This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/q5kphRSAlG3DN63C9RqhU3DMVds.roa File: q5kphRSAlG3DN63C9RqhU3DMVds.roa (raw, json) Hash identifier: VfvnDEZYHd7dijCx60k38qn3Wzq30eQaAO0QQVJTt/4= Subject key identifier: AB:99:29:85:14:80:94:6D:C3:37:AD:C2:F5:1A:A1:53:70:CC:55:DB Certificate issuer: /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938 Certificate serial: 019B78354382110F7F969BEF71854AAAE201 Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/q5kphRSAlG3DN63C9RqhU3DMVds.roa Signing time: Thu 01 Jan 2026 06:18:35 +0000 ROA not before: Thu 01 Jan 2026 06:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44559 IP address blocks: 176.100.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:43:82:11:0f:7f:96:9b:ef:71:85:4a:aa:e2:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938 Validity Not Before: Jan 1 06:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab9929851480946dc337adc2f51aa15370cc55db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cd:46:a4:0a:c7:74:30:6b:77:3b:74:11:e7: e9:1f:68:6a:e6:70:a9:81:63:92:ed:07:a6:99:fb: 7b:e1:c6:0a:35:9b:42:15:96:5a:2d:bb:9b:be:d7: eb:a2:22:3a:92:e2:17:d7:11:ef:87:7c:a5:15:46: 72:94:73:12:b6:ea:2b:29:14:b1:a1:77:4c:6c:2f: 03:e4:62:34:de:19:56:5e:7f:5b:00:dd:75:51:15: 19:76:9e:c8:82:c8:6f:9d:de:69:b9:0a:53:c3:31: 4b:39:08:b1:c8:49:ae:aa:fe:d7:4e:2d:10:a2:00: ac:ca:30:0e:66:41:6c:46:8d:ae:63:63:7d:b0:8e: 0a:e4:8a:3b:4d:03:cd:06:fa:f5:5d:f2:db:52:b1: c3:88:e9:b2:8a:40:e1:6c:c4:ae:a3:73:b4:a7:52: a4:37:3f:f6:f8:b6:a2:f7:9d:5b:18:b2:74:1d:35: 09:71:27:63:82:a9:e6:3c:67:ca:1b:2a:58:a8:cc: ca:c2:66:13:6e:7c:3f:95:07:63:50:b5:a5:48:10: 11:a5:b0:a3:5e:48:e9:25:8e:99:7f:f7:4d:2a:1f: 38:1b:e5:ae:d3:af:b2:85:53:66:be:ac:9b:01:15: 26:76:07:e9:29:a5:3b:7b:80:6e:f5:47:ce:5a:56: 3d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:99:29:85:14:80:94:6D:C3:37:AD:C2:F5:1A:A1:53:70:CC:55:DB X509v3 Authority Key Identifier: keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/q5kphRSAlG3DN63C9RqhU3DMVds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.100.147.0/24 Signature Algorithm: sha256WithRSAEncryption 84:8a:97:a7:17:12:c4:b7:9b:78:cf:d2:50:51:f9:4c:40:22: 63:df:18:f1:de:60:8f:26:6c:ca:14:bb:42:48:50:eb:a6:2f: b0:07:62:19:f2:16:13:2c:b3:62:e3:b0:06:61:78:54:c4:d6: 7d:6f:33:47:af:52:55:e0:bd:26:98:c4:90:2c:1e:2b:ff:4e: 10:65:83:1b:aa:82:21:2f:18:db:c6:2d:65:de:3e:3b:3a:7d: 39:1d:f4:5a:56:f8:d8:d6:fe:cb:32:28:77:81:2e:46:62:c3: 7d:55:4f:2a:a6:d9:f4:35:24:75:84:1c:c9:2c:5e:9d:e8:ba: b4:e2:44:8d:45:b7:09:83:8c:4b:55:b8:86:a3:13:d8:ca:55: 5e:00:17:6c:25:89:67:79:c3:bd:75:0b:08:ba:c6:b5:ea:5e: 90:99:b4:0e:98:cb:0b:1e:16:b2:2d:35:8f:d9:bf:cf:4e:6a: 66:8c:fe:58:01:53:c6:79:f9:44:bc:56:33:6e:e2:ff:b0:d2: 4a:90:a2:72:6d:a1:b3:8f:c9:81:06:fc:bc:97:e4:9e:4a:5c: 7d:38:cc:63:b7:d3:9b:cd:12:92:81:b0:ea:38:b0:23:c4:cd: 15:55:70:c6:91:63:5b:2f:25:ad:af:44:23:e1:fc:81:eb:27: fe:8d:1c:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NUOCEQ9/lpvvcYVKquIBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZjM2YjBhZGVlNmNiNTUxODc2M2I1YmM4ZWFhM2Q0MWYy M2U5MzgwHhcNMjYwMTAxMDYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjk5Mjk4NTE0ODA5NDZkYzMzN2FkYzJmNTFhYTE1MzcwY2M1NWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc1GpArHdDBrdzt0EefpH2hq5nCp gWOS7Qemmft74cYKNZtCFZZaLbubvtfroiI6kuIX1xHvh3ylFUZylHMStuorKRSx oXdMbC8D5GI03hlWXn9bAN11URUZdp7Igshvnd5puQpTwzFLOQixyEmuqv7XTi0Q ogCsyjAOZkFsRo2uY2N9sI4K5Io7TQPNBvr1XfLbUrHDiOmyikDhbMSuo3O0p1Kk Nz/2+Lai951bGLJ0HTUJcSdjgqnmPGfKGypYqMzKwmYTbnw/lQdjULWlSBARpbCj XkjpJY6Zf/dNKh84G+Wu06+yhVNmvqybARUmdgfpKaU7e4Bu9UfOWlY9DwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKuZKYUUgJRtwzetwvUaoVNwzFXbMB8GA1UdIwQY MBaAFIPzawre5stVGHY7W8jqo9QfI+k4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83MzE5NWMtZTY2My00OThjLTk3ZGIt YWY2NGYzZmEyNDU5LzEvcTVrcGhSU0FsRzNETjYzQzlScWhVM0RNVmRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83MzE5NWMtZTY2My00OThjLTk3ZGItYWY2NGYzZmEyNDU5 LzEvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGSTMA0G CSqGSIb3DQEBCwUAA4IBAQCEipenFxLEt5t4z9JQUflMQCJj3xjx3mCPJmzKFLtC SFDrpi+wB2IZ8hYTLLNi47AGYXhUxNZ9bzNHr1JV4L0mmMSQLB4r/04QZYMbqoIh Lxjbxi1l3j47On05HfRaVvjY1v7LMih3gS5GYsN9VU8qptn0NSR1hBzJLF6d6Lq0 4kSNRbcJg4xLVbiGoxPYylVeABdsJYlnecO9dQsIusa16l6QmbQOmMsLHhayLTWP 2b/PTmpmjP5YAVPGeflEvFYzbuL/sNJKkKJybaGzj8mBBvy8l+SeSlx9OMxjt9Ob zRKSgbDqOLAjxM0VVXDGkWNbLyWtr0Qj4fyB6yf+jRxd -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:50 2026 by rpki-client