This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/qsKErqqpdRYwMQA9aAucXVqfNA4.roa File: qsKErqqpdRYwMQA9aAucXVqfNA4.roa (raw, json) Hash identifier: s2Gssl3+6gS4zd9XQY/59dt9yBLb38Pi9C7B+ssQFVk= Subject key identifier: AA:C2:84:AE:AA:A9:75:16:30:31:00:3D:68:0B:9C:5D:5A:9F:34:0E Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C769D70F9B23E9C3ADC6FB1339D388 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/qsKErqqpdRYwMQA9aAucXVqfNA4.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 88.220.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:69:d7:0f:9b:23:e9:c3:ad:c6:fb:13:39:d3:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aac284aeaaa975163031003d680b9c5d5a9f340e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:31:b0:e2:55:46:61:1e:bd:e4:36:6a:bc:5a: 2a:f6:d2:da:b5:e0:74:0c:29:e8:a1:fd:6d:98:52: e0:41:95:c9:67:9c:3b:e5:20:c1:1f:ee:fe:89:e2: 59:ce:18:7d:c8:b1:96:be:84:af:8a:5c:b3:a1:5c: 43:89:6e:bb:67:6e:0c:87:95:94:0d:af:3e:bd:ec: 3d:fd:a8:3d:44:bf:2f:9d:ae:f7:4f:12:ee:78:60: 8f:34:57:a9:44:ef:5f:63:9c:81:3f:f8:a2:1a:65: ff:00:b6:d9:11:65:d2:c6:1a:13:28:7b:b0:be:eb: bf:97:65:5e:45:d3:66:09:9d:e1:f0:37:cc:91:b2: db:6f:b5:82:0c:9e:0c:f4:95:ea:15:c4:84:1d:64: 43:f0:bf:dc:8e:31:96:8c:95:2c:08:af:d5:0c:3b: 6f:07:e7:96:7f:de:b0:d2:20:ef:22:59:ce:5b:32: 58:7b:65:2f:1a:ae:11:5e:c0:11:d8:42:37:03:26: 1f:fa:79:be:e9:e6:57:8c:bb:99:18:3c:c9:c7:3d: 31:13:02:2e:ce:7f:3e:58:83:a9:5f:5d:ed:a7:fa: c0:47:98:8e:28:1f:e0:71:67:26:63:3d:82:4f:2f: 28:8b:5a:fe:82:3f:29:b5:6f:e2:94:ab:a1:53:e3: 85:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C2:84:AE:AA:A9:75:16:30:31:00:3D:68:0B:9C:5D:5A:9F:34:0E X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/qsKErqqpdRYwMQA9aAucXVqfNA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.220.193.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:5d:56:f5:35:b0:d9:ea:c3:d3:a3:3a:2d:60:9e:96:ff:01: e2:be:80:17:c3:c1:fb:02:b0:dc:f4:13:35:45:21:ca:50:ee: 31:e3:87:59:7a:4d:e1:49:82:6e:3a:10:0d:b1:f9:b7:29:28: 1b:84:5f:57:b3:e7:9a:fb:4d:59:40:d0:e8:75:9b:a8:61:dd: d2:00:39:d9:6f:e3:f8:05:06:0d:ed:14:71:02:7a:4c:f3:d7: a9:2a:fd:30:f6:db:61:99:a8:a7:30:13:2b:47:97:2b:1e:08: 3f:2c:01:80:1e:f1:e5:8f:6b:53:07:7d:16:43:20:4f:c8:1d: 0a:50:a1:66:20:d9:da:ac:e7:27:6f:4e:0d:4d:92:43:a7:0e: 88:5f:97:02:1d:6f:40:d4:09:65:3f:02:33:0c:57:aa:df:6e: ad:32:f6:be:6a:c9:39:70:8a:80:ad:b5:06:2e:3b:1d:91:46: 5c:d2:37:61:98:84:fd:f9:ea:00:42:a3:f7:82:2e:e2:cb:d3: 86:be:cb:6a:96:e7:05:d8:b1:f1:5a:6c:a9:59:e7:63:0a:68: ab:05:b9:39:51:3f:09:ab:36:83:e1:1a:32:81:a0:a1:50:e5: 51:8e:39:b1:3b:95:f3:57:31:fb:1c:3c:57:2c:60:12:56:fa: 93:7f:11:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2nXD5sj6cOtxvsTOdOIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWMyODRhZWFhYTk3NTE2MzAzMTAwM2Q2ODBiOWM1ZDVhOWYzNDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jGw4lVGYR695DZqvFoq9tLateB0 DCnoof1tmFLgQZXJZ5w75SDBH+7+ieJZzhh9yLGWvoSvilyzoVxDiW67Z24Mh5WU Da8+vew9/ag9RL8vna73TxLueGCPNFepRO9fY5yBP/iiGmX/ALbZEWXSxhoTKHuw vuu/l2VeRdNmCZ3h8DfMkbLbb7WCDJ4M9JXqFcSEHWRD8L/cjjGWjJUsCK/VDDtv B+eWf96w0iDvIlnOWzJYe2UvGq4RXsAR2EI3AyYf+nm+6eZXjLuZGDzJxz0xEwIu zn8+WIOpX13tp/rAR5iOKB/gcWcmYz2CTy8oi1r+gj8ptW/ilKuhU+OFgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKrChK6qqXUWMDEAPWgLnF1anzQOMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvcXNLRXJxcXBkUll3TVFBOWFBdWNYVnFmTkE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNzBMA0G CSqGSIb3DQEBCwUAA4IBAQBqXVb1NbDZ6sPTozotYJ6W/wHivoAXw8H7ArDc9BM1 RSHKUO4x44dZek3hSYJuOhANsfm3KSgbhF9Xs+ea+01ZQNDodZuoYd3SADnZb+P4 BQYN7RRxAnpM89epKv0w9tthmainMBMrR5crHgg/LAGAHvHlj2tTB30WQyBPyB0K UKFmINnarOcnb04NTZJDpw6IX5cCHW9A1AllPwIzDFeq326tMva+ask5cIqArbUG LjsdkUZc0jdhmIT9+eoAQqP3gi7iy9OGvstqlucF2LHxWmypWedjCmirBbk5UT8J qzaD4RoygaChUOVRjjmxO5XzVzH7HDxXLGASVvqTfxFw -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:44 2026 by rpki-client