This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/QcsUaaoKRPUBylV1-Fbk0DFfN80.roa File: QcsUaaoKRPUBylV1-Fbk0DFfN80.roa (raw, json) Hash identifier: gVbE2LpxkXM42NWeJiCGY1tC1aB+7n0+0yKW+mHCt6Y= Subject key identifier: 41:CB:14:69:AA:0A:44:F5:01:CA:55:75:F8:56:E4:D0:31:5F:37:CD Certificate issuer: /CN=39d01e8ca0afe414c157e1fbfb5394867ce51edb Certificate serial: 019B79ECBF9DA15B4EC33ABAC44D84766EF8 Authority key identifier: 39:D0:1E:8C:A0:AF:E4:14:C1:57:E1:FB:FB:53:94:86:7C:E5:1E:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdAejKCv5BTBV-H7-1OUhnzlHts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/QcsUaaoKRPUBylV1-Fbk0DFfN80.roa Signing time: Thu 01 Jan 2026 14:18:37 +0000 ROA not before: Thu 01 Jan 2026 14:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203529 IP address blocks: 194.140.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft rsync://rpki.ripe.net/repository/DEFAULT/OdAejKCv5BTBV-H7-1OUhnzlHts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:bf:9d:a1:5b:4e:c3:3a:ba:c4:4d:84:76:6e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39d01e8ca0afe414c157e1fbfb5394867ce51edb Validity Not Before: Jan 1 14:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41cb1469aa0a44f501ca5575f856e4d0315f37cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:da:8b:c2:50:19:0e:4f:8d:d9:17:5e:e6:14: 05:0d:72:12:3e:19:45:6d:3d:44:1d:64:5a:06:f7: 26:fe:e4:8f:6b:cc:4e:37:57:19:d8:df:92:c4:f9: 38:15:f6:27:cd:99:c3:ec:63:b7:54:b8:65:81:3b: a4:56:e5:f4:05:36:e1:f9:8a:c8:6c:5c:fc:2d:90: 4c:49:3d:95:11:6c:55:b4:28:7c:a7:1d:ce:7c:84: 44:02:ed:53:7d:74:17:58:03:bc:96:fc:5e:28:54: b7:63:5c:dc:81:4f:16:de:33:5d:09:f2:fc:cd:bb: f1:a3:aa:f1:dc:a6:f8:0b:ae:c2:32:6e:eb:02:5d: 07:6a:dd:bd:f1:f7:6f:c7:2c:bd:26:81:e7:d7:d0: a8:98:de:2b:dc:7b:3b:da:4f:f2:c0:a5:35:33:6d: 59:fe:25:ac:30:c1:69:18:c0:7c:8d:65:63:5f:4b: e0:d4:c8:cb:76:d4:b8:49:14:89:0f:5c:2a:66:c8: 1d:48:28:a2:b4:33:9c:1a:c6:61:ef:bb:c6:52:7d: 39:5c:3e:50:d7:54:95:26:91:e9:cb:65:ff:58:84: 39:d1:96:0e:32:54:56:1e:07:cd:16:a3:57:cc:87: 81:9c:8c:fb:3b:cc:7e:04:a3:78:9f:08:c7:e6:09: b2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CB:14:69:AA:0A:44:F5:01:CA:55:75:F8:56:E4:D0:31:5F:37:CD X509v3 Authority Key Identifier: keyid:39:D0:1E:8C:A0:AF:E4:14:C1:57:E1:FB:FB:53:94:86:7C:E5:1E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdAejKCv5BTBV-H7-1OUhnzlHts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/QcsUaaoKRPUBylV1-Fbk0DFfN80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.140.195.0/24 Signature Algorithm: sha256WithRSAEncryption 04:5a:dc:8a:d6:19:8c:9b:3b:b6:22:9d:91:19:68:cc:0b:f4: 82:e7:df:49:09:11:d6:07:6f:5c:b2:22:fb:d9:fa:0f:27:dc: d6:e5:12:fa:d1:ff:8f:83:e9:40:b5:4f:09:12:94:a8:11:ac: 32:24:9b:16:0c:dc:48:d5:66:7d:b4:8b:8b:99:0b:e0:c0:82: d2:06:fb:28:be:b2:10:30:bb:61:a6:87:bb:97:40:59:56:33: b4:b3:8a:3e:2c:a3:dc:3e:26:f4:91:c9:84:c8:6c:7e:38:a8: bd:37:81:f5:02:c0:e0:63:8a:39:cf:e6:58:41:a4:40:95:3e: 0b:da:bd:0a:ba:70:94:54:5d:56:58:45:42:b0:5a:eb:e0:51: c9:aa:c3:90:f1:41:4f:68:b9:b8:63:5a:37:95:a4:d2:20:d0: 54:53:c7:f9:d2:0f:41:79:35:58:a6:92:6e:a1:6a:e9:ac:22: a2:90:74:39:e3:de:4a:c8:0f:8c:39:14:f3:e0:05:a2:d4:50: 03:35:11:71:1e:f9:24:26:c8:aa:08:ee:7b:dc:ed:bd:ae:64: 15:f0:ff:b9:9c:5d:93:06:28:c9:96:09:2b:80:d4:e6:3e:4e: ca:65:12:72:60:a2:2b:79:e2:47:2d:d0:39:65:98:13:58:66: a8:a5:57:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57L+doVtOwzq6xE2Edm74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZDAxZThjYTBhZmU0MTRjMTU3ZTFmYmZiNTM5NDg2N2Nl NTFlZGIwHhcNMjYwMTAxMTQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWNiMTQ2OWFhMGE0NGY1MDFjYTU1NzVmODU2ZTRkMDMxNWYzN2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19qLwlAZDk+N2Rde5hQFDXISPhlF bT1EHWRaBvcm/uSPa8xON1cZ2N+SxPk4FfYnzZnD7GO3VLhlgTukVuX0BTbh+YrI bFz8LZBMST2VEWxVtCh8px3OfIREAu1TfXQXWAO8lvxeKFS3Y1zcgU8W3jNdCfL8 zbvxo6rx3Kb4C67CMm7rAl0Hat298fdvxyy9JoHn19ComN4r3Hs72k/ywKU1M21Z /iWsMMFpGMB8jWVjX0vg1MjLdtS4SRSJD1wqZsgdSCiitDOcGsZh77vGUn05XD5Q 11SVJpHpy2X/WIQ50ZYOMlRWHgfNFqNXzIeBnIz7O8x+BKN4nwjH5gmyEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEHLFGmqCkT1AcpVdfhW5NAxXzfNMB8GA1UdIwQY MBaAFDnQHoygr+QUwVfh+/tTlIZ85R7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2RBZWpLQ3Y1QlRCVi1INy0xT1VobnpsSHRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hOTdjN2QtYmNjNy00ZmI1LTg2ZTIt MmU2MjQ2YzIxOWY3LzEvUWNzVWFhb0tSUFVCeWxWMS1GYmswREZmTjgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9hOTdjN2QtYmNjNy00ZmI1LTg2ZTItMmU2MjQ2YzIxOWY3 LzEvT2RBZWpLQ3Y1QlRCVi1INy0xT1VobnpsSHRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwozDMA0G CSqGSIb3DQEBCwUAA4IBAQAEWtyK1hmMmzu2Ip2RGWjMC/SC599JCRHWB29csiL7 2foPJ9zW5RL60f+Pg+lAtU8JEpSoEawyJJsWDNxI1WZ9tIuLmQvgwILSBvsovrIQ MLthpoe7l0BZVjO0s4o+LKPcPib0kcmEyGx+OKi9N4H1AsDgY4o5z+ZYQaRAlT4L 2r0KunCUVF1WWEVCsFrr4FHJqsOQ8UFPaLm4Y1o3laTSINBUU8f50g9BeTVYppJu oWrprCKikHQ5495KyA+MORTz4AWi1FADNRFxHvkkJsiqCO573O29rmQV8P+5nF2T BijJlgkrgNTmPk7KZRJyYKIreeJHLdA5ZZgTWGaopVd6 -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:45 2026 by rpki-client