This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QwXw5CoQAQU8rRTZTnmQ1v9lXr0.roa File: QwXw5CoQAQU8rRTZTnmQ1v9lXr0.roa (raw, json) Hash identifier: DwbTZECmMs3KugEM6yENtV5POoYoFasDxfNFU5a8SaY= Subject key identifier: 43:05:F0:E4:2A:10:01:05:3C:AD:14:D9:4E:79:90:D6:FF:65:5E:BD Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F856AD1DB56EDB8A6234F221339E5C1 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QwXw5CoQAQU8rRTZTnmQ1v9lXr0.roa Signing time: Fri 02 Jan 2026 16:23:28 +0000 ROA not before: Fri 02 Jan 2026 16:23:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210546 IP address blocks: 194.87.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:6a:d1:db:56:ed:b8:a6:23:4f:22:13:39:e5:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4305f0e42a1001053cad14d94e7990d6ff655ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:35:0c:0a:b0:a6:0b:00:57:36:ef:f8:56:63: 03:60:60:8d:11:4c:f0:d5:c7:a3:9d:62:02:56:9d: 6e:c0:9c:02:42:ac:06:49:6b:b3:a3:cb:d4:e9:58: 40:6c:63:55:53:10:cc:3e:28:20:da:99:41:5b:43: c8:a2:8d:4c:50:25:ad:92:76:bd:14:04:0e:8c:9c: 53:fa:e5:d1:b9:a9:15:7b:d8:69:f6:0c:bb:e5:c1: 4d:f9:e5:f9:e3:fa:78:29:19:ba:43:76:d9:9b:d2: d9:24:16:22:1d:2a:25:a4:a0:ee:97:19:3c:3e:5e: d7:df:30:c3:f8:62:5b:94:5e:f3:26:f5:ce:ef:84: 4b:cc:fc:b4:dd:c7:c0:a0:63:97:ff:63:55:17:84: 51:1c:c6:d2:b9:0f:0b:62:52:45:c6:14:51:9c:ab: 95:8e:81:bb:8f:7a:ed:35:59:ca:f2:3e:ba:6c:35: 94:dd:06:f0:d9:9c:32:e1:12:a5:fe:0d:ea:cf:ae: db:c5:a9:f2:18:f6:f2:28:82:29:ee:c8:05:79:53: ca:c0:3b:d1:ec:7f:f1:02:5e:54:24:d7:18:74:be: 13:6f:72:a0:03:20:7c:85:26:3f:d1:54:25:3d:8c: 9a:f3:78:97:39:8e:24:67:e8:0c:b7:a2:0b:fc:c0: 5c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:05:F0:E4:2A:10:01:05:3C:AD:14:D9:4E:79:90:D6:FF:65:5E:BD X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QwXw5CoQAQU8rRTZTnmQ1v9lXr0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.199.0/24 Signature Algorithm: sha256WithRSAEncryption 74:6e:97:bb:b1:31:be:82:b0:29:05:ab:b7:73:d3:ed:3f:af: 4b:0c:42:bf:67:c1:a5:b0:ce:76:9c:29:4f:d9:b7:12:37:36: da:8e:e1:80:48:53:70:31:47:0a:8b:dc:34:6d:83:03:e9:3c: 54:37:b7:0d:9e:9b:fe:ad:98:88:e2:e4:3c:ba:3d:74:a0:9f: cc:18:83:d7:5f:13:eb:cf:10:5a:49:5b:38:59:52:ab:7f:c5: 15:c6:53:65:62:67:1a:59:ac:ac:97:32:ee:95:dc:fb:bf:e6: 74:43:c5:dc:98:19:8a:69:03:2e:ff:b3:03:8b:8c:2a:17:f8: 99:a5:ac:f3:b7:88:4e:90:3c:d0:98:03:b1:48:b5:9c:74:13: f3:e0:3b:2a:80:58:0c:f3:89:cc:68:65:f6:0e:29:90:32:66: 9c:81:7e:b4:28:a4:7e:e1:9e:46:fa:82:71:d4:90:22:28:88: ad:7c:2a:c1:08:2e:8d:3d:00:08:fb:f4:96:0d:ee:d8:63:54: 08:7c:e8:1d:7f:54:8f:19:de:af:72:8f:c9:b8:23:05:49:43: 6f:ef:91:40:d4:43:f3:13:79:30:fd:7e:18:0e:72:1a:26:ee: 2e:ce:97:72:88:21:13:d2:7d:40:76:45:d6:ea:75:b8:f7:9d: 0e:b8:0e:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hWrR21btuKYjTyITOeXBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzA1ZjBlNDJhMTAwMTA1M2NhZDE0ZDk0ZTc5OTBkNmZmNjU1ZWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TUMCrCmCwBXNu/4VmMDYGCNEUzw 1cejnWICVp1uwJwCQqwGSWuzo8vU6VhAbGNVUxDMPigg2plBW0PIoo1MUCWtkna9 FAQOjJxT+uXRuakVe9hp9gy75cFN+eX54/p4KRm6Q3bZm9LZJBYiHSolpKDulxk8 Pl7X3zDD+GJblF7zJvXO74RLzPy03cfAoGOX/2NVF4RRHMbSuQ8LYlJFxhRRnKuV joG7j3rtNVnK8j66bDWU3Qbw2Zwy4RKl/g3qz67bxanyGPbyKIIp7sgFeVPKwDvR 7H/xAl5UJNcYdL4Tb3KgAyB8hSY/0VQlPYya83iXOY4kZ+gMt6IL/MBcrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEMF8OQqEAEFPK0U2U55kNb/ZV69MB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvUXdYdzVDb1FBUVU4clJUWlRubVExdjlsWHIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlfHMA0G CSqGSIb3DQEBCwUAA4IBAQB0bpe7sTG+grApBau3c9PtP69LDEK/Z8GlsM52nClP 2bcSNzbajuGASFNwMUcKi9w0bYMD6TxUN7cNnpv+rZiI4uQ8uj10oJ/MGIPXXxPr zxBaSVs4WVKrf8UVxlNlYmcaWayslzLuldz7v+Z0Q8XcmBmKaQMu/7MDi4wqF/iZ pazzt4hOkDzQmAOxSLWcdBPz4DsqgFgM84nMaGX2DimQMmacgX60KKR+4Z5G+oJx 1JAiKIitfCrBCC6NPQAI+/SWDe7YY1QIfOgdf1SPGd6vco/JuCMFSUNv75FA1EPz E3kw/X4YDnIaJu4uzpdyiCET0n1AdkXW6nW4950OuA4q -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:39 2026 by rpki-client