This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qNaXfdPjk7pWgZdt0iJJ6Cd0kAk.roa File: qNaXfdPjk7pWgZdt0iJJ6Cd0kAk.roa (raw, json) Hash identifier: 33KsDWixJwWIsloWNjTb+XF5NSURJsDY1v294mdIvBY= Subject key identifier: A8:D6:97:7D:D3:E3:93:BA:56:81:97:6D:D2:22:49:E8:27:74:90:09 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F849AF2136C5C568FE4038322E59334 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qNaXfdPjk7pWgZdt0iJJ6Cd0kAk.roa Signing time: Fri 02 Jan 2026 16:22:35 +0000 ROA not before: Fri 02 Jan 2026 16:22:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206507 IP address blocks: 94.183.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:9a:f2:13:6c:5c:56:8f:e4:03:83:22:e5:93:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8d6977dd3e393ba5681976dd22249e827749009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c2:13:b6:28:4d:ee:55:61:56:61:45:f2:8f: be:7e:be:b3:d0:97:e3:e4:cd:a6:1b:c9:db:04:bf: d9:95:62:de:7e:d8:ed:55:e9:2a:2b:75:dd:14:4c: 3f:43:d4:b3:b7:7d:16:3b:35:9e:c8:3f:47:c9:6a: 24:64:36:e6:97:00:d7:b3:30:a9:02:e8:f4:cd:bd: 91:07:71:b2:dd:0d:19:e7:be:3d:90:1b:dc:0d:5e: 95:9a:a5:f3:f1:70:cc:0b:ba:9e:79:03:a0:ca:1c: 76:d1:e8:cf:38:e1:df:b6:91:68:b8:49:26:e3:e1: 4b:55:3c:e3:99:39:33:00:ef:f9:65:74:46:e5:c1: 40:2b:aa:e8:9d:d3:17:09:32:02:f2:08:c1:f6:cd: 2d:c6:68:d7:d7:f3:8a:9d:f5:ca:81:c0:5d:0b:49: c1:4e:1e:cb:b9:ba:ef:6e:69:2d:77:ea:7e:10:ce: 50:39:84:38:16:e7:9c:44:a9:90:1d:3e:03:78:8f: e9:54:05:ca:36:c2:1c:ef:82:c1:e0:e5:c1:98:c3: 29:50:dd:b3:c0:95:02:cf:cb:fc:43:71:d6:1f:81: 81:ac:47:75:75:37:ab:d4:a9:1d:1a:cb:f2:c9:9f: cc:f0:ba:fd:ec:1b:4c:4a:a1:20:0a:75:a0:26:17: 0c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D6:97:7D:D3:E3:93:BA:56:81:97:6D:D2:22:49:E8:27:74:90:09 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qNaXfdPjk7pWgZdt0iJJ6Cd0kAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.183.172.0/24 Signature Algorithm: sha256WithRSAEncryption 14:9f:0a:ac:36:59:c6:92:e7:83:e0:ce:7f:ae:a1:df:5b:b9: fb:c8:08:87:1c:2e:f8:14:4d:5e:95:78:35:56:0d:0d:ac:06: 75:38:7e:72:cb:06:4f:63:c9:00:3b:c3:da:d6:40:99:80:1b: 7f:ce:10:19:81:cf:bd:17:55:90:eb:30:90:53:7b:a6:94:55: 4a:67:b4:4a:fe:80:db:79:70:da:ad:e9:75:62:d1:e9:96:14: 18:f9:1a:94:78:ec:3a:1a:a6:36:6b:7a:c5:6d:27:16:24:7c: eb:8d:f7:36:85:7d:00:e6:83:5b:6f:c3:34:b3:85:36:32:10: d0:59:d7:cc:91:ca:ee:69:e4:04:27:e4:a0:8c:83:3f:ba:41: d8:65:be:02:cd:54:6c:83:fa:21:ae:49:89:76:39:78:dc:38: 08:76:33:0e:94:7e:1e:39:7b:39:33:1c:12:ce:0e:6c:b6:0a: 90:0a:9b:fe:b1:d7:0e:bf:46:45:97:da:08:ba:ff:8a:14:02: 73:48:cb:7b:c3:eb:51:d3:3c:f0:6e:1a:fc:9c:04:e8:07:8a: 8b:9a:23:ee:45:fd:53:af:56:4c:4b:fd:ab:b6:28:bf:02:17: 29:9d:71:27:b1:62:bf:76:ce:26:a8:02:04:72:82:73:df:75: 56:e6:65:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJryE2xcVo/kA4Mi5ZM0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGQ2OTc3ZGQzZTM5M2JhNTY4MTk3NmRkMjIyNDllODI3NzQ5MDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8ITtihN7lVhVmFF8o++fr6z0Jfj 5M2mG8nbBL/ZlWLeftjtVekqK3XdFEw/Q9Szt30WOzWeyD9HyWokZDbmlwDXszCp Auj0zb2RB3Gy3Q0Z5749kBvcDV6VmqXz8XDMC7qeeQOgyhx20ejPOOHftpFouEkm 4+FLVTzjmTkzAO/5ZXRG5cFAK6rondMXCTIC8gjB9s0txmjX1/OKnfXKgcBdC0nB Th7Lubrvbmktd+p+EM5QOYQ4FuecRKmQHT4DeI/pVAXKNsIc74LB4OXBmMMpUN2z wJUCz8v8Q3HWH4GBrEd1dTer1KkdGsvyyZ/M8Lr97BtMSqEgCnWgJhcMQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKjWl33T45O6VoGXbdIiSegndJAJMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvcU5hWGZkUGprN3BXZ1pkdDBpSko2Q2Qwa0FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXresMA0G CSqGSIb3DQEBCwUAA4IBAQAUnwqsNlnGkueD4M5/rqHfW7n7yAiHHC74FE1elXg1 Vg0NrAZ1OH5yywZPY8kAO8Pa1kCZgBt/zhAZgc+9F1WQ6zCQU3umlFVKZ7RK/oDb eXDarel1YtHplhQY+RqUeOw6GqY2a3rFbScWJHzrjfc2hX0A5oNbb8M0s4U2MhDQ WdfMkcruaeQEJ+SgjIM/ukHYZb4CzVRsg/ohrkmJdjl43DgIdjMOlH4eOXs5MxwS zg5stgqQCpv+sdcOv0ZFl9oIuv+KFAJzSMt7w+tR0zzwbhr8nAToB4qLmiPuRf1T r1ZMS/2rtii/AhcpnXEnsWK/ds4mqAIEcoJz33VW5mWw -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:11 2026 by rpki-client