This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/qu_5X8JHr4yqGmfR7Z4agmkCTJg.roa File: qu_5X8JHr4yqGmfR7Z4agmkCTJg.roa (raw, json) Hash identifier: pp2/dCo/iehzy+EhLzTvjRa68BviBR9e8y4FWQ8IXSI= Subject key identifier: AA:EF:F9:5F:C2:47:AF:8C:AA:1A:67:D1:ED:9E:1A:82:69:02:4C:98 Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019B7910874424BCF7E306A2649F66B63F60 Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/qu_5X8JHr4yqGmfR7Z4agmkCTJg.roa Signing time: Thu 01 Jan 2026 10:18:04 +0000 ROA not before: Thu 01 Jan 2026 10:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56876 IP address blocks: 194.233.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:87:44:24:bc:f7:e3:06:a2:64:9f:66:b6:3f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: Jan 1 10:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aaeff95fc247af8caa1a67d1ed9e1a8269024c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bb:7a:cf:61:30:dd:34:2f:06:bf:92:52:31: 40:7f:b6:c1:19:b4:f4:b0:3e:c5:f6:b2:61:7e:d6: de:3a:fa:70:2d:51:fa:69:9c:95:de:e3:f9:0e:57: 07:46:b2:fb:94:ec:f3:3a:50:8e:d3:b3:84:dc:85: a2:64:58:c8:e9:6b:3b:b8:f9:35:cf:3b:9c:c7:b4: 7c:af:ed:9a:01:85:a7:7d:65:59:0d:7a:fe:0a:fa: 85:62:f6:d2:6b:08:d7:1c:1e:c7:fc:ff:62:c4:a5: 6f:01:3f:d8:71:32:47:11:f7:b4:1a:4f:ac:14:d5: 06:0e:cd:a7:1c:28:14:65:50:8d:a6:40:b7:bd:c4: c5:da:c9:e7:63:5e:97:80:34:20:e3:63:b3:ee:c4: 17:78:86:91:5f:81:7a:f6:cf:61:29:0e:fc:ce:bc: e3:82:93:90:e7:af:49:ca:cb:62:d5:46:de:5e:b7: 99:23:2f:41:df:bd:d1:b3:92:31:79:99:14:ec:9e: 99:69:10:1c:01:9e:7e:25:73:df:94:e2:76:f4:be: 26:b6:22:b3:a2:42:00:85:a3:20:6e:b4:1a:04:ca: d3:6c:ca:c8:2e:54:d1:22:3f:a0:a8:0a:c2:96:f0: 95:ca:7e:d4:fb:38:39:60:e6:63:9b:21:76:9b:e3: bd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EF:F9:5F:C2:47:AF:8C:AA:1A:67:D1:ED:9E:1A:82:69:02:4C:98 X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/qu_5X8JHr4yqGmfR7Z4agmkCTJg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.233.0.0/22 Signature Algorithm: sha256WithRSAEncryption 14:62:89:71:67:7c:5a:67:c2:6b:dc:07:dc:e1:50:bb:19:f7: 1c:9d:70:64:39:d9:79:e1:4d:4f:0b:1a:d3:e5:d8:63:24:8e: 95:55:9a:08:93:59:b5:f7:16:88:db:11:0b:d3:65:8b:7d:94: 0c:20:18:fc:6a:bc:9b:fb:24:51:87:1e:e4:9b:84:71:90:3f: 72:35:fe:e0:48:77:16:13:c3:30:89:82:b0:66:cf:19:e0:58: 11:14:e4:b0:21:cc:bf:28:37:5b:b0:21:f9:32:21:64:e5:0c: e5:4c:11:e1:f2:4b:df:0b:16:d5:05:ba:4e:8c:ef:04:78:f3: bb:28:dd:34:32:16:91:45:ee:a0:b3:2e:18:a5:ad:91:7d:43: 4a:25:ba:07:76:53:d4:82:e3:2e:88:fe:68:fd:ef:ce:d4:a1: 75:39:3a:55:ab:cd:3d:e2:c2:e5:54:b7:b5:7a:ea:4a:a7:10: 04:9d:0b:df:cd:87:33:f4:be:a3:52:a4:4b:b1:fd:5b:87:25: 8d:cb:a0:b0:90:7b:2d:4c:35:21:f7:cc:32:ce:cf:29:5c:39: 43:58:b7:b0:13:b7:bd:44:92:ac:58:14:88:4e:e7:9b:bd:41: 72:25:dc:66:de:19:bc:25:1f:84:dd:ae:b4:7f:7c:fd:82:10: 13:cf:fe:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EIdEJLz34waiZJ9mtj9gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWVmZjk1ZmMyNDdhZjhjYWExYTY3ZDFlZDllMWE4MjY5MDI0Yzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbt6z2Ew3TQvBr+SUjFAf7bBGbT0 sD7F9rJhftbeOvpwLVH6aZyV3uP5DlcHRrL7lOzzOlCO07OE3IWiZFjI6Ws7uPk1 zzucx7R8r+2aAYWnfWVZDXr+CvqFYvbSawjXHB7H/P9ixKVvAT/YcTJHEfe0Gk+s FNUGDs2nHCgUZVCNpkC3vcTF2snnY16XgDQg42Oz7sQXeIaRX4F69s9hKQ78zrzj gpOQ569Jysti1UbeXreZIy9B373Rs5IxeZkU7J6ZaRAcAZ5+JXPflOJ29L4mtiKz okIAhaMgbrQaBMrTbMrILlTRIj+gqArClvCVyn7U+zg5YOZjmyF2m+O9uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKrv+V/CR6+Mqhpn0e2eGoJpAkyYMB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvcXVfNVg4SkhyNHlxR21mUjdaNGFnbWtDVEpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwukAMA0G CSqGSIb3DQEBCwUAA4IBAQAUYolxZ3xaZ8Jr3Afc4VC7GfccnXBkOdl54U1PCxrT 5dhjJI6VVZoIk1m19xaI2xEL02WLfZQMIBj8aryb+yRRhx7km4RxkD9yNf7gSHcW E8MwiYKwZs8Z4FgRFOSwIcy/KDdbsCH5MiFk5QzlTBHh8kvfCxbVBbpOjO8EePO7 KN00MhaRRe6gsy4Ypa2RfUNKJboHdlPUguMuiP5o/e/O1KF1OTpVq8094sLlVLe1 eupKpxAEnQvfzYcz9L6jUqRLsf1bhyWNy6CwkHstTDUh98wyzs8pXDlDWLewE7e9 RJKsWBSITuebvUFyJdxm3hm8JR+E3a60f3z9ghATz/69 -----END CERTIFICATE-----Generated at Wed Jan 21 18:44:49 2026 by rpki-client