This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/QSL4Rp-4rE7S1tWYFNaM4sjCmkk.roa File: QSL4Rp-4rE7S1tWYFNaM4sjCmkk.roa (raw, json) Hash identifier: vSyqz+xTlVLnl9mfclsVATkgo02MoomY6TgwykVc3zY= Subject key identifier: 41:22:F8:46:9F:B8:AC:4E:D2:D6:D5:98:14:D6:8C:E2:C8:C2:9A:49 Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c Certificate serial: 019B7EA572FEEB910722EC9EC01D43B85651 Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/QSL4Rp-4rE7S1tWYFNaM4sjCmkk.roa Signing time: Fri 02 Jan 2026 12:18:50 +0000 ROA not before: Fri 02 Jan 2026 12:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 188.125.160.0/24 maxlen: 24 188.125.163.0/24 maxlen: 24 188.125.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:72:fe:eb:91:07:22:ec:9e:c0:1d:43:b8:56:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c Validity Not Before: Jan 2 12:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4122f8469fb8ac4ed2d6d59814d68ce2c8c29a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:16:ee:db:eb:4b:d1:b3:f9:5c:66:47:17:c0: 11:3c:56:4f:43:d6:ed:6b:b9:d6:37:16:41:bd:3a: 80:ef:ba:0c:96:4e:e7:4a:4f:dd:9b:38:ed:e3:7c: 54:e1:ff:e0:37:1b:38:72:d7:ff:a7:0e:b5:fa:6a: 98:3f:fc:28:a4:8e:7c:09:a0:e7:5c:ea:ff:ba:66: b3:60:2f:16:9a:a2:c0:84:61:9b:5d:65:b4:d3:b7: bf:81:8a:4d:b8:33:2d:68:d0:fd:1c:26:d0:98:c4: d2:64:22:c6:23:7f:20:d5:5c:0f:72:c0:12:a1:a3: 7a:33:9e:3f:39:a5:6a:94:86:87:c0:25:c6:06:b8: 78:cc:93:0a:77:77:12:12:22:8d:af:f4:1f:15:d5: 02:33:64:0f:65:86:49:50:2f:ca:2e:04:1b:53:88: 38:54:c6:1f:52:e4:70:ef:5f:3d:39:b8:10:b2:34: 9e:cb:85:78:01:e9:f6:be:d5:44:4a:0f:67:b4:64: 9e:f2:4f:c2:25:b6:ac:8e:66:af:d1:41:9a:62:fd: 8f:60:93:8d:db:5a:cc:78:e7:33:eb:16:f6:4b:24: a2:11:e3:0f:be:d8:f8:2c:39:fa:75:91:30:09:c9: b5:b2:6f:12:dd:a9:d7:7d:64:98:b5:f2:a6:aa:88: 5b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:22:F8:46:9F:B8:AC:4E:D2:D6:D5:98:14:D6:8C:E2:C8:C2:9A:49 X509v3 Authority Key Identifier: keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/QSL4Rp-4rE7S1tWYFNaM4sjCmkk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.125.160.0/24 188.125.163.0/24 188.125.168.0/24 Signature Algorithm: sha256WithRSAEncryption c0:3b:aa:45:8c:48:42:da:68:98:02:cb:b5:02:bd:0f:05:f1: fc:06:96:b3:4f:7f:f9:a9:c0:f8:52:ac:30:c3:f7:5a:c0:4b: c2:2d:05:1a:02:59:18:61:87:08:d0:27:83:5c:69:a3:79:2b: 89:0c:98:4a:8f:4a:40:4d:57:02:32:35:c2:f9:55:92:24:d8: 39:67:99:0b:0d:9b:de:88:ca:5d:7c:3e:74:2e:13:19:2c:19: 9c:b9:65:a5:92:51:47:ba:b0:c6:47:77:9b:4b:59:27:e8:c6: 78:e8:b8:70:2e:27:3c:15:c9:9e:92:e3:49:94:2f:6c:df:1a: 1a:2e:58:df:47:dd:f6:4c:31:c4:0e:02:4b:2b:32:f2:08:89: af:cf:85:83:78:87:1b:47:2a:de:ca:84:77:24:98:dc:b3:1b: 88:59:dd:e0:fb:8d:8e:da:fd:1d:ab:8e:d9:52:18:1a:e5:15: 61:a7:04:20:60:5e:d8:47:cb:e6:22:12:80:67:f6:45:41:02: db:eb:d0:3e:e4:5c:9a:d6:93:0e:9a:80:d4:27:37:7c:c6:fe: b8:50:c3:ae:bf:67:bb:f5:ed:2c:f0:fe:49:97:d4:f3:fb:05: 00:89:02:17:c7:a2:a5:f0:82:2d:d6:66:78:cc:a7:03:c6:f9: 9c:73:d5:e1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pXL+65EHIuyewB1DuFZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MmY2MzNmNzZlOGQ4YWFlYWEzMmI1YWNlMTZhM2RiMzk0 M2Q4MGMwHhcNMjYwMTAyMTIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTIyZjg0NjlmYjhhYzRlZDJkNmQ1OTgxNGQ2OGNlMmM4YzI5YTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhbu2+tL0bP5XGZHF8ARPFZPQ9bt a7nWNxZBvTqA77oMlk7nSk/dmzjt43xU4f/gNxs4ctf/pw61+mqYP/wopI58CaDn XOr/umazYC8WmqLAhGGbXWW007e/gYpNuDMtaND9HCbQmMTSZCLGI38g1VwPcsAS oaN6M54/OaVqlIaHwCXGBrh4zJMKd3cSEiKNr/QfFdUCM2QPZYZJUC/KLgQbU4g4 VMYfUuRw7189ObgQsjSey4V4Aen2vtVESg9ntGSe8k/CJbasjmav0UGaYv2PYJON 21rMeOcz6xb2SySiEeMPvtj4LDn6dZEwCcm1sm8S3anXfWSYtfKmqohbrQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEEi+EafuKxO0tbVmBTWjOLIwppJMB8GA1UdIwQY MBaAFFQvYz926Niq6qMrWs4Wo9s5Q9gMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDIt NjliOTUzYzlkNWFhLzEvUVNMNFJwLTRyRTdTMXRXWUZOYU00c2pDbWtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDItNjliOTUzYzlkNWFh LzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAvH2gAwQA vH2jAwQAvH2oMA0GCSqGSIb3DQEBCwUAA4IBAQDAO6pFjEhC2miYAsu1Ar0PBfH8 BpazT3/5qcD4Uqwww/dawEvCLQUaAlkYYYcI0CeDXGmjeSuJDJhKj0pATVcCMjXC +VWSJNg5Z5kLDZveiMpdfD50LhMZLBmcuWWlklFHurDGR3ebS1kn6MZ46LhwLic8 FcmekuNJlC9s3xoaLljfR932TDHEDgJLKzLyCImvz4WDeIcbRyreyoR3JJjcsxuI Wd3g+42O2v0dq47ZUhga5RVhpwQgYF7YR8vmIhKAZ/ZFQQLb69A+5Fya1pMOmoDU Jzd8xv64UMOuv2e79e0s8P5Jl9Tz+wUAiQIXx6Kl8IIt1mZ4zKcDxvmcc9Xh -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:03 2026 by rpki-client