This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/QHBZT5kThtefU6Yue7jJobqw9JU.roa File: QHBZT5kThtefU6Yue7jJobqw9JU.roa (raw, json) Hash identifier: pRD253NVKbYirBHDkZVZG3Wa4gP+JVRS3M7a27XwU/U= Subject key identifier: 40:70:59:4F:99:13:86:D7:9F:53:A6:2E:7B:B8:C9:A1:BA:B0:F4:95 Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051 Certificate serial: 019B7F826FA1D29FB31286CA78FE86BD9847 Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/QHBZT5kThtefU6Yue7jJobqw9JU.roa Signing time: Fri 02 Jan 2026 16:20:13 +0000 ROA not before: Fri 02 Jan 2026 16:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209830 IP address blocks: 193.135.120.0/22 maxlen: 22 193.135.123.0/24 maxlen: 24 193.141.23.0/24 maxlen: 24 193.141.24.0/24 maxlen: 24 2a09:fb00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:6f:a1:d2:9f:b3:12:86:ca:78:fe:86:bd:98:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051 Validity Not Before: Jan 2 16:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4070594f991386d79f53a62e7bb8c9a1bab0f495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6f:7c:67:03:cd:80:76:e0:91:1f:d1:e2:72: 0d:6c:47:af:81:75:c0:8b:9e:a3:09:19:7d:dc:46: 01:17:9c:8a:b4:df:3f:b7:f2:40:1f:d9:cc:18:ab: b4:63:3c:3e:37:e7:18:6e:c4:77:7a:ae:35:3c:42: 23:63:2a:3b:c6:ac:f3:0d:45:5c:92:10:56:f1:66: 76:bd:73:55:ba:39:08:fb:f4:d0:3f:e9:b4:c2:15: 87:00:22:db:66:09:7f:ce:b2:c4:6e:ee:36:27:66: d6:1b:b9:3e:f6:96:a8:8f:d7:54:5b:d1:64:d0:65: e3:35:a9:bd:66:0c:51:2c:be:0d:49:4e:0d:e4:5e: 00:bd:51:fe:fd:70:4a:b3:91:8f:a2:05:28:9e:b6: 06:06:f0:16:75:b9:d3:56:8b:a5:f9:6f:df:d8:c3: 05:05:26:59:d8:3a:61:f8:d5:70:25:9d:d7:75:9d: b3:65:8a:91:28:9c:de:73:23:a2:d7:41:6e:07:1e: 5c:8b:6e:1d:63:04:78:34:20:ec:b6:00:e4:f7:ea: 54:d1:26:4e:5a:16:b0:7a:15:58:bc:e9:88:c6:fc: 05:a3:69:00:a2:3e:61:79:36:af:e2:82:9a:78:74: b4:b9:4b:7d:c4:ce:4c:20:8d:56:24:58:43:d5:f9: b7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:70:59:4F:99:13:86:D7:9F:53:A6:2E:7B:B8:C9:A1:BA:B0:F4:95 X509v3 Authority Key Identifier: keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/QHBZT5kThtefU6Yue7jJobqw9JU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.135.120.0/22 193.141.23.0-193.141.24.255 IPv6: 2a09:fb00::/29 Signature Algorithm: sha256WithRSAEncryption 02:fe:5e:27:62:29:3b:05:d7:6e:ee:6a:ee:20:dd:eb:92:50: 4e:7e:3a:55:cd:9f:9a:ef:62:60:f4:8e:15:a7:83:40:32:85: 22:13:6c:47:3c:10:9d:33:e5:b7:9f:55:ac:e8:15:5a:db:9a: 89:71:04:b6:65:53:fa:f9:10:46:df:be:94:66:de:83:c7:37: a7:81:32:55:e0:df:fd:3b:f1:da:c6:4f:52:ee:a9:6b:a6:7c: 92:00:bb:fe:8a:7c:5b:17:61:05:cf:9b:98:fe:ae:66:37:74: 6e:b6:5e:62:8d:52:6b:a4:73:c5:b4:99:fa:3d:96:62:6f:3b: 6b:2e:11:9e:6a:c7:e3:48:e8:20:f3:2f:3f:bd:16:79:22:ad: f3:c8:75:d6:fc:e5:36:7e:2b:60:bf:3a:dd:ad:36:67:c6:82: e4:c2:cd:2a:1d:5d:67:b0:e4:76:46:59:9c:11:fa:64:bd:a4: dc:1e:2e:2e:69:17:ee:58:c6:73:94:f3:f4:ca:87:aa:76:de: 51:d1:d5:ff:db:77:43:7b:54:19:8b:9e:13:fd:03:44:f0:f9: c5:9e:73:09:d3:e0:46:99:31:f0:ae:5b:d8:26:a0:48:a0:da: 5e:e8:02:ac:d2:8e:e6:bb:ba:ae:6a:5d:71:37:93:d3:b5:b1: f0:02:81:15 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt/gm+h0p+zEobKeP6GvZhHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NGRjZDBlZTcwMTRlZmIyZTNiNTU0ZmJiNzA2Mzg0ZWYx MWQwNTEwHhcNMjYwMTAyMTYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDcwNTk0Zjk5MTM4NmQ3OWY1M2E2MmU3YmI4YzlhMWJhYjBmNDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr298ZwPNgHbgkR/R4nINbEevgXXA i56jCRl93EYBF5yKtN8/t/JAH9nMGKu0Yzw+N+cYbsR3eq41PEIjYyo7xqzzDUVc khBW8WZ2vXNVujkI+/TQP+m0whWHACLbZgl/zrLEbu42J2bWG7k+9paoj9dUW9Fk 0GXjNam9ZgxRLL4NSU4N5F4AvVH+/XBKs5GPogUonrYGBvAWdbnTVoul+W/f2MMF BSZZ2Dph+NVwJZ3XdZ2zZYqRKJzecyOi10FuBx5ci24dYwR4NCDstgDk9+pU0SZO WhawehVYvOmIxvwFo2kAoj5heTav4oKaeHS0uUt9xM5MII1WJFhD1fm3FwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFEBwWU+ZE4bXn1OmLnu4yaG6sPSVMB8GA1UdIwQY MBaAFAZNzQ7nAU77LjtVT7twY4TvEdBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kY2IwOGMtNTUxNS00NDVjLWFkOTkt ZmI0NzQwZmRhMjUwLzEvUUhCWlQ1a1RodGVmVTZZdWU3akpvYnF3OUpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9kY2IwOGMtNTUxNS00NDVjLWFkOTktZmI0NzQwZmRhMjUw LzEvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQCwYd4MAwD BADBjRcDBADBjRgwDQQCAAIwBwMFAyoJ+wAwDQYJKoZIhvcNAQELBQADggEBAAL+ XidiKTsF127uau4g3euSUE5+OlXNn5rvYmD0jhWng0AyhSITbEc8EJ0z5befVazo FVrbmolxBLZlU/r5EEbfvpRm3oPHN6eBMlXg3/078drGT1LuqWumfJIAu/6KfFsX YQXPm5j+rmY3dG62XmKNUmukc8W0mfo9lmJvO2suEZ5qx+NI6CDzLz+9FnkirfPI ddb85TZ+K2C/Ot2tNmfGguTCzSodXWew5HZGWZwR+mS9pNweLi5pF+5YxnOU8/TK h6p23lHR1f/bd0N7VBmLnhP9A0Tw+cWecwnT4EaZMfCuW9gmoEig2l7oAqzSjua7 uq5qXXE3k9O1sfACgRU= -----END CERTIFICATE-----Generated at Fri Jan 9 16:31:06 2026 by rpki-client