This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/q__kgw_O8IKaiyQKveWdm3CzzNw.roa File: q__kgw_O8IKaiyQKveWdm3CzzNw.roa (raw, json) Hash identifier: 3uYEOjYyEB8qbjJnEqaWGoPx9kA7aHtdYuIfRdg7Rdg= Subject key identifier: AB:FF:E4:83:0F:CE:F0:82:9A:8B:24:0A:BD:E5:9D:9B:70:B3:CC:DC Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B797F4ACE812BE8BBF01625C04D1C109E Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/q__kgw_O8IKaiyQKveWdm3CzzNw.roa Signing time: Thu 01 Jan 2026 12:19:03 +0000 ROA not before: Thu 01 Jan 2026 12:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207279 IP address blocks: 213.238.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:4a:ce:81:2b:e8:bb:f0:16:25:c0:4d:1c:10:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 1 12:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abffe4830fcef0829a8b240abde59d9b70b3ccdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7e:7d:d7:aa:35:5c:88:eb:c8:4c:dd:30:a6: b2:a8:05:ab:3d:8c:06:d9:3a:3c:51:9a:97:04:e6: a4:4e:c7:ad:9b:2e:ea:f0:27:ef:1b:f7:c7:78:ba: 0c:f1:7b:e9:0a:a1:60:e8:4e:9a:28:78:fc:07:d2: 8a:2c:de:7a:a0:b8:8d:a5:e6:28:3d:93:0d:0f:80: 74:a7:c9:94:30:19:9f:b9:e9:81:8f:28:a0:60:6d: b9:05:38:b2:e7:1b:ad:bc:81:d4:37:c9:03:44:6e: 3d:16:78:30:1b:aa:3d:a1:f8:03:de:50:35:1a:39: f3:9e:ae:e0:75:40:44:f1:57:89:1d:24:9f:05:5e: 76:d3:0a:df:6f:82:e7:71:bc:11:6b:6f:91:78:7a: 82:bc:eb:93:a0:a8:2c:c3:a4:6a:4b:bb:a6:a9:4b: e4:5e:3a:c6:14:14:10:6c:a7:00:f2:9a:a8:0f:f1: 28:74:11:f2:5a:47:f0:ba:4c:37:c1:89:4b:b2:5c: a4:bc:9c:2f:f4:5c:52:87:d0:2d:49:e9:eb:75:67: cb:f1:b8:b6:3c:72:48:4f:1c:17:40:1a:1f:6c:9e: af:a2:29:ef:89:d7:fd:5b:79:69:fb:36:02:d5:0a: d8:48:fb:2a:0f:61:58:31:ff:89:67:fb:0c:4c:58: a0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FF:E4:83:0F:CE:F0:82:9A:8B:24:0A:BD:E5:9D:9B:70:B3:CC:DC X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/q__kgw_O8IKaiyQKveWdm3CzzNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.182.0/24 Signature Algorithm: sha256WithRSAEncryption 84:59:eb:08:c5:26:c6:56:45:35:b8:40:a2:6d:31:95:46:d7: d2:24:96:33:39:2b:f3:9f:81:53:85:2c:51:75:20:b9:b5:64: e6:21:a1:c7:ce:06:0f:72:ed:4c:73:42:35:cf:e1:d4:a5:af: 4b:d8:b8:d3:a2:de:8e:1f:48:e0:3f:25:2d:0a:ec:ae:f8:34: 48:cb:82:e3:e2:58:e1:92:a2:36:fd:3a:9d:28:4c:a5:51:62: 4d:4a:9c:6e:88:b8:82:7a:4d:93:0a:a4:41:6a:56:a5:30:1b: 73:45:3c:6f:ad:f8:7b:48:38:fd:ec:87:06:e0:77:4b:d6:5b: c0:3a:a8:19:8f:3f:95:90:bb:03:a9:5c:5b:98:df:b3:0a:c5: 42:4f:30:22:8c:f7:b3:3e:9c:a1:fa:69:05:ca:27:e5:e6:85: 45:7f:7b:25:09:06:b4:11:17:8f:6c:93:7e:72:2b:e4:81:ab: d0:19:35:a2:98:46:9c:ad:b0:61:3d:56:3e:10:6c:a1:f9:ff: 3d:dc:25:4c:db:11:4f:6e:56:a0:66:ae:8c:b3:8e:24:0b:47: 20:48:38:d2:38:b2:83:24:31:f9:33:52:75:8a:95:f4:06:f3: 74:a2:f7:e7:84:85:f9:2d:e2:5a:04:51:5b:27:2c:20:8a:e0: c4:16:54:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5f0rOgSvou/AWJcBNHBCeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAxMTIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmZmZTQ4MzBmY2VmMDgyOWE4YjI0MGFiZGU1OWQ5YjcwYjNjY2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX5916o1XIjryEzdMKayqAWrPYwG 2To8UZqXBOakTsetmy7q8CfvG/fHeLoM8XvpCqFg6E6aKHj8B9KKLN56oLiNpeYo PZMND4B0p8mUMBmfuemBjyigYG25BTiy5xutvIHUN8kDRG49FngwG6o9ofgD3lA1 Gjnznq7gdUBE8VeJHSSfBV520wrfb4LncbwRa2+ReHqCvOuToKgsw6RqS7umqUvk XjrGFBQQbKcA8pqoD/EodBHyWkfwukw3wYlLslykvJwv9FxSh9AtSenrdWfL8bi2 PHJITxwXQBofbJ6voinvidf9W3lp+zYC1QrYSPsqD2FYMf+JZ/sMTFigKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKv/5IMPzvCCmoskCr3lnZtws8zcMB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvcV9fa2d3X084SUthaXlRS3ZlV2RtM0N6ek53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e62MA0G CSqGSIb3DQEBCwUAA4IBAQCEWesIxSbGVkU1uECibTGVRtfSJJYzOSvzn4FThSxR dSC5tWTmIaHHzgYPcu1Mc0I1z+HUpa9L2LjTot6OH0jgPyUtCuyu+DRIy4Lj4ljh kqI2/TqdKEylUWJNSpxuiLiCek2TCqRBalalMBtzRTxvrfh7SDj97IcG4HdL1lvA OqgZjz+VkLsDqVxbmN+zCsVCTzAijPezPpyh+mkFyifl5oVFf3slCQa0ERePbJN+ civkgavQGTWimEacrbBhPVY+EGyh+f893CVM2xFPblagZq6Ms44kC0cgSDjSOLKD JDH5M1J1ipX0BvN0ovfnhIX5LeJaBFFbJywgiuDEFlSr -----END CERTIFICATE-----Generated at Wed Jan 21 15:56:09 2026 by rpki-client