This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/QX0TE-TV3E6_Xery30IllGZ3lmk.roa File: QX0TE-TV3E6_Xery30IllGZ3lmk.roa (raw, json) Hash identifier: 2B0PODYP4I37DhlKEI2C0a2CWIscrasrNeELFrYNHjs= Subject key identifier: 41:7D:13:13:E4:D5:DC:4E:BF:5D:EA:F2:DF:42:25:94:66:77:96:69 Certificate issuer: /CN=c50491092130dedd8466ffd5cc510576c894df6e Certificate serial: 019B7F14F00F2978A6D7AE0C79D095657DF5 Authority key identifier: C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/QX0TE-TV3E6_Xery30IllGZ3lmk.roa Signing time: Fri 02 Jan 2026 14:20:37 +0000 ROA not before: Fri 02 Jan 2026 14:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204455 IP address blocks: 94.154.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f0:0f:29:78:a6:d7:ae:0c:79:d0:95:65:7d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c50491092130dedd8466ffd5cc510576c894df6e Validity Not Before: Jan 2 14:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=417d1313e4d5dc4ebf5deaf2df42259466779669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:39:dd:60:49:c4:ff:a9:bd:24:02:fc:3e:e4: 0a:eb:06:2c:fa:c9:b4:ca:ab:a8:d7:68:9b:41:74: 9b:be:73:a8:d8:37:59:2a:0b:c9:f5:87:fd:e1:cb: 17:f2:91:99:a4:01:98:03:57:2b:e2:d0:23:b1:5c: 2d:8d:25:6f:f6:44:cd:36:79:24:f4:8f:28:98:4a: ef:9b:3c:98:89:e2:af:f9:2f:0e:f4:a0:9f:b5:e6: 3f:79:d7:00:91:32:58:42:e4:bd:15:68:81:b4:50: 92:c0:2f:c6:19:3b:81:8c:6c:e9:02:40:a9:4b:a0: ed:3f:60:bf:86:c8:1c:b0:8f:be:f7:97:bc:ef:09: 27:6b:92:7f:e2:63:dc:7f:31:94:bc:c4:70:cc:af: 7f:f1:12:ae:10:80:5a:31:c9:7f:8f:45:de:9c:99: 02:8b:1a:02:53:9e:f7:f1:5b:26:7d:8c:64:00:6d: a7:b1:6f:ac:00:51:9e:28:0e:26:7a:82:06:b5:cb: f4:7a:0c:68:c2:73:61:dd:24:b2:fe:c0:f3:47:c6: eb:a6:97:87:51:e8:75:52:c1:2d:94:f6:be:8d:3d: 56:91:d5:77:e6:e7:2f:58:a8:94:fa:8a:55:44:14: e9:be:a3:7f:c6:95:6b:0c:51:10:65:3b:61:bf:21: c1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7D:13:13:E4:D5:DC:4E:BF:5D:EA:F2:DF:42:25:94:66:77:96:69 X509v3 Authority Key Identifier: keyid:C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/QX0TE-TV3E6_Xery30IllGZ3lmk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.47.0/24 Signature Algorithm: sha256WithRSAEncryption 67:7a:7d:c6:d5:42:88:db:14:3f:85:35:20:3c:09:26:9f:7f: e8:33:55:5e:71:ee:ed:7a:bf:89:51:07:1c:54:79:34:53:63: ad:32:ab:86:c4:30:76:86:5f:0b:65:50:74:bd:ac:f5:7d:2b: 38:16:48:46:3c:e4:09:6e:14:88:b7:1b:7f:7b:dc:b3:dc:40: 24:1a:4a:74:a1:79:66:77:87:e7:91:ab:79:69:6e:f1:55:b3: 4a:ed:5e:0d:94:18:fe:72:45:82:22:95:f7:17:89:b8:6f:57: 92:28:3a:39:f0:13:b0:9f:c5:cb:ed:1f:78:27:63:ab:c0:19: 70:b3:df:aa:85:7b:3f:d5:45:0d:fa:67:08:1e:f4:b6:8f:ba: d6:0d:3f:06:26:df:8d:d9:3d:a5:ac:29:f5:b9:9e:69:e4:af: 87:5c:02:3b:75:2c:d0:0b:0c:8e:84:ac:64:41:bf:62:b7:b4: 18:30:c2:16:bf:8d:8f:19:cc:e0:b7:11:19:f2:30:3d:27:36: b5:17:51:a2:66:2e:a8:e4:c4:45:89:f4:df:e0:60:02:02:05: 73:be:dd:1e:61:dd:7a:69:cb:65:43:71:f6:1e:e2:7f:3c:80: 2e:a8:31:16:5d:ec:d6:42:b5:8d:4b:73:ad:25:9d:f5:16:23: 65:0f:87:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FPAPKXim164MedCVZX31MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MDQ5MTA5MjEzMGRlZGQ4NDY2ZmZkNWNjNTEwNTc2Yzg5 NGRmNmUwHhcNMjYwMTAyMTQyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTdkMTMxM2U0ZDVkYzRlYmY1ZGVhZjJkZjQyMjU5NDY2Nzc5NjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzndYEnE/6m9JAL8PuQK6wYs+sm0 yquo12ibQXSbvnOo2DdZKgvJ9Yf94csX8pGZpAGYA1cr4tAjsVwtjSVv9kTNNnkk 9I8omErvmzyYieKv+S8O9KCfteY/edcAkTJYQuS9FWiBtFCSwC/GGTuBjGzpAkCp S6DtP2C/hsgcsI++95e87wkna5J/4mPcfzGUvMRwzK9/8RKuEIBaMcl/j0XenJkC ixoCU5738VsmfYxkAG2nsW+sAFGeKA4meoIGtcv0egxownNh3SSy/sDzR8brppeH Ueh1UsEtlPa+jT1WkdV35ucvWKiU+opVRBTpvqN/xpVrDFEQZTthvyHB1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEF9ExPk1dxOv13q8t9CJZRmd5ZpMB8GA1UdIwQY MBaAFMUEkQkhMN7dhGb/1cxRBXbIlN9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFFTUkNTRXczdDJFWnZfVnpGRUZkc2lVMzI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kN2EyNmMtYzM3My00ZTZkLTlmZDgt YmYxOTFkOWEyYzljLzEvUVgwVEUtVFYzRTZfWGVyeTMwSWxsR1ozbG1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kN2EyNmMtYzM3My00ZTZkLTlmZDgtYmYxOTFkOWEyYzlj LzEveFFTUkNTRXczdDJFWnZfVnpGRUZkc2lVMzI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpovMA0G CSqGSIb3DQEBCwUAA4IBAQBnen3G1UKI2xQ/hTUgPAkmn3/oM1Vece7ter+JUQcc VHk0U2OtMquGxDB2hl8LZVB0vaz1fSs4FkhGPOQJbhSItxt/e9yz3EAkGkp0oXlm d4fnkat5aW7xVbNK7V4NlBj+ckWCIpX3F4m4b1eSKDo58BOwn8XL7R94J2OrwBlw s9+qhXs/1UUN+mcIHvS2j7rWDT8GJt+N2T2lrCn1uZ5p5K+HXAI7dSzQCwyOhKxk Qb9it7QYMMIWv42PGczgtxEZ8jA9Jza1F1GiZi6o5MRFifTf4GACAgVzvt0eYd16 actlQ3H2HuJ/PIAuqDEWXezWQrWNS3OtJZ31FiNlD4cO -----END CERTIFICATE-----Generated at Mon Feb 9 22:29:17 2026 by rpki-client