This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/pOQXq0nmpz6pKYDrNuVK9kkpTyI.roa File: pOQXq0nmpz6pKYDrNuVK9kkpTyI.roa (raw, json) Hash identifier: 38r8niOxTbvNmg9dfnoXSRz/LfPPGz9NUmHiyiOX9Hk= Subject key identifier: A4:E4:17:AB:49:E6:A7:3E:A9:29:80:EB:36:E5:4A:F6:49:29:4F:22 Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 019B78A37C616988F77F7BEAE7B63013DCBC Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/pOQXq0nmpz6pKYDrNuVK9kkpTyI.roa Signing time: Thu 01 Jan 2026 08:18:58 +0000 ROA not before: Thu 01 Jan 2026 08:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202715 IP address blocks: 194.170.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7c:61:69:88:f7:7f:7b:ea:e7:b6:30:13:dc:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4e417ab49e6a73ea92980eb36e54af649294f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9b:7b:f9:ff:e9:85:b9:95:f2:14:94:ae:64: c5:b5:64:8c:13:0c:b8:47:10:53:0c:2c:9b:e2:27: 88:1d:dd:2f:ce:b7:75:94:68:c9:86:23:c6:a7:cc: 83:d7:ba:6b:c9:9a:86:3d:a0:b8:b2:d7:61:16:99: 8c:b3:95:4c:2d:ea:32:84:ce:b2:cf:31:0c:9f:3d: 59:70:5c:b5:93:b9:8b:a2:1e:ea:2e:4a:a6:12:dd: 6d:1d:43:6b:1e:41:17:f6:3e:81:28:cb:4d:34:50: 5b:90:91:dd:1b:6a:69:45:27:57:11:e3:e1:78:0b: b7:fe:8f:68:0e:55:ca:95:f1:59:c2:1a:21:cf:c0: 7f:be:41:c9:0b:1b:8e:68:2d:5b:72:57:0f:f7:a3: b1:27:cb:7a:12:f2:e9:a7:87:2a:2f:a4:ce:99:9f: b7:d2:f0:2f:88:58:23:bb:45:1c:e8:63:24:c9:9b: 99:48:6c:00:fc:51:84:1e:4a:3c:60:3e:04:eb:65: 80:84:05:03:5d:c7:43:89:10:0a:8b:e9:5d:7c:47: 7a:83:2f:80:70:fa:b5:9b:21:c9:f0:c1:84:65:ae: f2:cb:93:ed:7f:06:46:bc:25:42:28:ef:a5:0c:34: ec:e5:4c:20:7e:ec:50:8e:06:f5:71:51:b5:f2:ed: 80:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E4:17:AB:49:E6:A7:3E:A9:29:80:EB:36:E5:4A:F6:49:29:4F:22 X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/pOQXq0nmpz6pKYDrNuVK9kkpTyI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.170.103.0/24 Signature Algorithm: sha256WithRSAEncryption 54:b3:c9:72:2c:14:aa:19:8c:83:0a:9a:cf:f1:29:b0:65:88: 78:d1:d5:13:ec:be:0f:2c:a4:2a:52:b6:d0:62:35:8b:5b:cb: 91:28:77:a0:73:17:e0:31:db:13:05:be:1b:27:57:b7:e9:65: ff:3c:63:79:5e:b6:f2:ac:41:39:ef:47:c0:21:49:05:db:c9: f8:27:0a:fa:29:18:1f:80:36:42:a3:80:69:74:3f:24:17:47: 33:f6:52:33:15:7c:f9:a7:28:65:26:5a:03:06:8e:b3:ca:43: 55:6b:c8:5a:a5:33:ba:b2:4e:e7:86:fc:7d:b6:bc:d3:1b:d6: f8:85:1e:92:88:d5:02:d7:1d:c9:4e:27:3d:30:43:33:28:ab: 2a:b6:05:51:b2:e9:79:61:80:a1:ff:57:fb:f9:b7:06:37:ae: 83:9b:62:5f:c9:90:9f:48:bc:05:e8:15:ef:35:9e:a2:84:2e: fa:42:f6:86:b1:29:fd:0a:aa:bb:08:09:f2:50:5f:49:00:74: 74:5e:2d:f1:88:39:34:a2:85:20:66:b2:da:43:ff:2a:41:b1: 42:6b:0e:9f:5f:7d:92:de:b2:0d:e6:2c:70:3e:6d:74:68:c9: 8a:97:b6:30:53:5b:26:2d:63:af:91:cd:2a:a8:78:c1:f4:0c: 9e:fc:ab:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o3xhaYj3f3vq57YwE9y8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGU0MTdhYjQ5ZTZhNzNlYTkyOTgwZWIzNmU1NGFmNjQ5Mjk0ZjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJt7+f/phbmV8hSUrmTFtWSMEwy4 RxBTDCyb4ieIHd0vzrd1lGjJhiPGp8yD17pryZqGPaC4stdhFpmMs5VMLeoyhM6y zzEMnz1ZcFy1k7mLoh7qLkqmEt1tHUNrHkEX9j6BKMtNNFBbkJHdG2ppRSdXEePh eAu3/o9oDlXKlfFZwhohz8B/vkHJCxuOaC1bclcP96OxJ8t6EvLpp4cqL6TOmZ+3 0vAviFgju0Uc6GMkyZuZSGwA/FGEHko8YD4E62WAhAUDXcdDiRAKi+ldfEd6gy+A cPq1myHJ8MGEZa7yy5PtfwZGvCVCKO+lDDTs5UwgfuxQjgb1cVG18u2AwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKTkF6tJ5qc+qSmA6zblSvZJKU8iMB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvcE9RWHEwbm1wejZwS1lEck51Vks5a2twVHlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwqpnMA0G CSqGSIb3DQEBCwUAA4IBAQBUs8lyLBSqGYyDCprP8SmwZYh40dUT7L4PLKQqUrbQ YjWLW8uRKHegcxfgMdsTBb4bJ1e36WX/PGN5XrbyrEE570fAIUkF28n4Jwr6KRgf gDZCo4BpdD8kF0cz9lIzFXz5pyhlJloDBo6zykNVa8hapTO6sk7nhvx9trzTG9b4 hR6SiNUC1x3JTic9MEMzKKsqtgVRsul5YYCh/1f7+bcGN66Dm2JfyZCfSLwF6BXv NZ6ihC76QvaGsSn9Cqq7CAnyUF9JAHR0Xi3xiDk0ooUgZrLaQ/8qQbFCaw6fX32S 3rIN5ixwPm10aMmKl7YwU1smLWOvkc0qqHjB9Aye/Kvd -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:05 2026 by rpki-client