This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/GqdAxykf3CWV7_P4QT9FQ9hwxew.roa File: GqdAxykf3CWV7_P4QT9FQ9hwxew.roa (raw, json) Hash identifier: 1CTmn/JYS0XGlhZFAUubF8wyecu7Cfzkb04yn7oby7E= Subject key identifier: 1A:A7:40:C7:29:1F:DC:25:95:EF:F3:F8:41:3F:45:43:D8:70:C5:EC Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC78B19F286B46B631DCF84FD71DD20 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/GqdAxykf3CWV7_P4QT9FQ9hwxew.roa Signing time: Thu 01 Jan 2026 18:17:36 +0000 ROA not before: Thu 01 Jan 2026 18:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 194.93.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8b:19:f2:86:b4:6b:63:1d:cf:84:fd:71:dd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1aa740c7291fdc2595eff3f8413f4543d870c5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:17:05:e5:cd:ec:f6:38:c1:70:91:25:71:3b: 46:2d:9e:f8:24:93:d2:d1:b1:49:a7:ac:41:72:43: ac:c2:4c:f1:0b:b6:f2:86:43:c2:6d:ab:27:9a:10: 7b:98:37:3c:73:52:31:61:f8:60:f0:1e:58:5e:7c: 86:0d:39:a9:50:07:87:06:33:7a:d1:e9:00:3d:d1: f4:a0:e3:d2:ae:93:17:af:9a:21:2f:97:e5:a2:33: 9f:b8:6e:46:0a:af:4c:35:cc:cc:c9:5d:30:ca:4f: 03:97:be:3d:a7:b2:43:98:2b:b6:96:b6:9a:5f:eb: 4b:08:06:56:54:3c:18:40:e3:01:94:df:0f:bf:49: 53:f5:5c:7e:f8:75:39:7b:76:99:47:84:41:13:e7: 87:ca:17:64:00:83:c2:90:30:8f:49:0e:15:df:75: 1c:f3:17:6e:0c:02:9f:3c:38:7d:3f:9a:06:63:71: 6d:18:54:1f:d0:a0:a5:3a:5a:a1:f1:12:15:b2:9d: 93:0c:56:17:d9:c3:04:cc:1b:0a:a6:8e:70:53:a6: 90:55:df:d0:68:01:5a:d6:9b:8c:ea:ff:a4:10:82: 4c:b7:29:76:0d:62:3a:bd:a7:89:35:78:27:7c:54: 40:8f:d7:6c:a5:6e:9a:f7:39:4b:5d:bb:65:bb:27: b3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A7:40:C7:29:1F:DC:25:95:EF:F3:F8:41:3F:45:43:D8:70:C5:EC X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/GqdAxykf3CWV7_P4QT9FQ9hwxew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.93.58.0/24 Signature Algorithm: sha256WithRSAEncryption 74:d5:c4:dd:2c:36:7d:aa:55:9e:0f:4e:4a:b4:ca:ba:f6:72: cb:72:98:6c:34:30:a4:31:51:6b:9a:a7:ae:9f:bd:61:bf:b6: db:08:cf:74:77:6b:31:e9:68:16:bb:b4:b5:e3:c7:0e:5f:a2: e9:da:af:b8:f6:f5:9a:17:65:63:e1:c7:11:5d:5b:68:4e:b0: 01:2b:1e:6f:fd:92:d1:f6:d6:ca:e8:d7:58:51:b9:d9:2c:98: 24:df:3c:46:04:0b:0c:d1:e4:28:1a:36:5d:95:f6:f2:15:ec: 1f:94:dd:7d:0d:b8:c1:e9:03:40:80:73:43:61:e4:47:40:9b: af:eb:16:38:a2:a5:e8:84:f6:e6:f0:e6:e0:ad:d2:cd:de:74: cb:8a:b5:06:aa:b4:9b:f8:70:f3:ce:27:6a:0f:47:d4:56:97: 3e:9f:59:86:0c:5f:3f:3b:28:f6:fb:a5:12:43:05:5a:7c:01: 83:f3:2e:68:39:2a:46:df:f7:c5:8c:df:62:5c:79:e0:79:56: 6c:d3:2a:f6:b6:bd:b8:c7:2c:5f:2e:24:ad:10:d4:24:0a:2c: 20:9e:04:cb:b6:1b:f1:46:25:8e:db:97:9d:2b:d7:60:a5:47: 39:4c:f3:e1:25:0c:3d:c0:c3:0f:22:ae:7c:df:85:d2:24:50: 08:db:6d:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x4sZ8oa0a2Mdz4T9cd0gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWE3NDBjNzI5MWZkYzI1OTVlZmYzZjg0MTNmNDU0M2Q4NzBjNWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xcF5c3s9jjBcJElcTtGLZ74JJPS 0bFJp6xBckOswkzxC7byhkPCbasnmhB7mDc8c1IxYfhg8B5YXnyGDTmpUAeHBjN6 0ekAPdH0oOPSrpMXr5ohL5flojOfuG5GCq9MNczMyV0wyk8Dl749p7JDmCu2lraa X+tLCAZWVDwYQOMBlN8Pv0lT9Vx++HU5e3aZR4RBE+eHyhdkAIPCkDCPSQ4V33Uc 8xduDAKfPDh9P5oGY3FtGFQf0KClOlqh8RIVsp2TDFYX2cMEzBsKpo5wU6aQVd/Q aAFa1puM6v+kEIJMtyl2DWI6vaeJNXgnfFRAj9dspW6a9zlLXbtluyez2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBqnQMcpH9wlle/z+EE/RUPYcMXsMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvR3FkQXh5a2YzQ1dWN19QNFFUOUZROWh3eGV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwl06MA0G CSqGSIb3DQEBCwUAA4IBAQB01cTdLDZ9qlWeD05KtMq69nLLcphsNDCkMVFrmqeu n71hv7bbCM90d2sx6WgWu7S148cOX6Lp2q+49vWaF2Vj4ccRXVtoTrABKx5v/ZLR 9tbK6NdYUbnZLJgk3zxGBAsM0eQoGjZdlfbyFewflN19DbjB6QNAgHNDYeRHQJuv 6xY4oqXohPbm8ObgrdLN3nTLirUGqrSb+HDzzidqD0fUVpc+n1mGDF8/Oyj2+6US QwVafAGD8y5oOSpG3/fFjN9iXHngeVZs0yr2tr24xyxfLiStENQkCiwgngTLthvx RiWO25edK9dgpUc5TPPhJQw9wMMPIq5834XSJFAI222i -----END CERTIFICATE-----Generated at Mon Jan 19 20:37:39 2026 by rpki-client