This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/qGxTxAsu5FkWitZ0KPLQqCXDGFM.roa File: qGxTxAsu5FkWitZ0KPLQqCXDGFM.roa (raw, json) Hash identifier: zXhXvgnmYSnohs5FpeFJ6bYBqVk7H7oowzouCmYZY/Y= Subject key identifier: A8:6C:53:C4:0B:2E:E4:59:16:8A:D6:74:28:F2:D0:A8:25:C3:18:53 Certificate issuer: /CN=197499be97bcc327f64e9eb8c42394508ca06d65 Certificate serial: 019B7EA67F8612E43A621E6CDF92E9D8EEFB Authority key identifier: 19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/qGxTxAsu5FkWitZ0KPLQqCXDGFM.roa Signing time: Fri 02 Jan 2026 12:19:59 +0000 ROA not before: Fri 02 Jan 2026 12:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34184 IP address blocks: 194.145.238.0/24 maxlen: 24 194.150.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:7f:86:12:e4:3a:62:1e:6c:df:92:e9:d8:ee:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=197499be97bcc327f64e9eb8c42394508ca06d65 Validity Not Before: Jan 2 12:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a86c53c40b2ee459168ad67428f2d0a825c31853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:70:53:a2:28:26:91:52:e7:27:8c:c0:c8:52: 71:38:47:0d:5a:c1:a1:38:8e:1c:5b:0b:31:8f:31: 78:fb:a6:cf:30:99:cf:b4:19:01:27:b6:d3:45:af: 46:22:32:01:be:be:bf:6a:7f:c8:aa:98:8b:e4:f6: 39:0e:a4:b6:83:96:0c:2e:47:9a:d2:7d:13:45:84: 59:b3:71:0b:3e:fd:79:2e:8f:1b:9e:72:27:01:f3: 78:f8:12:6a:c2:f3:0b:5f:27:7b:45:68:80:4f:39: 0f:8e:87:44:b7:29:b5:25:2e:c4:81:8e:86:8e:11: 52:c0:5e:b3:ae:d2:76:04:8c:3a:8c:bf:3a:1d:da: 3e:a9:b8:a6:0d:6e:f4:11:b4:f3:7a:a4:64:c9:ef: 17:35:61:c0:f3:d6:d8:c0:f4:be:3e:88:05:cc:45: ee:a2:21:d4:ce:02:11:f1:a9:91:15:a0:74:a2:d5: 33:7f:4c:0a:42:78:c9:b0:03:fe:4e:7d:b6:ad:0d: 53:c5:b6:98:69:34:63:49:0a:9d:a7:a4:13:b3:6f: 3e:41:35:5d:0d:b5:1a:57:7e:25:08:22:55:a3:a0: 7e:17:38:53:6f:4e:13:1a:ca:a1:98:e0:70:26:6a: c0:33:f4:58:21:84:5a:6c:a5:44:6f:f4:0f:1a:10: 10:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6C:53:C4:0B:2E:E4:59:16:8A:D6:74:28:F2:D0:A8:25:C3:18:53 X509v3 Authority Key Identifier: keyid:19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/qGxTxAsu5FkWitZ0KPLQqCXDGFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.145.238.0/24 194.150.186.0/23 Signature Algorithm: sha256WithRSAEncryption 97:b3:5f:00:97:e2:51:5d:4c:2c:85:fc:f6:d2:24:66:fb:6a: 78:a7:d2:fd:a2:22:a3:40:74:20:f3:88:71:0b:52:2f:95:59: 7c:d3:76:fc:c8:4a:c8:41:f6:11:2c:ba:57:60:b1:cf:d4:ee: 6d:e9:43:2f:a0:af:22:bd:5d:c6:fb:67:a1:be:ea:30:74:33: ba:6f:6a:36:21:12:e5:ef:1c:0a:60:97:5b:b5:d8:85:1c:af: 59:2a:b9:20:3f:d5:77:b0:f7:eb:7a:e4:97:a2:aa:2b:eb:3a: 5a:0d:e6:91:6c:90:73:7b:9d:3e:c5:01:9f:cc:0d:d9:6b:d6: b5:8f:2e:23:53:ee:7d:64:59:53:5e:5c:da:66:b8:8b:c0:45: a8:e3:b6:ba:6e:3d:16:55:5d:f6:f5:d0:a8:72:a4:d2:01:90: 5d:af:a5:35:ec:78:77:13:bf:3e:53:69:f9:54:54:2e:84:31: a6:c6:3c:54:5f:ee:49:57:b6:ae:22:0f:08:af:79:7e:07:ef: 6d:11:2e:d9:12:65:d1:0b:7f:76:99:d3:ec:93:4e:98:bc:2a: 32:a7:ba:22:02:20:81:17:9a:74:db:5c:dd:e3:48:0c:0e:18: 74:08:58:e6:88:7d:67:38:ce:7d:90:7a:29:6a:e4:38:2d:a4: a2:b0:a3:b5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pn+GEuQ6Yh5s35Lp2O77MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NzQ5OWJlOTdiY2MzMjdmNjRlOWViOGM0MjM5NDUwOGNh MDZkNjUwHhcNMjYwMTAyMTIxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODZjNTNjNDBiMmVlNDU5MTY4YWQ2NzQyOGYyZDBhODI1YzMxODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3BToigmkVLnJ4zAyFJxOEcNWsGh OI4cWwsxjzF4+6bPMJnPtBkBJ7bTRa9GIjIBvr6/an/IqpiL5PY5DqS2g5YMLkea 0n0TRYRZs3ELPv15Lo8bnnInAfN4+BJqwvMLXyd7RWiATzkPjodEtym1JS7EgY6G jhFSwF6zrtJ2BIw6jL86Hdo+qbimDW70EbTzeqRkye8XNWHA89bYwPS+PogFzEXu oiHUzgIR8amRFaB0otUzf0wKQnjJsAP+Tn22rQ1TxbaYaTRjSQqdp6QTs28+QTVd DbUaV34lCCJVo6B+FzhTb04TGsqhmOBwJmrAM/RYIYRabKVEb/QPGhAQIwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKhsU8QLLuRZForWdCjy0KglwxhTMB8GA1UdIwQY MBaAFBl0mb6XvMMn9k6euMQjlFCMoG1lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1hTWnZwZTh3eWYyVHA2NHhDT1VVSXlnYldVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82YTkwMGEtOGI1Yy00MDdiLWEwOTQt ODk4MDM2NzM0ODc4LzEvcUd4VHhBc3U1RmtXaXRaMEtQTFFxQ1hER0ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS82YTkwMGEtOGI1Yy00MDdiLWEwOTQtODk4MDM2NzM0ODc4 LzEvR1hTWnZwZTh3eWYyVHA2NHhDT1VVSXlnYldVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwpHuAwQB wpa6MA0GCSqGSIb3DQEBCwUAA4IBAQCXs18Al+JRXUwshfz20iRm+2p4p9L9oiKj QHQg84hxC1IvlVl803b8yErIQfYRLLpXYLHP1O5t6UMvoK8ivV3G+2ehvuowdDO6 b2o2IRLl7xwKYJdbtdiFHK9ZKrkgP9V3sPfreuSXoqor6zpaDeaRbJBze50+xQGf zA3Za9a1jy4jU+59ZFlTXlzaZriLwEWo47a6bj0WVV329dCocqTSAZBdr6U17Hh3 E78+U2n5VFQuhDGmxjxUX+5JV7auIg8Ir3l+B+9tES7ZEmXRC392mdPsk06YvCoy p7oiAiCBF5p021zd40gMDhh0CFjmiH1nOM59kHopauQ4LaSisKO1 -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:58 2026 by rpki-client