This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/q_OQcoMatWD9yYK6URx-tLkfFF8.roa File: q_OQcoMatWD9yYK6URx-tLkfFF8.roa (raw, json) Hash identifier: 0GSxedo5Tkob9sB0ZMPPfNL2AyjoyzQrShV1S4qDABo= Subject key identifier: AB:F3:90:72:83:1A:B5:60:FD:C9:82:BA:51:1C:7E:B4:B9:1F:14:5F Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797ED7741075F24CE5C4A14B21ED5DC8 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/q_OQcoMatWD9yYK6URx-tLkfFF8.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206766 IP address blocks: 188.255.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d7:74:10:75:f2:4c:e5:c4:a1:4b:21:ed:5d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abf39072831ab560fdc982ba511c7eb4b91f145f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:64:c3:57:1a:41:22:1e:8b:d7:02:a1:b9:70: f5:57:89:f4:4f:0e:e5:ef:2d:f4:85:8b:0c:12:1d: 2c:14:9f:94:4c:ec:14:1b:b9:4c:eb:d0:1c:9f:1a: a1:fc:23:4d:4f:aa:35:2e:8f:06:43:cc:fd:d7:8f: 39:81:ae:ae:6d:d3:a7:15:a9:8e:30:40:6a:d6:a8: 1f:13:e6:8e:dc:37:ef:9d:df:75:9e:75:9b:f6:2a: 47:06:45:5d:87:08:c4:44:4d:4e:04:e0:ce:d2:9b: 33:23:79:83:a1:c0:e8:87:bc:0e:42:aa:77:64:50: 09:69:ae:73:1e:79:aa:31:e6:f7:4d:d4:2b:98:a3: d9:77:62:c6:ef:56:6b:ac:9b:0a:ac:4b:f3:fc:4a: 23:75:60:d0:fc:0b:7e:a2:4e:18:ec:68:86:22:0f: f6:34:76:60:d5:91:e8:5d:f6:7b:ec:9b:90:43:7e: 0d:77:7a:72:30:a4:af:ad:ad:d3:4d:9c:d6:e4:8a: 2c:9d:09:ef:f9:d5:d2:3f:2d:08:27:5a:cf:2d:e4: 9d:67:5a:69:1c:cf:e9:12:6a:92:f3:9a:10:c0:4a: 49:30:0f:d7:8d:f7:6c:8a:69:16:50:eb:55:f6:8a: 5c:78:fb:81:fd:a3:88:b4:fa:cd:55:d5:84:cb:c9: 97:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F3:90:72:83:1A:B5:60:FD:C9:82:BA:51:1C:7E:B4:B9:1F:14:5F X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/q_OQcoMatWD9yYK6URx-tLkfFF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.255.198.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:cb:f1:8c:be:bb:3d:29:fd:30:e0:f9:68:49:ec:32:74:5a: 7d:ff:d2:73:1d:7a:a0:c8:34:a2:d4:91:bf:7b:27:c9:1c:36: 38:ef:84:a8:0f:fa:43:d6:13:b6:9b:7d:49:2b:72:1f:b0:af: 21:94:f3:e5:d7:bc:c4:45:61:c5:ad:28:c5:7e:7d:f5:70:e7: c6:fe:64:a8:89:aa:12:6b:32:81:0e:68:d2:49:fd:17:17:d3: f5:3c:99:d5:de:39:31:61:00:de:49:a0:0f:0d:5f:8c:c1:73: 84:52:94:d4:20:28:41:1b:3d:af:90:b4:20:35:f1:69:0c:94: b7:10:61:0f:f9:99:78:3c:bd:ed:05:de:8e:18:8a:9b:cb:0c: 4f:82:c5:88:af:00:f4:be:ee:76:99:e0:b0:79:58:2b:80:e5: b8:ba:62:d7:c4:2e:65:7e:03:20:3c:50:a9:d0:c8:4c:b1:fa: 12:e0:02:e5:8e:48:06:b9:af:71:04:38:50:ac:34:f8:aa:88: 31:1c:04:16:4f:fd:68:f7:9a:50:94:f5:31:99:9c:25:42:d1: 97:63:f3:9c:e0:bd:45:f1:21:a9:b7:e6:6a:52:bb:fc:a5:7e: 2f:e7:b4:dc:5b:22:78:60:59:2d:25:e3:f9:1b:db:18:28:a1: 1e:89:c0:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftd0EHXyTOXEoUsh7V3IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmYzOTA3MjgzMWFiNTYwZmRjOTgyYmE1MTFjN2ViNGI5MWYxNDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGTDVxpBIh6L1wKhuXD1V4n0Tw7l 7y30hYsMEh0sFJ+UTOwUG7lM69Acnxqh/CNNT6o1Lo8GQ8z91485ga6ubdOnFamO MEBq1qgfE+aO3Dfvnd91nnWb9ipHBkVdhwjERE1OBODO0pszI3mDocDoh7wOQqp3 ZFAJaa5zHnmqMeb3TdQrmKPZd2LG71ZrrJsKrEvz/EojdWDQ/At+ok4Y7GiGIg/2 NHZg1ZHoXfZ77JuQQ34Nd3pyMKSvra3TTZzW5IosnQnv+dXSPy0IJ1rPLeSdZ1pp HM/pEmqS85oQwEpJMA/XjfdsimkWUOtV9opcePuB/aOItPrNVdWEy8mXfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKvzkHKDGrVg/cmCulEcfrS5HxRfMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvcV9PUWNvTWF0V0Q5eVlLNlVSeC10TGtmRkY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvP/GMA0G CSqGSIb3DQEBCwUAA4IBAQAdy/GMvrs9Kf0w4PloSewydFp9/9JzHXqgyDSi1JG/ eyfJHDY474SoD/pD1hO2m31JK3IfsK8hlPPl17zERWHFrSjFfn31cOfG/mSoiaoS azKBDmjSSf0XF9P1PJnV3jkxYQDeSaAPDV+MwXOEUpTUIChBGz2vkLQgNfFpDJS3 EGEP+Zl4PL3tBd6OGIqbywxPgsWIrwD0vu52meCweVgrgOW4umLXxC5lfgMgPFCp 0MhMsfoS4ALljkgGua9xBDhQrDT4qogxHAQWT/1o95pQlPUxmZwlQtGXY/Oc4L1F 8SGpt+ZqUrv8pX4v57TcWyJ4YFktJeP5G9sYKKEeicDR -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:06 2026 by rpki-client