This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/qu2Tg5Ph7xdQP9tHpGL74O9eOxA.roa File: qu2Tg5Ph7xdQP9tHpGL74O9eOxA.roa (raw, json) Hash identifier: Ml4bAAl4Vv6kHxq1f7aAaioMo7FQtIeBkM4eRxKzg9E= Subject key identifier: AA:ED:93:83:93:E1:EF:17:50:3F:DB:47:A4:62:FB:E0:EF:5E:3B:10 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B359829EB8C4BEF568B5F40ADA47251 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/qu2Tg5Ph7xdQP9tHpGL74O9eOxA.roa Signing time: Thu 01 Jan 2026 20:17:48 +0000 ROA not before: Thu 01 Jan 2026 20:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212816 IP address blocks: 194.102.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:98:29:eb:8c:4b:ef:56:8b:5f:40:ad:a4:72:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aaed938393e1ef17503fdb47a462fbe0ef5e3b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:59:93:fd:c9:21:8f:be:a5:2d:97:0d:5c:31: a2:1d:70:34:c0:c3:85:34:1c:e6:48:49:00:a3:f2: fe:26:d7:9b:14:e7:03:49:82:12:58:a6:bc:cf:87: 54:74:3c:ef:55:25:cb:78:62:41:b2:27:eb:10:e7: ae:b4:55:ea:f8:41:99:25:a5:08:7e:1f:e4:55:9c: 54:96:cc:fb:39:ac:02:32:83:d1:cf:bd:f3:2f:7d: 0f:c0:89:ed:b9:97:0c:e4:ca:7d:0d:07:c4:d2:33: ec:60:59:2e:e3:c5:7f:d7:94:4b:24:91:86:1a:eb: 82:76:c9:74:96:88:e7:ec:26:9b:c7:8d:ac:4a:d1: 22:44:08:96:0a:be:5a:66:6b:5a:df:1a:97:f8:d0: 53:d2:bd:91:66:f9:9b:ee:91:bf:ad:cb:ce:58:aa: 3b:2c:9e:77:94:06:90:4a:f7:3c:50:29:e8:2d:ee: 8f:ab:a0:44:21:f5:d4:fe:8c:d8:03:f2:66:ab:f6: 98:35:ed:a5:16:38:2e:25:52:68:45:cd:10:12:10: 3a:03:25:b6:ef:3f:05:ec:2b:ee:85:e5:79:85:2c: 92:36:a5:b8:3f:43:a5:e2:df:90:28:58:6d:6f:4e: 83:89:a2:bf:03:d6:e3:19:e6:1d:76:c3:3b:62:9c: 0e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:ED:93:83:93:E1:EF:17:50:3F:DB:47:A4:62:FB:E0:EF:5E:3B:10 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/qu2Tg5Ph7xdQP9tHpGL74O9eOxA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.102.184.0/22 Signature Algorithm: sha256WithRSAEncryption 36:50:01:4d:83:f7:32:50:6f:1e:09:5d:b7:19:d1:df:ba:2e: 91:c5:36:32:c5:25:73:d0:2c:19:53:39:63:c0:45:fc:40:b3: 59:bb:03:d5:ec:a3:5c:fb:e6:40:2b:87:e7:e0:d0:2d:d3:60: 22:9f:a5:d1:1b:b0:c5:b8:f4:e8:61:6d:24:66:8d:cc:c5:70: 62:67:3d:94:12:e0:a2:1a:41:07:07:c8:24:ef:06:89:4f:f2: 1a:95:5c:f4:8d:13:9c:7d:b5:f6:74:41:96:a5:09:90:76:45: ef:14:2a:49:75:53:62:03:92:ce:4a:05:f8:7c:e5:29:e5:09: 5f:d2:90:cc:bd:36:f7:9c:cc:cf:7e:7f:ce:95:04:85:72:63: 64:d4:a5:be:98:e5:da:6f:d3:a1:f7:1d:94:22:bb:a3:5d:a4: 7c:26:f8:b2:75:30:c5:56:1f:07:8b:da:fa:15:31:1b:f6:b3: 2a:a9:55:c5:c5:db:71:04:77:45:35:14:04:d2:50:52:7f:99: f3:03:78:82:16:41:f2:cd:90:dc:f4:5f:1d:a4:64:2c:b1:25: d7:3f:f4:15:38:7b:94:a3:d0:68:42:f4:7a:00:e6:bf:d2:d8: 1f:90:c6:f2:6f:68:6c:73:55:0a:c6:ad:bb:b8:c8:60:bc:33: cb:79:1b:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NZgp64xL71aLX0CtpHJRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWVkOTM4MzkzZTFlZjE3NTAzZmRiNDdhNDYyZmJlMGVmNWUzYjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVmT/ckhj76lLZcNXDGiHXA0wMOF NBzmSEkAo/L+JtebFOcDSYISWKa8z4dUdDzvVSXLeGJBsifrEOeutFXq+EGZJaUI fh/kVZxUlsz7OawCMoPRz73zL30PwIntuZcM5Mp9DQfE0jPsYFku48V/15RLJJGG GuuCdsl0lojn7Cabx42sStEiRAiWCr5aZmta3xqX+NBT0r2RZvmb7pG/rcvOWKo7 LJ53lAaQSvc8UCnoLe6Pq6BEIfXU/ozYA/Jmq/aYNe2lFjguJVJoRc0QEhA6AyW2 7z8F7CvuheV5hSySNqW4P0Ol4t+QKFhtb06DiaK/A9bjGeYddsM7YpwO0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKrtk4OT4e8XUD/bR6Ri++DvXjsQMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvcXUyVGc1UGg3eGRRUDl0SHBHTDc0TzllT3hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwma4MA0G CSqGSIb3DQEBCwUAA4IBAQA2UAFNg/cyUG8eCV23GdHfui6RxTYyxSVz0CwZUzlj wEX8QLNZuwPV7KNc++ZAK4fn4NAt02Ain6XRG7DFuPToYW0kZo3MxXBiZz2UEuCi GkEHB8gk7waJT/IalVz0jROcfbX2dEGWpQmQdkXvFCpJdVNiA5LOSgX4fOUp5Qlf 0pDMvTb3nMzPfn/OlQSFcmNk1KW+mOXab9Oh9x2UIrujXaR8JviydTDFVh8Hi9r6 FTEb9rMqqVXFxdtxBHdFNRQE0lBSf5nzA3iCFkHyzZDc9F8dpGQssSXXP/QVOHuU o9BoQvR6AOa/0tgfkMbyb2hsc1UKxq27uMhgvDPLeRvP -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:04 2026 by rpki-client