This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/QEWXLCozNWZw_RCBzsdltm0LEhQ.roa File: QEWXLCozNWZw_RCBzsdltm0LEhQ.roa (raw, json) Hash identifier: t88Arwx5bbKjbCAwajhVSkpPUu4215Th9Y4+Z1idjZI= Subject key identifier: 40:45:97:2C:2A:33:35:66:70:FD:10:81:CE:C7:65:B6:6D:0B:12:14 Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1B4F1C7510ED53C84F1E575A7670C Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/QEWXLCozNWZw_RCBzsdltm0LEhQ.roa Signing time: Fri 02 Jan 2026 18:21:45 +0000 ROA not before: Fri 02 Jan 2026 18:21:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21641 IP address blocks: 194.147.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:b4:f1:c7:51:0e:d5:3c:84:f1:e5:75:a7:67:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4045972c2a33356670fd1081cec765b66d0b1214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e8:52:7f:47:9f:09:8b:a3:e6:ae:97:f1:50: f2:0e:c0:f5:d1:d4:3f:de:9b:72:bc:49:6f:a1:53: f5:b1:9a:cc:1b:58:ef:44:17:37:a8:c5:6f:a7:10: b8:55:ad:fb:95:72:ca:14:f4:cb:1c:7a:c3:6c:8e: 3e:67:14:78:b3:7d:da:fa:e5:7a:db:fb:7a:ce:6c: 26:21:85:f9:3b:a6:26:b3:94:7e:b1:6c:1d:d2:41: 62:5c:03:de:86:03:c3:2f:2a:53:b7:89:79:51:9f: 5c:3c:a4:45:0a:5d:40:c9:cf:23:fb:b9:3d:f2:cf: 58:f3:9e:a1:ac:bd:12:d5:0c:5b:f0:b0:c4:66:15: 86:54:d8:ae:51:9a:1c:de:a3:16:f2:f0:00:41:ce: 57:7f:dd:82:e8:01:9b:77:ed:fb:e7:c8:14:fe:d9: 56:77:00:4f:34:2c:2c:8f:4f:fc:f6:2a:a9:01:45: 1c:8d:c5:51:3a:d2:91:ab:ce:3c:fa:c4:6b:b8:7a: 34:d8:d7:dd:63:d0:82:b8:91:32:4f:49:de:3f:b1: ee:c2:d7:19:a9:56:94:81:8e:ac:e5:3f:de:da:f5: 29:01:4f:8b:99:d3:bc:a2:20:52:4b:37:69:9b:73: 69:0d:8c:79:73:8e:bb:3b:8c:9c:b5:d4:e3:ce:1e: 58:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:45:97:2C:2A:33:35:66:70:FD:10:81:CE:C7:65:B6:6D:0B:12:14 X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/QEWXLCozNWZw_RCBzsdltm0LEhQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.71.0/24 Signature Algorithm: sha256WithRSAEncryption 53:99:33:dc:4d:f3:1e:a0:d7:13:b5:a1:b1:b1:27:6f:a3:56: 36:c7:6b:71:d9:c7:a8:51:43:c8:95:7a:4c:3e:6e:46:31:79: 31:00:fd:95:e5:bf:14:8e:af:9e:bb:16:47:e4:5a:28:c4:c6: 32:6a:48:2c:4a:77:71:1a:db:b9:c8:b9:2e:5b:4f:3d:2a:9e: dd:2c:56:b5:64:18:de:e2:63:e7:ee:73:18:1d:ce:fb:96:d2: 06:35:95:c4:22:c8:eb:8f:28:93:45:66:86:bd:4b:7a:a9:6d: 56:a7:0b:ff:76:8f:64:5e:8d:e1:5a:28:b0:1e:e3:a7:39:9a: 25:72:eb:76:2c:98:8a:93:1f:ea:19:c5:a7:89:9b:97:84:0d: 71:90:af:3f:fe:82:be:68:9f:ce:d8:54:ec:1e:ef:91:56:b1: 0c:ad:21:a6:88:34:f5:35:bf:86:69:8e:82:56:c5:87:fc:0c: 7c:ff:ca:8c:55:91:44:66:cb:07:09:d4:3e:11:a4:5a:5d:97: af:7e:ba:2b:40:bf:7c:72:99:1a:4d:53:71:d6:77:38:a0:af: a7:6a:3b:81:a6:68:12:e2:99:ab:aa:57:b7:97:74:3e:99:21: cc:d0:bf:4a:80:b8:ed:ff:ed:f3:c1:19:d7:4f:7a:da:20:1b: 86:5d:7f:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8bTxx1EO1TyE8eV1p2cMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDQ1OTcyYzJhMzMzNTY2NzBmZDEwODFjZWM3NjViNjZkMGIxMjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+hSf0efCYuj5q6X8VDyDsD10dQ/ 3ptyvElvoVP1sZrMG1jvRBc3qMVvpxC4Va37lXLKFPTLHHrDbI4+ZxR4s33a+uV6 2/t6zmwmIYX5O6Yms5R+sWwd0kFiXAPehgPDLypTt4l5UZ9cPKRFCl1Ayc8j+7k9 8s9Y856hrL0S1Qxb8LDEZhWGVNiuUZoc3qMW8vAAQc5Xf92C6AGbd+3758gU/tlW dwBPNCwsj0/89iqpAUUcjcVROtKRq848+sRruHo02NfdY9CCuJEyT0neP7HuwtcZ qVaUgY6s5T/e2vUpAU+LmdO8oiBSSzdpm3NpDYx5c467O4yctdTjzh5YewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEBFlywqMzVmcP0Qgc7HZbZtCxIUMB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvUUVXWExDb3pOV1p3X1JDQnpzZGx0bTBMRWhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpNHMA0G CSqGSIb3DQEBCwUAA4IBAQBTmTPcTfMeoNcTtaGxsSdvo1Y2x2tx2ceoUUPIlXpM Pm5GMXkxAP2V5b8Ujq+euxZH5FooxMYyakgsSndxGtu5yLkuW089Kp7dLFa1ZBje 4mPn7nMYHc77ltIGNZXEIsjrjyiTRWaGvUt6qW1Wpwv/do9kXo3hWiiwHuOnOZol cut2LJiKkx/qGcWniZuXhA1xkK8//oK+aJ/O2FTsHu+RVrEMrSGmiDT1Nb+GaY6C VsWH/Ax8/8qMVZFEZssHCdQ+EaRaXZevfrorQL98cpkaTVNx1nc4oK+najuBpmgS 4pmrqle3l3Q+mSHM0L9KgLjt/+3zwRnXT3raIBuGXX/y -----END CERTIFICATE-----Generated at Fri Jan 23 15:21:26 2026 by rpki-client