:6a:8d:c4:8c:e7:b2:f7:e3: 39:fb:3a:39:ec:03:70:2a:c0:76:a7:d3:1f:e1:d8: c7:f7:68:08:0f:c0:c0:71:e3:5b:87:7e:3c:05:d3: 6d:9b:2c:29:49:47:20:0b:2c:33:06:06:e6:5c:41: 6b:80:49:87:21:fc:01:9e:c8:31:72:8e:e6:8f:4a: c8:14:d1:84:0f:ed:b3:72:05:f1:31:c0:1d:77:43: 70:95:51:4e:9f:a2:e4:3c:9d:c5:60:3a:fc:5f:7c: 85:0c:7d:48:05:5c:a2:a5:f2:2a:05:a8:14:8a:b0: e5:b4:e9:07:97:87:f4:52:7e:42:a6:e0:ce:88:c0: cd:e6:05:6e:96:df:ce:1d:3d:5d:4e:ad:2e:bd:f9: 76:7b:67:79:46:9d:c6:fe:30:0f:0a:6e:40:c7:70: 47:69:17:26:1d:71:27:e9:cc:20:db:6a:a0:f0:61: eb:3c:82:88:41:ee:de:27:21:48:ae:0b:15:29:2f: 5c:34:4b:97:02:dd:ff:f3:5b:7c:de:9c:75:13:21: 15:0a:74:85:15:63:56:03:75:75:99:5f:1d:a6:69: b2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8D:7D:08:C8:F7:F6:2B:44:C7:97:75:AD:99:AF:A7:5D:6D:10:9A X509v3 Authority Key Identifier: keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/Q419CMj39itEx5d1rZmvp11tEJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.203.156.0/22 217.27.4.0/24 217.27.6.0/23 IPv6: 2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff 2a03:5000:7::/48 2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff 2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff 2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff 2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff 2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff 2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff 2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff 2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff 2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff 2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff 2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff 2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff 2a03:5000:127::/48 2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff 2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff 2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff 2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff 2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff 2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff 2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff 2a03:5000:197::/48 2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff 2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff 2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff 2a03:5000:227::/48 2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff 2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff 2a03:5000:247::/48 2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff 2a03:5000:271::-2a03:5000:272:ffff:ffff:ffff:ffff:ffff 2a03:5000:291::-2a03:5000:292:ffff:ffff:ffff:ffff:ffff 2a03:5000:311::-2a03:5000:312:ffff:ffff:ffff:ffff:ffff 2a03:5000:421::/48 2a03:5000:441::-2a03:5000:442:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 47:d0:d4:be:61:d0:34:82:14:bc:91:ce:74:33:a8:91:41:db: fd:1d:ba:6d:fb:7e:52:c4:0d:c7:28:a7:51:19:6a:11:e7:56: c2:71:41:a9:33:07:7f:09:df:93:dc:08:f0:03:56:e4:74:8f: 58:55:9a:61:08:8f:45:18:67:67:5a:76:75:cc:99:f9:b5:1d: 9a:fa:2b:5c:f9:7e:a9:94:b3:6d:bc:69:d5:fd:0b:53:e4:89: 5d:c9:94:52:55:60:e2:bd:4e:c2:24:e5:35:a0:81:8f:f8:48: 58:ce:43:1a:e7:f0:a0:8c:3f:82:26:df:72:ea:d9:c4:ab:67: af:6c:f2:67:93:49:59:74:08:07:8d:76:01:71:df:23:30:9d: e5:93:43:d7:71:58:d6:0f:21:7d:2c:39:3d:02:cf:25:79:b5: f0:15:1e:87:05:9a:8c:52:a7:13:e1:9b:24:2b:14:9b:a3:06: a7:ea:63:f9:20:2b:34:a1:4c:b4:0a:db:9a:a4:50:dc:9b:71: eb:29:bd:22:62:ac:f5:22:07:dc:69:86:5d:07:e8:21:be:c0: b0:36:62:16:66:fc:99:f4:9b:88:b5:3b:d0:7c:92:03:d4:62: 52:7a:69:9e:06:6b:50:e7:4c:f4:6f:70:5f:91:88:42:db:f7: 96:d7:2c:5c -----BEGIN CERTIFICATE----- MIIHqTCCBpGgAwIBAgISAZt5ENQusj7qX9prrkXZf5waMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Y2M2YjljMzdmYWEwZGEzYjQxMjAwN2MwYjEwYjJjNWJm MmNmNGUwHhcNMjYwMTAxMTAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzhkN2QwOGM4ZjdmNjJiNDRjNzk3NzVhZDk5YWZhNzVkNmQxMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKE2UXZ53+IM5XlH202TSRzrSG+p Z4lNIdly0+1CcLEMSCDmao3EjOey9+M5+zo57ANwKsB2p9Mf4djH92gID8DAceNb h348BdNtmywpSUcgCywzBgbmXEFrgEmHIfwBnsgxco7mj0rIFNGED+2zcgXxMcAd d0NwlVFOn6LkPJ3FYDr8X3yFDH1IBVyipfIqBagUirDltOkHl4f0Un5CpuDOiMDN 5gVult/OHT1dTq0uvfl2e2d5Rp3G/jAPCm5Ax3BHaRcmHXEn6cwg22qg8GHrPIKI Qe7eJyFIrgsVKS9cNEuXAt3/81t83px1EyEVCnSFFWNWA3V1mV8dpmmy7QIDAQAB o4IEtTCCBLEwHQYDVR0OBBYEFEONfQjI9/YrRMeXda2Zr6ddbRCaMB8GA1UdIwQY MBaAFCTMa5w3+qDaO0EgB8CxCyxb8s9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUt ODY0MjM4YmMwNDliLzEvUTQxOUNNajM5aXRFeDVkMXJabXZwMTF0RUpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUtODY0MjM4YmMwNDli LzEvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICyQYIKwYBBQUHAQcBAf8EggK4MIICtDAYBAIAATASAwQC w8ucAwQA2RsEAwQB2RsGMIIClgQCAAIwggKOMBIDBwAqA1AAAAEDBwAqA1AAAAID BwAqA1AAAAcwEgMHACoDUAAAEQMHACoDUAAAEjASAwcFKgNQAAAgAwcAKgNQAAAi MBIDBwQqA1AAADADBwAqA1AAADIwEgMHACoDUAAAQQMHACoDUAAAQjASAwcAKgNQ AABRAwcAKgNQAABSMBIDBwAqA1AAAGEDBwAqA1AAAGIwEgMHACoDUAAAcQMHACoD UAAAcjASAwcAKgNQAACBAwcAKgNQAACCMBIDBwAqA1AAAJEDBwAqA1AAAJIwEgMH ACoDUAABAQMHACoDUAABAjASAwcAKgNQAAERAwcAKgNQAAESMBIDBwAqA1AAASED BwAqA1AAASIDBwAqA1AAAScwEgMHACoDUAABMQMHACoDUAABMjASAwcAKgNQAAFB AwcAKgNQAAFCMBIDBwAqA1AAAVEDBwAqA1AAAVIwEgMHACoDUAABYQMHACoDUAAB YjASAwcAKgNQAAFxAwcAKgNQAAFyMBIDBwAqA1AAAYEDBwAqA1AAAYIwEgMHACoD UAABkQMHACoDUAABkgMHACoDUAABlzASAwcAKgNQAAIBAwcAKgNQAAICMBIDBwAq A1AAAhEDBwAqA1AAAhIwEgMHACoDUAACIQMHACoDUAACIgMHACoDUAACJzASAwcA KgNQAAIxAwcAKgNQAAIyMBIDBwAqA1AAAkEDBwAqA1AAAkIDBwAqA1AAAkcwEgMH ACoDUAACUQMHACoDUAACUjASAwcAKgNQAAJxAwcAKgNQAAJyMBIDBwAqA1AAApED BwAqA1AAApIwEgMHACoDUAADEQMHACoDUAADEgMHACoDUAAEITASAwcAKgNQAARB AwcAKgNQAARCMA0GCSqGSIb3DQEBCwUAA4IBAQBH0NS+YdA0ghS8kc50M6iRQdv9 Hbpt+35SxA3HKKdRGWoR51bCcUGpMwd/Cd+T3AjwA1bkdI9YVZphCI9FGGdnWnZ1 zJn5tR2a+itc+X6plLNtvGnV/QtT5IldyZRSVWDivU7CJOU1oIGP+EhYzkMa5/Cg jD+CJt9y6tnEq2evbPJnk0lZdAgHjXYBcd8jMJ3lk0PXcVjWDyF9LDk9As8lebXw FR6HBZqMUqcT4ZskKxSbowan6mP5ICs0oUy0CtuapFDcm3HrKb0iYqz1IgfcaYZd B+ghvsCwNmIWZvyZ9JuItTvQfJID1GJSemmeBmtQ50z0b3BfkYhC2/eW1yxc -----END CERTIFICATE-----Generated at Sun Jan 25 17:16:21 2026 by rpki-client