This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/RqZv9lI-beWajs98dICrEK2DwUM.roa File: RqZv9lI-beWajs98dICrEK2DwUM.roa (raw, json) Hash identifier: z0DWSEDfb+oWc/lkT9R9ehjWWb2y0A0CPcHglnAYRf8= Subject key identifier: 46:A6:6F:F6:52:3E:6D:E5:9A:8E:CF:7C:74:80:AB:10:AD:83:C1:43 Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Certificate serial: 019B7B35CB5157ED86EAB0C95B713C0F3E17 Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/RqZv9lI-beWajs98dICrEK2DwUM.roa Signing time: Thu 01 Jan 2026 20:18:01 +0000 ROA not before: Thu 01 Jan 2026 20:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213772 IP address blocks: 193.187.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:cb:51:57:ed:86:ea:b0:c9:5b:71:3c:0f:3e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46a66ff6523e6de59a8ecf7c7480ab10ad83c143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:32:7b:37:c3:45:68:9a:2f:0b:bd:71:44: f9:af:54:77:10:97:87:f7:15:0f:ee:85:3e:b2:77: 01:47:05:21:5e:bc:82:11:0b:76:a7:50:9b:5f:69: 5b:bb:01:20:a9:19:4f:6a:af:c1:f2:9b:85:25:fa: 06:ef:2e:11:68:5c:a0:01:47:fa:e2:f6:6b:c3:49: b2:fe:f3:7b:e1:ad:6d:55:5a:7a:67:03:da:7b:46: de:62:2d:85:85:db:0b:5a:5e:3f:e0:a2:36:67:b9: 53:57:16:07:7e:2b:3c:44:c3:03:92:4f:f2:c8:93: ca:c1:a1:ed:15:bb:44:36:dc:c2:eb:61:83:ef:f8: da:4f:5d:dc:16:f3:71:36:59:8b:89:2f:ce:b2:97: 64:25:86:05:9b:d0:c8:98:ff:47:b5:66:06:4e:f4: fe:3b:8d:87:78:4a:43:1a:db:56:ca:d8:ac:81:f4: 3b:2b:f5:0f:b6:ca:24:98:36:16:2c:ee:87:52:b3: 18:82:b8:2a:80:94:25:16:41:49:a2:50:54:1d:3b: 1a:8e:ca:4a:f3:6f:ae:c2:c1:06:05:ee:36:75:fb: 6a:83:52:92:28:f2:b0:96:7d:59:6b:02:25:2d:63: 1b:46:be:7a:a4:30:10:9f:38:6d:77:d1:a4:d2:1f: bf:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A6:6F:F6:52:3E:6D:E5:9A:8E:CF:7C:74:80:AB:10:AD:83:C1:43 X509v3 Authority Key Identifier: keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/RqZv9lI-beWajs98dICrEK2DwUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.187.112.0/22 Signature Algorithm: sha256WithRSAEncryption 83:7d:c4:1a:52:f6:1f:17:88:68:1b:76:c8:4b:f2:45:ac:1d: 9a:cf:62:35:56:dd:ba:44:e6:6d:0b:4c:50:c4:4d:8c:d7:29: f9:ee:97:0d:34:db:0e:54:6f:f3:eb:a6:f8:19:fa:b1:f7:71: fb:32:c0:e8:5b:94:4a:94:c4:2d:f6:11:f8:2c:6d:02:b6:e8: ea:0f:0f:e6:de:33:30:53:83:5e:f7:11:b7:5d:b7:7d:ee:86: da:54:1d:10:ad:3f:b6:da:c9:e6:2f:e4:6d:85:6a:a5:56:19: ab:26:46:f7:66:1e:45:3e:d1:61:59:6d:a4:78:77:c2:2b:b2: e3:96:46:36:85:9a:f2:d2:6b:7d:95:af:0b:0a:70:7a:d1:a5: d3:ad:1f:1a:91:30:a1:37:5b:fb:ef:04:94:3f:a0:9f:33:49: fa:0b:a1:0f:6e:6f:1f:8c:0f:ac:cf:6d:17:32:42:8b:c7:7d: 3f:78:be:f3:8d:6f:58:a8:b9:fc:de:3a:99:27:2a:80:c0:82: 6f:4f:f8:c5:56:96:bd:e5:8c:c5:81:7f:eb:11:7f:6f:83:81: 15:d4:ed:93:62:54:f9:36:a2:18:d0:7a:45:fc:8e:3c:77:90: ac:10:48:e7:fa:b4:c4:08:ae:a5:64:37:f5:ab:f4:b3:2e:34: 8c:f3:98:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NctRV+2G6rDJW3E8Dz4XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx OGM5YmMwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmE2NmZmNjUyM2U2ZGU1OWE4ZWNmN2M3NDgwYWIxMGFkODNjMTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApysyezfDRWiaLwu9cUT5r1R3EJeH 9xUP7oU+sncBRwUhXryCEQt2p1CbX2lbuwEgqRlPaq/B8puFJfoG7y4RaFygAUf6 4vZrw0my/vN74a1tVVp6ZwPae0beYi2FhdsLWl4/4KI2Z7lTVxYHfis8RMMDkk/y yJPKwaHtFbtENtzC62GD7/jaT13cFvNxNlmLiS/OspdkJYYFm9DImP9HtWYGTvT+ O42HeEpDGttWytisgfQ7K/UPtsokmDYWLO6HUrMYgrgqgJQlFkFJolBUHTsajspK 82+uwsEGBe42dftqg1KSKPKwln1ZawIlLWMbRr56pDAQnzhtd9Gk0h+/2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEamb/ZSPm3lmo7PfHSAqxCtg8FDMB8GA1UdIwQY MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt YmQzYmZjOTliZGE5LzEvUnFadjlsSS1iZVdhanM5OGRJQ3JFSzJEd1VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5 LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwbtwMA0G CSqGSIb3DQEBCwUAA4IBAQCDfcQaUvYfF4hoG3bIS/JFrB2az2I1Vt26ROZtC0xQ xE2M1yn57pcNNNsOVG/z66b4Gfqx93H7MsDoW5RKlMQt9hH4LG0CtujqDw/m3jMw U4Ne9xG3Xbd97obaVB0QrT+22snmL+RthWqlVhmrJkb3Zh5FPtFhWW2keHfCK7Lj lkY2hZry0mt9la8LCnB60aXTrR8akTChN1v77wSUP6CfM0n6C6EPbm8fjA+sz20X MkKLx30/eL7zjW9YqLn83jqZJyqAwIJvT/jFVpa95YzFgX/rEX9vg4EV1O2TYlT5 NqIY0HpF/I48d5CsEEjn+rTECK6lZDf1q/SzLjSM85jD -----END CERTIFICATE-----Generated at Wed Jan 21 04:10:44 2026 by rpki-client