This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/QxPgQhLZSciZvWPoXaWmbFy5GQE.roa File: QxPgQhLZSciZvWPoXaWmbFy5GQE.roa (raw, json) Hash identifier: 2+siJJXulwAfsr5WZH3cVtlll3XHnNe+UHkOgJC93jY= Subject key identifier: 43:13:E0:42:12:D9:49:C8:99:BD:63:E8:5D:A5:A6:6C:5C:B9:19:01 Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183 Certificate serial: 019B7C7FCB2E28CD7180D6C8AF122373C16F Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/QxPgQhLZSciZvWPoXaWmbFy5GQE.roa Signing time: Fri 02 Jan 2026 02:18:28 +0000 ROA not before: Fri 02 Jan 2026 02:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 193.142.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:cb:2e:28:cd:71:80:d6:c8:af:12:23:73:c1:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183 Validity Not Before: Jan 2 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4313e04212d949c899bd63e85da5a66c5cb91901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:07:5e:60:ef:60:be:19:df:63:71:da:a1:cb: 97:a4:83:33:7b:8b:e8:cc:ad:d6:a6:fb:d4:54:54: dc:b9:4c:a0:5f:dd:07:6c:b1:ad:2b:8a:16:06:71: 67:c4:69:c3:a5:38:a1:db:d4:42:fd:20:8a:f6:f9: 96:37:bd:aa:a3:a3:e7:bb:25:b4:71:6a:fe:48:8c: f3:39:ea:39:66:93:2b:76:ac:2a:3c:3c:d1:d6:90: 33:d2:52:db:1f:f1:43:9d:32:d3:da:ad:f2:c0:03: 07:78:a6:d3:3d:3b:5e:98:07:96:ab:e8:ba:19:20: 09:f1:4b:86:fb:8d:1a:36:56:04:61:fa:73:f8:a2: 88:7a:52:32:70:45:a4:e0:ab:78:ca:cc:1d:7a:a7: f2:8b:14:c2:b5:31:48:1b:20:3d:a0:0d:dd:89:20: 6b:cb:a7:5e:76:40:a5:77:18:2a:f3:65:61:98:6a: 75:e0:f5:78:3c:90:1d:c1:89:65:1d:91:e4:e0:70: 5b:f4:9b:27:14:91:4d:5b:7e:50:07:85:c6:16:38: 8e:fe:70:a9:ce:15:f1:2b:2f:46:d4:8c:05:32:fd: 83:bb:e1:c3:78:e9:7f:8a:13:97:2f:d0:5b:1c:7d: 4f:11:40:0d:4f:c6:00:8e:fe:35:8e:9c:b7:2d:1b: 5c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:13:E0:42:12:D9:49:C8:99:BD:63:E8:5D:A5:A6:6C:5C:B9:19:01 X509v3 Authority Key Identifier: keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/QxPgQhLZSciZvWPoXaWmbFy5GQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.142.111.0/24 Signature Algorithm: sha256WithRSAEncryption 96:b4:7e:35:97:88:6a:56:e9:5b:b3:c2:f6:93:96:77:19:61: 4f:c8:48:ea:45:54:f3:00:ae:e5:a8:5c:15:d5:7d:d9:dc:43: 40:a8:25:cc:bf:87:39:60:f6:0b:42:43:94:15:bd:d1:53:1d: b5:a4:1c:ef:96:18:db:83:82:6d:73:d2:a9:20:69:44:d7:15: 9a:b1:a2:9b:5d:7c:d4:90:39:cb:14:6e:c5:b7:92:68:5e:0f: d5:d8:0d:07:bb:6c:4a:bb:b5:1e:ca:67:4d:05:a9:8c:f7:e8: 29:3a:9e:b7:17:29:75:b3:06:b1:5a:58:92:c7:b3:9a:34:01: f2:f4:a7:72:42:e3:00:cb:9b:95:0d:d8:9b:98:0a:e2:72:94: 99:9c:07:6c:12:86:3f:1e:82:38:2b:45:c8:bd:0f:a1:56:4b: 32:c1:fd:4b:8d:22:79:18:2c:39:53:56:fa:47:d4:cf:36:d0: 4d:19:fa:95:65:27:bc:8d:bc:78:a1:b8:14:e3:5b:ba:c9:be: 8c:e2:8c:8b:26:20:a9:a3:26:48:dd:37:cd:f4:9d:c6:83:e4: e5:85:31:99:a9:bb:cf:58:fc:1e:eb:68:1f:3f:11:fe:6e:10: 78:f2:c8:7b:77:03:10:bc:34:62:6e:17:ef:5b:6c:a1:22:40: 55:85:74:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f8suKM1xgNbIrxIjc8FvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZGQyMzZkODA0ZDVhYTlhMmNhYjM5Y2Y1MTAyMmFjMDVl MGIxODMwHhcNMjYwMTAyMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzEzZTA0MjEyZDk0OWM4OTliZDYzZTg1ZGE1YTY2YzVjYjkxOTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQdeYO9gvhnfY3HaocuXpIMze4vo zK3WpvvUVFTcuUygX90HbLGtK4oWBnFnxGnDpTih29RC/SCK9vmWN72qo6PnuyW0 cWr+SIzzOeo5ZpMrdqwqPDzR1pAz0lLbH/FDnTLT2q3ywAMHeKbTPTtemAeWq+i6 GSAJ8UuG+40aNlYEYfpz+KKIelIycEWk4Kt4yswdeqfyixTCtTFIGyA9oA3diSBr y6dedkCldxgq82VhmGp14PV4PJAdwYllHZHk4HBb9JsnFJFNW35QB4XGFjiO/nCp zhXxKy9G1IwFMv2Du+HDeOl/ihOXL9BbHH1PEUANT8YAjv41jpy3LRtcKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEMT4EIS2UnImb1j6F2lpmxcuRkBMB8GA1UdIwQY MBaAFH3dI22ATVqposqznPUQIqwF4LGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTk4YzItMmJhZS00ZDE0LTliY2Mt ODU1ZTYwNzJlZjM2LzEvUXhQZ1FoTFpTY2ladldQb1hhV21iRnk1R1FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xZTk4YzItMmJhZS00ZDE0LTliY2MtODU1ZTYwNzJlZjM2 LzEvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY5vMA0G CSqGSIb3DQEBCwUAA4IBAQCWtH41l4hqVulbs8L2k5Z3GWFPyEjqRVTzAK7lqFwV 1X3Z3ENAqCXMv4c5YPYLQkOUFb3RUx21pBzvlhjbg4Jtc9KpIGlE1xWasaKbXXzU kDnLFG7Ft5JoXg/V2A0Hu2xKu7UeymdNBamM9+gpOp63Fyl1swaxWliSx7OaNAHy 9KdyQuMAy5uVDdibmAricpSZnAdsEoY/HoI4K0XIvQ+hVksywf1LjSJ5GCw5U1b6 R9TPNtBNGfqVZSe8jbx4obgU41u6yb6M4oyLJiCpoyZI3TfN9J3Gg+TlhTGZqbvP WPwe62gfPxH+bhB48sh7dwMQvDRibhfvW2yhIkBVhXRy -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:11 2026 by rpki-client