This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/pqkhSYjP-nkqC5_S5A5CsOprA-8.roa File: pqkhSYjP-nkqC5_S5A5CsOprA-8.roa (raw, json) Hash identifier: 50Nqcsyer8Upn0ElKeD09JHBaYwaegFxyuG4mQJ2tJI= Subject key identifier: A6:A9:21:49:88:CF:FA:79:2A:0B:9F:D2:E4:0E:42:B0:EA:6B:03:EF Certificate issuer: /CN=b69cb709934b99f689dd1e99d72c1b000fd872c5 Certificate serial: 019B7AC8AC86212A1FD5D47FD9B358AF84EA Authority key identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/pqkhSYjP-nkqC5_S5A5CsOprA-8.roa Signing time: Thu 01 Jan 2026 18:18:50 +0000 ROA not before: Thu 01 Jan 2026 18:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38926 IP address blocks: 5.44.160.0/21 maxlen: 24 185.105.68.0/22 maxlen: 24 193.169.64.0/23 maxlen: 24 195.114.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ac:86:21:2a:1f:d5:d4:7f:d9:b3:58:af:84:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5 Validity Not Before: Jan 1 18:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6a9214988cffa792a0b9fd2e40e42b0ea6b03ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6d:a8:f5:58:82:88:82:12:da:c5:60:31:6b: 75:89:44:ca:ea:4e:fe:cb:f5:df:d5:91:e7:df:a4: 33:64:6c:39:65:d2:b3:03:7c:7f:4b:dc:2f:16:fd: 67:b9:39:2b:52:1e:e8:5d:80:4c:5a:eb:35:7c:43: 53:b5:9d:0c:4c:2a:5f:bc:bb:ff:ee:49:28:e0:34: 27:eb:7a:5f:49:62:70:99:26:f2:03:ee:81:3b:cd: ce:e0:f6:b5:40:ea:b4:ff:4d:59:b4:a0:14:40:8f: 34:f8:52:27:c3:33:8f:b1:e6:f9:6e:ca:aa:f8:3c: 21:1a:df:dd:c4:9c:fb:59:2c:aa:f1:71:b1:0f:5a: fa:fd:57:ab:76:0a:23:4a:c0:c0:4b:76:4c:01:1c: 8f:c3:59:94:5a:17:2c:22:fc:3c:d3:01:13:ad:2d: 1c:82:3d:78:b1:35:e6:20:43:09:94:21:51:75:87: 24:46:25:91:8a:43:06:c7:76:3f:d9:1a:de:e4:50: e1:09:2a:38:8d:76:2a:3a:2e:5b:9e:9d:4a:f6:ef: 3a:7f:9a:e0:61:f8:95:0a:48:2b:00:81:46:3d:c9: d8:a8:d2:ce:f7:f9:26:1d:03:12:20:16:bb:67:1a: 7a:7f:64:44:1e:65:c1:35:ea:eb:d2:0b:07:c3:36: a5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A9:21:49:88:CF:FA:79:2A:0B:9F:D2:E4:0E:42:B0:EA:6B:03:EF X509v3 Authority Key Identifier: keyid:B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/pqkhSYjP-nkqC5_S5A5CsOprA-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.160.0/21 185.105.68.0/22 193.169.64.0/23 195.114.114.0/23 Signature Algorithm: sha256WithRSAEncryption aa:39:ef:c1:ab:27:eb:6a:e3:78:7d:d9:28:10:44:61:6b:a7: 7e:e5:93:3c:00:9b:d1:c8:30:cf:5b:8a:d4:ae:d2:1c:8c:42: f4:d5:6b:d9:4e:c3:ad:dc:89:6a:71:f2:e8:a3:56:39:f3:3a: 05:65:e8:8c:bd:85:38:d2:1d:83:bc:3a:4f:a5:d5:c9:e7:9b: 4f:d8:0e:4e:61:e3:d6:4a:89:9d:23:b6:2a:f7:01:37:6f:38: b2:05:ad:9c:e3:a8:29:0c:71:4e:dd:2a:65:2c:7f:ac:40:43: b7:5c:61:e6:4f:60:b1:64:18:16:65:2d:f0:f3:a4:30:ee:3f: 88:66:16:b6:7f:cd:bd:3f:7f:ed:4d:de:87:59:78:55:97:3f: ef:d8:5f:0c:7f:70:00:1d:a4:41:56:ee:52:0c:ae:67:21:ce: c1:48:06:53:64:61:e1:3c:5f:19:57:9f:08:bd:af:f2:d9:ee: 9e:35:13:fe:0c:fc:f5:39:f7:61:84:23:a3:91:bc:22:b0:b7: dc:ac:f1:b9:38:8f:28:b2:06:d4:5c:32:c7:a6:c8:62:d3:59: 31:d1:6e:5d:7f:b3:d8:66:5b:60:de:94:4e:e9:e1:9b:35:9e: eb:1e:17:c3:65:f2:fe:6d:0f:e6:2a:bd:54:29:3a:0a:3b:29: 8d:f1:71:93 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6yKyGISof1dR/2bNYr4TqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OWNiNzA5OTM0Yjk5ZjY4OWRkMWU5OWQ3MmMxYjAwMGZk ODcyYzUwHhcNMjYwMTAxMTgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmE5MjE0OTg4Y2ZmYTc5MmEwYjlmZDJlNDBlNDJiMGVhNmIwM2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt22o9ViCiIIS2sVgMWt1iUTK6k7+ y/Xf1ZHn36QzZGw5ZdKzA3x/S9wvFv1nuTkrUh7oXYBMWus1fENTtZ0MTCpfvLv/ 7kko4DQn63pfSWJwmSbyA+6BO83O4Pa1QOq0/01ZtKAUQI80+FInwzOPseb5bsqq +DwhGt/dxJz7WSyq8XGxD1r6/VerdgojSsDAS3ZMARyPw1mUWhcsIvw80wETrS0c gj14sTXmIEMJlCFRdYckRiWRikMGx3Y/2Rre5FDhCSo4jXYqOi5bnp1K9u86f5rg YfiVCkgrAIFGPcnYqNLO9/kmHQMSIBa7Zxp6f2REHmXBNerr0gsHwzalCQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKapIUmIz/p5Kguf0uQOQrDqawPvMB8GA1UdIwQY MBaAFLactwmTS5n2id0emdcsGwAP2HLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHB5M0NaTkxtZmFKM1I2WjF5d2JBQV9ZY3NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80MWUyODctNTBiNC00NmVmLTgyY2Mt Y2EzYjcyNzhkZGUyLzEvcHFraFNZalAtbmtxQzVfUzVBNUNzT3ByQS04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS80MWUyODctNTBiNC00NmVmLTgyY2MtY2EzYjcyNzhkZGUy LzEvdHB5M0NaTkxtZmFKM1I2WjF5d2JBQV9ZY3NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDBSygAwQC uWlEAwQBwalAAwQBw3JyMA0GCSqGSIb3DQEBCwUAA4IBAQCqOe/BqyfrauN4fdko EERha6d+5ZM8AJvRyDDPW4rUrtIcjEL01WvZTsOt3IlqcfLoo1Y58zoFZeiMvYU4 0h2DvDpPpdXJ55tP2A5OYePWSomdI7Yq9wE3bziyBa2c46gpDHFO3SplLH+sQEO3 XGHmT2CxZBgWZS3w86Qw7j+IZha2f829P3/tTd6HWXhVlz/v2F8Mf3AAHaRBVu5S DK5nIc7BSAZTZGHhPF8ZV58Iva/y2e6eNRP+DPz1OfdhhCOjkbwisLfcrPG5OI8o sgbUXDLHpshi01kx0W5df7PYZltg3pRO6eGbNZ7rHhfDZfL+bQ/mKr1UKToKOymN 8XGT -----END CERTIFICATE-----Generated at Wed Jan 21 21:01:30 2026 by rpki-client