This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Q5XONzKcRUTe9mYAc22vLxZrJlg.roa File: Q5XONzKcRUTe9mYAc22vLxZrJlg.roa (raw, json) Hash identifier: eA3G0/5P3hRhgkdkWfU0XNPE1crw9uaHkyuQL6vuOFU= Subject key identifier: 43:95:CE:37:32:9C:45:44:DE:F6:66:00:73:6D:AF:2F:16:6B:26:58 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82B12FFC10CA588D36C914CDECCE70 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Q5XONzKcRUTe9mYAc22vLxZrJlg.roa Signing time: Fri 02 Jan 2026 16:20:29 +0000 ROA not before: Fri 02 Jan 2026 16:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 185.242.224.0/24 maxlen: 24 194.31.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:b1:2f:fc:10:ca:58:8d:36:c9:14:cd:ec:ce:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4395ce37329c4544def66600736daf2f166b2658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ab:37:f1:7c:5f:22:0a:96:74:ab:48:80:d3: a4:62:5c:9c:a9:87:70:33:76:93:ef:8f:f2:2d:1f: f1:8b:31:69:63:d3:81:01:b7:f7:ac:b3:d8:88:4a: 9f:7f:c7:56:52:af:3f:3a:d9:7c:59:a5:bd:d0:58: f0:63:d8:07:b7:58:b0:13:94:66:83:99:d8:65:4a: 3a:4a:9e:47:02:8b:28:87:0d:77:4b:7c:ed:53:d2: cc:f0:e4:df:6a:a0:f5:6c:6e:ce:2e:66:ad:ed:14: 6f:39:5f:ac:dc:38:f8:58:96:0a:f2:98:25:96:ca: 07:a4:40:69:63:f7:b8:fb:11:c7:b5:46:66:06:2a: 90:35:e6:13:07:4c:75:78:e5:ed:be:cf:1e:44:6d: bc:0c:8d:d3:68:65:3b:35:90:2f:9a:d8:97:ce:a1: 56:3d:bd:2e:85:20:67:02:f9:5a:82:96:e9:b0:12: 5e:64:07:e9:15:13:45:ea:de:d9:d4:61:49:20:14: 59:55:70:5d:a7:7c:2b:56:99:fd:69:cf:9a:b0:17: f4:a8:ec:24:bb:45:58:b0:fb:d4:89:04:6f:de:0c: a9:94:23:37:1c:be:64:6f:9d:cd:7f:20:73:7e:c3: 84:31:dc:ee:3d:e2:08:ae:c1:40:f3:6a:86:30:aa: 32:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:95:CE:37:32:9C:45:44:DE:F6:66:00:73:6D:AF:2F:16:6B:26:58 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Q5XONzKcRUTe9mYAc22vLxZrJlg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.224.0/24 194.31.142.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:90:7b:7c:6b:59:0a:6b:25:c9:7a:56:ba:cd:87:ad:b5:d6: 0a:65:75:07:8e:e3:c0:b0:d9:06:61:a4:d0:b3:9d:16:59:e6: d8:ab:ec:7f:b8:a3:a5:d4:bd:a2:03:67:37:95:4b:cb:f5:4a: 64:14:cb:9a:4e:77:ca:e4:ee:e8:be:e2:74:d2:40:11:8d:5c: 04:7e:f0:6d:05:83:94:ad:be:b4:8d:9b:d5:17:be:35:47:a5: db:33:3b:23:4c:d5:9b:09:4a:df:57:96:1e:a5:3a:1b:49:38: 6e:9c:fb:7a:53:b8:7c:84:a1:3d:25:ae:a7:9a:a0:fd:f0:d0: 5e:56:a7:70:20:fe:4a:86:3f:3c:3c:2e:7e:77:5c:cf:e0:e4: ea:98:69:11:a8:22:85:ea:eb:c9:79:d6:f8:67:d3:24:46:8d: e4:ef:7f:a9:c3:79:d3:5b:40:f1:9b:f4:61:65:73:70:e6:78: a5:4f:51:0b:3e:35:1e:48:20:8a:fe:b8:92:3a:e6:20:26:fc: e9:92:e5:e6:bb:b0:89:f5:6f:2d:4c:b5:bd:43:d3:6e:fd:9f: 74:aa:e9:dc:30:8b:83:de:3e:37:d4:89:0c:70:cd:28:1d:00: e5:85:b5:71:14:e6:08:73:41:e9:46:7c:bd:d4:47:76:fb:ef: c6:d5:4d:a7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/grEv/BDKWI02yRTN7M5wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Mzk1Y2UzNzMyOWM0NTQ0ZGVmNjY2MDA3MzZkYWYyZjE2NmIyNjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKs38XxfIgqWdKtIgNOkYlycqYdw M3aT74/yLR/xizFpY9OBAbf3rLPYiEqff8dWUq8/Otl8WaW90FjwY9gHt1iwE5Rm g5nYZUo6Sp5HAosohw13S3ztU9LM8OTfaqD1bG7OLmat7RRvOV+s3Dj4WJYK8pgl lsoHpEBpY/e4+xHHtUZmBiqQNeYTB0x1eOXtvs8eRG28DI3TaGU7NZAvmtiXzqFW Pb0uhSBnAvlagpbpsBJeZAfpFRNF6t7Z1GFJIBRZVXBdp3wrVpn9ac+asBf0qOwk u0VYsPvUiQRv3gyplCM3HL5kb53NfyBzfsOEMdzuPeIIrsFA82qGMKoyEwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEOVzjcynEVE3vZmAHNtry8WayZYMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvUTVYT056S2NSVVRlOW1ZQWMyMnZMeFpySmxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAufLgAwQA wh+OMA0GCSqGSIb3DQEBCwUAA4IBAQAtkHt8a1kKayXJela6zYettdYKZXUHjuPA sNkGYaTQs50WWebYq+x/uKOl1L2iA2c3lUvL9UpkFMuaTnfK5O7ovuJ00kARjVwE fvBtBYOUrb60jZvVF741R6XbMzsjTNWbCUrfV5YepTobSThunPt6U7h8hKE9Ja6n mqD98NBeVqdwIP5Khj88PC5+d1zP4OTqmGkRqCKF6uvJedb4Z9MkRo3k73+pw3nT W0Dxm/RhZXNw5nilT1ELPjUeSCCK/riSOuYgJvzpkuXmu7CJ9W8tTLW9Q9Nu/Z90 quncMIuD3j431IkMcM0oHQDlhbVxFOYIc0HpRny91Ed2++/G1U2n -----END CERTIFICATE-----Generated at Mon Jan 19 11:51:46 2026 by rpki-client