This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/QKv3-8YoDEK1Mitg0rmTL0SGOJM.roa File: QKv3-8YoDEK1Mitg0rmTL0SGOJM.roa (raw, json) Hash identifier: DZBSel951tZH4WYCuGXNyVILmfYXwt90PA6IkSwgQS0= Subject key identifier: 40:AB:F7:FB:C6:28:0C:42:B5:32:2B:60:D2:B9:93:2F:44:86:38:93 Certificate issuer: /CN=659c356633388e9bd897d000a3f38bc1e546ef4a Certificate serial: 019B797E18584D9C735B8440385AAD5EC0E0 Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/QKv3-8YoDEK1Mitg0rmTL0SGOJM.roa Signing time: Thu 01 Jan 2026 12:17:45 +0000 ROA not before: Thu 01 Jan 2026 12:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 193.38.176.0/24 maxlen: 24 193.38.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:18:58:4d:9c:73:5b:84:40:38:5a:ad:5e:c0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a Validity Not Before: Jan 1 12:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40abf7fbc6280c42b5322b60d2b9932f44863893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c8:3f:6d:b3:bd:3c:5d:25:b5:9b:7f:19:a0: 02:4d:41:76:03:63:f0:2d:03:e5:7e:f4:fb:76:f3: 53:b5:22:1e:15:13:95:0a:2a:16:2e:50:12:b5:8f: c0:5f:d0:f1:34:3d:47:fd:99:e4:2b:6d:0b:e9:58: a5:58:c3:21:00:4f:67:97:de:80:55:e1:03:4b:42: 71:74:39:97:04:7d:4d:7d:c9:d2:74:1e:40:ea:1f: ff:4b:7f:04:f7:fd:05:1c:3d:82:f7:7b:b3:13:0d: 10:79:6e:ad:71:90:87:90:f1:2b:76:d9:40:39:07: 19:cd:fa:e0:d0:24:23:cb:6e:e7:35:27:c6:05:9a: 0b:f1:bb:c0:d1:a2:1a:1c:45:44:11:7b:be:01:56: 64:b8:d8:9f:d9:5d:22:1a:ec:3b:07:7b:59:ff:70: 5e:32:81:49:37:e9:fd:7b:07:86:bd:f8:79:49:09: 98:9b:76:95:7b:83:56:44:73:ed:db:4d:51:5d:e6: e8:8b:12:14:7c:4b:a5:e9:0e:dd:c8:4b:2d:36:f5: 60:2d:84:73:6b:ed:e6:ab:06:5e:45:44:88:14:1f: 9d:7f:d7:23:68:e0:f7:96:69:aa:86:3d:45:d9:e0: 97:f7:b1:2c:ce:9b:07:58:28:3e:ca:00:1e:9d:a7: be:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AB:F7:FB:C6:28:0C:42:B5:32:2B:60:D2:B9:93:2F:44:86:38:93 X509v3 Authority Key Identifier: keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/QKv3-8YoDEK1Mitg0rmTL0SGOJM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.38.176.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:e5:82:4c:34:2d:7a:2e:fd:4b:19:ba:fa:4f:b5:89:89:6f: 35:73:5c:3f:ec:d3:cf:26:16:fe:1d:0a:8c:9a:d0:5b:26:e9: bc:54:33:c8:a3:77:76:e3:27:1b:40:03:88:79:8a:b7:7a:17: 25:f2:db:a3:5d:33:6c:b3:c5:9b:b8:8d:cf:95:6d:f4:d1:62: b4:7a:32:ef:f9:20:47:a5:9c:98:48:e3:fa:c7:1a:1e:e8:74: 7c:ba:ed:8f:c4:a5:c0:db:e2:f6:3c:28:46:28:d1:cf:18:9c: 54:9f:93:06:2c:c8:6d:ac:00:35:f8:54:f8:bc:5c:98:e7:54: 58:13:6e:0f:27:40:b1:85:ac:4e:c3:4e:1b:b8:cd:72:6b:6a: ce:59:fe:bb:04:05:58:86:0a:cd:70:64:c6:3e:3e:a1:01:91: 69:52:6b:9c:08:89:93:69:67:38:88:aa:7f:43:7f:ce:d6:2b: 49:d8:c1:ba:c0:c9:99:05:64:af:1e:b3:e9:2c:1c:06:f3:22: 28:6c:8f:e6:e8:c4:52:af:fa:aa:9c:78:88:df:b1:a3:a2:46: ad:ad:7e:59:9c:9d:3b:53:9e:81:ce:7f:64:59:87:33:74:6d: eb:8e:97:7a:78:d2:32:ea:5f:e7:98:63:ca:30:05:0e:d2:17: da:2f:9e:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fhhYTZxzW4RAOFqtXsDgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OWMzNTY2MzMzODhlOWJkODk3ZDAwMGEzZjM4YmMxZTU0 NmVmNGEwHhcNMjYwMTAxMTIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGFiZjdmYmM2MjgwYzQyYjUzMjJiNjBkMmI5OTMyZjQ0ODYzODkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMg/bbO9PF0ltZt/GaACTUF2A2Pw LQPlfvT7dvNTtSIeFROVCioWLlAStY/AX9DxND1H/ZnkK20L6VilWMMhAE9nl96A VeEDS0JxdDmXBH1NfcnSdB5A6h//S38E9/0FHD2C93uzEw0QeW6tcZCHkPErdtlA OQcZzfrg0CQjy27nNSfGBZoL8bvA0aIaHEVEEXu+AVZkuNif2V0iGuw7B3tZ/3Be MoFJN+n9eweGvfh5SQmYm3aVe4NWRHPt201RXeboixIUfEul6Q7dyEstNvVgLYRz a+3mqwZeRUSIFB+df9cjaOD3lmmqhj1F2eCX97EszpsHWCg+ygAenae+AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFECr9/vGKAxCtTIrYNK5ky9EhjiTMB8GA1UdIwQY MBaAFGWcNWYzOI6b2JfQAKPzi8HlRu9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTkt M2M3ZTRmOTNlNDJiLzEvUUt2My04WW9ERUsxTWl0ZzBybVRMMFNHT0pNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTktM2M3ZTRmOTNlNDJi LzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSawMA0G CSqGSIb3DQEBCwUAA4IBAQCb5YJMNC16Lv1LGbr6T7WJiW81c1w/7NPPJhb+HQqM mtBbJum8VDPIo3d24ycbQAOIeYq3ehcl8tujXTNss8WbuI3PlW300WK0ejLv+SBH pZyYSOP6xxoe6HR8uu2PxKXA2+L2PChGKNHPGJxUn5MGLMhtrAA1+FT4vFyY51RY E24PJ0CxhaxOw04buM1ya2rOWf67BAVYhgrNcGTGPj6hAZFpUmucCImTaWc4iKp/ Q3/O1itJ2MG6wMmZBWSvHrPpLBwG8yIobI/m6MRSr/qqnHiI37GjokatrX5ZnJ07 U56Bzn9kWYczdG3rjpd6eNIy6l/nmGPKMAUO0hfaL57U -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:29 2026 by rpki-client