This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/q_r4ijQpjXZ8n9KPTw-0C5wgwwQ.roa File: q_r4ijQpjXZ8n9KPTw-0C5wgwwQ.roa (raw, json) Hash identifier: zq7FtPgWzADBU+GCudKPhOXhQRXlPBFiAI7EZtoOa+g= Subject key identifier: AB:FA:F8:8A:34:29:8D:76:7C:9F:D2:8F:4F:0F:B4:0B:9C:20:C3:04 Certificate issuer: /CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec Certificate serial: 019B7E3935D9B9370C58849E20F46EE1C4B2 Authority key identifier: 3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/q_r4ijQpjXZ8n9KPTw-0C5wgwwQ.roa Signing time: Fri 02 Jan 2026 10:20:37 +0000 ROA not before: Fri 02 Jan 2026 10:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 195.238.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:35:d9:b9:37:0c:58:84:9e:20:f4:6e:e1:c4:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec Validity Not Before: Jan 2 10:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abfaf88a34298d767c9fd28f4f0fb40b9c20c304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9e:b9:b0:15:b1:2e:75:f7:8b:da:f7:e3:2f: 17:b3:16:8e:92:28:c1:54:39:c1:8c:ee:8b:18:61: a3:f9:3a:54:a8:2a:53:a4:e7:e1:8f:22:a3:38:3a: 7a:1d:e1:58:ef:57:30:d5:c5:4c:e7:e4:3a:02:25: 4f:a3:37:92:89:6c:01:40:cd:62:71:0b:60:ad:fd: bf:79:6c:5c:8a:07:ce:30:2e:ec:d1:9b:35:3b:46: bb:f8:63:c8:87:cb:54:fb:64:64:1c:6c:29:82:e2: 25:67:3c:02:83:59:e3:5f:2c:42:c0:e3:cb:e4:63: 5d:0a:cd:fd:3b:67:47:71:2a:94:12:dd:1e:65:b8: e7:22:33:a6:92:27:6f:1f:71:fd:2e:c5:05:04:ce: f6:ca:4d:15:4e:68:0e:e4:43:13:5e:84:46:21:57: 18:fc:2c:de:49:5d:bd:0c:a2:0b:2c:b7:8b:4b:d4: b7:ce:64:85:1e:f4:09:7f:ca:e9:19:a8:89:69:89: 8e:06:bd:65:b0:b9:6b:1c:cf:6d:66:8f:44:01:dc: b6:3c:c8:92:10:6e:a9:03:44:3d:ab:d7:46:e3:e0: c0:0d:54:94:ac:09:e5:5d:87:15:bb:84:ed:0d:9b: 24:2a:f8:a5:75:5f:5e:9c:6f:c9:2c:7d:a4:bb:fc: f6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FA:F8:8A:34:29:8D:76:7C:9F:D2:8F:4F:0F:B4:0B:9C:20:C3:04 X509v3 Authority Key Identifier: keyid:3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/q_r4ijQpjXZ8n9KPTw-0C5wgwwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.238.128.0/20 Signature Algorithm: sha256WithRSAEncryption a9:d4:6f:a6:41:f8:86:de:4d:3e:93:da:1d:0d:f8:cf:c9:3f: 84:42:64:ec:a2:78:75:43:7b:80:0d:64:3f:56:69:39:4c:54: d7:92:4e:01:62:26:2b:87:fc:ac:76:c5:bc:66:fc:fe:29:aa: 7f:a4:c2:25:df:dd:2d:cb:67:f9:96:4d:f8:9f:27:f5:09:d5: a5:79:f4:59:58:a6:4f:a5:c5:2e:e8:74:78:4f:09:e8:d5:ed: ce:8d:1b:25:0e:04:bf:fd:f8:b9:4c:a0:52:04:54:3d:89:a6: e3:72:c3:68:21:5e:13:a3:14:b2:3b:88:2a:62:71:5a:2d:53: 65:c1:21:8c:ab:e1:a7:91:d3:eb:4b:8e:67:cc:da:38:09:6d: 48:1f:98:98:2e:a3:58:c9:0b:32:d7:14:94:67:e2:c6:ca:7b: 60:dc:67:01:95:85:93:17:43:94:ee:fd:8a:44:08:25:d5:85: 0f:01:13:f1:fb:aa:07:3e:76:18:b1:11:55:dd:35:6a:ee:60: f1:96:97:c0:7e:7a:e8:76:a7:f5:3f:38:83:0d:92:fc:83:fd: 20:6d:88:9e:32:52:8a:91:d7:b7:dd:8f:1a:db:e8:9b:a9:58: 1b:da:ea:1e:ec:ef:e3:cd:2f:83:4c:ea:d3:e0:38:d5:42:bc: 60:1a:2d:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OTXZuTcMWISeIPRu4cSyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZjhhNDBjNmEyYzY5OTNjOWZiZTgxZGYzZWE3ZGQzNzJm OTZkZWMwHhcNMjYwMTAyMTAyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmZhZjg4YTM0Mjk4ZDc2N2M5ZmQyOGY0ZjBmYjQwYjljMjBjMzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ65sBWxLnX3i9r34y8XsxaOkijB VDnBjO6LGGGj+TpUqCpTpOfhjyKjODp6HeFY71cw1cVM5+Q6AiVPozeSiWwBQM1i cQtgrf2/eWxcigfOMC7s0Zs1O0a7+GPIh8tU+2RkHGwpguIlZzwCg1njXyxCwOPL 5GNdCs39O2dHcSqUEt0eZbjnIjOmkidvH3H9LsUFBM72yk0VTmgO5EMTXoRGIVcY /CzeSV29DKILLLeLS9S3zmSFHvQJf8rpGaiJaYmOBr1lsLlrHM9tZo9EAdy2PMiS EG6pA0Q9q9dG4+DADVSUrAnlXYcVu4TtDZskKvildV9enG/JLH2ku/z2HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKv6+Io0KY12fJ/Sj08PtAucIMMEMB8GA1UdIwQY MBaAFD34pAxqLGmTyfvoHfPqfdNy+W3sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGZpa0RHb3NhWlBKLS1nZDgtcDkwM0w1YmV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zZTY2ODctN2E0NC00MGQ4LTk5M2Yt ODk1YTVhMzkyNDM4LzEvcV9yNGlqUXBqWFo4bjlLUFR3LTBDNXdnd3dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8zZTY2ODctN2E0NC00MGQ4LTk5M2YtODk1YTVhMzkyNDM4 LzEvUGZpa0RHb3NhWlBKLS1nZDgtcDkwM0w1YmV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEw+6AMA0G CSqGSIb3DQEBCwUAA4IBAQCp1G+mQfiG3k0+k9odDfjPyT+EQmTsonh1Q3uADWQ/ Vmk5TFTXkk4BYiYrh/ysdsW8Zvz+Kap/pMIl390ty2f5lk34nyf1CdWlefRZWKZP pcUu6HR4Twno1e3OjRslDgS//fi5TKBSBFQ9iabjcsNoIV4ToxSyO4gqYnFaLVNl wSGMq+GnkdPrS45nzNo4CW1IH5iYLqNYyQsy1xSUZ+LGyntg3GcBlYWTF0OU7v2K RAgl1YUPARPx+6oHPnYYsRFV3TVq7mDxlpfAfnrodqf1PziDDZL8g/0gbYieMlKK kde33Y8a2+ibqVgb2uoe7O/jzS+DTOrT4DjVQrxgGi0z -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:46 2026 by rpki-client