This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/qBNprkht_3wALG390SrSxt6PGBw.roa File: qBNprkht_3wALG390SrSxt6PGBw.roa (raw, json) Hash identifier: kjvF8COrbedUsxCSe7zrkJLG0/raxxFzLfphFFiIUxQ= Subject key identifier: A8:13:69:AE:48:6D:FF:7C:00:2C:6D:FD:D1:2A:D2:C6:DE:8F:18:1C Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Certificate serial: 019B7EA69DE1498E84B5566469508C9DD2F9 Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/qBNprkht_3wALG390SrSxt6PGBw.roa Signing time: Fri 02 Jan 2026 12:20:06 +0000 ROA not before: Fri 02 Jan 2026 12:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 194.29.56.0/24 maxlen: 24 194.29.57.0/24 maxlen: 24 194.29.58.0/24 maxlen: 24 194.29.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:9d:e1:49:8e:84:b5:56:64:69:50:8c:9d:d2:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Validity Not Before: Jan 2 12:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a81369ae486dff7c002c6dfdd12ad2c6de8f181c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:90:4d:3a:fb:81:b5:0e:f2:17:2f:1f:f1:02: 47:f0:73:15:1c:4a:7f:26:fe:fc:74:b7:fa:a5:f1: f2:86:18:8d:e4:d6:ee:66:12:f2:2c:54:90:24:64: 48:ab:a3:72:0c:23:8c:e0:43:97:65:86:bc:91:cc: d9:6c:13:7d:44:11:3e:ea:8d:28:35:f9:f8:88:67: b6:a7:ed:95:d0:88:15:56:b8:9b:ce:b4:63:64:cd: 6f:02:15:8f:76:61:69:71:01:24:89:46:92:22:bb: 04:63:50:e1:d0:61:26:ec:58:47:b3:bc:02:70:51: e6:f2:1b:81:bb:5a:0c:e8:ef:c2:8d:fa:cb:a8:c0: b6:ec:42:2d:29:2c:44:c8:3b:12:c6:ef:50:c0:69: bb:6a:24:54:54:d5:57:e1:c3:80:49:c2:14:0d:70: 89:73:d1:9e:c3:4b:97:5a:d2:9b:b7:c5:c7:06:fb: be:10:48:40:86:a6:c9:05:c2:db:e4:5d:4b:09:26: 08:de:e0:98:79:e6:7e:fb:5b:b9:47:12:c1:1a:5a: 2a:17:33:6b:5e:05:e2:b0:61:53:01:87:b0:0e:93: dc:12:58:8c:fc:6d:32:12:b2:71:32:c8:4c:54:bd: df:12:ea:4c:d6:a5:cf:d6:ea:8d:47:fb:cd:6c:71: b9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:13:69:AE:48:6D:FF:7C:00:2C:6D:FD:D1:2A:D2:C6:DE:8F:18:1C X509v3 Authority Key Identifier: keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/qBNprkht_3wALG390SrSxt6PGBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.29.56.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:a8:77:75:da:91:40:53:6b:fb:89:83:83:1c:8f:9c:84:59: 1f:b4:13:ad:f5:1b:2f:1a:7c:d9:40:d5:90:8d:86:3c:b8:eb: 27:73:bf:5b:87:4e:6a:4c:c4:19:f0:86:36:be:f7:1b:d0:b5: 93:40:71:70:d1:22:61:db:db:f1:44:50:cb:40:3f:a1:c5:09: 0a:b1:74:b4:c8:08:73:43:ee:b0:52:d4:a7:23:a4:1f:8f:ef: a1:33:99:3c:84:b0:49:8d:c1:45:b8:41:86:20:ff:7b:81:41: c3:00:81:0f:90:34:31:8c:f6:42:96:8d:af:b0:f0:99:5e:e6: b3:59:b0:35:60:36:ed:4f:08:6e:82:27:17:d4:6e:0e:9e:d3: 63:d7:b0:08:4a:df:1b:5b:d8:27:02:38:36:92:82:a9:21:b4: 7e:f6:b4:15:3b:e3:20:7d:4f:ee:19:d7:e8:07:6a:29:f0:dc: 7a:95:a8:ee:d0:58:70:25:9f:36:9d:77:92:09:a8:a9:c0:c2: 4f:e7:ec:a9:2a:74:21:0f:e9:c1:c6:50:c2:2c:67:de:07:c5: 75:f2:24:ac:31:fa:01:f7:ea:c2:68:b9:68:c9:f4:4c:48:6b: 99:e8:87:55:9c:93:81:6d:9c:49:57:03:73:85:89:7d:e1:80: 0c:15:89:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pp3hSY6EtVZkaVCMndL5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZGUzMmJiOWNjOTllMTE1ZGRiYWY2YjdmYTIzMDUxNzg5 ZjJmNjEwHhcNMjYwMTAyMTIyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODEzNjlhZTQ4NmRmZjdjMDAyYzZkZmRkMTJhZDJjNmRlOGYxODFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJBNOvuBtQ7yFy8f8QJH8HMVHEp/ Jv78dLf6pfHyhhiN5NbuZhLyLFSQJGRIq6NyDCOM4EOXZYa8kczZbBN9RBE+6o0o Nfn4iGe2p+2V0IgVVribzrRjZM1vAhWPdmFpcQEkiUaSIrsEY1Dh0GEm7FhHs7wC cFHm8huBu1oM6O/CjfrLqMC27EItKSxEyDsSxu9QwGm7aiRUVNVX4cOAScIUDXCJ c9Gew0uXWtKbt8XHBvu+EEhAhqbJBcLb5F1LCSYI3uCYeeZ++1u5RxLBGloqFzNr XgXisGFTAYewDpPcEliM/G0yErJxMshMVL3fEupM1qXP1uqNR/vNbHG5RwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKgTaa5Ibf98ACxt/dEq0sbejxgcMB8GA1UdIwQY MBaAFMXeMrucyZ4RXduva3+iMFF4ny9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUt MDYzNjc1MzY3OWI2LzEvcUJOcHJraHRfM3dBTEczOTBTclN4dDZQR0J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUtMDYzNjc1MzY3OWI2 LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwh04MA0G CSqGSIb3DQEBCwUAA4IBAQBbqHd12pFAU2v7iYODHI+chFkftBOt9RsvGnzZQNWQ jYY8uOsnc79bh05qTMQZ8IY2vvcb0LWTQHFw0SJh29vxRFDLQD+hxQkKsXS0yAhz Q+6wUtSnI6Qfj++hM5k8hLBJjcFFuEGGIP97gUHDAIEPkDQxjPZClo2vsPCZXuaz WbA1YDbtTwhugicX1G4OntNj17AISt8bW9gnAjg2koKpIbR+9rQVO+MgfU/uGdfo B2op8Nx6laju0FhwJZ82nXeSCaipwMJP5+ypKnQhD+nBxlDCLGfeB8V18iSsMfoB 9+rCaLloyfRMSGuZ6IdVnJOBbZxJVwNzhYl94YAMFYk5 -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:26 2026 by rpki-client