This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/q-N4SkxuSPlKg7X5WqFUQAnFD7s.roa File: q-N4SkxuSPlKg7X5WqFUQAnFD7s.roa (raw, json) Hash identifier: GLAdjtugl2x3FM2Zba5Eclt3UAYEj3C31Itsrx0oxUA= Subject key identifier: AB:E3:78:4A:4C:6E:48:F9:4A:83:B5:F9:5A:A1:54:40:09:C5:0F:BB Certificate issuer: /CN=6765a21b561ba8665cf79fbf44c31959de28f216 Certificate serial: 019B7BA34ECC4943CECB53484F61EDC92EA1 Authority key identifier: 67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/q-N4SkxuSPlKg7X5WqFUQAnFD7s.roa Signing time: Thu 01 Jan 2026 22:17:38 +0000 ROA not before: Thu 01 Jan 2026 22:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199476 IP address blocks: 194.39.244.0/24 maxlen: 24 2a13:9d80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:4e:cc:49:43:ce:cb:53:48:4f:61:ed:c9:2e:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6765a21b561ba8665cf79fbf44c31959de28f216 Validity Not Before: Jan 1 22:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abe3784a4c6e48f94a83b5f95aa1544009c50fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0d:52:04:2e:c6:20:d4:63:8b:07:8c:63:7e: c2:f8:51:df:f3:1c:fe:76:38:5b:12:d9:78:71:85: 06:d5:60:3b:f1:ad:6c:3a:12:28:12:43:b0:8c:1f: 1d:61:7c:44:5f:93:16:cc:f4:9a:98:c1:67:6f:36: 9f:f9:9c:4c:82:b2:fa:07:39:db:67:0a:3a:5b:16: 2b:e8:01:14:7c:30:70:64:cd:df:5d:41:6b:74:03: e7:56:61:a5:19:46:00:21:c1:b4:75:d5:37:93:35: 83:7b:e2:68:0f:90:cb:7a:9f:01:78:0d:5b:3e:2c: e2:be:05:9a:bb:7b:60:2a:b7:14:4d:c6:76:f3:1a: 6f:79:62:3e:1d:27:6b:f6:22:44:87:0d:10:c3:1d: af:5b:f7:7f:8d:2e:0f:c4:fb:c2:e1:65:91:67:c9: a2:ec:e0:07:ab:9d:63:1a:9f:ba:9a:3d:0a:18:c0: a8:a8:2d:3e:08:5d:cf:93:25:5d:c5:2e:71:2f:f3: b2:0a:65:59:da:12:d2:a3:84:02:4d:46:7a:6a:44: 11:c2:fa:29:e9:44:d5:e6:9b:85:67:8b:b6:04:5c: 9a:7a:64:ca:25:16:62:a8:a6:b1:5b:49:4d:d8:b9: 9c:42:83:2e:ae:49:b8:5d:b8:fb:41:a2:2a:46:28: fc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E3:78:4A:4C:6E:48:F9:4A:83:B5:F9:5A:A1:54:40:09:C5:0F:BB X509v3 Authority Key Identifier: keyid:67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/q-N4SkxuSPlKg7X5WqFUQAnFD7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.39.244.0/24 IPv6: 2a13:9d80::/32 Signature Algorithm: sha256WithRSAEncryption 1b:9e:bc:98:8b:e6:b1:19:9a:79:1b:f9:c4:11:5c:90:06:49: c4:24:b3:4a:ca:61:6a:35:79:68:0b:d2:a6:d7:1e:d2:6b:64: 36:69:ce:86:b1:bc:d9:06:ef:6c:d3:f4:eb:d1:33:1f:1a:bd: e6:76:48:b5:6f:db:03:5a:40:c6:85:e3:f3:1d:c1:d5:63:ac: ef:44:fd:4c:52:31:10:db:ed:cd:34:25:4d:c9:97:56:8e:59: c3:2f:3c:3e:c9:e4:d6:66:c8:b7:2e:35:e7:7c:45:66:b5:c4: c1:75:21:8a:dd:50:15:39:4e:58:18:84:e8:89:07:0b:4e:78: e1:bb:6c:2c:81:19:1f:45:15:6b:89:2d:a0:5b:7e:88:ed:3b: 5f:8b:6a:fb:90:78:99:f4:8f:fd:f6:42:23:1b:f8:97:8a:df: c5:26:bd:40:13:7d:37:3b:00:2f:d7:46:2f:96:22:bc:e7:26: ae:c4:d0:d1:24:87:a0:8c:ce:7b:4a:fd:3a:ae:c1:bf:e9:d4: 68:df:ef:8c:4d:af:99:6a:b1:d4:36:c5:ed:87:0b:a6:41:e0: c1:6a:8b:9c:f0:9e:d9:37:5a:af:c1:65:12:8c:5f:e6:f0:48: e0:ad:e6:14:ff:d2:97:38:4a:b3:5e:8a:5e:25:85:6d:aa:fb: aa:8e:2e:b4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7o07MSUPOy1NIT2HtyS6hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NjVhMjFiNTYxYmE4NjY1Y2Y3OWZiZjQ0YzMxOTU5ZGUy OGYyMTYwHhcNMjYwMTAxMjIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmUzNzg0YTRjNmU0OGY5NGE4M2I1Zjk1YWExNTQ0MDA5YzUwZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Q1SBC7GINRjiweMY37C+FHf8xz+ djhbEtl4cYUG1WA78a1sOhIoEkOwjB8dYXxEX5MWzPSamMFnbzaf+ZxMgrL6Bznb Zwo6WxYr6AEUfDBwZM3fXUFrdAPnVmGlGUYAIcG0ddU3kzWDe+JoD5DLep8BeA1b PizivgWau3tgKrcUTcZ28xpveWI+HSdr9iJEhw0Qwx2vW/d/jS4PxPvC4WWRZ8mi 7OAHq51jGp+6mj0KGMCoqC0+CF3PkyVdxS5xL/OyCmVZ2hLSo4QCTUZ6akQRwvop 6UTV5puFZ4u2BFyaemTKJRZiqKaxW0lN2LmcQoMurkm4Xbj7QaIqRij8QwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKvjeEpMbkj5SoO1+VqhVEAJxQ+7MB8GA1UdIwQY MBaAFGdlohtWG6hmXPefv0TDGVneKPIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjJXaUcxWWJxR1pjOTUtX1JNTVpXZDRvOGhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lOGI4OWMtODI2OC00MDJiLWFhMjYt ZWFkMDQxNzc0ZTA3LzEvcS1ONFNreHVTUGxLZzdYNVdxRlVRQW5GRDdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lOGI4OWMtODI2OC00MDJiLWFhMjYtZWFkMDQxNzc0ZTA3 LzEvWjJXaUcxWWJxR1pjOTUtX1JNTVpXZDRvOGhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwif0MA0E AgACMAcDBQAqE52AMA0GCSqGSIb3DQEBCwUAA4IBAQAbnryYi+axGZp5G/nEEVyQ BknEJLNKymFqNXloC9Km1x7Sa2Q2ac6GsbzZBu9s0/Tr0TMfGr3mdki1b9sDWkDG hePzHcHVY6zvRP1MUjEQ2+3NNCVNyZdWjlnDLzw+yeTWZsi3LjXnfEVmtcTBdSGK 3VAVOU5YGIToiQcLTnjhu2wsgRkfRRVriS2gW36I7Ttfi2r7kHiZ9I/99kIjG/iX it/FJr1AE303OwAv10YvliK85yauxNDRJIegjM57Sv06rsG/6dRo3++MTa+ZarHU NsXthwumQeDBaouc8J7ZN1qvwWUSjF/m8EjgreYU/9KXOEqzXopeJYVtqvuqji60 -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:10 2026 by rpki-client