This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/Q6jWWNwFSQEE3tRsGBlCg_ZVl20.roa File: Q6jWWNwFSQEE3tRsGBlCg_ZVl20.roa (raw, json) Hash identifier: FyqK9jZ27cGkvbDyCDe1OUlIh4FvaJyJ1LPI/ZyMQ0g= Subject key identifier: 43:A8:D6:58:DC:05:49:01:04:DE:D4:6C:18:19:42:83:F6:55:97:6D Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019B79EC4C11136CA4E0B923E83302C51FE3 Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/Q6jWWNwFSQEE3tRsGBlCg_ZVl20.roa Signing time: Thu 01 Jan 2026 14:18:07 +0000 ROA not before: Thu 01 Jan 2026 14:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214221 IP address blocks: 192.109.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:4c:11:13:6c:a4:e0:b9:23:e8:33:02:c5:1f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jan 1 14:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43a8d658dc05490104ded46c18194283f655976d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1f:38:9a:84:64:a0:a0:a3:dc:c5:96:37:bc: cd:53:1e:61:8c:4a:09:64:4a:4a:ac:3a:5b:21:c9: 29:2a:f7:60:b3:29:65:31:f5:88:ca:07:8c:b6:2b: 70:98:f9:80:7e:53:c8:8c:a7:3b:83:7c:e4:47:79: 06:c8:49:97:f6:2e:a4:8c:ef:ad:74:6f:54:92:c6: 0e:16:0f:3e:de:51:23:0c:6f:11:4f:4f:09:3d:c5: 4c:21:37:71:da:33:be:6c:a0:ce:99:96:3c:7f:5b: e0:9b:ca:8d:ef:3a:11:46:68:e0:23:41:5d:8b:03: ef:8f:04:4a:33:10:a3:07:ff:6a:5a:97:4d:c0:68: 9b:9e:c0:f8:db:c6:69:ed:e9:e8:88:f6:67:5b:5a: 49:70:62:09:60:a5:73:b8:96:d6:2d:4f:38:1d:76: 4e:d5:e5:9f:0f:23:68:d3:ad:33:71:a9:c0:03:f2: 2e:4d:10:a7:9c:a2:63:1c:49:a1:59:b6:35:de:29: 17:41:a2:78:29:72:f5:29:55:52:86:c9:c7:7c:d1: ce:66:6f:5a:28:93:3a:6c:35:8a:10:3c:23:08:25: 07:f7:ac:50:33:7e:96:da:ee:21:02:af:7a:0c:40: 07:e7:9e:08:50:57:a5:a3:07:4d:35:77:9a:b5:ea: bd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A8:D6:58:DC:05:49:01:04:DE:D4:6C:18:19:42:83:F6:55:97:6D X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/Q6jWWNwFSQEE3tRsGBlCg_ZVl20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.253.0/24 Signature Algorithm: sha256WithRSAEncryption 55:ea:b6:84:4e:3c:44:fd:cf:f3:53:01:9e:a4:79:f9:e1:14: 5f:0b:5f:05:ea:d2:1b:05:7c:b2:8f:a7:81:5f:ef:0c:e5:7b: fb:fa:74:b4:1d:c1:da:65:fe:d3:bf:17:a1:f7:44:a8:41:b3: 32:1e:8e:fb:ca:9f:47:c0:21:5b:7c:c9:2f:b3:4b:fc:a7:27: dd:95:3c:5f:96:1e:43:fb:87:f0:20:b7:e9:cf:c5:0a:b2:34: 7b:7e:56:0c:d4:e2:a4:9e:e7:f6:8e:3e:6b:7e:28:c2:f5:ba: 9e:30:60:9a:e7:aa:3c:5e:b2:ff:be:a9:fc:3b:11:3e:6d:11: 39:91:cb:1a:d4:95:99:48:d8:30:19:cd:fe:d5:19:e4:9d:52: 6b:87:54:59:05:0d:4a:1e:8f:90:21:33:ba:b8:01:39:ef:d7: b1:8a:30:f4:f9:68:27:10:0c:c3:2a:5d:f8:2f:01:11:f8:d0: d9:57:32:67:a4:5c:31:02:9b:5f:56:08:18:a7:2a:22:33:19: 46:77:a6:0d:c3:e4:6c:16:45:b4:b8:0b:de:63:8a:c6:12:f4: 94:f0:5d:6a:6d:19:26:39:90:59:c1:7d:8f:12:c1:97:85:af: ed:bb:fc:be:36:87:ae:d3:dd:fc:cb:09:e2:01:f0:59:d7:d0: 5f:1e:88:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57EwRE2yk4Lkj6DMCxR/jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMTAxMTQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2E4ZDY1OGRjMDU0OTAxMDRkZWQ0NmMxODE5NDI4M2Y2NTU5NzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx84moRkoKCj3MWWN7zNUx5hjEoJ ZEpKrDpbIckpKvdgsyllMfWIygeMtitwmPmAflPIjKc7g3zkR3kGyEmX9i6kjO+t dG9UksYOFg8+3lEjDG8RT08JPcVMITdx2jO+bKDOmZY8f1vgm8qN7zoRRmjgI0Fd iwPvjwRKMxCjB/9qWpdNwGibnsD428Zp7enoiPZnW1pJcGIJYKVzuJbWLU84HXZO 1eWfDyNo060zcanAA/IuTRCnnKJjHEmhWbY13ikXQaJ4KXL1KVVShsnHfNHOZm9a KJM6bDWKEDwjCCUH96xQM36W2u4hAq96DEAH554IUFelowdNNXeateq9EwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEOo1ljcBUkBBN7UbBgZQoP2VZdtMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvUTZqV1dOd0ZTUUVFM3RSc0dCbENnX1pWbDIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG39MA0G CSqGSIb3DQEBCwUAA4IBAQBV6raETjxE/c/zUwGepHn54RRfC18F6tIbBXyyj6eB X+8M5Xv7+nS0HcHaZf7Tvxeh90SoQbMyHo77yp9HwCFbfMkvs0v8pyfdlTxflh5D +4fwILfpz8UKsjR7flYM1OKknuf2jj5rfijC9bqeMGCa56o8XrL/vqn8OxE+bRE5 kcsa1JWZSNgwGc3+1RnknVJrh1RZBQ1KHo+QITO6uAE579exijD0+WgnEAzDKl34 LwER+NDZVzJnpFwxAptfVggYpyoiMxlGd6YNw+RsFkW0uAveY4rGEvSU8F1qbRkm OZBZwX2PEsGXha/tu/y+Noeu0938ywniAfBZ19BfHojB -----END CERTIFICATE-----Generated at Mon Jan 26 12:25:59 2026 by rpki-client