This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/qBp9Go7C5K5PO25VaZfafmJldXo.roa File: qBp9Go7C5K5PO25VaZfafmJldXo.roa (raw, json) Hash identifier: aZjaPl/cUtUuPNjewiVI2iRit3lb7H1MzhD8WojfNfo= Subject key identifier: A8:1A:7D:1A:8E:C2:E4:AE:4F:3B:6E:55:69:97:DA:7E:62:65:75:7A Certificate issuer: /CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6 Certificate serial: 019B78A34478C305B3155F231757A6D26E06 Authority key identifier: 1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/qBp9Go7C5K5PO25VaZfafmJldXo.roa Signing time: Thu 01 Jan 2026 08:18:44 +0000 ROA not before: Thu 01 Jan 2026 08:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44858 IP address blocks: 193.105.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:44:78:c3:05:b3:15:5f:23:17:57:a6:d2:6e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6 Validity Not Before: Jan 1 08:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a81a7d1a8ec2e4ae4f3b6e556997da7e6265757a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0b:0b:68:92:e3:51:17:2d:b5:45:95:ea:11: c4:e2:58:8b:93:06:d6:2a:5c:8c:4d:08:20:d6:9c: aa:3f:39:7e:99:be:aa:77:df:1f:40:e2:62:bd:bb: fa:cc:40:ff:ac:5c:0d:66:1e:37:26:f4:08:82:4e: e8:6d:88:2f:18:16:6a:8a:e9:2a:a0:7d:f6:75:37: 20:16:82:77:70:6f:2b:3f:78:bc:b6:be:0a:2c:bd: 7e:ef:ae:70:09:b9:a0:ed:d6:d4:57:94:82:97:7c: ea:93:42:9e:a8:84:99:be:dd:c1:49:cb:2b:b8:6d: b9:4e:f0:e5:3e:0e:7c:16:2b:da:28:67:df:18:2d: 50:99:87:99:3d:6f:d1:eb:fd:98:39:7c:49:27:65: 52:80:84:88:4e:f2:2c:31:f8:50:52:65:f4:6c:67: 1d:5d:c4:80:ce:f9:25:51:04:46:f3:c6:7c:52:35: 01:c8:a8:56:9b:6b:28:52:df:f5:73:18:62:f0:f8: de:aa:7e:09:d9:7e:ad:95:aa:ed:e5:67:46:12:83: c0:29:dd:06:74:32:93:ed:8e:60:7e:35:2b:4b:c1: 82:97:10:69:91:36:6d:ce:ac:ae:a2:9d:79:6d:e1: 93:6f:5f:f0:f4:21:a9:b2:39:88:3f:ec:57:f5:e3: b0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1A:7D:1A:8E:C2:E4:AE:4F:3B:6E:55:69:97:DA:7E:62:65:75:7A X509v3 Authority Key Identifier: keyid:1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/qBp9Go7C5K5PO25VaZfafmJldXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.50.0/24 Signature Algorithm: sha256WithRSAEncryption bf:73:5b:dd:b0:dd:39:70:ca:b3:b2:30:de:f1:00:8b:f4:4c: f3:7f:3f:b3:68:22:2e:3b:a4:bb:61:e2:46:da:d0:b7:49:2f: bd:7d:3b:19:1c:7f:ca:a0:f2:48:84:b5:3b:d2:eb:d5:04:f4: 26:b6:76:3b:a5:e2:ae:64:50:3a:69:58:b3:25:c2:51:57:d1: 90:1a:bc:df:7a:35:8c:1f:22:f7:e2:a4:f5:05:0a:d5:a0:ef: ae:a1:a0:3f:b5:6e:fd:d9:73:72:be:79:eb:8c:88:57:ed:d4: ca:4a:63:6b:cc:52:3d:67:97:f9:b3:e6:cd:8e:4b:9a:6c:10: 2a:50:fa:8f:f2:a3:bc:1c:1d:30:cd:5c:be:f8:81:70:2a:26: 52:46:72:0d:97:c6:aa:67:71:55:d4:23:b5:93:85:50:ea:12: 96:cb:70:80:41:0f:3c:28:dd:75:65:9a:24:7d:2e:99:13:be: 06:6c:3d:02:1c:b9:cd:0a:c5:00:d2:2f:09:6c:3a:ab:6f:eb: 24:03:d6:0e:cb:43:46:a8:78:39:65:3e:af:92:5a:9c:73:e6: cd:fe:e2:12:58:8c:32:85:a0:be:fe:4a:2c:06:a8:7a:ee:f6: 94:69:fa:78:84:59:dd:c9:14:52:e3:b6:7f:5e:5b:e2:79:ea: 0b:28:6b:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0R4wwWzFV8jF1em0m4GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYzI5ZTU3NDllZTkxYzVhMzNhZThlMzBiN2RjOWZmZjM5 NWZmZTYwHhcNMjYwMTAxMDgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODFhN2QxYThlYzJlNGFlNGYzYjZlNTU2OTk3ZGE3ZTYyNjU3NTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAsLaJLjURcttUWV6hHE4liLkwbW KlyMTQgg1pyqPzl+mb6qd98fQOJivbv6zED/rFwNZh43JvQIgk7obYgvGBZqiukq oH32dTcgFoJ3cG8rP3i8tr4KLL1+765wCbmg7dbUV5SCl3zqk0KeqISZvt3BScsr uG25TvDlPg58FivaKGffGC1QmYeZPW/R6/2YOXxJJ2VSgISITvIsMfhQUmX0bGcd XcSAzvklUQRG88Z8UjUByKhWm2soUt/1cxhi8Pjeqn4J2X6tlart5WdGEoPAKd0G dDKT7Y5gfjUrS8GClxBpkTZtzqyuop15beGTb1/w9CGpsjmIP+xX9eOwNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKgafRqOwuSuTztuVWmX2n5iZXV6MB8GA1UdIwQY MBaAFB3CnldJ7pHFozro4wt9yf/zlf/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGNLZVYwbnVrY1dqT3VqakMzM0pfX09WXy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jMWQ5N2EtNWI5ZC00MGJiLTliMjct NTNmZmE1Zjk5ODVjLzEvcUJwOUdvN0M1SzVQTzI1VmFaZmFmbUpsZFhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9jMWQ5N2EtNWI5ZC00MGJiLTliMjctNTNmZmE1Zjk5ODVj LzEvSGNLZVYwbnVrY1dqT3VqakMzM0pfX09WXy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWkyMA0G CSqGSIb3DQEBCwUAA4IBAQC/c1vdsN05cMqzsjDe8QCL9Ezzfz+zaCIuO6S7YeJG 2tC3SS+9fTsZHH/KoPJIhLU70uvVBPQmtnY7peKuZFA6aVizJcJRV9GQGrzfejWM HyL34qT1BQrVoO+uoaA/tW792XNyvnnrjIhX7dTKSmNrzFI9Z5f5s+bNjkuabBAq UPqP8qO8HB0wzVy++IFwKiZSRnINl8aqZ3FV1CO1k4VQ6hKWy3CAQQ88KN11ZZok fS6ZE74GbD0CHLnNCsUA0i8JbDqrb+skA9YOy0NGqHg5ZT6vklqcc+bN/uISWIwy haC+/kosBqh67vaUafp4hFndyRRS47Z/XlvieeoLKGsG -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:25 2026 by rpki-client