This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/QEDVpN2G6A8jozHnkTczP5khLY4.roa File: QEDVpN2G6A8jozHnkTczP5khLY4.roa (raw, json) Hash identifier: ZdNXvCdfzs3xB6Mj6+mdd2fmrySxnZPGoHLzOwpr9Qw= Subject key identifier: 40:40:D5:A4:DD:86:E8:0F:23:A3:31:E7:91:37:33:3F:99:21:2D:8E Certificate issuer: /CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb Certificate serial: 019B7C8017F234170D98D8093B8D4C2EA421 Authority key identifier: D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/QEDVpN2G6A8jozHnkTczP5khLY4.roa Signing time: Fri 02 Jan 2026 02:18:47 +0000 ROA not before: Fri 02 Jan 2026 02:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12502 IP address blocks: 195.93.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:17:f2:34:17:0d:98:d8:09:3b:8d:4c:2e:a4:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4040d5a4dd86e80f23a331e79137333f99212d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b2:88:7b:b9:64:de:44:eb:2f:e3:9d:a7:8a: 19:3a:0d:8d:76:d5:89:50:5f:3b:8c:74:b9:ac:83: 94:b9:49:2f:ec:ff:50:a7:5a:4a:59:e2:29:60:7a: 13:1c:12:a8:23:79:0f:77:0a:48:70:14:b9:bc:08: 84:58:44:1d:0b:cb:57:8e:72:73:b5:59:14:43:43: 4d:8e:89:bb:b5:ca:91:a2:df:07:b8:18:27:ad:82: ed:0c:38:49:88:97:8f:58:fc:b6:c7:96:0a:7a:f7: c9:a7:4e:90:d8:0d:ff:de:05:cd:41:3c:27:b7:f8: a0:0f:c6:a3:84:f8:9e:7d:b3:60:f1:e0:81:4d:96: f3:12:2c:33:fe:9d:3d:d3:d2:7a:3e:50:c8:a8:7d: a5:9f:7e:f8:ed:18:64:ee:30:d0:58:1d:38:5a:68: e3:3e:f7:5e:d4:d5:d2:2b:5d:80:0a:93:90:b0:f7: 67:62:a7:7d:f1:ed:fa:41:51:ce:b5:ed:ed:fe:77: 54:b1:cd:16:fe:e1:34:12:97:51:15:12:a3:86:61: 36:43:f1:4f:eb:4b:fa:a7:14:17:a7:28:6c:22:89: b2:5f:73:1d:96:70:55:50:95:0e:b6:2c:3e:bd:ff: e7:1d:ce:64:0c:45:c3:37:e0:0e:2e:d3:2f:c7:c9: 6c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:40:D5:A4:DD:86:E8:0F:23:A3:31:E7:91:37:33:3F:99:21:2D:8E X509v3 Authority Key Identifier: keyid:D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/QEDVpN2G6A8jozHnkTczP5khLY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.93.166.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:ba:e5:61:3d:1b:2c:ba:a4:54:e5:bb:c8:9c:7a:37:52:32: 57:80:44:70:5b:8d:fb:d7:ab:68:0b:8f:29:aa:bf:d4:c1:d6: 3a:3f:d6:a8:d6:52:98:3c:04:e0:6c:a3:d8:29:72:61:cf:c2: 0f:fd:0d:8a:55:80:d4:53:7d:6f:7f:da:e8:bd:6c:e7:29:8f: 64:eb:83:98:fa:6f:b0:3e:dc:e9:6e:be:c6:72:f3:91:34:95: dd:50:f2:7f:f2:75:6d:64:5f:69:48:28:f1:83:b1:2b:49:ce: e6:89:51:da:cf:e6:2a:a8:a4:09:17:49:f3:23:cc:bb:2e:0b: cf:d6:d2:a1:05:5b:4c:b1:3f:10:f4:e9:a2:09:89:3f:36:94: c2:e5:e6:e2:6c:bd:ad:af:12:c1:f8:33:93:9a:ec:21:87:37: e5:49:70:3c:96:7d:e1:fe:47:eb:8e:67:bf:ac:bd:76:68:95: fe:a9:6d:73:06:55:ab:f3:bf:1d:9d:b2:bd:5e:8e:4f:33:a0: 9b:9f:21:d7:aa:2d:f0:1e:ee:c4:d8:77:29:3e:a9:73:e1:d1: f4:c6:d7:9e:23:5e:7e:7a:0c:8c:5b:5a:7e:3f:d7:0a:89:7f: b8:46:23:a0:d5:c8:c0:fd:b4:85:e9:59:50:83:33:43:e5:9a: f5:b5:7d:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gBfyNBcNmNgJO41MLqQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5YmEzMjAyNGUyY2I2MTQyMjk1MTEyZmU2MWY2YjFiYzM0 NTdiY2IwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDQwZDVhNGRkODZlODBmMjNhMzMxZTc5MTM3MzMzZjk5MjEyZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bKIe7lk3kTrL+Odp4oZOg2NdtWJ UF87jHS5rIOUuUkv7P9Qp1pKWeIpYHoTHBKoI3kPdwpIcBS5vAiEWEQdC8tXjnJz tVkUQ0NNjom7tcqRot8HuBgnrYLtDDhJiJePWPy2x5YKevfJp06Q2A3/3gXNQTwn t/igD8ajhPiefbNg8eCBTZbzEiwz/p0909J6PlDIqH2ln3747Rhk7jDQWB04Wmjj Pvde1NXSK12ACpOQsPdnYqd98e36QVHOte3t/ndUsc0W/uE0EpdRFRKjhmE2Q/FP 60v6pxQXpyhsIomyX3MdlnBVUJUOtiw+vf/nHc5kDEXDN+AOLtMvx8lsVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEBA1aTdhugPI6Mx55E3Mz+ZIS2OMB8GA1UdIwQY MBaAFNm6MgJOLLYUIpURL+YfaxvDRXvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mNjMzMDMtMTc2ZC00MTc2LWFiYmYt N2RmOWU0YTIzOGNjLzEvUUVEVnBOMkc2QThqb3pIbmtUY3pQNWtoTFk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9mNjMzMDMtMTc2ZC00MTc2LWFiYmYtN2RmOWU0YTIzOGNj LzEvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw12mMA0G CSqGSIb3DQEBCwUAA4IBAQCOuuVhPRssuqRU5bvInHo3UjJXgERwW43716toC48p qr/UwdY6P9ao1lKYPATgbKPYKXJhz8IP/Q2KVYDUU31vf9rovWznKY9k64OY+m+w Ptzpbr7GcvORNJXdUPJ/8nVtZF9pSCjxg7ErSc7miVHaz+YqqKQJF0nzI8y7LgvP 1tKhBVtMsT8Q9OmiCYk/NpTC5ebibL2trxLB+DOTmuwhhzflSXA8ln3h/kfrjme/ rL12aJX+qW1zBlWr878dnbK9Xo5PM6CbnyHXqi3wHu7E2HcpPqlz4dH0xteeI15+ egyMW1p+P9cKiX+4RiOg1cjA/bSF6VlQgzND5Zr1tX0c -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:29 2026 by rpki-client