This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/q22B8uZqIeUjttRk_KzUZEOz0kg.roa File: q22B8uZqIeUjttRk_KzUZEOz0kg.roa (raw, json) Hash identifier: 8NKUjzOde64CaPdQXWvNfnQQ6XXb3pMGKR9eraCcPGs= Subject key identifier: AB:6D:81:F2:E6:6A:21:E5:23:B6:D4:64:FC:AC:D4:64:43:B3:D2:48 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C73332F6936E8A8EABE2FE381ACD37 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/q22B8uZqIeUjttRk_KzUZEOz0kg.roa Signing time: Thu 01 Jan 2026 04:18:21 +0000 ROA not before: Thu 01 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42135 IP address blocks: 193.232.115.0/24 maxlen: 24 212.193.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:33:32:f6:93:6e:8a:8e:ab:e2:fe:38:1a:cd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab6d81f2e66a21e523b6d464fcacd46443b3d248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:31:64:3f:14:bc:0b:08:9c:11:c8:85:13:f8: a2:6c:a9:a3:de:77:02:31:9a:17:d1:7a:07:55:c1: 45:bf:1c:65:1f:ef:43:43:2f:61:35:b8:82:d0:b0: 59:02:2b:64:bc:fa:7f:b2:0f:c2:f3:7c:ca:72:d2: 19:93:1c:98:71:9f:75:f2:07:21:c2:2c:b2:29:27: e6:ca:3e:5f:fc:ef:49:17:ec:8f:95:bc:6f:b5:a8: e9:f3:5d:95:78:32:27:5b:93:f7:02:eb:9e:9a:c3: 90:25:77:46:fc:5a:9e:71:a1:fd:82:2d:2b:36:b6: 29:72:82:b6:09:24:2b:3a:13:3c:e9:9f:c5:c5:8c: b0:e9:c3:6f:b4:77:ca:c0:1b:60:6a:1f:61:6c:e5: 96:9a:21:c5:7e:03:d2:64:9c:66:42:2e:c6:c2:83: d6:12:a6:b3:01:0c:ce:27:b3:9c:7d:fe:67:96:89: f9:f8:62:47:f0:80:17:cd:21:07:c5:22:f0:34:91: d0:73:91:b0:7c:c6:7c:b9:b4:d3:dc:04:73:a6:8f: 37:fc:8a:2c:2e:c4:09:40:1c:f6:0d:1a:f1:d4:5a: 3a:63:e8:fc:94:93:af:1b:de:bd:4a:84:56:ea:95: 86:60:ff:95:14:3b:e6:fd:49:8b:02:b9:22:75:33: a0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6D:81:F2:E6:6A:21:E5:23:B6:D4:64:FC:AC:D4:64:43:B3:D2:48 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/q22B8uZqIeUjttRk_KzUZEOz0kg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.232.115.0/24 212.193.99.0/24 Signature Algorithm: sha256WithRSAEncryption 33:b5:c5:c0:0f:ac:9b:49:fe:6c:c6:6a:24:87:0d:e7:32:4c: 99:22:8b:33:29:b8:f4:11:f2:a9:78:db:d6:b5:08:b7:13:88: 82:e8:a3:36:45:09:33:bf:5e:60:3f:ef:d2:7a:c6:b3:04:f6: ed:64:de:86:99:b1:87:18:85:49:af:eb:6d:9f:b0:29:43:2c: 55:86:e1:2b:9f:f5:5b:ad:65:81:15:5d:5f:7c:08:eb:6e:8d: 7b:ce:e0:a9:ba:09:0a:71:53:62:e6:f1:23:8c:ff:08:f1:5e: ae:a4:02:59:f8:48:ed:b3:a5:1b:b5:81:d4:d9:61:15:f8:de: c0:b7:08:cc:c4:ce:08:7d:8a:7f:51:1d:9d:60:b4:4d:96:89: 0a:c7:36:80:54:c0:9c:79:c6:49:d9:0a:3d:52:4f:00:98:72: 72:b5:6d:c6:5a:53:58:0f:24:60:b0:f2:33:66:27:e1:69:98: 2c:fb:b2:8d:e2:9c:ac:cd:eb:da:02:d1:0b:5c:18:df:02:a9: 23:72:4f:94:a0:4f:e2:22:1d:7a:4f:b4:65:45:7f:75:0b:9e: 1c:e7:01:e5:80:09:65:3b:31:99:1e:db:75:e7:de:b2:32:10: 2f:98:21:85:27:84:35:08:75:31:43:0e:7f:ca:ec:d5:a1:65: d2:a9:d0:3f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xzMy9pNuio6r4v44Gs03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjZkODFmMmU2NmEyMWU1MjNiNmQ0NjRmY2FjZDQ2NDQzYjNkMjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zFkPxS8CwicEciFE/iibKmj3ncC MZoX0XoHVcFFvxxlH+9DQy9hNbiC0LBZAitkvPp/sg/C83zKctIZkxyYcZ918gch wiyyKSfmyj5f/O9JF+yPlbxvtajp812VeDInW5P3AuuemsOQJXdG/FqecaH9gi0r NrYpcoK2CSQrOhM86Z/FxYyw6cNvtHfKwBtgah9hbOWWmiHFfgPSZJxmQi7GwoPW EqazAQzOJ7Ocff5nlon5+GJH8IAXzSEHxSLwNJHQc5GwfMZ8ubTT3ARzpo83/Ios LsQJQBz2DRrx1Fo6Y+j8lJOvG969SoRW6pWGYP+VFDvm/UmLArkidTOgLQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKttgfLmaiHlI7bUZPys1GRDs9JIMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvcTIyQjh1WnFJZVVqdHRSa19LelVaRU96MGtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwehzAwQA 1MFjMA0GCSqGSIb3DQEBCwUAA4IBAQAztcXAD6ybSf5sxmokhw3nMkyZIoszKbj0 EfKpeNvWtQi3E4iC6KM2RQkzv15gP+/SesazBPbtZN6GmbGHGIVJr+ttn7ApQyxV huErn/VbrWWBFV1ffAjrbo17zuCpugkKcVNi5vEjjP8I8V6upAJZ+Ejts6UbtYHU 2WEV+N7AtwjMxM4IfYp/UR2dYLRNlokKxzaAVMCcecZJ2Qo9Uk8AmHJytW3GWlNY DyRgsPIzZifhaZgs+7KN4pyszevaAtELXBjfAqkjck+UoE/iIh16T7RlRX91C54c 5wHlgAllOzGZHtt1596yMhAvmCGFJ4Q1CHUxQw5/yuzVoWXSqdA/ -----END CERTIFICATE-----Generated at Sun Jan 25 21:16:10 2026 by rpki-client