This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/Q1gsiMhG7KeFlqjLEtCWXzCSx7w.roa File: Q1gsiMhG7KeFlqjLEtCWXzCSx7w.roa (raw, json) Hash identifier: IGSzzbDAIRV0gMo02Xu7ZT8JSjcCTONJ9LlOYiDEp/g= Subject key identifier: 43:58:2C:88:C8:46:EC:A7:85:96:A8:CB:12:D0:96:5F:30:92:C7:BC Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed Certificate serial: 019B7F83CB82199CE016D773797350697C5A Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/Q1gsiMhG7KeFlqjLEtCWXzCSx7w.roa Signing time: Fri 02 Jan 2026 16:21:42 +0000 ROA not before: Fri 02 Jan 2026 16:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43312 IP address blocks: 195.38.8.0/23 maxlen: 23 2a0e:3304::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:cb:82:19:9c:e0:16:d7:73:79:73:50:69:7c:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed Validity Not Before: Jan 2 16:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43582c88c846eca78596a8cb12d0965f3092c7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:4a:e8:a2:4c:84:df:de:26:53:36:2b:f2: 62:4a:8b:b0:ba:ef:4e:10:87:16:f2:58:77:fa:9b: 57:93:fc:0a:c0:6d:59:88:6c:67:c2:d7:42:ae:1b: 1a:a2:a3:c1:c7:e8:78:3e:b6:de:83:3d:f3:dd:97: dd:bc:a8:85:48:28:8e:f3:bf:13:db:ad:98:8f:03: 1d:a3:93:fd:c6:82:0a:a6:ed:6e:31:72:ee:29:61: e6:db:00:06:59:98:42:65:2c:91:4c:e6:25:02:03: 69:b5:91:77:8e:d6:a7:6c:2e:de:c2:67:2a:c9:14: 01:02:6a:19:b9:cf:fc:82:b5:3b:10:62:ec:e6:28: 8a:76:60:3a:51:07:86:ea:06:f5:ed:42:a3:e4:6c: 49:2f:33:f2:a6:ea:94:6d:d3:e0:2c:4f:0d:07:24: 99:b1:67:f8:62:6d:0e:c5:cc:a1:b4:28:db:44:b7: a7:29:ef:40:6c:14:dd:d2:14:42:c5:14:29:95:a0: 9b:e4:d4:80:17:41:73:08:42:45:5b:67:4d:ee:9c: cf:cf:a6:a4:7c:05:bd:3f:59:33:b8:f0:5f:31:11: cd:01:21:9c:a4:67:c4:5d:56:73:f6:f4:b6:0f:39: 1a:49:29:80:83:eb:a5:b8:0c:0a:eb:2a:89:13:a3: 00:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:58:2C:88:C8:46:EC:A7:85:96:A8:CB:12:D0:96:5F:30:92:C7:BC X509v3 Authority Key Identifier: keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/Q1gsiMhG7KeFlqjLEtCWXzCSx7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.38.8.0/23 IPv6: 2a0e:3304::/32 Signature Algorithm: sha256WithRSAEncryption 48:df:70:54:02:0f:8f:37:20:cc:e9:4d:a5:44:0f:05:6a:25: 2d:9a:10:61:a0:0a:4e:82:1a:f2:c1:e0:72:a0:38:dd:f1:fe: 39:4c:32:ad:64:2b:bc:91:7f:c0:ea:34:56:04:d9:47:8d:17: 5d:32:79:3a:e5:bd:db:3b:80:53:1f:49:27:53:28:e3:5d:b5: d7:78:76:b3:17:99:a3:e9:c4:e9:f3:88:0d:15:36:48:de:f1: 2b:1d:01:e7:7c:71:89:fa:ef:90:6d:4a:22:db:88:0d:2e:4a: ad:fd:bc:00:f1:d1:fe:67:98:6c:a3:6f:cc:d8:29:e2:6c:3a: 9e:79:3b:94:24:3f:4d:1e:15:81:d3:ca:ed:a3:08:bb:9a:9d: f2:77:72:b4:21:44:1b:25:b8:2e:9a:62:5c:f6:d0:7f:30:e9: a6:d1:5a:64:b0:85:a8:1c:15:69:6b:1f:e8:17:df:1c:aa:ab: e8:67:d5:fa:95:0b:67:5c:1f:ce:ac:cf:09:c5:76:d0:19:0a: 98:a4:7f:77:4e:23:3a:bb:20:fa:02:a6:b7:20:c6:60:87:e2: 51:77:48:4e:c9:9b:c3:34:62:5f:23:7b:5c:ba:90:98:90:77: 61:c7:f1:53:dd:1b:f1:a7:90:6f:4f:89:cb:fd:bf:7d:2b:61: 3e:9d:02:73 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/g8uCGZzgFtdzeXNQaXxaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0 NTlmZWQwHhcNMjYwMTAyMTYyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzU4MmM4OGM4NDZlY2E3ODU5NmE4Y2IxMmQwOTY1ZjMwOTJjN2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNdK6KJMhN/eJlM2K/JiSouwuu9O EIcW8lh3+ptXk/wKwG1ZiGxnwtdCrhsaoqPBx+h4Prbegz3z3ZfdvKiFSCiO878T 262YjwMdo5P9xoIKpu1uMXLuKWHm2wAGWZhCZSyRTOYlAgNptZF3jtanbC7ewmcq yRQBAmoZuc/8grU7EGLs5iiKdmA6UQeG6gb17UKj5GxJLzPypuqUbdPgLE8NBySZ sWf4Ym0OxcyhtCjbRLenKe9AbBTd0hRCxRQplaCb5NSAF0FzCEJFW2dN7pzPz6ak fAW9P1kzuPBfMRHNASGcpGfEXVZz9vS2DzkaSSmAg+uluAwK6yqJE6MA5wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFENYLIjIRuynhZaoyxLQll8wkse8MB8GA1UdIwQY MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt MzBmZjJjODNmMDAxLzEvUTFnc2lNaEc3S2VGbHFqTEV0Q1dYekNTeDd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBwyYIMA0E AgACMAcDBQAqDjMEMA0GCSqGSIb3DQEBCwUAA4IBAQBI33BUAg+PNyDM6U2lRA8F aiUtmhBhoApOghryweByoDjd8f45TDKtZCu8kX/A6jRWBNlHjRddMnk65b3bO4BT H0knUyjjXbXXeHazF5mj6cTp84gNFTZI3vErHQHnfHGJ+u+QbUoi24gNLkqt/bwA 8dH+Z5hso2/M2CnibDqeeTuUJD9NHhWB08rtowi7mp3yd3K0IUQbJbgummJc9tB/ MOmm0VpksIWoHBVpax/oF98cqqvoZ9X6lQtnXB/OrM8JxXbQGQqYpH93TiM6uyD6 Aqa3IMZgh+JRd0hOyZvDNGJfI3tcupCYkHdhx/FT3Rvxp5BvT4nL/b99K2E+nQJz -----END CERTIFICATE-----Generated at Tue Feb 10 05:30:45 2026 by rpki-client