This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qC5qny3kcXkmgPwUGE0HFfsCYk4.roa File: qC5qny3kcXkmgPwUGE0HFfsCYk4.roa (raw, json) Hash identifier: U626UtOdwIi70VCnYJB5PF0IWeRaZncN2Yj/7tLobjk= Subject key identifier: A8:2E:6A:9F:2D:E4:71:79:26:80:FC:14:18:4D:07:15:FB:02:62:4E Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5AF27AA1817CAA3F11BD38ED3E790C Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qC5qny3kcXkmgPwUGE0HFfsCYk4.roa Signing time: Fri 02 Jan 2026 06:17:50 +0000 ROA not before: Fri 02 Jan 2026 06:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 89.33.194.0/24 maxlen: 24 93.114.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:f2:7a:a1:81:7c:aa:3f:11:bd:38:ed:3e:79:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a82e6a9f2de471792680fc14184d0715fb02624e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f1:38:8f:a3:98:2f:0d:ce:d5:ab:5e:75:2d: fe:b8:56:1a:08:c2:e4:77:0d:ac:ec:a7:9e:a1:36: e9:c7:da:7f:8c:4d:d0:56:8a:6a:98:46:96:71:fb: 20:a8:a5:16:70:e9:84:fa:5f:fc:d3:ff:59:24:f2: 45:74:b1:ce:a1:b8:63:a7:1b:42:67:21:61:41:89: cd:f8:13:2a:b7:fb:20:e9:ff:ba:5b:de:08:42:6f: aa:b5:75:10:9e:ed:92:18:bc:9f:62:f1:e7:1c:63: be:e9:0f:6c:8d:75:88:1f:ce:e2:f7:0c:16:34:85: f6:eb:d5:53:3b:b2:23:f7:86:6f:32:bf:3b:8b:a0: 14:b0:db:8b:ee:a0:d5:10:d9:44:ad:b9:d9:48:7b: f8:bb:67:61:c2:c1:c8:99:82:a9:70:e8:86:f4:51: d6:c5:b5:e9:4e:93:83:2d:48:4f:6b:bf:06:79:40: 89:62:2a:3f:44:35:05:cc:be:36:48:f4:12:fa:be: e5:4d:a0:82:8d:f0:d3:5b:0a:9e:15:36:5a:32:75: 57:5f:da:db:1e:a7:9a:12:e4:19:a0:8f:e2:1f:3a: 42:5e:e0:56:ef:d0:6b:5a:ec:8b:36:ea:6c:69:ea: 26:c1:ee:fe:4e:dc:b5:b2:24:0b:23:1a:b7:49:69: 97:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2E:6A:9F:2D:E4:71:79:26:80:FC:14:18:4D:07:15:FB:02:62:4E X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qC5qny3kcXkmgPwUGE0HFfsCYk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.33.194.0/24 93.114.73.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:89:b3:a7:a5:1d:01:c9:20:7a:ff:c4:bc:8c:b9:08:15:39: fb:58:8b:b1:63:61:a2:0b:e7:25:fa:e9:06:f1:27:74:d9:82: 4a:18:0c:b5:95:9c:b5:c1:1f:dc:da:9c:92:f6:93:63:bb:69: 5c:7c:bb:f3:c3:e4:9b:b2:6c:ec:be:c4:9e:3e:8c:e2:d1:77: 0b:8b:68:f5:6c:86:e3:64:57:01:b2:0e:2d:45:a8:5b:31:b0: 00:84:4a:06:b5:c7:c7:0a:36:a8:f0:b8:c8:6a:a1:45:40:f6: a6:c8:0e:d5:ba:d2:54:21:a0:1b:6a:7c:e2:16:34:7c:d9:0c: cb:cf:b0:87:ed:7b:2e:07:e7:f4:af:a5:e5:37:d7:b7:03:01: c4:84:e5:93:55:8e:e0:3b:9b:c9:64:3a:71:18:2c:fb:c1:b2: 94:fe:23:d1:34:9b:9c:86:fc:8e:86:16:38:a2:34:16:ef:0d: 8a:3a:ff:d9:42:0b:e6:f1:51:51:1d:49:e6:14:94:7b:eb:25: d2:4e:51:68:13:26:25:59:3f:de:63:85:3b:35:a3:d4:52:e5: 22:74:6b:b0:37:a7:b6:b5:03:bc:1c:ec:90:f2:a0:ea:32:10: 3e:ed:7d:85:00:87:6f:11:6b:1b:8b:0c:4d:7c:ad:4e:46:84: 20:2a:cb:43 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9WvJ6oYF8qj8RvTjtPnkMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODJlNmE5ZjJkZTQ3MTc5MjY4MGZjMTQxODRkMDcxNWZiMDI2MjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/E4j6OYLw3O1atedS3+uFYaCMLk dw2s7KeeoTbpx9p/jE3QVopqmEaWcfsgqKUWcOmE+l/80/9ZJPJFdLHOobhjpxtC ZyFhQYnN+BMqt/sg6f+6W94IQm+qtXUQnu2SGLyfYvHnHGO+6Q9sjXWIH87i9wwW NIX269VTO7Ij94ZvMr87i6AUsNuL7qDVENlErbnZSHv4u2dhwsHImYKpcOiG9FHW xbXpTpODLUhPa78GeUCJYio/RDUFzL42SPQS+r7lTaCCjfDTWwqeFTZaMnVXX9rb HqeaEuQZoI/iHzpCXuBW79BrWuyLNupsaeomwe7+Tty1siQLIxq3SWmXrwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKguap8t5HF5JoD8FBhNBxX7AmJOMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvcUM1cW55M2tjWGttZ1B3VUdFMEhGZnNDWWs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSHCAwQA XXJJMA0GCSqGSIb3DQEBCwUAA4IBAQA/ibOnpR0BySB6/8S8jLkIFTn7WIuxY2Gi C+cl+ukG8Sd02YJKGAy1lZy1wR/c2pyS9pNju2lcfLvzw+SbsmzsvsSePozi0XcL i2j1bIbjZFcBsg4tRahbMbAAhEoGtcfHCjao8LjIaqFFQPamyA7VutJUIaAbanzi FjR82QzLz7CH7XsuB+f0r6XlN9e3AwHEhOWTVY7gO5vJZDpxGCz7wbKU/iPRNJuc hvyOhhY4ojQW7w2KOv/ZQgvm8VFRHUnmFJR76yXSTlFoEyYlWT/eY4U7NaPUUuUi dGuwN6e2tQO8HOyQ8qDqMhA+7X2FAIdvEWsbiwxNfK1ORoQgKstD -----END CERTIFICATE-----Generated at Sun Jan 18 11:03:56 2026 by rpki-client