This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/qZQDb_OLECs9_cvzC4NvW-jUYJY.roa File: qZQDb_OLECs9_cvzC4NvW-jUYJY.roa (raw, json) Hash identifier: Xte6c3KnBqX3Xm7/vG9ebJ4eg8ffxrvgU6w78IU7x5k= Subject key identifier: A9:94:03:6F:F3:8B:10:2B:3D:FD:CB:F3:0B:83:6F:5B:E8:D4:60:96 Certificate issuer: /CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00 Certificate serial: 019B7D5C2F39FDB5BB8461A1FEB88354408F Authority key identifier: 93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/qZQDb_OLECs9_cvzC4NvW-jUYJY.roa Signing time: Fri 02 Jan 2026 06:19:11 +0000 ROA not before: Fri 02 Jan 2026 06:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208678 IP address blocks: 194.110.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:2f:39:fd:b5:bb:84:61:a1:fe:b8:83:54:40:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00 Validity Not Before: Jan 2 06:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a994036ff38b102b3dfdcbf30b836f5be8d46096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:93:0c:7d:23:0e:99:56:17:ec:10:e9:d6:6f: 68:1f:9d:14:dd:5b:8d:c6:21:8d:18:1f:ba:d0:f9: a0:e3:24:34:4d:66:4c:6c:b2:fa:7b:42:d5:8b:3c: 46:2b:1b:2a:de:a6:3a:c9:31:24:62:82:ab:95:ec: be:b0:a5:2f:e7:ba:ab:48:90:f0:c0:ff:d0:fc:f1: 27:7d:a1:c7:ea:74:5f:ca:fc:dd:a1:66:35:a1:8a: 58:8c:49:ed:a2:0a:2d:bd:af:de:51:0f:b9:d6:4a: 6c:6d:63:38:d3:64:76:6c:a2:39:90:e5:b0:61:e7: 80:87:00:34:9a:e8:3a:6d:15:4e:a1:5b:24:dc:e6: 09:3d:2e:f2:16:0a:41:b4:fe:93:2d:c6:b1:35:35: b5:4e:c7:02:ba:67:49:92:40:9f:4b:85:25:50:e6: 7b:3d:da:c9:c6:c8:31:00:af:72:85:0d:8e:33:c5: 18:57:5d:a1:98:60:bb:f4:1c:44:24:46:cf:b8:b8: f5:7d:f5:31:7d:d7:f1:1f:65:c2:32:0e:5a:72:d2: a8:51:9e:33:2a:da:44:21:bf:11:04:c3:ed:4f:d4: 82:b6:24:6b:06:0e:77:d5:64:32:6d:4a:e0:cb:2b: 2e:02:f8:22:cc:3c:57:15:c2:2c:1f:16:aa:76:c7: e2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:94:03:6F:F3:8B:10:2B:3D:FD:CB:F3:0B:83:6F:5B:E8:D4:60:96 X509v3 Authority Key Identifier: keyid:93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/qZQDb_OLECs9_cvzC4NvW-jUYJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.154.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:01:9c:53:65:fd:63:97:dd:8a:38:49:cb:82:e2:8c:63:11: 9b:5b:70:dc:c4:8b:71:6e:25:41:a8:f0:40:f2:f1:bc:56:f4: d3:f0:24:4b:0a:82:80:b0:fc:84:25:5f:72:9a:e0:f0:1d:5a: fc:12:52:39:33:60:a0:e2:41:bd:3f:86:2b:ea:c1:a3:e3:3b: ba:86:c9:de:2b:ca:50:aa:a6:b6:53:b5:3a:9b:89:14:fc:dc: 3d:d2:5c:64:ac:02:ca:14:f6:3f:67:8c:af:94:15:75:63:1d: d2:2d:ab:e1:49:2f:84:96:b0:f9:98:56:6c:06:b3:1d:88:c9: 74:e5:41:54:55:e5:9d:91:c4:fe:77:21:84:16:5c:a2:b5:e0: 9d:fc:32:12:26:66:8c:4f:2e:0e:19:6c:ce:4d:41:ef:f9:f8: 2d:92:82:c7:9a:34:e0:d3:54:f3:70:ec:64:70:47:7f:af:4b: bd:11:8f:50:5f:66:2a:af:7f:61:77:2e:f8:97:6f:b4:51:31: ac:4d:04:00:2b:d0:fe:28:00:d7:7a:f7:aa:cb:38:98:3e:68: 24:01:05:98:3c:d4:4f:d9:59:82:b3:45:dc:73:70:03:d4:a5: de:c5:31:ac:69:4b:8f:33:09:d6:ce:16:8b:66:e2:41:cb:72: 9a:8e:26:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XC85/bW7hGGh/riDVECPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYWYzNDhlYzVhNGU2NWUwY2IxMzc4MjFhZTZhMTM5ZWQ3 ZmFjMDAwHhcNMjYwMTAyMDYxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTk0MDM2ZmYzOGIxMDJiM2RmZGNiZjMwYjgzNmY1YmU4ZDQ2MDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypMMfSMOmVYX7BDp1m9oH50U3VuN xiGNGB+60Pmg4yQ0TWZMbLL6e0LVizxGKxsq3qY6yTEkYoKrley+sKUv57qrSJDw wP/Q/PEnfaHH6nRfyvzdoWY1oYpYjEntogotva/eUQ+51kpsbWM402R2bKI5kOWw YeeAhwA0mug6bRVOoVsk3OYJPS7yFgpBtP6TLcaxNTW1TscCumdJkkCfS4UlUOZ7 PdrJxsgxAK9yhQ2OM8UYV12hmGC79BxEJEbPuLj1ffUxfdfxH2XCMg5actKoUZ4z KtpEIb8RBMPtT9SCtiRrBg531WQybUrgyysuAvgizDxXFcIsHxaqdsfiVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKmUA2/zixArPf3L8wuDb1vo1GCWMB8GA1UdIwQY MBaAFJOvNI7FpOZeDLE3ghrmoTntf6wAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazY4MGpzV2s1bDRNc1RlQ0d1YWhPZTFfckFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iZDc4MjAtNWMxYy00ODg0LTlhYjgt YzVhYjk3ZGJhODk4LzEvcVpRRGJfT0xFQ3M5X2N2ekM0TnZXLWpVWUpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iZDc4MjAtNWMxYy00ODg0LTlhYjgtYzVhYjk3ZGJhODk4 LzEvazY4MGpzV2s1bDRNc1RlQ0d1YWhPZTFfckFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm6aMA0G CSqGSIb3DQEBCwUAA4IBAQAbAZxTZf1jl92KOEnLguKMYxGbW3DcxItxbiVBqPBA 8vG8VvTT8CRLCoKAsPyEJV9ymuDwHVr8ElI5M2Cg4kG9P4Yr6sGj4zu6hsneK8pQ qqa2U7U6m4kU/Nw90lxkrALKFPY/Z4yvlBV1Yx3SLavhSS+ElrD5mFZsBrMdiMl0 5UFUVeWdkcT+dyGEFlyiteCd/DISJmaMTy4OGWzOTUHv+fgtkoLHmjTg01TzcOxk cEd/r0u9EY9QX2Yqr39hdy74l2+0UTGsTQQAK9D+KADXeveqyziYPmgkAQWYPNRP 2VmCs0Xcc3AD1KXexTGsaUuPMwnWzhaLZuJBy3KajiZ9 -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:20 2026 by rpki-client