This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/QXk8W4rb7xC84yICsxZR9VqLPac.roa File: QXk8W4rb7xC84yICsxZR9VqLPac.roa (raw, json) Hash identifier: d5XV4cDn9Fni7vqIA1er8ivsyYtrUO1CqIbq1cH3BPY= Subject key identifier: 41:79:3C:5B:8A:DB:EF:10:BC:E3:22:02:B3:16:51:F5:5A:8B:3D:A7 Certificate issuer: /CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4 Certificate serial: 019B7E3846447D827C6A61B3DC1B2B558057 Authority key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/QXk8W4rb7xC84yICsxZR9VqLPac.roa Signing time: Fri 02 Jan 2026 10:19:35 +0000 ROA not before: Fri 02 Jan 2026 10:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35343 IP address blocks: 193.47.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:46:44:7d:82:7c:6a:61:b3:dc:1b:2b:55:80:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4 Validity Not Before: Jan 2 10:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41793c5b8adbef10bce32202b31651f55a8b3da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f0:73:6b:b2:5d:3a:a5:5c:14:e2:3e:8c:d7: 16:ea:16:69:10:82:df:a3:ab:ca:b1:57:4d:25:37: 01:91:a2:6f:fd:f0:8b:78:0e:61:0c:72:d9:30:a6: bd:f0:4c:b3:ed:75:f9:c7:96:9c:bf:9a:8d:0d:70: 28:26:21:11:b0:93:e1:89:cd:b0:66:f5:0f:7a:ad: 6b:88:78:12:1a:5b:95:a3:4f:28:14:03:c8:a4:35: dd:8e:f3:49:07:fc:88:36:a1:be:dc:a1:ba:37:5d: 29:30:5e:09:6d:85:a6:47:f5:66:e9:5c:c2:41:91: e7:30:c3:b4:02:61:42:b6:0b:35:8a:87:34:a5:1d: 9e:eb:36:77:8c:8d:d9:ce:8d:19:2e:a3:6c:b3:07: d4:97:0a:31:dd:aa:ac:22:5c:71:df:79:54:ff:85: 13:be:33:2a:ae:26:28:38:a9:25:16:47:2a:2c:7e: 83:38:0a:60:54:32:4b:30:08:32:93:69:f6:d4:0e: d9:aa:45:93:ca:00:37:2c:c3:d0:d2:e0:bd:a7:ac: b9:06:31:b5:7e:e5:78:6f:02:3d:b4:f9:d8:94:81: a6:1e:ee:2f:a3:da:77:72:62:61:d1:b5:63:e4:38: cb:72:e7:1c:fb:78:ec:d8:45:c1:5c:6b:00:fd:f3: 21:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:79:3C:5B:8A:DB:EF:10:BC:E3:22:02:B3:16:51:F5:5A:8B:3D:A7 X509v3 Authority Key Identifier: keyid:4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/QXk8W4rb7xC84yICsxZR9VqLPac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.47.136.0/24 Signature Algorithm: sha256WithRSAEncryption 70:0b:ee:72:12:ea:4e:3c:f2:36:e0:99:b0:3a:06:ae:76:14: a2:62:51:c3:1f:56:c7:6a:b1:8e:e8:82:8f:8d:e8:be:50:cb: 41:f7:12:c2:f0:00:82:54:5f:a4:07:b0:54:85:79:7a:40:44: 2e:d7:f0:b4:df:da:68:8a:34:8c:38:ab:61:cd:9c:bf:6a:19: 98:ca:0c:24:31:c9:00:eb:a9:14:14:53:aa:0d:11:33:c1:24: 41:ef:95:22:e4:b7:3b:87:65:20:dc:51:7f:cb:de:71:eb:1b: a8:6b:d5:2b:96:3f:0f:0e:43:45:84:4a:5e:17:bd:89:0e:2a: 7c:3b:47:13:bc:c6:f1:6e:24:10:30:56:71:9e:bb:b2:7f:ba: 29:2b:53:1e:03:53:88:45:37:9f:ae:75:c7:84:d3:da:cd:6a: b9:df:15:da:39:4c:e2:ce:28:27:22:23:04:f1:81:35:cb:7e: db:38:52:34:66:9a:93:90:32:a2:f3:55:3a:77:fc:5b:09:57: 8e:0b:c4:47:61:a2:94:8a:68:ad:51:e9:18:e9:6e:14:c8:a6: c4:f4:b7:32:d4:6e:83:c9:b5:07:f7:64:24:bc:e6:a7:28:4b: 71:59:11:a7:50:ad:ed:dd:71:a6:12:6c:64:24:2e:e2:e6:c9: b0:18:33:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OEZEfYJ8amGz3BsrVYBXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjExMDRiYmE1YTNmMWRkZDJkZWViYmEzNDgxOTE5ZjRm OTYxYTQwHhcNMjYwMTAyMTAxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTc5M2M1YjhhZGJlZjEwYmNlMzIyMDJiMzE2NTFmNTVhOGIzZGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvBza7JdOqVcFOI+jNcW6hZpEILf o6vKsVdNJTcBkaJv/fCLeA5hDHLZMKa98Eyz7XX5x5acv5qNDXAoJiERsJPhic2w ZvUPeq1riHgSGluVo08oFAPIpDXdjvNJB/yINqG+3KG6N10pMF4JbYWmR/Vm6VzC QZHnMMO0AmFCtgs1ioc0pR2e6zZ3jI3Zzo0ZLqNsswfUlwox3aqsIlxx33lU/4UT vjMqriYoOKklFkcqLH6DOApgVDJLMAgyk2n21A7ZqkWTygA3LMPQ0uC9p6y5BjG1 fuV4bwI9tPnYlIGmHu4vo9p3cmJh0bVj5DjLcucc+3js2EXBXGsA/fMhZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEF5PFuK2+8QvOMiArMWUfVaiz2nMB8GA1UdIwQY MBaAFE+xEEu6Wj8d3S3uu6NIGRn0+WGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdFUVM3cGFQeDNkTGU2N28wZ1pHZlQ1WWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84OWVlOTQtNTAxMC00NGFkLTllMTct NDM2YWI0YWRlMGE3LzEvUVhrOFc0cmI3eEM4NHlJQ3N4WlI5VnFMUGFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84OWVlOTQtNTAxMC00NGFkLTllMTctNDM2YWI0YWRlMGE3 LzEvVDdFUVM3cGFQeDNkTGU2N28wZ1pHZlQ1WWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS+IMA0G CSqGSIb3DQEBCwUAA4IBAQBwC+5yEupOPPI24JmwOgaudhSiYlHDH1bHarGO6IKP jei+UMtB9xLC8ACCVF+kB7BUhXl6QEQu1/C039poijSMOKthzZy/ahmYygwkMckA 66kUFFOqDREzwSRB75Ui5Lc7h2Ug3FF/y95x6xuoa9Urlj8PDkNFhEpeF72JDip8 O0cTvMbxbiQQMFZxnruyf7opK1MeA1OIRTefrnXHhNPazWq53xXaOUzizignIiME 8YE1y37bOFI0ZpqTkDKi81U6d/xbCVeOC8RHYaKUimitUekY6W4UyKbE9Lcy1G6D ybUH92QkvOanKEtxWRGnUK3t3XGmEmxkJC7i5smwGDM0 -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:00 2026 by rpki-client