This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/QRe1t4xoC5DfawSBrQHzo3FmhLM.roa File: QRe1t4xoC5DfawSBrQHzo3FmhLM.roa (raw, json) Hash identifier: E+vj4zV/6ZJ/k1LOoS20wbJJIbfhjuZ939KrL0GVfx4= Subject key identifier: 41:17:B5:B7:8C:68:0B:90:DF:6B:04:81:AD:01:F3:A3:71:66:84:B3 Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8E5640CC7E4CF3B44262B2AC24DBC Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/QRe1t4xoC5DfawSBrQHzo3FmhLM.roa Signing time: Thu 01 Jan 2026 18:19:04 +0000 ROA not before: Thu 01 Jan 2026 18:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47206 IP address blocks: 93.182.192.0/18 maxlen: 18 188.224.0.0/17 maxlen: 17 2a00:e880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e5:64:0c:c7:e4:cf:3b:44:26:2b:2a:c2:4d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4117b5b78c680b90df6b0481ad01f3a3716684b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d9:e0:0e:77:fb:89:53:e7:49:87:42:c5:ae: 1a:ed:7e:83:89:ab:e9:6a:6e:b7:38:df:57:cb:b0: c5:c1:7e:2d:17:79:4d:90:1c:2b:43:c5:00:b2:30: fb:ea:96:94:3a:a1:9c:31:9c:6d:d3:20:2b:20:3b: 13:ce:b4:46:8a:8e:bf:ae:bd:3d:79:a8:c0:e6:92: b8:0d:83:81:03:93:24:64:f7:53:db:7f:8b:d4:d3: 0d:f2:ff:6a:67:7f:ba:c8:a3:c9:45:74:c7:92:65: 3b:41:9c:71:ea:b0:83:fc:9d:9c:a3:7f:10:47:0d: 94:22:ea:cf:ee:d2:61:e1:19:0e:d4:fa:e8:67:fc: 77:35:71:c8:5e:93:ae:19:de:0f:2a:10:37:d3:55: 87:c8:b2:28:56:09:af:e7:17:c6:39:ba:0a:48:66: 64:6f:0b:7c:88:be:3a:1a:bd:39:66:64:f9:97:7b: 32:a1:5c:99:93:3f:45:0f:f0:10:0e:ba:ef:1b:9b: f9:2e:c6:5c:0f:8d:73:25:ba:cf:47:76:90:e8:61: e2:3a:3d:16:35:2a:f8:6a:8e:0c:32:20:0d:4f:77: ab:24:f5:84:05:86:17:db:e9:fa:8d:59:52:ae:c5: 08:3f:d3:83:cf:78:06:da:1d:be:3b:8d:6d:60:14: 6f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:17:B5:B7:8C:68:0B:90:DF:6B:04:81:AD:01:F3:A3:71:66:84:B3 X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/QRe1t4xoC5DfawSBrQHzo3FmhLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.182.192.0/18 188.224.0.0/17 IPv6: 2a00:e880::/32 Signature Algorithm: sha256WithRSAEncryption 29:d6:b8:17:8c:6f:d1:f7:7d:d6:7d:e1:e9:89:70:04:aa:00: 45:9d:d1:1b:59:ca:21:1b:b3:d9:27:63:9c:dc:cd:f7:f4:2e: 96:f3:42:09:96:41:1b:a8:00:98:0d:75:cd:16:cb:5b:b2:f5: 75:fc:81:e8:59:d5:48:9b:75:5c:d3:64:eb:29:ac:18:49:74: be:43:8f:0b:75:2a:05:24:61:15:46:77:1a:fd:ce:9b:a4:ef: 6f:bb:d0:b8:42:ed:28:35:36:76:d6:af:36:2d:89:35:6a:4c: 33:1f:c4:79:4b:62:a0:70:b5:30:14:84:cb:01:0f:f5:e7:b8: 9b:12:de:fc:cc:81:8a:3a:04:ad:fe:fb:f8:cc:17:8e:88:fd: 01:84:84:b9:91:a4:86:f4:3b:77:98:ca:f2:c1:b4:32:62:8c: 65:27:3e:01:15:fa:e3:01:1f:68:e6:5c:ca:24:50:b0:e8:58: 8f:a9:60:e3:6e:26:48:05:eb:40:7e:59:f0:b1:19:da:16:4c: 52:35:87:76:b2:1f:db:35:f9:ea:39:03:ac:87:cb:db:9e:d1: 8d:d9:ee:98:e9:f6:1a:94:40:d2:a7:9f:2c:7f:f7:e9:98:85: b9:03:62:53:cd:02:25:93:bd:40:0d:cf:fa:64:0e:a2:11:a7: dd:32:fc:27 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6yOVkDMfkzztEJisqwk28MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTE3YjViNzhjNjgwYjkwZGY2YjA0ODFhZDAxZjNhMzcxNjY4NGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotngDnf7iVPnSYdCxa4a7X6Diavp am63ON9Xy7DFwX4tF3lNkBwrQ8UAsjD76paUOqGcMZxt0yArIDsTzrRGio6/rr09 eajA5pK4DYOBA5MkZPdT23+L1NMN8v9qZ3+6yKPJRXTHkmU7QZxx6rCD/J2co38Q Rw2UIurP7tJh4RkO1ProZ/x3NXHIXpOuGd4PKhA301WHyLIoVgmv5xfGOboKSGZk bwt8iL46Gr05ZmT5l3syoVyZkz9FD/AQDrrvG5v5LsZcD41zJbrPR3aQ6GHiOj0W NSr4ao4MMiANT3erJPWEBYYX2+n6jVlSrsUIP9ODz3gG2h2+O41tYBRvawIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEEXtbeMaAuQ32sEga0B86NxZoSzMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvUVJlMXQ0eG9DNURmYXdTQnJRSHpvM0ZtaExNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQGXbbAAwQH vOAAMA0EAgACMAcDBQAqAOiAMA0GCSqGSIb3DQEBCwUAA4IBAQAp1rgXjG/R933W feHpiXAEqgBFndEbWcohG7PZJ2Oc3M339C6W80IJlkEbqACYDXXNFstbsvV1/IHo WdVIm3Vc02TrKawYSXS+Q48LdSoFJGEVRnca/c6bpO9vu9C4Qu0oNTZ21q82LYk1 akwzH8R5S2KgcLUwFITLAQ/157ibEt78zIGKOgSt/vv4zBeOiP0BhIS5kaSG9Dt3 mMrywbQyYoxlJz4BFfrjAR9o5lzKJFCw6FiPqWDjbiZIBetAflnwsRnaFkxSNYd2 sh/bNfnqOQOsh8vbntGN2e6Y6fYalEDSp58sf/fpmIW5A2JTzQIlk71ADc/6ZA6i EafdMvwn -----END CERTIFICATE-----Generated at Mon Jan 26 20:59:40 2026 by rpki-client