This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/qUbS3fckMBwSjTB5lnxF3fZbp3s.roa File: qUbS3fckMBwSjTB5lnxF3fZbp3s.roa (raw, json) Hash identifier: KAFzjWDg92Eqz8mPAygaN1C2exNmJZnhRSrRBX3vbQI= Subject key identifier: A9:46:D2:DD:F7:24:30:1C:12:8D:30:79:96:7C:45:DD:F6:5B:A7:7B Certificate issuer: /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d Certificate serial: 019B797E894EBBF3E1A924D4C0FBBD76CE9D Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/qUbS3fckMBwSjTB5lnxF3fZbp3s.roa Signing time: Thu 01 Jan 2026 12:18:14 +0000 ROA not before: Thu 01 Jan 2026 12:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 195.245.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:89:4e:bb:f3:e1:a9:24:d4:c0:fb:bd:76:ce:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d Validity Not Before: Jan 1 12:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a946d2ddf724301c128d3079967c45ddf65ba77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:86:95:a7:83:57:ab:c1:17:da:ca:07:85:68: 5b:6d:5c:27:78:5d:61:a2:74:cd:0a:82:41:27:6c: 5d:86:fe:69:29:f3:7c:99:6f:54:53:03:ee:18:f9: b6:d2:a2:53:b2:6f:5d:a1:11:b4:a3:63:2c:15:d9: a6:ac:dc:46:4d:14:0e:6a:c1:39:a9:ee:99:3a:6e: 0c:62:1d:a6:73:2d:a7:3f:a9:37:0e:a7:12:93:0c: bc:27:c2:a0:ec:46:67:f0:cc:39:0d:a8:71:d9:c4: d3:1b:80:f5:64:ab:ff:50:9b:74:0b:86:34:ee:d9: 4b:a6:42:99:29:eb:7c:81:f0:80:29:a7:8c:0d:b6: c3:19:cc:6b:a8:1d:77:53:d9:bd:8b:b9:60:3e:9e: 81:62:ff:c2:90:6c:b2:49:f1:d7:a3:0e:e6:5a:03: 12:64:1e:7f:40:a6:64:f0:4a:c3:fa:93:19:4b:18: c7:f3:0c:6a:56:a3:69:ad:25:09:8b:28:62:89:26: f7:94:66:87:1e:a4:19:6c:e9:91:cf:a6:fc:49:f0: e7:83:b4:2d:3c:50:cf:dc:2c:29:11:f6:5b:f8:88: ad:bc:a4:30:3b:d7:f6:af:20:3d:cc:d2:b5:90:9f: 3d:6b:8d:d5:b1:87:24:04:5d:f7:f7:eb:58:1e:8b: d8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:46:D2:DD:F7:24:30:1C:12:8D:30:79:96:7C:45:DD:F6:5B:A7:7B X509v3 Authority Key Identifier: keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/qUbS3fckMBwSjTB5lnxF3fZbp3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.245.85.0/24 Signature Algorithm: sha256WithRSAEncryption 50:c9:37:1c:6e:5a:4b:9a:1e:27:ab:04:23:bb:f3:b4:bb:41: 25:19:37:9a:e0:62:50:35:db:a4:7a:e2:d8:a1:0e:ba:3f:5f: 6a:4f:ac:5b:1a:09:09:3e:39:c8:eb:71:5f:80:36:2d:8b:cb: d1:9e:3d:0b:c3:22:66:ae:02:02:b6:15:84:a0:b1:a4:95:98: e6:5d:9f:8b:00:bd:40:6a:5e:fc:d4:db:b6:90:86:22:8d:bf: 26:3a:06:08:e2:bd:79:0a:90:89:2d:60:df:16:1c:ee:c1:d0: cc:ad:a0:68:f9:05:5c:13:7e:12:1e:6a:05:5d:32:19:ce:60: 2b:98:0c:3a:81:b0:5e:c4:84:cb:70:ad:db:0f:8d:86:d1:36: 06:04:f0:ee:55:33:82:b1:5e:5e:bf:2b:7c:f8:f9:b5:d2:a9: ef:46:59:2e:db:b1:2c:e7:f7:13:d3:71:eb:0e:b8:92:f6:03: 1b:88:6e:9e:df:68:7c:1f:fe:dc:fb:ad:f7:db:70:9d:42:8b: c6:af:20:1b:d2:10:54:1b:e0:fb:60:6c:67:c9:75:0b:08:18: 69:2a:ac:60:62:e2:a1:e9:d9:70:4d:7c:26:0b:f3:50:42:19: ef:9f:56:5e:21:58:1d:84:79:85:ad:98:c6:fd:43:0f:14:66: 4b:6c:3d:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5folOu/PhqSTUwPu9ds6dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MzQ2MTZlZGJkNjAxNTRmYTNkYWM3N2VhOTBkYmQ3YzY4 YTEzMmQwHhcNMjYwMTAxMTIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTQ2ZDJkZGY3MjQzMDFjMTI4ZDMwNzk5NjdjNDVkZGY2NWJhNzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IaVp4NXq8EX2soHhWhbbVwneF1h onTNCoJBJ2xdhv5pKfN8mW9UUwPuGPm20qJTsm9doRG0o2MsFdmmrNxGTRQOasE5 qe6ZOm4MYh2mcy2nP6k3DqcSkwy8J8Kg7EZn8Mw5Dahx2cTTG4D1ZKv/UJt0C4Y0 7tlLpkKZKet8gfCAKaeMDbbDGcxrqB13U9m9i7lgPp6BYv/CkGyySfHXow7mWgMS ZB5/QKZk8ErD+pMZSxjH8wxqVqNprSUJiyhiiSb3lGaHHqQZbOmRz6b8SfDng7Qt PFDP3CwpEfZb+IitvKQwO9f2ryA9zNK1kJ89a43VsYckBF339+tYHovY1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKlG0t33JDAcEo0weZZ8Rd32W6d7MB8GA1UdIwQY MBaAFOY0YW7b1gFU+j2sd+qQ29fGihMtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWpSaGJ0dldBVlQ2UGF4MzZwRGIxOGFLRXkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9mMjkyNjgtMmM2YS00ZTlkLWFhMmQt ZDk5MjMxZTQ2NDU3LzEvcVViUzNmY2tNQndTalRCNWxueEYzZlpicDNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9mMjkyNjgtMmM2YS00ZTlkLWFhMmQtZDk5MjMxZTQ2NDU3 LzEvNWpSaGJ0dldBVlQ2UGF4MzZwRGIxOGFLRXkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/VVMA0G CSqGSIb3DQEBCwUAA4IBAQBQyTccblpLmh4nqwQju/O0u0ElGTea4GJQNdukeuLY oQ66P19qT6xbGgkJPjnI63FfgDYti8vRnj0LwyJmrgICthWEoLGklZjmXZ+LAL1A al781Nu2kIYijb8mOgYI4r15CpCJLWDfFhzuwdDMraBo+QVcE34SHmoFXTIZzmAr mAw6gbBexITLcK3bD42G0TYGBPDuVTOCsV5evyt8+Pm10qnvRlku27Es5/cT03Hr DriS9gMbiG6e32h8H/7c+63323CdQovGryAb0hBUG+D7YGxnyXULCBhpKqxgYuKh 6dlwTXwmC/NQQhnvn1ZeIVgdhHmFrZjG/UMPFGZLbD3M -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:31 2026 by rpki-client