This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/q5abuoJZ1lm7pVfvA-IRNmZlgVc.roa File: q5abuoJZ1lm7pVfvA-IRNmZlgVc.roa (raw, json) Hash identifier: 7Qb1m3fC7oeeHX74Shhd+okw0uSYANuxfkJI/afC/Y8= Subject key identifier: AB:96:9B:BA:82:59:D6:59:BB:A5:57:EF:03:E2:11:36:66:65:81:57 Certificate issuer: /CN=d2e42a583fa251b432cfc1dca8bd341d50660b95 Certificate serial: 019B7BA3E36156DDFAD8F46A39AA4EF98BD8 Authority key identifier: D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/q5abuoJZ1lm7pVfvA-IRNmZlgVc.roa Signing time: Thu 01 Jan 2026 22:18:16 +0000 ROA not before: Thu 01 Jan 2026 22:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 193.105.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e3:61:56:dd:fa:d8:f4:6a:39:aa:4e:f9:8b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e42a583fa251b432cfc1dca8bd341d50660b95 Validity Not Before: Jan 1 22:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab969bba8259d659bba557ef03e2113666658157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a6:bb:24:8c:85:22:a5:85:67:26:52:95:e7: 66:91:9e:be:24:74:f6:9f:14:2a:5c:7d:4d:f4:bd: a7:fc:84:9b:91:8d:8e:32:51:30:d2:62:47:1e:ad: f8:41:57:b0:d2:cd:8a:28:1b:c5:27:2e:ef:96:54: 39:f7:07:0b:a7:88:6f:07:40:be:e1:b7:d2:30:6b: ae:04:d2:c0:68:8d:e6:4c:24:4d:6b:5d:b3:b2:1f: 3b:f0:1b:34:c4:df:b0:28:4d:1b:cd:db:af:d1:82: 3f:4a:a4:64:70:9a:1f:1d:88:eb:d9:bc:0b:ed:e6: d4:c9:a8:d9:6c:55:47:e0:67:e3:e6:24:65:37:82: 54:9a:48:72:e0:c9:6a:23:e4:2c:7a:b4:93:5e:fb: 7c:f1:87:18:78:8d:61:b1:6f:b1:2e:26:34:08:e4: 88:ff:d9:08:22:ef:8a:8e:5d:38:28:2b:94:31:a3: 40:da:21:e1:6f:25:a3:17:a9:74:d2:1f:cf:55:ef: 61:8e:98:65:2b:df:e6:40:e0:4b:e4:5c:1f:8c:79: ac:92:95:7b:a2:50:9f:2f:b9:81:2c:df:23:da:81: 74:5a:b2:55:ef:6d:96:bc:10:d4:fa:7e:19:9e:ac: 6d:38:0d:3c:84:21:0d:36:b1:18:75:6d:1a:ee:64: d1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:96:9B:BA:82:59:D6:59:BB:A5:57:EF:03:E2:11:36:66:65:81:57 X509v3 Authority Key Identifier: keyid:D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/q5abuoJZ1lm7pVfvA-IRNmZlgVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.84.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:ad:19:22:6e:be:9c:17:9a:a3:cf:ef:96:5b:f3:71:33:0c: 7c:4a:1f:6c:32:15:64:b2:35:b1:f6:b3:34:d6:74:a9:ea:a5: 7d:7a:96:43:24:dd:41:60:48:5f:6b:e8:ec:79:a8:8d:00:b7: 66:9b:68:b1:e0:23:a5:06:d9:29:a0:c9:7b:66:d9:0c:fa:99: d0:dc:06:99:3e:b9:1b:d5:c1:53:39:0d:25:97:f4:a1:54:51: c0:4c:08:fb:64:b0:5f:76:18:6d:67:5c:7e:a1:8e:3f:22:fc: 46:5f:75:cf:76:e5:b1:6e:f0:18:06:d6:82:40:38:41:5a:5a: fd:27:d0:2b:15:89:21:9a:b9:26:51:76:e9:e0:a6:5c:8a:3c: d5:11:9a:3a:1d:ce:5d:bc:45:30:66:b1:4c:29:8e:eb:af:91: bd:87:be:1e:96:89:f4:63:3b:5e:69:d3:6d:93:65:ac:a6:a5: 8c:db:f8:84:e6:dc:24:95:f1:c2:45:04:97:7a:a1:53:e2:07: dd:2d:7a:ce:b4:4c:83:f5:77:b8:a4:a4:0e:ae:50:22:4f:1e: 7f:4a:12:99:8d:02:37:b2:ae:77:dc:ba:8b:66:1a:bb:50:87: f2:99:f0:be:cc:60:9e:bb:b4:18:59:8f:b9:67:b2:51:4d:42: 2d:b8:b3:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o+NhVt362PRqOapO+YvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZTQyYTU4M2ZhMjUxYjQzMmNmYzFkY2E4YmQzNDFkNTA2 NjBiOTUwHhcNMjYwMTAxMjIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjk2OWJiYTgyNTlkNjU5YmJhNTU3ZWYwM2UyMTEzNjY2NjU4MTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6a7JIyFIqWFZyZSledmkZ6+JHT2 nxQqXH1N9L2n/ISbkY2OMlEw0mJHHq34QVew0s2KKBvFJy7vllQ59wcLp4hvB0C+ 4bfSMGuuBNLAaI3mTCRNa12zsh878Bs0xN+wKE0bzduv0YI/SqRkcJofHYjr2bwL 7ebUyajZbFVH4Gfj5iRlN4JUmkhy4MlqI+QserSTXvt88YcYeI1hsW+xLiY0COSI /9kIIu+Kjl04KCuUMaNA2iHhbyWjF6l00h/PVe9hjphlK9/mQOBL5FwfjHmskpV7 olCfL7mBLN8j2oF0WrJV722WvBDU+n4ZnqxtOA08hCENNrEYdW0a7mTRrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKuWm7qCWdZZu6VX7wPiETZmZYFXMB8GA1UdIwQY MBaAFNLkKlg/olG0Ms/B3Ki9NB1QZguVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHVRcVdELWlVYlF5ejhIY3FMMDBIVkJtQzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8zYWI3ZmMtYmFlZi00YTk2LWJkZDMt ZmRjMWRjZGEyOTYxLzEvcTVhYnVvSloxbG03cFZmdkEtSVJObVpsZ1ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8zYWI3ZmMtYmFlZi00YTk2LWJkZDMtZmRjMWRjZGEyOTYx LzEvMHVRcVdELWlVYlF5ejhIY3FMMDBIVkJtQzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWlUMA0G CSqGSIb3DQEBCwUAA4IBAQA8rRkibr6cF5qjz++WW/NxMwx8Sh9sMhVksjWx9rM0 1nSp6qV9epZDJN1BYEhfa+jseaiNALdmm2ix4COlBtkpoMl7ZtkM+pnQ3AaZPrkb 1cFTOQ0ll/ShVFHATAj7ZLBfdhhtZ1x+oY4/IvxGX3XPduWxbvAYBtaCQDhBWlr9 J9ArFYkhmrkmUXbp4KZcijzVEZo6Hc5dvEUwZrFMKY7rr5G9h74elon0YzteadNt k2WspqWM2/iE5twklfHCRQSXeqFT4gfdLXrOtEyD9Xe4pKQOrlAiTx5/ShKZjQI3 sq533LqLZhq7UIfymfC+zGCeu7QYWY+5Z7JRTUItuLN9 -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:04 2026 by rpki-client