This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/QIDwH1Apv1IdS1zr47e95gfDzAw.roa File: QIDwH1Apv1IdS1zr47e95gfDzAw.roa (raw, json) Hash identifier: KfrzWi1fwrRO4OS81VuEDcM52w79Q7KbGOwSe0GzMXs= Subject key identifier: 40:80:F0:1F:50:29:BF:52:1D:4B:5C:EB:E3:B7:BD:E6:07:C3:CC:0C Certificate issuer: /CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71 Certificate serial: 019B7758C82A8DB1A36111D332AB00EABB21 Authority key identifier: 2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/QIDwH1Apv1IdS1zr47e95gfDzAw.roa Signing time: Thu 01 Jan 2026 02:17:45 +0000 ROA not before: Thu 01 Jan 2026 02:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211304 IP address blocks: 193.84.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c8:2a:8d:b1:a3:61:11:d3:32:ab:00:ea:bb:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71 Validity Not Before: Jan 1 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4080f01f5029bf521d4b5cebe3b7bde607c3cc0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8a:61:62:f9:27:7e:87:15:b4:92:9a:a8:2f: 6b:a2:7c:eb:8a:df:dd:62:a7:c4:f0:40:75:b0:f5: 4e:e9:90:ad:ff:e8:c7:32:f9:22:07:7f:5c:c1:f2: aa:c4:70:5b:e3:f5:11:b5:5e:83:97:75:08:44:62: fd:b0:6f:27:b6:e5:f1:37:d3:27:6e:d0:cd:b2:8a: 46:68:78:09:3e:01:ef:d7:7b:0d:a1:8b:32:7a:35: 4a:01:be:3c:15:b4:dd:69:54:c8:39:f5:71:70:8a: e0:d3:8b:aa:da:64:80:86:da:ca:ef:9a:cf:a4:07: 1b:79:b4:9a:73:87:92:8c:09:2a:f9:5d:e1:5b:8b: 7c:88:9f:3b:e8:61:1f:5a:0c:0c:4f:b3:d6:de:c0: f3:72:f3:2d:98:f8:ed:06:75:12:21:e3:26:37:13: 10:91:b9:69:50:9d:ef:6e:8e:d4:42:22:cf:1f:dc: 4b:24:ff:ab:b4:0d:43:5c:3f:5c:65:92:33:1e:d8: 67:89:46:2b:67:e0:ba:9a:5a:03:bd:80:a2:e2:34: 06:13:c5:ba:8a:be:95:63:08:99:3f:d0:e8:64:03: b6:72:db:d7:34:31:7b:e1:42:3e:ea:71:93:8d:03: 1f:ec:e3:7c:77:b8:91:bd:d2:aa:09:23:76:68:69: c8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:80:F0:1F:50:29:BF:52:1D:4B:5C:EB:E3:B7:BD:E6:07:C3:CC:0C X509v3 Authority Key Identifier: keyid:2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/QIDwH1Apv1IdS1zr47e95gfDzAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.84.110.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:47:7c:d5:97:10:a1:c3:99:d0:1b:7c:19:1b:68:4a:64:c4: 0e:3d:7a:72:bb:0e:67:54:ab:fc:b6:6e:c9:80:ae:dd:d2:92: 3b:cd:95:2a:e0:63:0c:d4:26:68:2f:4b:6d:36:b7:ea:7b:06: ba:a7:a1:d1:ea:af:e9:3e:ac:c9:fe:4a:a7:f6:84:52:5f:0a: 6a:c4:b6:42:29:43:6c:5d:57:26:e0:e3:c4:ac:7b:72:70:f3: ec:5c:ea:de:f9:f2:4d:c8:34:ba:51:ed:3e:dc:2c:c4:0c:3e: 77:c6:3b:ad:4c:35:b7:51:01:40:e3:49:1f:63:69:41:79:59: 94:61:3b:08:9a:38:3c:c4:7a:39:9a:aa:f9:54:86:0e:83:32: ab:56:1f:ba:dc:15:c7:cf:93:dc:99:0d:19:a9:da:66:2d:23: f3:d2:3f:5a:77:b7:9c:1a:a6:a2:31:df:0b:09:0f:ee:7b:80: b2:38:f0:69:12:f3:7f:57:9e:af:73:6d:14:7b:96:e9:cc:3f: 32:9a:96:30:3c:07:e5:36:74:6f:be:91:73:ad:98:a7:c5:57: f5:03:ef:51:9a:b6:a8:c6:74:5c:ad:fa:d7:21:fb:4f:ba:89: da:52:fc:ab:7f:5b:f4:fb:cc:a2:60:a3:3a:ed:72:ef:28:4e: c7:92:42:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WMgqjbGjYRHTMqsA6rshMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmJlZDcwZGI1ZTY3M2M4MWYxMmU3MzY1YTM2YzRmM2Rh MjdiNzEwHhcNMjYwMTAxMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDgwZjAxZjUwMjliZjUyMWQ0YjVjZWJlM2I3YmRlNjA3YzNjYzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4phYvknfocVtJKaqC9ronzrit/d YqfE8EB1sPVO6ZCt/+jHMvkiB39cwfKqxHBb4/URtV6Dl3UIRGL9sG8ntuXxN9Mn btDNsopGaHgJPgHv13sNoYsyejVKAb48FbTdaVTIOfVxcIrg04uq2mSAhtrK75rP pAcbebSac4eSjAkq+V3hW4t8iJ876GEfWgwMT7PW3sDzcvMtmPjtBnUSIeMmNxMQ kblpUJ3vbo7UQiLPH9xLJP+rtA1DXD9cZZIzHthniUYrZ+C6mloDvYCi4jQGE8W6 ir6VYwiZP9DoZAO2ctvXNDF74UI+6nGTjQMf7ON8d7iRvdKqCSN2aGnIJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFECA8B9QKb9SHUtc6+O3veYHw8wMMB8GA1UdIwQY MBaAFC5r7XDbXmc8gfEuc2WjbE89ontxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG12dGNOdGVaenlCOFM1elphTnNUejJpZTNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MTU3NDgtMzIzZS00ZmZmLWE1Mjct NjIzMTU2NDRiM2NlLzEvUUlEd0gxQXB2MUlkUzF6cjQ3ZTk1Z2ZEekF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MTU3NDgtMzIzZS00ZmZmLWE1MjctNjIzMTU2NDRiM2Nl LzEvTG12dGNOdGVaenlCOFM1elphTnNUejJpZTNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwVRuMA0G CSqGSIb3DQEBCwUAA4IBAQBLR3zVlxChw5nQG3wZG2hKZMQOPXpyuw5nVKv8tm7J gK7d0pI7zZUq4GMM1CZoL0ttNrfqewa6p6HR6q/pPqzJ/kqn9oRSXwpqxLZCKUNs XVcm4OPErHtycPPsXOre+fJNyDS6Ue0+3CzEDD53xjutTDW3UQFA40kfY2lBeVmU YTsImjg8xHo5mqr5VIYOgzKrVh+63BXHz5PcmQ0ZqdpmLSPz0j9ad7ecGqaiMd8L CQ/ue4CyOPBpEvN/V56vc20Ue5bpzD8ympYwPAflNnRvvpFzrZinxVf1A+9Rmrao xnRcrfrXIftPuonaUvyrf1v0+8yiYKM67XLvKE7HkkJf -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:13 2026 by rpki-client