This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/Qg5YVX-ArwviT-5zEMtdK0QZQ3k.roa File: Qg5YVX-ArwviT-5zEMtdK0QZQ3k.roa (raw, json) Hash identifier: N2GUp/A12YuOzgdEUjTB8syXYjaMrKhtAtS9ZwORjp0= Subject key identifier: 42:0E:58:55:7F:80:AF:0B:E2:4F:EE:73:10:CB:5D:2B:44:19:43:79 Certificate issuer: /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0 Certificate serial: 019B7B367E5B05EEC4B6897752FE3974FD92 Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/Qg5YVX-ArwviT-5zEMtdK0QZQ3k.roa Signing time: Thu 01 Jan 2026 20:18:47 +0000 ROA not before: Thu 01 Jan 2026 20:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9145 IP address blocks: 193.101.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:7e:5b:05:ee:c4:b6:89:77:52:fe:39:74:fd:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0 Validity Not Before: Jan 1 20:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=420e58557f80af0be24fee7310cb5d2b44194379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:be:b2:76:e3:b5:b9:0c:a7:27:08:71:55:d7: 09:16:be:0c:21:ad:dc:a2:e7:61:94:35:83:25:37: de:b5:49:87:20:51:58:c1:70:bc:9e:3f:8c:0b:3a: 28:b8:fb:e6:b0:05:51:f6:03:7d:50:44:c5:8b:aa: d7:dc:76:cf:f4:0e:e4:96:9d:8c:f2:c5:24:dd:e9: 12:68:9e:b2:7b:f8:5c:95:3c:25:f2:e1:b8:bd:f7: 25:f2:10:45:8f:47:8a:1e:ce:f9:61:8b:42:c5:8d: 7c:87:b8:33:d0:b4:34:4f:06:67:b1:37:8b:83:3f: de:dc:c8:fc:66:77:d3:18:ca:5e:6f:b1:4c:3d:d0: 51:20:ed:ad:a8:e0:8c:aa:60:ba:b2:d7:f9:84:6f: b6:7a:bf:e4:0c:31:37:da:15:65:27:3b:fc:f5:69: 69:7a:c3:de:77:35:82:60:79:ad:53:5b:57:44:81: 6c:e9:7c:77:8a:65:53:00:5b:28:ca:e0:4f:ab:94: d3:1d:5f:fc:6d:ac:41:91:5c:43:9e:63:2c:15:f1: 72:91:64:f3:30:07:e3:a4:34:5e:5d:3b:d4:13:1b: 7b:b8:00:7c:e3:2b:d3:fe:df:c1:f0:99:e3:2b:6f: 0b:a3:45:c1:53:52:78:e0:79:b2:6b:e4:09:d7:5d: cc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0E:58:55:7F:80:AF:0B:E2:4F:EE:73:10:CB:5D:2B:44:19:43:79 X509v3 Authority Key Identifier: keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/Qg5YVX-ArwviT-5zEMtdK0QZQ3k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.101.250.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:27:37:44:7f:cc:31:90:b4:70:4b:fd:6b:04:df:9e:f4:38: ba:5c:5b:9b:3f:6a:04:9f:10:1b:fc:34:70:4c:34:26:bc:b3: b0:20:c3:81:08:ff:71:32:59:ee:bc:10:4a:2b:ea:6c:9e:5b: 45:45:bd:d0:52:b1:5e:25:49:11:7c:0e:54:33:0d:10:48:de: 12:2b:fc:1d:1b:d7:82:f2:64:c2:32:dd:c8:5d:f3:7b:08:7c: e7:8c:18:7a:09:c2:e5:c8:4a:a0:c2:48:24:35:88:24:1c:26: f4:68:38:e1:9c:1f:56:f5:b0:44:69:71:30:3d:8a:ce:0d:19: 47:d5:70:5e:27:9e:bb:b9:94:e6:10:28:31:ef:70:d7:ae:aa: 8a:59:45:32:e5:3d:db:82:54:fd:02:bf:d4:f8:89:43:14:87: 50:0f:ea:1a:c0:04:0d:8b:0f:aa:b0:74:75:1f:76:77:8c:0e: b1:83:ee:d4:05:5f:0d:71:cc:5e:bc:bf:af:f0:fa:ef:63:2e: e9:e3:33:2f:c9:a4:ba:05:42:56:e0:81:3b:c1:fe:3a:0f:0d: bd:25:21:35:09:e7:6b:6e:b8:2f:c0:fc:19:ed:24:e9:0e:f7: e2:7c:85:4b:37:59:13:fe:ee:86:9c:db:ef:2a:f0:49:dc:4a: 58:95:53:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nn5bBe7Etol3Uv45dP2SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZWYzMDYyNDIxMGMwMGQzYTg2ZGZkNmM4MDEwNjEyYmIx YjEyYTAwHhcNMjYwMTAxMjAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjBlNTg1NTdmODBhZjBiZTI0ZmVlNzMxMGNiNWQyYjQ0MTk0Mzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu76yduO1uQynJwhxVdcJFr4MIa3c oudhlDWDJTfetUmHIFFYwXC8nj+MCzoouPvmsAVR9gN9UETFi6rX3HbP9A7klp2M 8sUk3ekSaJ6ye/hclTwl8uG4vfcl8hBFj0eKHs75YYtCxY18h7gz0LQ0TwZnsTeL gz/e3Mj8ZnfTGMpeb7FMPdBRIO2tqOCMqmC6stf5hG+2er/kDDE32hVlJzv89Wlp esPedzWCYHmtU1tXRIFs6Xx3imVTAFsoyuBPq5TTHV/8baxBkVxDnmMsFfFykWTz MAfjpDReXTvUExt7uAB84yvT/t/B8JnjK28Lo0XBU1J44Hmya+QJ113MqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEIOWFV/gK8L4k/ucxDLXStEGUN5MB8GA1UdIwQY MBaAFEvvMGJCEMANOobf1sgBBhK7GxKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy04d1lrSVF3QTA2aHRfV3lBRUdFcnNiRXFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zODNmNDMtODRlYS00NjIzLWI3N2Qt Nzg5MjdmYzc4ZTdkLzEvUWc1WVZYLUFyd3ZpVC01ekVNdGRLMFFaUTNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8zODNmNDMtODRlYS00NjIzLWI3N2QtNzg5MjdmYzc4ZTdk LzEvUy04d1lrSVF3QTA2aHRfV3lBRUdFcnNiRXFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWX6MA0G CSqGSIb3DQEBCwUAA4IBAQBOJzdEf8wxkLRwS/1rBN+e9Di6XFubP2oEnxAb/DRw TDQmvLOwIMOBCP9xMlnuvBBKK+psnltFRb3QUrFeJUkRfA5UMw0QSN4SK/wdG9eC 8mTCMt3IXfN7CHznjBh6CcLlyEqgwkgkNYgkHCb0aDjhnB9W9bBEaXEwPYrODRlH 1XBeJ567uZTmECgx73DXrqqKWUUy5T3bglT9Ar/U+IlDFIdQD+oawAQNiw+qsHR1 H3Z3jA6xg+7UBV8NccxevL+v8PrvYy7p4zMvyaS6BUJW4IE7wf46Dw29JSE1Cedr brgvwPwZ7STpDvfifIVLN1kT/u6GnNvvKvBJ3EpYlVP3 -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:34 2026 by rpki-client