This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/q5vkBztqDzOMRCIn2mg0QuH_Kpc.roa File: q5vkBztqDzOMRCIn2mg0QuH_Kpc.roa (raw, json) Hash identifier: oUGB2gmzFz75rfBeAM8R+EK2E4npfGKHEvxBhID42RU= Subject key identifier: AB:9B:E4:07:3B:6A:0F:33:8C:44:22:27:DA:68:34:42:E1:FF:2A:97 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1CD91C9A31477032806198E569686 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/q5vkBztqDzOMRCIn2mg0QuH_Kpc.roa Signing time: Fri 02 Jan 2026 18:21:51 +0000 ROA not before: Fri 02 Jan 2026 18:21:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213702 IP address blocks: 80.253.249.0/24 maxlen: 24 84.21.189.0/24 maxlen: 24 85.209.129.0/24 maxlen: 24 195.66.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:cd:91:c9:a3:14:77:03:28:06:19:8e:56:96:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab9be4073b6a0f338c442227da683442e1ff2a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:93:01:81:41:d3:b4:1a:77:82:60:8a:fc:2e: e6:a0:2b:4b:46:49:d4:51:39:30:cf:d7:27:f9:97: e0:d9:34:f3:22:e6:2c:c1:10:12:6c:63:6e:8d:f1: 53:13:06:1a:4c:84:0b:56:56:1c:79:6c:77:bb:51: 11:42:ce:1a:64:da:eb:c1:3f:17:62:a2:0f:c1:cf: ea:f6:8b:73:03:38:af:6b:7e:d4:b1:25:82:ce:da: e2:38:a2:4d:27:e5:38:62:19:11:9a:f2:45:0e:b6: a6:e2:70:94:40:7c:68:f9:fd:eb:4f:23:ca:3e:7f: 17:a7:bd:5a:d9:9b:b2:47:7d:d1:57:e7:ba:c0:23: 6f:4f:d5:b4:98:9c:67:67:ac:61:d5:f4:8e:06:d6: 83:f5:1f:ad:5d:03:87:3c:9f:b9:f2:53:93:b4:4e: f2:85:73:fa:f3:01:8f:3e:d1:b2:eb:39:a7:f0:fc: 08:31:b7:d4:4f:a8:b1:64:77:94:2e:a1:f5:f2:26: 99:d4:11:02:8f:59:59:82:bf:fb:e0:0a:3d:35:fc: b6:66:9c:88:2e:88:69:be:b3:66:b1:d5:e4:b1:92: 1d:b1:29:2d:86:3b:c8:39:90:f4:56:34:6f:f1:fd: 70:06:d2:0a:b8:5a:e2:be:2c:1e:16:c2:6f:26:e7: 3d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9B:E4:07:3B:6A:0F:33:8C:44:22:27:DA:68:34:42:E1:FF:2A:97 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/q5vkBztqDzOMRCIn2mg0QuH_Kpc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.253.249.0/24 84.21.189.0/24 85.209.129.0/24 195.66.27.0/24 Signature Algorithm: sha256WithRSAEncryption cf:61:a6:4f:a3:21:30:7f:72:16:09:a3:8d:97:4e:39:8f:1f: 98:71:59:45:d2:5e:96:36:b6:1c:f4:05:b0:81:cd:0d:97:11: db:41:82:3c:1c:be:d4:88:77:ea:f1:ca:8e:80:f8:ed:e4:ba: 76:af:cc:be:47:35:31:7f:8d:64:03:ce:04:24:76:ce:3f:93: 91:3a:28:c5:9b:ce:c6:2e:17:65:c8:55:c6:3c:a6:38:f5:f6: 33:35:31:b4:b7:5c:a7:27:7f:f0:f0:1a:ea:f6:43:76:bb:ee: 7d:91:7a:40:7e:ac:bd:70:79:95:b2:a3:25:e0:a1:a9:95:e5: b2:c0:42:e4:e6:e4:f8:19:ff:3b:0a:4e:14:9b:10:fa:b2:56: fe:53:c1:93:f2:4a:69:61:db:d7:1f:78:f0:cf:ba:be:53:fc: 6b:69:3d:63:1d:c7:b0:d7:01:d9:e1:1b:f2:d3:a2:2b:00:31: 23:52:fb:63:82:da:76:98:4c:8d:63:1d:f9:79:47:ee:e9:25: 63:19:0e:38:08:c6:27:4b:ad:b5:f7:51:cf:7d:61:81:00:53: b1:62:ce:19:0e:9c:ee:85:fe:f1:f4:d5:19:97:18:c3:60:ea: 74:7c:b1:9f:b8:96:b0:ea:4f:3c:d1:91:64:69:7b:e2:24:e7: c9:db:68:28 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/8c2RyaMUdwMoBhmOVpaGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjliZTQwNzNiNmEwZjMzOGM0NDIyMjdkYTY4MzQ0MmUxZmYyYTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZMBgUHTtBp3gmCK/C7moCtLRknU UTkwz9cn+Zfg2TTzIuYswRASbGNujfFTEwYaTIQLVlYceWx3u1ERQs4aZNrrwT8X YqIPwc/q9otzAziva37UsSWCztriOKJNJ+U4YhkRmvJFDram4nCUQHxo+f3rTyPK Pn8Xp71a2ZuyR33RV+e6wCNvT9W0mJxnZ6xh1fSOBtaD9R+tXQOHPJ+58lOTtE7y hXP68wGPPtGy6zmn8PwIMbfUT6ixZHeULqH18iaZ1BECj1lZgr/74Ao9Nfy2ZpyI LohpvrNmsdXksZIdsSkthjvIOZD0VjRv8f1wBtIKuFriviweFsJvJuc9IQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKub5Ac7ag8zjEQiJ9poNELh/yqXMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvcTV2a0J6dHFEek9NUkNJbjJtZzBRdUhfS3BjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUP35AwQA VBW9AwQAVdGBAwQAw0IbMA0GCSqGSIb3DQEBCwUAA4IBAQDPYaZPoyEwf3IWCaON l045jx+YcVlF0l6WNrYc9AWwgc0NlxHbQYI8HL7UiHfq8cqOgPjt5Lp2r8y+RzUx f41kA84EJHbOP5OROijFm87GLhdlyFXGPKY49fYzNTG0t1ynJ3/w8Brq9kN2u+59 kXpAfqy9cHmVsqMl4KGpleWywELk5uT4Gf87Ck4UmxD6slb+U8GT8kppYdvXH3jw z7q+U/xraT1jHcew1wHZ4Rvy06IrADEjUvtjgtp2mEyNYx35eUfu6SVjGQ44CMYn S62191HPfWGBAFOxYs4ZDpzuhf7x9NUZlxjDYOp0fLGfuJaw6k880ZFkaXviJOfJ 22go -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:37 2026 by rpki-client