This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/qSnbVpCUTBo3CbEFeEaAeBg12KU.roa File: qSnbVpCUTBo3CbEFeEaAeBg12KU.roa (raw, json) Hash identifier: lUFBwmvXAt5o1tXZm7PlCC3E71TOjkaQgtMQg6Erswc= Subject key identifier: A9:29:DB:56:90:94:4C:1A:37:09:B1:05:78:46:80:78:18:35:D8:A5 Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019B76EB819759E5A89A2C248C83294303DB Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/qSnbVpCUTBo3CbEFeEaAeBg12KU.roa Signing time: Thu 01 Jan 2026 00:18:24 +0000 ROA not before: Thu 01 Jan 2026 00:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42193 IP address blocks: 213.153.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:81:97:59:e5:a8:9a:2c:24:8c:83:29:43:03:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Jan 1 00:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a929db5690944c1a3709b105784680781835d8a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:67:39:60:a7:a6:0d:d1:55:00:42:b6:de:d2: 4a:e3:8b:2c:83:57:a1:8e:60:01:d4:f0:fc:30:7f: 1d:ac:7f:29:8a:ae:39:14:da:2d:8f:85:f2:3a:d5: 4c:36:8f:60:67:06:e7:99:d0:de:b2:61:e4:cd:41: b7:d9:aa:25:ee:24:2d:26:77:3b:ab:19:ec:d1:bf: c7:cf:9c:45:a7:2e:88:a9:7e:be:b2:29:d4:c1:71: 58:f7:8c:db:d0:48:77:8f:25:37:93:7b:78:66:be: 0e:de:a1:91:00:45:16:78:d0:8e:89:68:4d:4b:28: 3a:df:83:33:18:d4:46:56:75:6e:bf:45:bb:21:49: 4c:29:b6:43:67:a7:4d:f2:c9:c3:8e:24:f1:de:b5: 78:5b:fd:0d:49:f5:e7:f2:87:f9:34:d5:ac:24:ca: 23:90:5c:1b:45:80:83:35:5f:2e:82:0b:b8:e1:22: a8:05:b7:4a:b9:e3:c5:ca:5a:59:ac:76:c4:d1:c4: dd:a9:2e:d6:ca:ee:56:7c:93:48:33:ec:2d:3e:6c: 71:64:f7:94:6f:d0:1e:6d:97:cd:45:5c:16:5c:fb: 05:38:82:ec:7e:f0:51:f5:b9:6e:89:91:b0:ba:f6: 8a:58:07:13:5f:58:ae:2d:af:59:58:e3:02:c5:01: d1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:29:DB:56:90:94:4C:1A:37:09:B1:05:78:46:80:78:18:35:D8:A5 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/qSnbVpCUTBo3CbEFeEaAeBg12KU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.153.129.0/24 Signature Algorithm: sha256WithRSAEncryption 47:1a:dd:47:1d:d0:ce:69:6c:de:47:64:1b:80:b2:ee:dc:5d: 2f:5c:8f:da:ff:33:18:89:58:43:28:03:0f:ed:e5:b1:26:d6: 63:0e:2a:65:8b:ef:6c:27:6f:a8:95:31:e4:b7:ea:da:ff:1a: 3a:ac:2e:35:c8:e3:d0:88:34:2e:79:f4:bb:35:57:83:c2:97: 91:5f:1c:72:2b:71:9c:bf:2c:dd:2c:30:e3:08:d5:9f:a0:bd: 38:93:9c:b8:1f:45:c0:2d:73:0d:5f:ed:f7:f0:bc:19:13:74: 9c:95:94:ee:4a:72:49:ce:f6:f9:e4:e6:4b:83:87:30:20:91: ed:35:d2:c9:22:40:22:3f:c2:1f:6b:f9:ed:9f:58:c5:19:b9: 13:49:30:c8:e3:4a:95:d8:11:65:c0:b6:ef:16:29:8a:c9:4d: 3a:ed:0c:1a:fd:ac:39:a6:f9:7e:a7:2b:33:58:f4:0e:97:95: ec:bb:32:b5:33:4b:bc:db:b5:7f:2f:bb:3c:fc:d1:4b:e1:7a: 23:31:02:0c:20:fa:70:f2:f7:af:c2:4e:c4:84:ad:ca:29:50: c7:92:fa:f0:3d:e1:ef:c9:5a:27:ec:0e:4e:f1:ff:fe:31:6b: 92:d7:25:82:be:a0:da:7b:a2:32:b5:b9:c6:c0:cf:3a:ab:06: f8:37:62:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264GXWeWomiwkjIMpQwPbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwMTAxMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTI5ZGI1NjkwOTQ0YzFhMzcwOWIxMDU3ODQ2ODA3ODE4MzVkOGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Wc5YKemDdFVAEK23tJK44ssg1eh jmAB1PD8MH8drH8piq45FNotj4XyOtVMNo9gZwbnmdDesmHkzUG32aol7iQtJnc7 qxns0b/Hz5xFpy6IqX6+sinUwXFY94zb0Eh3jyU3k3t4Zr4O3qGRAEUWeNCOiWhN Syg634MzGNRGVnVuv0W7IUlMKbZDZ6dN8snDjiTx3rV4W/0NSfXn8of5NNWsJMoj kFwbRYCDNV8uggu44SKoBbdKuePFylpZrHbE0cTdqS7Wyu5WfJNIM+wtPmxxZPeU b9AebZfNRVwWXPsFOILsfvBR9bluiZGwuvaKWAcTX1iuLa9ZWOMCxQHRXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKkp21aQlEwaNwmxBXhGgHgYNdilMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvcVNuYlZwQ1VUQm8zQ2JFRmVFYUFlQmcxMktVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZmBMA0G CSqGSIb3DQEBCwUAA4IBAQBHGt1HHdDOaWzeR2QbgLLu3F0vXI/a/zMYiVhDKAMP 7eWxJtZjDipli+9sJ2+olTHkt+ra/xo6rC41yOPQiDQuefS7NVeDwpeRXxxyK3Gc vyzdLDDjCNWfoL04k5y4H0XALXMNX+338LwZE3SclZTuSnJJzvb55OZLg4cwIJHt NdLJIkAiP8Ifa/ntn1jFGbkTSTDI40qV2BFlwLbvFimKyU067Qwa/aw5pvl+pysz WPQOl5XsuzK1M0u827V/L7s8/NFL4XojMQIMIPpw8vevwk7EhK3KKVDHkvrwPeHv yVon7A5O8f/+MWuS1yWCvqDae6IytbnGwM86qwb4N2Ib -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:17 2026 by rpki-client