This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QjUSHxwMBZFXzpMAbJ4nfWRfU7k.roa File: QjUSHxwMBZFXzpMAbJ4nfWRfU7k.roa (raw, json) Hash identifier: 9zZudgkWzuv0mTYO5+53cs2QefPw+qtxB7+ywA2yEtM= Subject key identifier: 42:35:12:1F:1C:0C:05:91:57:CE:93:00:6C:9E:27:7D:64:5F:53:B9 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F85676F5120022C64A671F61C4981D4 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QjUSHxwMBZFXzpMAbJ4nfWRfU7k.roa Signing time: Fri 02 Jan 2026 16:23:27 +0000 ROA not before: Fri 02 Jan 2026 16:23:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207483 IP address blocks: 194.87.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:67:6f:51:20:02:2c:64:a6:71:f6:1c:49:81:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4235121f1c0c059157ce93006c9e277d645f53b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:f0:98:56:7f:75:a6:c0:54:a4:e1:5c:dc: 97:20:6d:e6:b7:e4:ee:fa:cd:e8:d7:d8:6d:8e:67: 0f:b0:60:72:42:f1:c8:ae:10:47:6b:ac:07:45:81: 46:38:e9:49:7f:7a:4b:60:f2:51:fe:e4:32:2f:03: 71:cc:7d:70:68:da:ca:6a:98:04:8f:41:27:95:6a: 9b:4a:d9:6b:97:ba:1d:8d:42:12:1b:0a:c7:db:cb: bd:79:18:99:86:48:2c:2b:46:10:6a:14:a1:69:9b: 9b:bd:72:02:b3:a6:48:df:2b:4e:0f:41:65:b2:df: 24:f1:ef:a8:32:78:da:93:b7:45:81:49:ed:ef:3f: ad:2f:3c:74:c7:a8:a8:be:fb:b1:df:fe:5d:0e:34: 16:84:06:8f:1c:73:b5:ff:7b:39:9a:7f:1b:05:a9: c7:ea:10:68:3f:40:be:65:92:99:98:8d:ac:85:bf: f3:b3:16:af:2d:8c:a7:fe:2e:2a:94:7b:15:16:ce: b5:00:9d:9f:1f:b0:2a:25:1e:00:bd:44:39:59:22: 74:31:a0:b0:6b:59:63:0a:11:ed:ec:11:9b:3e:1e: 05:7b:66:84:36:04:fa:ed:50:ff:cb:43:0a:0e:75: 85:7c:c6:e4:1f:41:1f:9d:0d:26:b4:e9:4d:5b:d0: 27:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:35:12:1F:1C:0C:05:91:57:CE:93:00:6C:9E:27:7D:64:5F:53:B9 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QjUSHxwMBZFXzpMAbJ4nfWRfU7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.246.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:10:69:46:c7:5f:fb:8e:3a:e4:3c:7a:29:ec:08:e4:78:d2: f4:e8:2c:90:1f:56:3e:a3:51:65:cf:4f:87:74:5e:f5:b1:eb: 26:f0:2b:a0:4b:47:ad:8f:66:af:31:2e:fe:54:9e:c2:34:8d: a0:51:1b:da:7a:7b:ea:c8:14:a0:71:f1:95:ea:a3:d7:7c:1e: fb:34:6c:f4:a0:29:6c:aa:70:89:42:6f:de:eb:0a:cc:2e:f4: 58:66:4b:6e:01:3f:eb:8d:8a:77:47:7c:2b:de:e3:88:ea:43: 7a:24:86:4e:7d:bd:f5:fb:a1:6f:77:3f:f9:1c:90:00:4e:c9: 2b:c3:25:60:66:cd:27:76:eb:fa:d7:c7:a7:e0:16:64:3f:d2: 07:2b:38:af:68:b1:86:9b:5a:45:09:02:43:54:46:05:17:b9: 8b:8d:4e:42:78:33:ed:ed:3f:03:05:89:28:eb:97:0c:38:08: 14:4d:10:65:5e:3e:58:a5:62:11:73:19:d5:9a:00:b0:40:ce: b2:7d:37:a2:6f:fb:24:5b:74:46:15:ff:f3:0b:6a:64:c7:56: e8:0c:ca:fe:c4:e4:75:ab:4d:d0:66:ea:0a:f2:bd:92:05:cb: a5:52:4d:d3:92:df:f9:63:d6:46:6f:f5:59:eb:92:d6:64:2f: 21:d9:ca:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hWdvUSACLGSmcfYcSYHUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjM1MTIxZjFjMGMwNTkxNTdjZTkzMDA2YzllMjc3ZDY0NWY1M2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOTwmFZ/dabAVKThXNyXIG3mt+Tu +s3o19htjmcPsGByQvHIrhBHa6wHRYFGOOlJf3pLYPJR/uQyLwNxzH1waNrKapgE j0EnlWqbStlrl7odjUISGwrH28u9eRiZhkgsK0YQahShaZubvXICs6ZI3ytOD0Fl st8k8e+oMnjak7dFgUnt7z+tLzx0x6iovvux3/5dDjQWhAaPHHO1/3s5mn8bBanH 6hBoP0C+ZZKZmI2shb/zsxavLYyn/i4qlHsVFs61AJ2fH7AqJR4AvUQ5WSJ0MaCw a1ljChHt7BGbPh4Fe2aENgT67VD/y0MKDnWFfMbkH0EfnQ0mtOlNW9AnNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEI1Eh8cDAWRV86TAGyeJ31kX1O5MB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvUWpVU0h4d01CWkZYenBNQWJKNG5mV1JmVTdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlf2MA0G CSqGSIb3DQEBCwUAA4IBAQBuEGlGx1/7jjrkPHop7AjkeNL06CyQH1Y+o1Flz0+H dF71sesm8CugS0etj2avMS7+VJ7CNI2gURvaenvqyBSgcfGV6qPXfB77NGz0oCls qnCJQm/e6wrMLvRYZktuAT/rjYp3R3wr3uOI6kN6JIZOfb31+6Fvdz/5HJAATskr wyVgZs0nduv618en4BZkP9IHKzivaLGGm1pFCQJDVEYFF7mLjU5CeDPt7T8DBYko 65cMOAgUTRBlXj5YpWIRcxnVmgCwQM6yfTeib/skW3RGFf/zC2pkx1boDMr+xOR1 q03QZuoK8r2SBculUk3Tkt/5Y9ZGb/VZ65LWZC8h2crO -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:18 2026 by rpki-client