This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/qOMNY6hVgy-QhQyOIQ4S2QZXLHI.roa File: qOMNY6hVgy-QhQyOIQ4S2QZXLHI.roa (raw, json) Hash identifier: sAeYUG9d4ti78IMqnSOELZESU1YQF01cfT/pGko2jnY= Subject key identifier: A8:E3:0D:63:A8:55:83:2F:90:85:0C:8E:21:0E:12:D9:06:57:2C:72 Certificate issuer: /CN=985b50a10d2d58c67503eaaa701e510915dd5192 Certificate serial: 019B7A5A6A5B7980ED432F756BE71EA48D12 Authority key identifier: 98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/qOMNY6hVgy-QhQyOIQ4S2QZXLHI.roa Signing time: Thu 01 Jan 2026 16:18:24 +0000 ROA not before: Thu 01 Jan 2026 16:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35585 IP address blocks: 194.24.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:6a:5b:79:80:ed:43:2f:75:6b:e7:1e:a4:8d:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=985b50a10d2d58c67503eaaa701e510915dd5192 Validity Not Before: Jan 1 16:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8e30d63a855832f90850c8e210e12d906572c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:35:42:a7:e1:d7:d6:5e:8c:19:9e:63:7b:96: 39:40:6a:9b:fb:6c:74:29:99:3f:0a:5d:fa:18:d5: 11:03:79:62:e0:fb:53:a7:9e:94:44:f3:e3:cc:c0: 7b:55:ee:8f:14:38:5d:b5:f8:19:ce:87:77:24:68: a8:de:c2:f1:b0:08:51:c3:e0:fc:e8:2d:fe:cf:0d: 7a:dd:5e:5d:dc:97:4d:fe:e7:5e:6e:d8:c0:f7:1f: 22:93:86:d6:b8:c9:8d:b2:33:ac:bd:9b:98:35:4b: c1:a2:b5:34:20:2d:88:f9:09:a2:0c:f8:5a:3b:69: c8:8e:93:2e:2c:d6:56:ea:67:33:18:82:59:17:3b: 24:13:f0:79:12:4d:89:b4:6d:5a:fb:d8:bc:d8:2d: 48:1a:70:da:10:52:76:52:46:e2:f9:97:cf:72:3c: 79:4d:59:e0:70:79:3d:4d:57:76:70:64:d0:4c:a7: 16:30:fc:54:bd:51:c7:ee:62:3c:0c:9e:02:5b:b0: c1:ea:00:3b:59:f6:8e:7a:f4:35:25:fc:67:ae:4c: 58:30:ca:64:51:76:19:72:06:b2:44:ad:0f:78:ef: 25:80:27:99:2c:0b:2d:8b:f0:e3:41:08:f0:25:67: 32:20:f5:f3:df:bc:a4:d3:59:e5:61:e9:b6:b1:0d: ea:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E3:0D:63:A8:55:83:2F:90:85:0C:8E:21:0E:12:D9:06:57:2C:72 X509v3 Authority Key Identifier: keyid:98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/qOMNY6hVgy-QhQyOIQ4S2QZXLHI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.24.174.0/23 Signature Algorithm: sha256WithRSAEncryption 24:9f:84:03:61:db:f9:25:07:36:ad:ef:c7:e5:31:20:e8:92: 8b:c4:54:6c:f9:a8:59:09:75:32:28:54:67:df:c1:b8:fe:20: 81:c8:c4:51:ad:a6:9a:9d:39:34:f6:42:2d:d2:5e:ee:3e:67: 19:31:d9:5b:71:57:66:bb:c1:91:53:cd:a7:57:42:92:d9:cb: f4:49:7b:d2:23:31:62:da:13:7f:71:e0:27:49:74:52:2d:13: 2d:9a:4e:bf:9b:66:ec:37:c1:9e:74:79:c6:14:3b:1a:d2:b9: a6:4f:b7:89:99:ea:10:a6:77:07:f0:2b:ba:a0:c9:ff:5f:81: 95:5b:5e:1a:9d:16:2f:72:f8:b1:e0:40:89:2f:fd:6c:69:e5: 65:98:24:56:3d:46:4e:26:3a:31:54:d6:39:88:24:c4:c2:eb: e7:ff:1d:d5:8f:19:c3:20:28:65:15:c0:0a:93:ee:7e:42:88: 25:ef:2a:51:3d:ad:34:9e:38:5c:e0:cb:59:df:a2:a3:49:07: 97:82:f5:b8:fe:1a:55:f6:63:9d:fa:47:35:4c:ed:f8:55:f4: 0a:bb:a4:e3:36:e5:aa:36:85:46:b0:1a:c4:49:84:7b:4b:4f: 9d:b4:f9:2a:ba:09:a4:29:b5:52:b2:15:ac:37:48:0e:7e:86: 06:75:2a:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WmpbeYDtQy91a+cepI0SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NWI1MGExMGQyZDU4YzY3NTAzZWFhYTcwMWU1MTA5MTVk ZDUxOTIwHhcNMjYwMTAxMTYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGUzMGQ2M2E4NTU4MzJmOTA4NTBjOGUyMTBlMTJkOTA2NTcyYzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DVCp+HX1l6MGZ5je5Y5QGqb+2x0 KZk/Cl36GNURA3li4PtTp56URPPjzMB7Ve6PFDhdtfgZzod3JGio3sLxsAhRw+D8 6C3+zw163V5d3JdN/udebtjA9x8ik4bWuMmNsjOsvZuYNUvBorU0IC2I+QmiDPha O2nIjpMuLNZW6mczGIJZFzskE/B5Ek2JtG1a+9i82C1IGnDaEFJ2Ukbi+ZfPcjx5 TVngcHk9TVd2cGTQTKcWMPxUvVHH7mI8DJ4CW7DB6gA7WfaOevQ1JfxnrkxYMMpk UXYZcgayRK0PeO8lgCeZLAsti/DjQQjwJWcyIPXz37yk01nlYem2sQ3q3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKjjDWOoVYMvkIUMjiEOEtkGVyxyMB8GA1UdIwQY MBaAFJhbUKENLVjGdQPqqnAeUQkV3VGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUZ0UW9RMHRXTVoxQS1xcWNCNVJDUlhkVVpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81Njg5YjAtYWY2ZC00MzgxLTg5OTIt OTBmNjcxOWU2N2I5LzEvcU9NTlk2aFZneS1RaFF5T0lRNFMyUVpYTEhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81Njg5YjAtYWY2ZC00MzgxLTg5OTItOTBmNjcxOWU2N2I5 LzEvbUZ0UW9RMHRXTVoxQS1xcWNCNVJDUlhkVVpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwhiuMA0G CSqGSIb3DQEBCwUAA4IBAQAkn4QDYdv5JQc2re/H5TEg6JKLxFRs+ahZCXUyKFRn 38G4/iCByMRRraaanTk09kIt0l7uPmcZMdlbcVdmu8GRU82nV0KS2cv0SXvSIzFi 2hN/ceAnSXRSLRMtmk6/m2bsN8GedHnGFDsa0rmmT7eJmeoQpncH8Cu6oMn/X4GV W14anRYvcvix4ECJL/1saeVlmCRWPUZOJjoxVNY5iCTEwuvn/x3VjxnDIChlFcAK k+5+Qogl7ypRPa00njhc4MtZ36KjSQeXgvW4/hpV9mOd+kc1TO34VfQKu6TjNuWq NoVGsBrESYR7S0+dtPkqugmkKbVSshWsN0gOfoYGdSpM -----END CERTIFICATE-----Generated at Tue Feb 10 01:33:53 2026 by rpki-client