This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/KQTIjNE7caGv_nviIPZ5cZuy8Q8.roa File: KQTIjNE7caGv_nviIPZ5cZuy8Q8.roa (raw, json) Hash identifier: cSvFuOqXXAj2/wAYTIAfYAtvVPOOu2ZhX591QT1TiQI= Subject key identifier: 29:04:C8:8C:D1:3B:71:A1:AF:FE:7B:E2:20:F6:79:71:9B:B2:F1:0F Certificate issuer: /CN=1151a4811148f7d0598f5ff021dadd3a10e5f29c Certificate serial: 019B7EA4E11E8058EFC7C66ACD4CA8FA6DB2 Authority key identifier: 11:51:A4:81:11:48:F7:D0:59:8F:5F:F0:21:DA:DD:3A:10:E5:F2:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/KQTIjNE7caGv_nviIPZ5cZuy8Q8.roa Signing time: Fri 02 Jan 2026 12:18:13 +0000 ROA not before: Fri 02 Jan 2026 12:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207593 IP address blocks: 194.35.187.0/24 maxlen: 24 194.36.19.0/24 maxlen: 24 194.36.83.0/24 maxlen: 24 194.36.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.crl rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:e1:1e:80:58:ef:c7:c6:6a:cd:4c:a8:fa:6d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1151a4811148f7d0598f5ff021dadd3a10e5f29c Validity Not Before: Jan 2 12:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2904c88cd13b71a1affe7be220f679719bb2f10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:df:05:d5:eb:1e:8c:c9:66:70:4f:59:54:85: 81:0a:d0:2b:8b:85:a6:7e:a0:88:05:ef:5a:8b:e5: 25:b3:c9:ad:09:05:86:fb:df:73:ca:d7:1e:fe:ca: 73:dc:74:59:bd:97:5d:d4:1b:95:4e:73:c4:3d:f7: 69:9e:12:c2:c2:7a:0d:d6:ec:4f:a7:15:97:1a:87: 1c:94:0c:d3:b2:cd:b2:58:dc:78:98:91:ce:95:c2: fa:63:18:49:de:f1:8b:fb:8c:ae:b4:bd:25:4b:c6: d4:0f:74:90:36:08:bf:92:df:98:9f:9c:69:d8:6d: f6:25:1e:74:de:7c:d3:2a:9a:97:44:3c:b1:32:f8: f3:ac:a4:c1:31:28:e2:d8:ea:35:a3:b2:2c:f4:f4: d8:9d:17:ff:39:c7:4c:26:d8:ad:45:6f:c9:90:f9: 29:91:72:81:2b:c4:f8:bd:71:1e:2c:97:7e:f5:40: 82:e1:49:64:d3:33:a6:c8:a6:59:59:1a:14:83:b1: 59:f9:d2:b6:e9:9c:ed:26:73:c3:a1:d3:90:3a:29: 67:99:24:9d:e9:0a:30:8c:05:e7:72:1a:e6:dd:83: cb:1c:2a:bf:09:64:21:8c:83:86:e4:31:0c:ea:97: 75:5b:fb:d7:37:42:37:95:0b:89:12:b1:d9:04:64: b8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:04:C8:8C:D1:3B:71:A1:AF:FE:7B:E2:20:F6:79:71:9B:B2:F1:0F X509v3 Authority Key Identifier: keyid:11:51:A4:81:11:48:F7:D0:59:8F:5F:F0:21:DA:DD:3A:10:E5:F2:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/KQTIjNE7caGv_nviIPZ5cZuy8Q8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.187.0/24 194.36.19.0/24 194.36.83.0/24 194.36.120.0/24 Signature Algorithm: sha256WithRSAEncryption af:56:3d:8d:3e:ca:2a:34:7a:8a:08:cd:a1:3a:13:62:de:1d: 47:31:df:e0:22:a0:9d:ad:b8:cb:3b:ab:d7:7c:1f:9a:81:a1: 29:2f:cf:c2:0e:b0:de:f5:a6:44:f4:73:c3:08:e8:aa:c1:0f: 55:a6:a2:56:a7:01:69:83:a5:b2:d9:5a:f4:bb:68:13:7e:2d: 28:fe:84:3d:54:3d:c6:97:f5:eb:d4:34:6d:69:73:83:45:d4: 31:4f:2c:b0:26:ec:15:53:5c:45:5e:ef:ce:1f:1e:23:ed:91: 86:45:50:70:01:2a:a4:ab:9f:d8:c9:b7:76:e8:28:1e:0a:55: 39:a0:ad:a6:0c:e8:43:0a:bc:4e:b3:f6:4f:34:48:58:b2:ef: da:82:c0:cf:86:1f:44:04:aa:44:a0:23:64:d5:b7:4a:4f:ed: ea:e7:a2:b5:57:9d:46:8c:e9:47:ab:19:93:49:b0:25:b9:b8: 4d:d4:dc:3b:5a:6e:c2:2c:fb:e6:2a:0d:2d:f7:c0:40:78:a1: c0:9c:b5:46:1c:e7:31:d9:4e:36:1e:a8:da:0a:02:76:c5:51: 1a:77:4a:05:da:e8:5f:68:30:8c:24:0d:7d:b5:4e:c3:79:d7: 90:28:0d:54:f8:1e:66:8a:87:41:0c:ce:bb:04:ef:48:06:18: 27:9b:9d:5a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+pOEegFjvx8ZqzUyo+m2yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNTFhNDgxMTE0OGY3ZDA1OThmNWZmMDIxZGFkZDNhMTBl NWYyOWMwHhcNMjYwMTAyMTIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTA0Yzg4Y2QxM2I3MWExYWZmZTdiZTIyMGY2Nzk3MTliYjJmMTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA298F1esejMlmcE9ZVIWBCtAri4Wm fqCIBe9ai+Uls8mtCQWG+99zytce/spz3HRZvZdd1BuVTnPEPfdpnhLCwnoN1uxP pxWXGocclAzTss2yWNx4mJHOlcL6YxhJ3vGL+4yutL0lS8bUD3SQNgi/kt+Yn5xp 2G32JR503nzTKpqXRDyxMvjzrKTBMSji2Oo1o7Is9PTYnRf/OcdMJtitRW/JkPkp kXKBK8T4vXEeLJd+9UCC4Ulk0zOmyKZZWRoUg7FZ+dK26ZztJnPDodOQOilnmSSd 6QowjAXnchrm3YPLHCq/CWQhjIOG5DEM6pd1W/vXN0I3lQuJErHZBGS4kQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCkEyIzRO3Ghr/574iD2eXGbsvEPMB8GA1UdIwQY MBaAFBFRpIERSPfQWY9f8CHa3ToQ5fKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVZHa2dSRkk5OUJaajFfd0lkcmRPaERsOHB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yZDBkYWUtZDJiYy00OWQxLTgxMTUt MzRjYjlkNWM5NDMyLzEvS1FUSWpORTdjYUd2X252aUlQWjVjWnV5OFE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yZDBkYWUtZDJiYy00OWQxLTgxMTUtMzRjYjlkNWM5NDMy LzEvRVZHa2dSRkk5OUJaajFfd0lkcmRPaERsOHB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwiO7AwQA wiQTAwQAwiRTAwQAwiR4MA0GCSqGSIb3DQEBCwUAA4IBAQCvVj2NPsoqNHqKCM2h OhNi3h1HMd/gIqCdrbjLO6vXfB+agaEpL8/CDrDe9aZE9HPDCOiqwQ9VpqJWpwFp g6Wy2Vr0u2gTfi0o/oQ9VD3Gl/Xr1DRtaXODRdQxTyywJuwVU1xFXu/OHx4j7ZGG RVBwASqkq5/Yybd26CgeClU5oK2mDOhDCrxOs/ZPNEhYsu/agsDPhh9EBKpEoCNk 1bdKT+3q56K1V51GjOlHqxmTSbAlubhN1Nw7Wm7CLPvmKg0t98BAeKHAnLVGHOcx 2U42HqjaCgJ2xVEad0oF2uhfaDCMJA19tU7DedeQKA1U+B5miodBDM67BO9IBhgn m51a -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:42 2026 by rpki-client