This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/QggJ5eY0gByoaEixKiNuOhk0OXo.roa File: QggJ5eY0gByoaEixKiNuOhk0OXo.roa (raw, json) Hash identifier: U4DMkB/3xVwMN4uiXFr55EFR8T9dhwrtfKBrzg59+7U= Subject key identifier: 42:08:09:E5:E6:34:80:1C:A8:68:48:B1:2A:23:6E:3A:19:34:39:7A Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758B4775EC7E4DF0431ABB83576F8AB Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/QggJ5eY0gByoaEixKiNuOhk0OXo.roa Signing time: Thu 01 Jan 2026 02:17:40 +0000 ROA not before: Thu 01 Jan 2026 02:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201160 IP address blocks: 194.62.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b4:77:5e:c7:e4:df:04:31:ab:b8:35:76:f8:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=420809e5e634801ca86848b12a236e3a1934397a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:83:3d:0f:b8:27:b1:34:b9:9a:06:20:63:1a: 28:27:cb:26:ae:82:11:81:61:81:e1:fa:15:1e:cf: 08:23:74:90:66:da:63:29:e1:6b:bb:90:27:9e:4b: 02:5f:10:ac:90:57:27:3a:7e:8c:34:92:96:2a:df: 28:de:6e:c3:ee:36:97:e3:8b:c7:66:dd:95:42:05: 68:16:7f:5c:10:25:4b:02:40:c8:08:55:65:99:cc: a7:98:f4:78:ac:4d:b8:11:9a:2d:cb:13:95:ec:8e: 44:31:7b:89:61:aa:13:50:a9:8a:be:99:f0:4d:56: 88:75:76:cf:52:c5:1c:d3:d5:2c:cb:01:f2:b9:9d: 15:c0:35:a3:76:84:36:bc:68:c6:b4:96:52:db:56: b4:85:56:19:6c:9a:b7:bb:76:ac:b7:f9:2e:22:8b: ae:84:50:a9:9e:e6:ea:c4:9c:5e:8e:8f:a0:cd:33: 78:4e:62:e7:59:d0:ee:2b:d4:92:46:ce:5e:4f:04: 92:2d:bd:2d:5a:27:af:12:2a:64:6e:ac:05:7b:02: bc:9c:df:ab:58:bf:4f:f2:83:e2:53:96:7b:ff:91: b3:fb:18:59:8f:79:2c:41:07:51:10:5d:79:25:b9: 4f:ad:29:3d:18:00:e8:12:98:ca:ca:b2:b9:25:40: e2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:08:09:E5:E6:34:80:1C:A8:68:48:B1:2A:23:6E:3A:19:34:39:7A X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/QggJ5eY0gByoaEixKiNuOhk0OXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.62.53.0/24 Signature Algorithm: sha256WithRSAEncryption 83:f9:cc:23:a1:6d:aa:46:ab:5e:39:1a:59:e7:c4:29:7b:2f: ae:57:32:42:fc:e5:19:f3:0f:af:8d:90:92:b6:44:9c:21:86: 63:e0:a6:17:eb:02:30:5a:15:53:25:f0:99:29:77:5c:b2:fb: bd:b9:7c:ba:2b:b5:36:d0:8d:c8:ef:9f:b7:af:5e:a9:12:e8: c5:8d:0e:4f:e6:37:ab:d7:72:07:1b:c8:db:b3:ac:8d:01:e6: 11:7f:2f:05:1e:fa:79:54:ca:0f:46:e4:c7:79:3b:cb:74:da: 24:f7:48:c5:7a:6f:55:71:8e:3a:ef:d4:49:c5:f2:87:0a:05: 6b:ce:d9:08:ad:4a:c9:4a:c2:20:8b:b1:dc:cd:d5:72:37:12: 18:40:4e:ae:8d:74:59:35:e3:12:18:ae:9e:7b:45:ad:88:a7: 46:05:ff:4c:d8:87:95:b6:6a:8a:12:a6:15:0a:7a:a8:f2:83: a0:1c:9a:d7:89:3e:77:6a:12:50:f7:05:d2:eb:6f:bb:72:e7: be:1b:98:ac:21:f8:c2:bb:37:bb:8a:fe:b8:01:de:1c:10:cb: 8e:7c:91:4c:0e:07:8f:f8:01:5c:c0:5d:7c:64:1f:8f:30:61: 03:3e:fb:64:5f:9c:ba:b1:46:6f:1c:56:4b:85:aa:1f:2b:f1: b7:b3:fc:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WLR3Xsfk3wQxq7g1dvirMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjA4MDllNWU2MzQ4MDFjYTg2ODQ4YjEyYTIzNmUzYTE5MzQzOTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIM9D7gnsTS5mgYgYxooJ8smroIR gWGB4foVHs8II3SQZtpjKeFru5AnnksCXxCskFcnOn6MNJKWKt8o3m7D7jaX44vH Zt2VQgVoFn9cECVLAkDICFVlmcynmPR4rE24EZotyxOV7I5EMXuJYaoTUKmKvpnw TVaIdXbPUsUc09UsywHyuZ0VwDWjdoQ2vGjGtJZS21a0hVYZbJq3u3ast/kuIouu hFCpnubqxJxejo+gzTN4TmLnWdDuK9SSRs5eTwSSLb0tWievEipkbqwFewK8nN+r WL9P8oPiU5Z7/5Gz+xhZj3ksQQdREF15JblPrSk9GADoEpjKyrK5JUDi2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEIICeXmNIAcqGhIsSojbjoZNDl6MB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvUWdnSjVlWTBnQnlvYUVpeEtpTnVPaGswT1hvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj41MA0G CSqGSIb3DQEBCwUAA4IBAQCD+cwjoW2qRqteORpZ58Qpey+uVzJC/OUZ8w+vjZCS tkScIYZj4KYX6wIwWhVTJfCZKXdcsvu9uXy6K7U20I3I75+3r16pEujFjQ5P5jer 13IHG8jbs6yNAeYRfy8FHvp5VMoPRuTHeTvLdNok90jFem9VcY4679RJxfKHCgVr ztkIrUrJSsIgi7HczdVyNxIYQE6ujXRZNeMSGK6ee0WtiKdGBf9M2IeVtmqKEqYV Cnqo8oOgHJrXiT53ahJQ9wXS62+7cue+G5isIfjCuze7iv64Ad4cEMuOfJFMDgeP +AFcwF18ZB+PMGEDPvtkX5y6sUZvHFZLhaofK/G3s/z0 -----END CERTIFICATE-----Generated at Wed Jan 21 14:12:42 2026 by rpki-client