This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/iQJQC_oWujo-15_GL75EM-stwEc.roa File: iQJQC_oWujo-15_GL75EM-stwEc.roa (raw, json) Hash identifier: VM81RK3ZU1AzMrmtbRjQdCVVrAt7gS8cQsTq2NJoc+w= Subject key identifier: 89:02:50:0B:FA:16:BA:3A:3E:D7:9F:C6:2F:BE:44:33:EB:2D:C0:47 Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350 Certificate serial: 019B7E3865528A4B0AFE5ECC5E961F272336 Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/iQJQC_oWujo-15_GL75EM-stwEc.roa Signing time: Fri 02 Jan 2026 10:19:43 +0000 ROA not before: Fri 02 Jan 2026 10:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55002 IP address blocks: 193.138.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 10:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:65:52:8a:4b:0a:fe:5e:cc:5e:96:1f:27:23:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350 Validity Not Before: Jan 2 10:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8902500bfa16ba3a3ed79fc62fbe4433eb2dc047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5e:65:a8:f6:d7:6b:4a:d1:bd:89:13:0e:a5: b0:a0:f8:bd:7d:a6:1b:fa:01:f9:56:24:fe:11:97: 25:01:81:69:41:34:26:eb:f9:46:ca:85:a2:6e:8e: 0c:20:8e:a8:63:df:8b:b8:4c:45:03:d9:b2:c8:b8: 61:25:ac:88:3d:b7:4e:ec:18:5f:9e:75:bc:b4:f3: 24:d8:3c:5d:01:87:40:bb:c5:12:2a:8b:2b:9c:f5: 41:46:61:a6:44:c4:72:a3:b9:cd:0d:02:d2:a0:32: ca:33:49:1b:14:fe:1f:19:37:52:d3:14:ef:8f:f0: 07:c6:4c:79:42:4e:08:46:4a:71:3b:df:e6:af:52: 74:36:27:0f:0f:24:82:2f:2e:43:bc:29:d5:33:90: 66:09:ed:1b:82:88:e4:dc:86:87:70:48:53:5f:ff: b5:d2:bd:90:a4:3b:82:bf:a9:a9:4c:82:d9:a1:c7: f6:2d:c9:b6:d6:64:df:06:d9:28:00:e1:a7:78:53: d2:38:74:63:2c:6a:02:f6:71:2c:3f:4f:44:bd:f6: d3:7b:83:28:a0:2f:aa:f9:18:e5:d4:d8:a4:f0:01: 01:03:66:2e:ba:23:f4:36:72:ad:b8:db:25:77:8a: af:7b:d9:64:f7:08:d4:31:bc:68:81:cf:d4:44:6d: fe:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:02:50:0B:FA:16:BA:3A:3E:D7:9F:C6:2F:BE:44:33:EB:2D:C0:47 X509v3 Authority Key Identifier: keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/iQJQC_oWujo-15_GL75EM-stwEc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.103.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:45:40:dd:c2:6d:42:b6:9d:20:d1:4f:fb:02:a3:48:1a:40: 29:0f:ab:a7:48:0c:c2:bf:d4:fe:37:65:59:64:4b:41:d0:e2: 1c:71:2d:b2:15:ad:73:9e:cc:71:a6:55:b6:60:f1:ec:6c:cf: b2:3c:d0:43:c7:87:57:8a:af:bc:c3:f9:44:3b:ee:7f:18:7c: 08:33:37:8c:bf:8c:81:75:ea:5d:a9:4d:89:36:f5:7b:f3:67: 7f:26:f3:34:4c:82:0a:55:72:ba:55:8b:4b:9f:34:9c:2b:45: c4:6f:dc:e9:26:ce:30:b3:4d:d5:1f:fa:d8:da:26:31:7c:e6: e5:14:50:11:1f:55:6a:71:18:ba:c8:81:25:9a:7f:e9:18:b9: 4a:a7:fd:f8:7c:dd:a4:9a:8d:24:00:6e:13:e9:2a:fd:94:4f: f0:46:a3:b0:3e:45:c4:9e:41:ee:f4:49:e5:ad:e9:83:ec:af: 68:ea:06:72:9e:fe:de:f4:ab:e5:2a:fb:b0:e7:60:04:04:13: 1c:c3:c6:91:1c:87:7c:6e:50:52:72:2e:4d:61:98:a2:4c:30: 5e:1d:be:66:1d:53:10:dc:7b:6f:06:1f:79:55:02:6e:68:20: 45:e9:20:bf:c3:7f:40:93:84:e2:71:90:ee:fd:86:a6:78:bd: 1e:35:d9:0d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OGVSiksK/l7MXpYfJyM2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4OWRmNTYyNDhmOTc3N2ZhMjJkNWRhNmMwNGI1ZmIzMzJh NGIzNTAwHhcNMjYwMTAyMTAxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTAyNTAwYmZhMTZiYTNhM2VkNzlmYzYyZmJlNDQzM2ViMmRjMDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2V5lqPbXa0rRvYkTDqWwoPi9faYb +gH5ViT+EZclAYFpQTQm6/lGyoWibo4MII6oY9+LuExFA9myyLhhJayIPbdO7Bhf nnW8tPMk2DxdAYdAu8USKosrnPVBRmGmRMRyo7nNDQLSoDLKM0kbFP4fGTdS0xTv j/AHxkx5Qk4IRkpxO9/mr1J0NicPDySCLy5DvCnVM5BmCe0bgojk3IaHcEhTX/+1 0r2QpDuCv6mpTILZocf2Lcm21mTfBtkoAOGneFPSOHRjLGoC9nEsP09EvfbTe4Mo oC+q+Rjl1Nik8AEBA2YuuiP0NnKtuNsld4qve9lk9wjUMbxogc/URG3+2QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIkCUAv6Fro6Ptefxi++RDPrLcBHMB8GA1UdIwQY MBaAFPid9WJI+Xd/oi1dpsBLX7MypLNQMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1KMzFZa2o1ZDMtaUxWMm13RXRmc3pLa3MxQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvZDQ2ZDI1LTVkOGYtNDk4OS1iNTU3 LWMxNmJhZWRmNmZhNi8xL2lRSlFDX29XdWpvLTE1X0dMNzVFTS1zdHdFYy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzUvZDQ2ZDI1LTVkOGYtNDk4OS1iNTU3LWMxNmJhZWRmNmZh Ni8xLzEtSjMxWWtqNWQzLWlMVjJtd0V0ZnN6S2tzMUEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBimcw DQYJKoZIhvcNAQELBQADggEBAC9FQN3CbUK2nSDRT/sCo0gaQCkPq6dIDMK/1P43 ZVlkS0HQ4hxxLbIVrXOezHGmVbZg8exsz7I80EPHh1eKr7zD+UQ77n8YfAgzN4y/ jIF16l2pTYk29XvzZ38m8zRMggpVcrpVi0ufNJwrRcRv3OkmzjCzTdUf+tjaJjF8 5uUUUBEfVWpxGLrIgSWaf+kYuUqn/fh83aSajSQAbhPpKv2UT/BGo7A+RcSeQe70 SeWt6YPsr2jqBnKe/t70q+Uq+7DnYAQEExzDxpEch3xuUFJyLk1hmKJMMF4dvmYd UxDce28GH3lVAm5oIEXpIL/Df0CThOJxkO79hqZ4vR412Q0= -----END CERTIFICATE-----Generated at Tue Jan 20 14:13:48 2026 by rpki-client