This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/QwkbPhXCYpS8QdG4aux1NndNvVU.roa File: QwkbPhXCYpS8QdG4aux1NndNvVU.roa (raw, json) Hash identifier: lPZVn1QVeW2aCEI35oLMwurmWxshCLVoZsSdXVqBOzU= Subject key identifier: 43:09:1B:3E:15:C2:62:94:BC:41:D1:B8:6A:EC:75:36:77:4D:BD:55 Certificate issuer: /CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03 Certificate serial: 019B7DCA5F6B393AB50EAAEC62783D55C23C Authority key identifier: 0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/QwkbPhXCYpS8QdG4aux1NndNvVU.roa Signing time: Fri 02 Jan 2026 08:19:33 +0000 ROA not before: Fri 02 Jan 2026 08:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199901 IP address blocks: 195.62.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:5f:6b:39:3a:b5:0e:aa:ec:62:78:3d:55:c2:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03 Validity Not Before: Jan 2 08:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43091b3e15c26294bc41d1b86aec7536774dbd55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:5f:62:2e:1d:a0:d1:d8:bc:68:86:6d:c4: d4:7d:2b:23:28:10:69:4e:44:b2:aa:97:fa:e2:4a: c0:70:0a:b4:a9:0e:f7:31:cb:b6:7d:5d:ba:6d:eb: 48:0a:f6:a8:a2:77:db:f3:cb:2e:cf:df:f7:ca:53: 49:5d:f0:dd:a8:49:52:fc:e1:49:3f:ed:d7:7e:93: c4:89:40:20:1a:23:f9:bc:f6:99:5a:4b:f3:3f:6f: eb:4b:d9:db:67:cc:f5:a4:1d:10:ae:e2:58:ef:b1: 28:58:68:cb:91:3d:67:b5:99:1c:33:c0:9e:82:20: 07:ea:e2:7d:a2:7f:b4:ac:c0:38:64:3d:73:8a:d1: f6:d2:97:f2:b4:87:a3:71:09:09:66:52:0a:87:18: 9e:12:2a:7f:30:d4:e8:1c:cc:60:f5:c7:51:a6:35: 44:90:64:17:08:81:63:00:75:e7:ac:4d:53:2e:e6: 02:fe:ea:02:fa:75:b2:85:86:c0:ed:00:20:e2:0c: 92:80:90:ab:96:5f:56:e6:f0:78:1a:4c:e4:9f:f4: 25:f9:4e:94:6d:53:7f:d8:ab:0b:42:18:95:08:46: 35:c3:a5:00:32:22:5e:6d:a7:b2:cc:76:80:b2:45: 65:a3:a4:cc:4d:f0:f4:98:d9:f7:24:80:3c:cf:09: d2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:09:1B:3E:15:C2:62:94:BC:41:D1:B8:6A:EC:75:36:77:4D:BD:55 X509v3 Authority Key Identifier: keyid:0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/QwkbPhXCYpS8QdG4aux1NndNvVU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.62.34.0/24 Signature Algorithm: sha256WithRSAEncryption 39:ce:b0:cd:02:79:10:7b:6b:8b:19:55:8a:d0:af:52:d8:2b: 91:d7:20:25:4b:78:7c:de:2b:96:6a:1c:b0:ba:d3:9d:dc:5e: e1:d6:bb:60:3c:d5:37:e9:d1:25:6c:1b:4d:50:7a:c8:10:7b: 94:ad:df:44:98:c9:04:91:bb:17:aa:56:9f:e3:18:ee:d8:ab: d6:0d:bb:32:18:6a:c6:07:2d:07:01:a0:cc:a9:82:c8:e6:6a: 26:9e:b9:1e:84:85:77:95:73:09:cb:a4:2e:6c:a4:b4:19:52: 6e:91:0d:67:3c:b3:1c:41:ae:07:8b:8a:44:16:1c:68:39:c8: b6:3b:3f:1b:eb:9c:47:51:74:3e:f6:25:c2:26:96:d6:c5:6b: 13:70:c3:73:86:46:d8:fb:fc:a4:e4:a0:c9:5d:87:b1:65:03: 3c:71:ce:65:27:95:41:db:82:23:11:df:10:3e:9b:f3:ab:92: 56:05:6b:69:e7:0e:8f:56:87:0a:77:0d:93:b4:4f:f2:81:93: b8:77:2b:13:3d:5d:37:f8:bd:b1:07:c9:af:05:83:4a:82:87: 24:13:14:45:4b:35:6a:14:2b:c5:f0:8c:99:c7:3a:00:59:41: 0c:c8:cf:b6:cd:a7:e3:2e:fd:21:8f:8a:cb:e9:64:a7:6c:7e: d4:44:e0:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yl9rOTq1DqrsYng9VcI8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNTRmOWUwYTdhOWVhZWVhY2JjNWIxMDMxMDIzNWI3ZmQw ZWVkMDMwHhcNMjYwMTAyMDgxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzA5MWIzZTE1YzI2Mjk0YmM0MWQxYjg2YWVjNzUzNjc3NGRiZDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGFfYi4doNHYvGiGbcTUfSsjKBBp TkSyqpf64krAcAq0qQ73Mcu2fV26betICvaoonfb88suz9/3ylNJXfDdqElS/OFJ P+3XfpPEiUAgGiP5vPaZWkvzP2/rS9nbZ8z1pB0QruJY77EoWGjLkT1ntZkcM8Ce giAH6uJ9on+0rMA4ZD1zitH20pfytIejcQkJZlIKhxieEip/MNToHMxg9cdRpjVE kGQXCIFjAHXnrE1TLuYC/uoC+nWyhYbA7QAg4gySgJCrll9W5vB4Gkzkn/Ql+U6U bVN/2KsLQhiVCEY1w6UAMiJebaeyzHaAskVlo6TMTfD0mNn3JIA8zwnSBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEMJGz4VwmKUvEHRuGrsdTZ3Tb1VMB8GA1UdIwQY MBaAFA9U+eCnqerurLxbEDECNbf9Du0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85MDU5YzgtYmJkOC00ZjZlLWE2MGUt ZWYyNmMzNDRlZjAxLzEvUXdrYlBoWENZcFM4UWRHNGF1eDFObmROdlZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS85MDU5YzgtYmJkOC00ZjZlLWE2MGUtZWYyNmMzNDRlZjAx LzEvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwz4iMA0G CSqGSIb3DQEBCwUAA4IBAQA5zrDNAnkQe2uLGVWK0K9S2CuR1yAlS3h83iuWahyw utOd3F7h1rtgPNU36dElbBtNUHrIEHuUrd9EmMkEkbsXqlaf4xju2KvWDbsyGGrG By0HAaDMqYLI5momnrkehIV3lXMJy6QubKS0GVJukQ1nPLMcQa4Hi4pEFhxoOci2 Oz8b65xHUXQ+9iXCJpbWxWsTcMNzhkbY+/yk5KDJXYexZQM8cc5lJ5VB24IjEd8Q Ppvzq5JWBWtp5w6PVocKdw2TtE/ygZO4dysTPV03+L2xB8mvBYNKgockExRFSzVq FCvF8IyZxzoAWUEMyM+2zafjLv0hj4rL6WSnbH7UROD2 -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:23 2026 by rpki-client