This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/l-QyBKePUGvgwvLYQ39xVIrG-Xc.roa File: l-QyBKePUGvgwvLYQ39xVIrG-Xc.roa (raw, json) Hash identifier: BEyQW94VrHgV1DUmSXCji9F0XD6RgtTzxouMSqJBF3I= Subject key identifier: 97:E4:32:04:A7:8F:50:6B:E0:C2:F2:D8:43:7F:71:54:8A:C6:F9:77 Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666 Certificate serial: 019B7A5B163050A2E43C2A25544351069A10 Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/l-QyBKePUGvgwvLYQ39xVIrG-Xc.roa Signing time: Thu 01 Jan 2026 16:19:08 +0000 ROA not before: Thu 01 Jan 2026 16:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.188.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:16:30:50:a2:e4:3c:2a:25:54:43:51:06:9a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666 Validity Not Before: Jan 1 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97e43204a78f506be0c2f2d8437f71548ac6f977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e8:1d:5d:80:96:f8:05:ce:14:40:7a:e0:d1: 89:53:89:28:c9:6f:0e:34:40:52:49:38:73:76:37: 11:84:ef:7b:be:94:68:42:7c:e7:04:f0:74:9c:61: 40:85:33:2f:a4:bd:ff:09:64:c6:3a:8f:5a:7c:a0: 34:86:51:c5:c9:8f:e5:be:9b:87:b5:47:44:e7:1b: 2b:59:4c:be:12:b7:10:68:52:dc:eb:ae:11:88:18: b6:eb:ce:b7:91:a6:fe:06:3f:6f:d0:f0:c3:07:c2: ff:24:85:47:b7:28:df:02:65:66:2c:82:59:1e:7c: 4f:ae:e9:a2:ab:a5:a7:c8:77:ab:9d:8c:4a:82:b4: 8c:a1:a5:c2:cf:e9:aa:b5:ff:e9:fe:d6:31:06:61: 7c:6e:2b:4c:8a:46:92:6d:00:3f:9c:1d:3d:88:29: 89:49:ec:b2:7a:51:bd:88:c1:04:b6:14:63:45:3c: 9b:90:60:fe:5f:a0:2d:f3:d0:21:28:42:80:91:2a: 72:94:a4:50:4f:b7:dd:eb:bb:c8:e6:ed:f2:57:17: 1c:20:9a:20:9a:fa:45:22:24:51:77:74:28:a0:63: 53:6b:42:77:e9:20:b6:0e:a8:4b:47:7c:8e:9f:b7: 0e:11:0e:45:5b:cf:bb:00:e8:cb:b7:5a:58:b2:72: 3f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E4:32:04:A7:8F:50:6B:E0:C2:F2:D8:43:7F:71:54:8A:C6:F9:77 X509v3 Authority Key Identifier: keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/l-QyBKePUGvgwvLYQ39xVIrG-Xc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.93.0/24 Signature Algorithm: sha256WithRSAEncryption 19:87:1f:93:6a:a1:03:8f:09:7d:a2:06:a6:8d:4a:0f:ef:6f: 53:ec:b0:00:18:39:ad:3f:07:24:28:e4:25:8a:87:7a:e5:64: 99:22:dc:f5:a6:57:7d:b8:e7:37:7e:7e:b6:c3:63:54:d5:a5: 87:64:ce:50:28:a8:f0:f2:81:24:e8:24:06:98:b8:b7:d8:db: 24:c0:f1:0f:b4:a1:a4:c0:b8:fd:dd:61:2e:5e:84:88:15:76: 3f:a5:6f:f6:06:c3:42:38:66:8c:0e:30:89:41:3c:94:d6:51: d4:7e:a1:fd:24:3c:1c:cc:30:da:78:c5:85:57:b3:cc:71:bd: c9:75:6d:37:ee:c2:6f:bb:d1:3b:8d:91:bb:f2:e9:05:23:48: 40:f5:fd:08:b5:67:98:66:63:61:ab:3f:54:83:c4:04:8d:d6: 61:c4:b5:5a:70:02:73:93:f6:6d:62:17:45:b1:bb:a8:b2:dc: fa:33:06:5b:86:2c:63:ef:18:12:76:9e:a9:2c:b3:b1:e0:7e: 05:27:c6:94:99:55:a8:86:7c:54:c3:2b:6b:95:26:8e:db:5e: 29:34:20:aa:b8:79:73:4c:d2:6e:4d:d7:f4:a5:47:d1:e5:1d: ba:c8:77:01:b3:e9:28:d5:77:4b:d2:19:be:a0:fb:9a:6e:55: 78:5f:7e:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WxYwUKLkPColVENRBpoQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZTVlYzlkZjRkZDAzYjlmNTAwYTZhMDk0N2QxNDdiNmVk MjE2NjYwHhcNMjYwMTAxMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2U0MzIwNGE3OGY1MDZiZTBjMmYyZDg0MzdmNzE1NDhhYzZmOTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OgdXYCW+AXOFEB64NGJU4koyW8O NEBSSThzdjcRhO97vpRoQnznBPB0nGFAhTMvpL3/CWTGOo9afKA0hlHFyY/lvpuH tUdE5xsrWUy+ErcQaFLc664RiBi26863kab+Bj9v0PDDB8L/JIVHtyjfAmVmLIJZ HnxPrumiq6WnyHernYxKgrSMoaXCz+mqtf/p/tYxBmF8bitMikaSbQA/nB09iCmJ SeyyelG9iMEEthRjRTybkGD+X6At89AhKEKAkSpylKRQT7fd67vI5u3yVxccIJog mvpFIiRRd3QooGNTa0J36SC2DqhLR3yOn7cOEQ5FW8+7AOjLt1pYsnI/gwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJfkMgSnj1Br4MLy2EN/cVSKxvl3MB8GA1UdIwQY MBaAFGLl7J303QO59QCmoJR9FHtu0hZmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hN2NlMDMtMWYxNS00ZGJjLTlhOGQt YTgxNTQ0ZWE1YjY3LzEvbC1ReUJLZVBVR3Znd3ZMWVEzOXhWSXJHLVhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hN2NlMDMtMWYxNS00ZGJjLTlhOGQtYTgxNTQ0ZWE1YjY3 LzEvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubxdMA0G CSqGSIb3DQEBCwUAA4IBAQAZhx+TaqEDjwl9ogamjUoP729T7LAAGDmtPwckKOQl iod65WSZItz1pld9uOc3fn62w2NU1aWHZM5QKKjw8oEk6CQGmLi32NskwPEPtKGk wLj93WEuXoSIFXY/pW/2BsNCOGaMDjCJQTyU1lHUfqH9JDwczDDaeMWFV7PMcb3J dW037sJvu9E7jZG78ukFI0hA9f0ItWeYZmNhqz9Ug8QEjdZhxLVacAJzk/ZtYhdF sbuostz6MwZbhixj7xgSdp6pLLOx4H4FJ8aUmVWohnxUwytrlSaO214pNCCquHlz TNJuTdf0pUfR5R26yHcBs+ko1XdL0hm+oPuablV4X35o -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:36 2026 by rpki-client