This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/QOvuUL6JmFjMR4OHkrweykbMl00.roa File: QOvuUL6JmFjMR4OHkrweykbMl00.roa (raw, json) Hash identifier: APm5d1yLpYTNVNqcU55k9Dr295k8B4YAIygsX75/UWA= Subject key identifier: 40:EB:EE:50:BE:89:98:58:CC:47:83:87:92:BC:1E:CA:46:CC:97:4D Certificate issuer: /CN=cc6532649a6aef4714841b9c8f54660d889b0629 Certificate serial: 019B7E3933DE7CEFA1FB92A387130445AFF9 Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/QOvuUL6JmFjMR4OHkrweykbMl00.roa Signing time: Fri 02 Jan 2026 10:20:36 +0000 ROA not before: Fri 02 Jan 2026 10:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 195.234.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:33:de:7c:ef:a1:fb:92:a3:87:13:04:45:af:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629 Validity Not Before: Jan 2 10:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40ebee50be899858cc47838792bc1eca46cc974d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:f6:58:24:69:27:4a:7a:75:27:a3:1c:a1: 11:45:b5:ba:8c:e4:d3:3d:02:22:da:d7:28:95:c6: 0e:1f:07:8c:fe:78:41:e2:c9:fa:95:b7:b0:06:6a: a8:bf:c2:24:f2:82:38:01:7f:67:63:1a:f1:16:77: 0b:d4:29:3d:34:5c:29:92:88:2d:7e:71:36:78:dc: ce:e7:fc:0d:83:2e:a5:80:89:01:69:0a:29:b1:cc: f3:c7:6c:d5:ec:98:32:2a:44:e6:a7:fa:d4:b9:3e: 6b:3d:94:55:63:27:6a:8e:bf:00:8e:9a:6d:70:a1: d1:e3:9e:5c:73:5e:77:aa:c8:03:6b:c1:60:9c:eb: e9:b2:09:cb:92:da:07:5b:07:3c:d9:a1:eb:c5:5f: cd:2c:5b:9e:aa:cf:ec:39:03:e5:2e:eb:84:f8:b5: ee:17:8b:eb:ce:fa:6c:9a:c9:65:0e:18:d0:3c:d2: 15:ff:fe:51:79:41:00:6b:7b:a2:a5:ae:01:4a:3f: de:5b:95:a4:43:18:a9:57:21:91:63:0f:ee:d7:02: 7b:5e:e5:28:bc:40:20:7a:7a:c0:78:8d:d7:98:93: 0e:17:94:d1:40:94:bf:ee:f2:55:80:64:63:a7:1c: f4:03:c9:a2:6f:f8:e1:80:90:a9:73:74:c7:5d:48: 98:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EB:EE:50:BE:89:98:58:CC:47:83:87:92:BC:1E:CA:46:CC:97:4D X509v3 Authority Key Identifier: keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/QOvuUL6JmFjMR4OHkrweykbMl00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.145.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:84:49:1d:2c:d3:4a:b1:06:74:8a:e0:b1:f5:44:2f:73:c7: 4f:70:80:e3:85:72:5f:1c:c1:9a:ec:e6:79:d9:1a:7b:9e:37: ce:b5:fd:55:fe:8e:8a:f6:ec:11:56:c0:82:3e:3e:da:b4:18: d0:ad:d4:92:5e:76:2b:b0:68:78:08:69:68:78:83:f5:6e:40: 14:35:da:6e:2d:0a:63:a4:cd:cf:43:89:81:fd:63:cb:c6:62: d7:fa:4f:37:08:c1:f6:e6:3b:66:17:f3:86:c3:d8:91:29:83: b7:69:82:76:fb:2a:81:68:c8:5e:3a:cf:9f:f3:15:5e:c0:7f: d4:5e:69:3b:28:2f:ae:70:74:b0:d2:02:c5:f5:c5:f4:e4:70: 47:b0:59:92:6a:66:19:2b:a1:93:fb:98:5e:a6:cc:94:e4:b9: b0:b6:b1:e4:1c:e8:d3:f5:e1:b1:43:6d:dd:b1:95:0e:a4:be: 32:e7:07:e0:59:9a:00:df:2a:6c:b1:40:06:2a:9b:c1:a1:76: 2a:ca:45:fc:2d:03:32:25:ec:ed:d5:62:bd:cf:f4:4e:97:8e: 24:76:b1:22:41:21:67:95:7e:f8:fe:4c:63:85:dc:02:52:f1: a1:55:d8:df:4f:5a:05:1c:62:bd:62:00:95:e6:00:73:48:b2: cd:65:b0:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OTPefO+h+5KjhxMERa/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNjUzMjY0OWE2YWVmNDcxNDg0MWI5YzhmNTQ2NjBkODg5 YjA2MjkwHhcNMjYwMTAyMTAyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGViZWU1MGJlODk5ODU4Y2M0NzgzODc5MmJjMWVjYTQ2Y2M5NzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUz2WCRpJ0p6dSejHKERRbW6jOTT PQIi2tcolcYOHweM/nhB4sn6lbewBmqov8Ik8oI4AX9nYxrxFncL1Ck9NFwpkogt fnE2eNzO5/wNgy6lgIkBaQopsczzx2zV7JgyKkTmp/rUuT5rPZRVYydqjr8Ajppt cKHR455cc153qsgDa8FgnOvpsgnLktoHWwc82aHrxV/NLFueqs/sOQPlLuuE+LXu F4vrzvpsmsllDhjQPNIV//5ReUEAa3uipa4BSj/eW5WkQxipVyGRYw/u1wJ7XuUo vEAgenrAeI3XmJMOF5TRQJS/7vJVgGRjpxz0A8mib/jhgJCpc3THXUiYrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEDr7lC+iZhYzEeDh5K8HspGzJdNMB8GA1UdIwQY MBaAFMxlMmSaau9HFIQbnI9UZg2ImwYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zMTBkMzQtZjVkOC00ZTk2LTliN2Mt NjQ4ZjUwMWFmYWU1LzEvUU92dVVMNkptRmpNUjRPSGtyd2V5a2JNbDAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8zMTBkMzQtZjVkOC00ZTk2LTliN2MtNjQ4ZjUwMWFmYWU1 LzEvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+qRMA0G CSqGSIb3DQEBCwUAA4IBAQBqhEkdLNNKsQZ0iuCx9UQvc8dPcIDjhXJfHMGa7OZ5 2Rp7njfOtf1V/o6K9uwRVsCCPj7atBjQrdSSXnYrsGh4CGloeIP1bkAUNdpuLQpj pM3PQ4mB/WPLxmLX+k83CMH25jtmF/OGw9iRKYO3aYJ2+yqBaMheOs+f8xVewH/U Xmk7KC+ucHSw0gLF9cX05HBHsFmSamYZK6GT+5hepsyU5LmwtrHkHOjT9eGxQ23d sZUOpL4y5wfgWZoA3ypssUAGKpvBoXYqykX8LQMyJezt1WK9z/ROl44kdrEiQSFn lX74/kxjhdwCUvGhVdjfT1oFHGK9YgCV5gBzSLLNZbAn -----END CERTIFICATE-----Generated at Fri Jan 9 06:22:15 2026 by rpki-client