This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Qn_vvT3snl3nIlOghoUckzw4rus.roa File: Qn_vvT3snl3nIlOghoUckzw4rus.roa (raw, json) Hash identifier: lO7+Y5Yw0bjscZGaWYdJG6Fhx3fIDK/4g57wIhyupuo= Subject key identifier: 42:7F:EF:BD:3D:EC:9E:5D:E7:22:53:A0:86:85:1C:93:3C:38:AE:EB Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CEEF47C00D24EAC0997439AF25AF3 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Qn_vvT3snl3nIlOghoUckzw4rus.roa Signing time: Fri 02 Jan 2026 06:20:00 +0000 ROA not before: Fri 02 Jan 2026 06:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202656 IP address blocks: 93.88.207.0/24 maxlen: 24 146.19.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ee:f4:7c:00:d2:4e:ac:09:97:43:9a:f2:5a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=427fefbd3dec9e5de72253a086851c933c38aeeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0d:a1:71:45:b9:d8:d3:cb:77:cc:b8:b2:af: ec:32:68:8a:f3:a1:01:3c:a1:af:7d:dc:e4:c6:7a: 19:e8:c2:02:31:0e:9c:00:43:65:da:a7:b6:45:d7: 04:13:f6:4f:ee:99:39:9b:88:71:eb:cc:c2:b7:f6: 2f:bb:b0:88:5e:ce:7c:2f:52:04:c8:31:38:a7:13: b2:18:c7:73:7b:2f:0e:65:2a:ba:be:1c:c8:61:0c: 7c:35:5c:62:1b:2a:39:3e:18:4a:a1:a0:d5:bc:75: f6:3b:7e:a6:4b:20:fc:92:27:e3:57:fc:37:21:32: 0f:52:62:37:41:d4:7a:2c:77:91:25:59:e2:e0:0e: 64:c8:e6:6b:fb:6c:4c:1f:e2:0e:56:58:33:c8:bf: 0b:11:8f:56:a7:b0:24:df:4a:91:9b:c5:dd:d1:80: ab:f9:62:3b:6e:85:fc:bd:be:38:bb:f4:08:e7:74: 10:dc:35:56:78:38:7a:6d:ea:59:c7:20:10:f6:33: 07:35:98:b5:f9:9f:fe:2e:42:f8:92:7a:c3:17:74: b8:26:fe:6c:e0:d8:b8:41:99:a8:7a:0f:d6:49:87: 8b:ef:e2:cd:c9:22:26:74:e2:9a:58:e6:c6:e2:98: 30:e3:f1:82:b9:3b:2e:22:7b:14:05:2e:a8:f4:3c: 3d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7F:EF:BD:3D:EC:9E:5D:E7:22:53:A0:86:85:1C:93:3C:38:AE:EB X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Qn_vvT3snl3nIlOghoUckzw4rus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.88.207.0/24 146.19.139.0/24 Signature Algorithm: sha256WithRSAEncryption 26:e4:c5:cf:76:5a:a9:07:d5:cc:13:39:c2:aa:fd:c8:03:38: b9:a3:81:88:b7:18:03:85:f8:e4:01:d8:59:47:f5:34:4b:bf: 57:70:20:4d:46:65:67:40:a3:50:34:cf:ad:5e:50:b9:7a:30: 7d:77:73:f9:61:19:16:1f:d3:56:32:8c:56:7e:fa:d6:6d:a3: 82:b7:da:03:a4:2c:cb:e9:96:93:43:4a:ac:18:9d:9b:b7:cf: a0:c9:cf:cd:cb:c0:8e:64:b9:43:b3:34:91:7c:9b:3e:b3:6b: d0:4b:62:99:f6:b9:5a:b6:a8:93:25:77:11:05:62:57:dc:97: 91:b6:13:1f:f6:d8:5a:3f:3b:09:6a:0d:66:a9:ad:d7:ac:dc: 58:38:9c:21:e1:a4:e6:ec:78:f7:e7:47:2e:8b:75:1e:87:14: 32:b9:ab:d2:0d:8e:ff:36:7b:7d:94:d5:e3:59:90:8b:f0:b4: ea:b1:86:df:87:af:e2:e2:8a:77:50:46:6c:3c:ee:2d:11:ef: a7:dd:61:f2:ea:83:ee:4a:40:b7:48:25:15:81:c4:60:85:e2: 83:58:5f:2c:9b:f6:9f:4f:97:88:6f:dd:f3:c4:ef:af:b9:13: 79:95:a4:db:54:1e:4a:fe:03:20:76:6e:47:ae:29:0c:38:b9: 08:44:e8:52 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XO70fADSTqwJl0Oa8lrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjdmZWZiZDNkZWM5ZTVkZTcyMjUzYTA4Njg1MWM5MzNjMzhhZWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ2hcUW52NPLd8y4sq/sMmiK86EB PKGvfdzkxnoZ6MICMQ6cAENl2qe2RdcEE/ZP7pk5m4hx68zCt/Yvu7CIXs58L1IE yDE4pxOyGMdzey8OZSq6vhzIYQx8NVxiGyo5PhhKoaDVvHX2O36mSyD8kifjV/w3 ITIPUmI3QdR6LHeRJVni4A5kyOZr+2xMH+IOVlgzyL8LEY9Wp7Ak30qRm8Xd0YCr +WI7boX8vb44u/QI53QQ3DVWeDh6bepZxyAQ9jMHNZi1+Z/+LkL4knrDF3S4Jv5s 4Ni4QZmoeg/WSYeL7+LNySImdOKaWObG4pgw4/GCuTsuInsUBS6o9Dw9uwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEJ/77097J5d5yJToIaFHJM8OK7rMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvUW5fdnZUM3NubDNuSWxPZ2hvVWNrenc0cnVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXVjPAwQA khOLMA0GCSqGSIb3DQEBCwUAA4IBAQAm5MXPdlqpB9XMEznCqv3IAzi5o4GItxgD hfjkAdhZR/U0S79XcCBNRmVnQKNQNM+tXlC5ejB9d3P5YRkWH9NWMoxWfvrWbaOC t9oDpCzL6ZaTQ0qsGJ2bt8+gyc/Ny8COZLlDszSRfJs+s2vQS2KZ9rlatqiTJXcR BWJX3JeRthMf9thaPzsJag1mqa3XrNxYOJwh4aTm7Hj350cui3UehxQyuavSDY7/ Nnt9lNXjWZCL8LTqsYbfh6/i4op3UEZsPO4tEe+n3WHy6oPuSkC3SCUVgcRgheKD WF8sm/afT5eIb93zxO+vuRN5laTbVB5K/gMgdm5HrikMOLkIROhS -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:46 2026 by rpki-client