This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/qSNYJ-9hvnj2oMFvdiXLbxjhOwk.roa File: qSNYJ-9hvnj2oMFvdiXLbxjhOwk.roa (raw, json) Hash identifier: bfBTAvujo01mv5S6EOQahz4Gss8vRe5ZhsQN9X0Csy4= Subject key identifier: A9:23:58:27:EF:61:BE:78:F6:A0:C1:6F:76:25:CB:6F:18:E1:3B:09 Certificate issuer: /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979 Certificate serial: 019B7B36CE6A9CEFCAD52E876F5B86943C23 Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/qSNYJ-9hvnj2oMFvdiXLbxjhOwk.roa Signing time: Thu 01 Jan 2026 20:19:07 +0000 ROA not before: Thu 01 Jan 2026 20:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24995 IP address blocks: 94.199.160.0/21 maxlen: 24 94.199.160.0/22 maxlen: 22 185.194.188.0/22 maxlen: 24 193.201.60.0/22 maxlen: 24 2a02:680::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ce:6a:9c:ef:ca:d5:2e:87:6f:5b:86:94:3c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979 Validity Not Before: Jan 1 20:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9235827ef61be78f6a0c16f7625cb6f18e13b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:47:c1:9c:92:85:0c:3a:88:c3:b3:e6:da:0b: 88:7f:ed:a3:d9:f9:8d:f1:7f:43:6d:f4:1d:09:75: fc:31:28:e1:90:ab:a9:9b:a0:67:7b:0c:bb:07:03: 64:8e:2d:cc:9d:36:95:0c:7e:a8:33:b7:aa:37:c9: 5b:65:88:7c:7a:7e:ac:fc:31:e6:9b:b3:36:11:09: 4f:1f:b5:eb:aa:3c:ce:e9:e1:ca:90:02:30:89:50: bf:5d:c1:a4:32:5f:cf:50:91:fc:40:68:f4:49:b4: cc:e4:ae:a7:a5:30:92:c7:8d:07:c0:d9:9e:98:bb: 5e:5e:16:82:90:d3:d3:f6:5b:ce:38:83:42:db:b7: 75:36:5e:1e:f4:22:40:ff:cf:9c:c3:c6:9b:6a:e6: 1d:1c:51:e2:3b:40:df:28:74:eb:4e:e0:1d:2b:b2: 56:cb:89:5d:34:48:d0:50:c4:8c:56:3a:c4:00:47: da:44:04:dd:a6:f0:25:fb:e9:43:89:eb:6d:86:66: d8:9a:12:20:ea:6d:0d:9e:eb:9c:2c:ed:ea:02:69: b4:14:76:7e:b1:5f:78:3d:77:05:11:90:24:03:ff: e2:f6:2e:c9:fd:90:10:59:43:9a:1f:68:98:58:c0: 88:fa:da:ab:a9:b8:e4:01:e4:55:e2:4a:fb:9b:97: ef:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:23:58:27:EF:61:BE:78:F6:A0:C1:6F:76:25:CB:6F:18:E1:3B:09 X509v3 Authority Key Identifier: keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/qSNYJ-9hvnj2oMFvdiXLbxjhOwk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.199.160.0/21 185.194.188.0/22 193.201.60.0/22 IPv6: 2a02:680::/36 Signature Algorithm: sha256WithRSAEncryption 2f:48:45:c1:f0:38:55:89:69:bd:c5:bc:8a:c6:29:71:d7:53: d7:a9:c8:ad:c4:6b:45:7b:c7:92:f5:7f:f5:f7:ab:e3:21:05: 80:c7:08:9b:c6:99:57:54:1f:b2:c3:0d:0e:c5:57:8a:54:ae: be:8b:b4:6d:25:3f:46:e1:fc:f7:be:58:54:1e:06:67:54:f3: cc:72:43:3b:47:6d:8b:33:9b:88:5c:04:a8:2e:c6:d3:a8:da: 16:12:4f:8a:07:f8:01:49:8c:91:d7:21:db:40:df:93:73:e5: 68:e3:c0:92:18:9e:20:ca:18:cc:c4:e8:15:d7:ab:ec:1b:ef: 15:c1:ab:f3:0f:12:da:cb:32:d1:ef:3c:44:31:e7:56:24:d3: 96:4d:ff:87:a4:b4:b3:db:ee:63:1a:cc:00:da:9c:86:4f:6b: 4d:5d:96:27:71:4a:b0:82:07:55:8e:cf:2e:53:f3:78:6c:7c: d1:a1:13:86:12:dd:79:d4:b2:02:83:e5:bc:32:32:af:0a:c6: 2c:b7:0a:d0:c1:2f:e2:9e:f1:2b:86:c3:8b:22:ec:9a:06:37: bd:3f:c1:37:e4:e1:9d:c6:87:cf:fa:ca:0a:8a:84:98:27:32: 2c:53:28:f7:e0:d4:9e:e0:fc:15:a6:47:71:55:89:4a:89:94: 1b:ee:9a:aa -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt7Ns5qnO/K1S6Hb1uGlDwjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjOTExMzI0ZTg2OWJjNGNhNWVjOGJhZDBkM2RkZmY2ODU0 NDE5NzkwHhcNMjYwMTAxMjAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTIzNTgyN2VmNjFiZTc4ZjZhMGMxNmY3NjI1Y2I2ZjE4ZTEzYjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9kfBnJKFDDqIw7Pm2guIf+2j2fmN 8X9DbfQdCXX8MSjhkKupm6Bnewy7BwNkji3MnTaVDH6oM7eqN8lbZYh8en6s/DHm m7M2EQlPH7XrqjzO6eHKkAIwiVC/XcGkMl/PUJH8QGj0SbTM5K6npTCSx40HwNme mLteXhaCkNPT9lvOOINC27d1Nl4e9CJA/8+cw8abauYdHFHiO0DfKHTrTuAdK7JW y4ldNEjQUMSMVjrEAEfaRATdpvAl++lDietthmbYmhIg6m0NnuucLO3qAmm0FHZ+ sV94PXcFEZAkA//i9i7J/ZAQWUOaH2iYWMCI+tqrqbjkAeRV4kr7m5fvmwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKkjWCfvYb549qDBb3Yly28Y4TsJMB8GA1UdIwQY MBaAFEyREyToabxMpeyLrQ093/aFRBl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yYjM4YjMtMTJmMS00MjQyLWFkYWUt YjdkMWNhYzUxZTBjLzEvcVNOWUotOWh2bmoyb01GdmRpWExieGpoT3drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yYjM4YjMtMTJmMS00MjQyLWFkYWUtYjdkMWNhYzUxZTBj LzEvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQDXsegAwQC ucK8AwQCwck8MA4EAgACMAgDBgQqAgaAADANBgkqhkiG9w0BAQsFAAOCAQEAL0hF wfA4VYlpvcW8isYpcddT16nIrcRrRXvHkvV/9fer4yEFgMcIm8aZV1QfssMNDsVX ilSuvou0bSU/RuH8975YVB4GZ1TzzHJDO0dtizObiFwEqC7G06jaFhJPigf4AUmM kdch20Dfk3PlaOPAkhieIMoYzMToFder7BvvFcGr8w8S2ssy0e88RDHnViTTlk3/ h6S0s9vuYxrMANqchk9rTV2WJ3FKsIIHVY7PLlPzeGx80aEThhLdedSyAoPlvDIy rwrGLLcK0MEv4p7xK4bDiyLsmgY3vT/BN+ThncaHz/rKCoqEmCcyLFMo9+DUnuD8 FaZHcVWJSomUG+6aqg== -----END CERTIFICATE-----Generated at Sun Jan 18 13:14:02 2026 by rpki-client