This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/qUacdXtveFfY3GQNxyBrLFI9QWg.roa File: qUacdXtveFfY3GQNxyBrLFI9QWg.roa (raw, json) Hash identifier: 64sJ2iCdgQ8mYBa6Be5jblKVmgBgQDa2NTvtAAMiVRc= Subject key identifier: A9:46:9C:75:7B:6F:78:57:D8:DC:64:0D:C7:20:6B:2C:52:3D:41:68 Certificate issuer: /CN=e3ea14d1343b992506bee6c3d90e19a69798b018 Certificate serial: 019B77C73CE62116EDB8E48D82A2BC85F815 Authority key identifier: E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/qUacdXtveFfY3GQNxyBrLFI9QWg.roa Signing time: Thu 01 Jan 2026 04:18:24 +0000 ROA not before: Thu 01 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12773 IP address blocks: 130.193.73.0/24 maxlen: 24 185.28.108.0/24 maxlen: 24 185.28.109.0/24 maxlen: 24 185.28.110.0/24 maxlen: 24 185.28.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3c:e6:21:16:ed:b8:e4:8d:82:a2:bc:85:f8:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3ea14d1343b992506bee6c3d90e19a69798b018 Validity Not Before: Jan 1 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9469c757b6f7857d8dc640dc7206b2c523d4168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ec:0e:1c:74:70:f0:ed:98:d0:f8:5b:29:c5: f9:24:9c:1c:67:88:26:85:93:22:3b:fc:49:a8:cb: 23:2f:06:96:37:c1:0a:3a:71:e8:ee:03:37:51:ac: 4c:ba:e2:de:0e:09:b7:1e:73:7b:41:6f:79:5d:0f: a7:aa:79:53:87:d4:53:4e:d5:1f:36:a1:90:1f:c7: 72:96:0b:d1:b3:f7:ec:43:90:52:39:f8:b3:b1:8d: 53:63:99:76:21:bc:3e:49:b0:0e:7f:e7:5a:1f:b3: 28:12:3f:fe:3a:a5:d8:0e:8a:f7:f3:b6:98:19:77: e7:70:fb:c6:53:9c:76:87:11:b3:83:1c:9b:e0:e5: 46:61:b6:02:2b:7a:28:2a:30:bb:90:9e:58:c3:68: c3:87:04:67:3a:e7:6f:a2:53:90:0f:cb:c7:27:af: f1:3b:43:14:4b:85:65:8a:90:70:bb:8d:08:92:9a: 28:d4:9d:ae:36:8f:70:9b:35:46:8c:a2:a6:52:71: 77:d2:f4:01:28:8d:84:31:83:c3:5b:0b:e0:ab:d7: 45:b2:22:34:04:f1:10:31:24:64:1d:9d:15:6e:59: f9:15:71:af:8c:71:ec:e8:6c:9a:9c:2d:51:fc:6d: 10:d2:18:d1:9b:fd:b7:e8:48:e0:77:77:4e:f9:ea: bb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:46:9C:75:7B:6F:78:57:D8:DC:64:0D:C7:20:6B:2C:52:3D:41:68 X509v3 Authority Key Identifier: keyid:E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/qUacdXtveFfY3GQNxyBrLFI9QWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.193.73.0/24 185.28.108.0/22 Signature Algorithm: sha256WithRSAEncryption 91:4c:63:62:02:10:84:3e:11:c6:fd:a2:eb:2e:d5:c1:b2:80: 7f:60:be:6c:99:2b:cc:62:eb:d6:20:d3:50:d4:74:b3:1d:fe: 79:1f:ba:41:93:4d:6f:e2:05:fb:89:64:90:ca:bb:2e:8c:95: c3:a3:99:9f:ad:78:82:4e:20:95:3f:b9:fb:af:14:7d:0f:23: 44:77:6c:a5:90:61:44:19:dd:bd:46:6d:7d:23:60:4b:36:5d: 18:27:59:bb:0c:99:e6:15:e3:8f:bb:b2:d4:d3:0b:1b:d2:3c: 6e:b5:cf:c5:7b:e5:9e:cc:bc:3c:79:a4:ce:18:dc:e7:81:2c: fc:d5:67:ee:ec:64:a1:e5:6e:f2:05:0c:9f:0a:e2:f7:5d:0e: 8e:e2:25:aa:61:d7:fd:72:3e:b7:7d:d2:50:3a:62:67:90:8d: 8c:80:4f:6d:7c:2a:5c:60:0b:2d:24:cf:03:e4:6f:f3:84:1d: b3:d1:06:7f:19:74:08:72:2a:05:f8:9f:9c:e7:86:cf:fc:56: c2:41:0e:ce:c8:1b:34:e0:e7:31:ae:1f:7f:45:2a:3c:94:64: 52:c8:5a:44:7a:3d:9a:b2:37:b5:fa:e7:4d:5e:a0:ab:f4:c7: 81:18:49:a4:6c:6d:9a:36:67:01:e9:0a:85:68:b3:73:04:fc: c7:df:99:28 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xzzmIRbtuOSNgqK8hfgVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZWExNGQxMzQzYjk5MjUwNmJlZTZjM2Q5MGUxOWE2OTc5 OGIwMTgwHhcNMjYwMTAxMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTQ2OWM3NTdiNmY3ODU3ZDhkYzY0MGRjNzIwNmIyYzUyM2Q0MTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uwOHHRw8O2Y0PhbKcX5JJwcZ4gm hZMiO/xJqMsjLwaWN8EKOnHo7gM3UaxMuuLeDgm3HnN7QW95XQ+nqnlTh9RTTtUf NqGQH8dylgvRs/fsQ5BSOfizsY1TY5l2Ibw+SbAOf+daH7MoEj/+OqXYDor387aY GXfncPvGU5x2hxGzgxyb4OVGYbYCK3ooKjC7kJ5Yw2jDhwRnOudvolOQD8vHJ6/x O0MUS4VlipBwu40Ikpoo1J2uNo9wmzVGjKKmUnF30vQBKI2EMYPDWwvgq9dFsiI0 BPEQMSRkHZ0Vbln5FXGvjHHs6GyanC1R/G0Q0hjRm/236Ejgd3dO+eq7awIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKlGnHV7b3hX2NxkDccgayxSPUFoMB8GA1UdIwQY MBaAFOPqFNE0O5klBr7mw9kOGaaXmLAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNC1vVTBUUTdtU1VHdnViRDJRNFpwcGVZc0JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85NzE1NTgtZWQ2Ni00YjgzLThmYTQt ZDRhNGYzNDcxN2YwLzEvcVVhY2RYdHZlRmZZM0dRTnh5QnJMRkk5UVdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85NzE1NTgtZWQ2Ni00YjgzLThmYTQtZDRhNGYzNDcxN2Yw LzEvNC1vVTBUUTdtU1VHdnViRDJRNFpwcGVZc0JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgsFJAwQC uRxsMA0GCSqGSIb3DQEBCwUAA4IBAQCRTGNiAhCEPhHG/aLrLtXBsoB/YL5smSvM YuvWINNQ1HSzHf55H7pBk01v4gX7iWSQyrsujJXDo5mfrXiCTiCVP7n7rxR9DyNE d2ylkGFEGd29Rm19I2BLNl0YJ1m7DJnmFeOPu7LU0wsb0jxutc/Fe+WezLw8eaTO GNzngSz81Wfu7GSh5W7yBQyfCuL3XQ6O4iWqYdf9cj63fdJQOmJnkI2MgE9tfCpc YAstJM8D5G/zhB2z0QZ/GXQIcioF+J+c54bP/FbCQQ7OyBs04Ocxrh9/RSo8lGRS yFpEej2asje1+udNXqCr9MeBGEmkbG2aNmcB6QqFaLNzBPzH35ko -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:39 2026 by rpki-client