This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QTSDzAxXYIUhJnE6QXv6vNAGoTo.roa File: QTSDzAxXYIUhJnE6QXv6vNAGoTo.roa (raw, json) Hash identifier: N1LRVb+RSBNj/i2iaf90YQWBouqcJExrjMpHuqHa+fc= Subject key identifier: 41:34:83:CC:0C:57:60:85:21:26:71:3A:41:7B:FA:BC:D0:06:A1:3A Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797E0CE15FD0E6C2427C97E69EDBAFEE Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QTSDzAxXYIUhJnE6QXv6vNAGoTo.roa Signing time: Thu 01 Jan 2026 12:17:42 +0000 ROA not before: Thu 01 Jan 2026 12:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216127 IP address blocks: 194.58.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:0c:e1:5f:d0:e6:c2:42:7c:97:e6:9e:db:af:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=413483cc0c5760852126713a417bfabcd006a13a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3a:e2:c0:ea:b2:39:22:d8:aa:8b:01:a0:1a: b8:b4:c9:02:11:02:69:4b:ba:65:4b:3b:69:24:41: d7:f3:35:fe:1d:b6:cc:f0:57:14:37:78:0d:b0:96: 0e:0e:f5:98:70:d9:8f:a7:28:47:5b:bf:28:db:17: 56:6d:5b:38:2c:2e:be:fc:68:95:ec:44:37:80:97: a6:5c:43:d7:e4:d0:25:93:63:9c:3b:ec:33:d7:bb: 92:64:5e:06:56:22:dc:fb:5d:06:aa:71:a4:68:47: d5:11:dc:68:e4:75:9e:2e:6a:05:dc:0f:a1:34:b1: 23:7d:46:f8:b3:90:78:a2:dc:44:6e:26:51:33:2b: 27:73:93:de:04:70:d3:36:7f:61:18:1d:cc:c0:88: b1:9b:25:a7:11:78:62:53:8c:85:7f:5a:fb:6f:cb: f5:90:c2:5d:44:6e:4d:03:3f:84:90:0e:cc:c4:21: b3:0d:7a:8c:82:ac:d1:32:29:c0:ae:a0:ea:13:01: 45:8b:ed:af:ed:0c:30:7e:d6:34:c1:45:2f:bd:6d: ab:b5:bd:0e:b0:06:94:a5:aa:48:df:2f:9a:3c:61: ab:f4:48:ab:28:05:1e:da:99:86:0f:38:26:7e:0c: 07:ef:f8:94:e7:ed:cc:30:b4:e5:da:2c:6f:ed:f1: 8c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:34:83:CC:0C:57:60:85:21:26:71:3A:41:7B:FA:BC:D0:06:A1:3A X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QTSDzAxXYIUhJnE6QXv6vNAGoTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.58.33.0/24 Signature Algorithm: sha256WithRSAEncryption 63:eb:f9:20:d7:6a:17:10:36:2b:3f:17:c2:8b:a1:b3:25:f5: 16:f9:06:65:c4:67:2a:9f:8e:f6:78:72:bc:61:24:5c:e7:9c: 6a:2c:20:da:42:f7:c2:00:bf:cf:0c:23:93:a2:8f:2d:cf:de: f2:5b:40:20:09:ad:97:06:17:98:29:d6:90:6d:9a:40:d8:ef: 66:2f:53:77:e3:02:11:f2:23:25:c0:cf:d6:bf:29:c3:09:d3: fe:2a:32:75:31:c4:c2:54:13:97:34:f2:b7:90:2b:51:c9:91: 5e:f2:ba:43:b2:4d:1c:01:85:20:1e:9e:6f:6b:4c:b0:20:d2: 8f:bb:3f:ff:03:7d:6e:10:b2:7a:e6:2b:77:4b:98:cb:13:17: bf:9b:21:61:c3:a6:7b:ec:24:24:96:24:a9:8e:fd:76:27:b0: c5:19:df:9a:b3:03:3e:0c:c5:49:60:e1:e7:8c:f8:36:95:02: 9b:68:d3:ac:53:eb:a9:62:b0:98:eb:9b:89:df:4c:04:b5:82: 3d:ea:8d:7f:39:34:cf:b4:65:fa:3a:89:2d:e6:7c:65:ce:41: 45:57:9a:1f:a3:42:c8:0e:1c:c9:50:9d:ab:ed:f8:75:a4:7b: a4:d8:b6:74:67:e5:9d:e8:31:a5:cb:3e:1c:7b:90:1e:60:fb: 87:82:9c:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fgzhX9DmwkJ8l+ae26/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTM0ODNjYzBjNTc2MDg1MjEyNjcxM2E0MTdiZmFiY2QwMDZhMTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzriwOqyOSLYqosBoBq4tMkCEQJp S7plSztpJEHX8zX+HbbM8FcUN3gNsJYODvWYcNmPpyhHW78o2xdWbVs4LC6+/GiV 7EQ3gJemXEPX5NAlk2OcO+wz17uSZF4GViLc+10GqnGkaEfVEdxo5HWeLmoF3A+h NLEjfUb4s5B4otxEbiZRMysnc5PeBHDTNn9hGB3MwIixmyWnEXhiU4yFf1r7b8v1 kMJdRG5NAz+EkA7MxCGzDXqMgqzRMinArqDqEwFFi+2v7QwwftY0wUUvvW2rtb0O sAaUpapI3y+aPGGr9EirKAUe2pmGDzgmfgwH7/iU5+3MMLTl2ixv7fGMVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEE0g8wMV2CFISZxOkF7+rzQBqE6MB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvUVRTRHpBeFhZSVVoSm5FNlFYdjZ2TkFHb1RvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjohMA0G CSqGSIb3DQEBCwUAA4IBAQBj6/kg12oXEDYrPxfCi6GzJfUW+QZlxGcqn472eHK8 YSRc55xqLCDaQvfCAL/PDCOToo8tz97yW0AgCa2XBheYKdaQbZpA2O9mL1N34wIR 8iMlwM/WvynDCdP+KjJ1McTCVBOXNPK3kCtRyZFe8rpDsk0cAYUgHp5va0ywINKP uz//A31uELJ65it3S5jLExe/myFhw6Z77CQkliSpjv12J7DFGd+aswM+DMVJYOHn jPg2lQKbaNOsU+upYrCY65uJ30wEtYI96o1/OTTPtGX6Ookt5nxlzkFFV5ofo0LI DhzJUJ2r7fh1pHuk2LZ0Z+Wd6DGlyz4ce5AeYPuHgpyK -----END CERTIFICATE-----Generated at Mon Jan 19 14:40:15 2026 by rpki-client