This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/RQkXmpWajYBXor9So-wL840KNkQ.roa File: RQkXmpWajYBXor9So-wL840KNkQ.roa (raw, json) Hash identifier: X3j2x3fF0ht1rXuyx9TYCfG+9AORrgkuoTZ6MublhHE= Subject key identifier: 45:09:17:9A:95:9A:8D:80:57:A2:BF:52:A3:EC:0B:F3:8D:0A:36:44 Certificate issuer: /CN=99252ff7f4dcf62234d22f86a1135b344923daab Certificate serial: 019B7C126C15866796FF7F1E394589509BBE Authority key identifier: 99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/RQkXmpWajYBXor9So-wL840KNkQ.roa Signing time: Fri 02 Jan 2026 00:19:00 +0000 ROA not before: Fri 02 Jan 2026 00:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209538 IP address blocks: 193.107.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6c:15:86:67:96:ff:7f:1e:39:45:89:50:9b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99252ff7f4dcf62234d22f86a1135b344923daab Validity Not Before: Jan 2 00:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4509179a959a8d8057a2bf52a3ec0bf38d0a3644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:13:3e:9e:51:52:d8:da:5c:62:22:4b:cd: c0:ec:5c:98:e4:c9:66:18:2e:9a:4d:79:ea:9c:12: d4:40:be:e8:3a:74:f3:b0:42:7d:f7:44:e0:f5:96: 8d:52:7b:b3:41:81:d1:e5:97:bb:fe:63:5b:0b:c1: ae:f6:33:05:1b:69:70:7a:e7:c7:9b:da:7c:54:f0: 71:5f:c8:b6:b1:c2:2f:aa:c7:bf:5f:19:0e:cc:0c: 95:39:1c:e7:97:c8:47:2b:0c:5d:fa:4b:de:93:34: b0:e1:48:ee:69:09:db:ab:4a:5a:28:19:85:b8:ab: ff:83:10:49:89:c0:f0:62:bb:3e:1b:0d:45:2b:e1: 9c:e3:de:05:73:23:f2:e5:66:83:71:d4:db:89:5f: b0:a6:96:f3:38:4b:2d:0b:de:42:02:dc:73:80:f0: 37:dc:43:31:40:41:c1:fa:ca:1f:b6:b1:77:d6:2d: ec:16:dc:8d:5a:a9:43:fb:30:46:97:39:b6:9e:19: 3a:9e:72:d4:ef:f7:3d:1a:a7:eb:b6:99:f9:02:b1: b4:f7:e0:d8:16:5c:3b:59:00:1c:09:02:27:32:af: 01:2e:b5:0d:2b:04:10:e5:10:d6:a5:33:10:a3:71: af:2b:ba:d4:8c:af:23:ce:5d:b0:fe:91:6c:be:7f: 03:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:09:17:9A:95:9A:8D:80:57:A2:BF:52:A3:EC:0B:F3:8D:0A:36:44 X509v3 Authority Key Identifier: keyid:99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/RQkXmpWajYBXor9So-wL840KNkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.107.49.0/24 Signature Algorithm: sha256WithRSAEncryption a4:44:2a:6b:db:13:39:41:cf:7c:7a:ec:2a:de:ec:e9:73:b4: 9e:0d:33:19:58:fd:b4:e9:cb:46:34:b9:c1:bd:d9:59:47:0c: 0c:c8:c2:fd:0c:0d:46:c0:13:11:ce:58:59:12:1b:a7:a9:6c: 1e:15:be:f4:21:de:69:c8:56:7e:a0:d1:31:0b:09:9e:07:32: 62:c3:f8:2b:87:48:4a:6d:40:80:99:62:40:84:ef:94:10:65: 87:b3:29:e9:f0:eb:0a:f1:55:00:62:75:31:2c:22:59:1d:af: a1:66:f5:88:c7:63:25:03:54:4e:96:e3:fd:61:cd:6f:14:50: 8a:de:b0:f5:d6:e4:88:c5:a5:5f:af:da:67:30:21:e8:fa:fd: ba:6a:85:f8:e5:c3:66:5b:de:12:ad:70:33:05:55:b4:0d:fe: 39:0d:cf:6a:be:26:fd:83:d7:58:cb:a9:9a:d2:f0:f8:3a:1a: ac:38:69:4c:5e:b2:c2:4b:dc:b8:5d:3c:97:49:06:87:b3:19: bf:99:2d:7d:f2:98:58:a5:94:14:b2:46:84:11:cd:04:e9:61: 6d:e8:8f:32:13:3c:08:e4:3b:b0:d3:0f:b9:f8:a7:36:22:8c: fe:3f:42:99:45:ce:b1:ca:37:88:46:ee:27:aa:63:0c:37:6f: 87:31:80:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EmwVhmeW/38eOUWJUJu+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MjUyZmY3ZjRkY2Y2MjIzNGQyMmY4NmExMTM1YjM0NDky M2RhYWIwHhcNMjYwMTAyMDAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTA5MTc5YTk1OWE4ZDgwNTdhMmJmNTJhM2VjMGJmMzhkMGEzNjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdgTPp5RUtjaXGIiS83A7FyY5Mlm GC6aTXnqnBLUQL7oOnTzsEJ990Tg9ZaNUnuzQYHR5Ze7/mNbC8Gu9jMFG2lweufH m9p8VPBxX8i2scIvqse/XxkOzAyVORznl8hHKwxd+kvekzSw4UjuaQnbq0paKBmF uKv/gxBJicDwYrs+Gw1FK+Gc494FcyPy5WaDcdTbiV+wppbzOEstC95CAtxzgPA3 3EMxQEHB+softrF31i3sFtyNWqlD+zBGlzm2nhk6nnLU7/c9Gqfrtpn5ArG09+DY Flw7WQAcCQInMq8BLrUNKwQQ5RDWpTMQo3GvK7rUjK8jzl2w/pFsvn8DJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEUJF5qVmo2AV6K/UqPsC/ONCjZEMB8GA1UdIwQY MBaAFJklL/f03PYiNNIvhqETWzRJI9qrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVNVdjlfVGM5aUkwMGktR29STmJORWtqMnFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jOTIwZGEtMWRmOC00OTI3LTg4MzEt YWIwNjY0ZTYzZmI2LzEvUlFrWG1wV2FqWUJYb3I5U28td0w4NDBLTmtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9jOTIwZGEtMWRmOC00OTI3LTg4MzEtYWIwNjY0ZTYzZmI2 LzEvbVNVdjlfVGM5aUkwMGktR29STmJORWtqMnFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWsxMA0G CSqGSIb3DQEBCwUAA4IBAQCkRCpr2xM5Qc98euwq3uzpc7SeDTMZWP206ctGNLnB vdlZRwwMyML9DA1GwBMRzlhZEhunqWweFb70Id5pyFZ+oNExCwmeBzJiw/grh0hK bUCAmWJAhO+UEGWHsynp8OsK8VUAYnUxLCJZHa+hZvWIx2MlA1ROluP9Yc1vFFCK 3rD11uSIxaVfr9pnMCHo+v26aoX45cNmW94SrXAzBVW0Df45Dc9qvib9g9dYy6ma 0vD4OhqsOGlMXrLCS9y4XTyXSQaHsxm/mS198phYpZQUskaEEc0E6WFt6I8yEzwI 5Duw0w+5+Kc2Ioz+P0KZRc6xyjeIRu4nqmMMN2+HMYC8 -----END CERTIFICATE-----Generated at Mon Feb 9 22:28:02 2026 by rpki-client