This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/qbNLGzUPzdee_zmhNJhp9VjVIkE.roa File: qbNLGzUPzdee_zmhNJhp9VjVIkE.roa (raw, json) Hash identifier: Y21NJ26lVTq8SP1t5+hJ94cDO+ixbMvSuoWbEJG1+mg= Subject key identifier: A9:B3:4B:1B:35:0F:CD:D7:9E:FF:39:A1:34:98:69:F5:58:D5:22:41 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019B77C6FE07F6D95B478229706CE5B2DF39 Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/qbNLGzUPzdee_zmhNJhp9VjVIkE.roa Signing time: Thu 01 Jan 2026 04:18:08 +0000 ROA not before: Thu 01 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197520 IP address blocks: 193.151.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fe:07:f6:d9:5b:47:82:29:70:6c:e5:b2:df:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Jan 1 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9b34b1b350fcdd79eff39a1349869f558d52241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:32:cb:7b:da:6e:2a:c3:84:47:00:98:3e:e8: 57:39:f6:00:66:d1:c3:32:9b:5f:43:a3:e8:e3:4c: cd:2e:df:40:71:cb:52:e7:31:9b:cf:4c:09:99:1f: 02:34:4c:76:81:9b:80:08:9a:e9:14:8e:8b:9c:db: 06:fa:7d:07:6d:5e:5a:df:c3:f9:73:95:c0:ea:af: 52:26:31:e5:72:5c:fd:51:fb:74:fa:fa:b6:b8:97: 45:0f:4d:ea:43:3e:8d:e0:fe:22:54:18:6e:17:a2: 5b:56:c9:cc:1b:88:fb:17:22:29:95:63:be:43:b6: 90:2e:59:b3:63:b0:94:6f:53:0a:05:dd:f4:6d:58: 4a:7d:55:ff:fc:55:a7:64:df:93:95:09:78:61:0c: 19:9b:c0:57:4b:71:6d:ee:1e:1a:b4:38:4f:2d:8e: 30:58:85:73:dd:55:39:ee:57:d5:48:a3:31:e4:3a: 97:10:af:74:03:5d:37:90:fc:89:7a:c7:3b:d9:ea: 04:38:7e:c1:15:9e:0a:22:90:8c:d3:78:74:16:f1: ee:30:16:80:f8:a8:dc:04:fa:a0:f5:8e:c4:d7:f9: 71:1d:6f:60:9b:5f:7b:79:f5:d7:a8:3f:cb:4a:cf: 52:82:d6:fb:7b:ee:c5:80:60:1a:a2:2b:58:7c:62: ac:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B3:4B:1B:35:0F:CD:D7:9E:FF:39:A1:34:98:69:F5:58:D5:22:41 X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/qbNLGzUPzdee_zmhNJhp9VjVIkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.151.164.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:21:3c:b0:f5:18:61:2e:2a:35:0b:7b:00:fc:3c:36:5f:f7: 25:2d:66:14:57:c1:e3:e9:80:fb:39:eb:a9:00:c0:e3:ee:d1: fa:1b:e1:0e:7b:82:85:ed:24:d4:0e:0c:0a:96:4c:42:d9:50: c2:59:de:41:cc:e6:78:be:e1:7d:fe:53:b9:be:ce:5f:4b:27: 61:64:88:57:7e:e5:25:fe:2a:a6:f3:52:52:17:3d:cb:a1:a6: f1:c0:1a:db:da:47:45:7d:9e:14:47:55:4f:3c:a0:0e:54:26: 62:47:89:c4:7a:40:f0:ae:b2:98:65:d1:03:e1:b1:e7:f4:fc: 93:dc:a6:8f:3d:20:e4:86:2d:f5:80:bf:b4:3b:0c:74:79:a5: d2:e6:cb:63:e9:b1:c2:90:68:d0:fe:f4:12:03:7d:b2:1e:c9: d8:b5:38:a5:ef:14:85:76:01:61:68:3f:29:c6:7e:d3:3a:43: 23:bc:5b:ef:33:eb:35:1d:80:c7:9a:3e:19:e7:1f:00:bc:26: 19:70:8a:7d:cf:95:8d:74:53:86:d4:78:a2:7b:d4:0d:39:58: 21:60:a6:38:4b:9f:50:42:d5:3d:da:24:c3:1e:f8:5f:34:8f: d9:da:a7:57:d7:ef:6f:94:22:9e:cf:2f:2e:4a:36:60:25:12: 87:81:76:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xv4H9tlbR4IpcGzlst85MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjYwMTAxMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWIzNGIxYjM1MGZjZGQ3OWVmZjM5YTEzNDk4NjlmNTU4ZDUyMjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzLLe9puKsOERwCYPuhXOfYAZtHD MptfQ6Po40zNLt9AcctS5zGbz0wJmR8CNEx2gZuACJrpFI6LnNsG+n0HbV5a38P5 c5XA6q9SJjHlclz9Uft0+vq2uJdFD03qQz6N4P4iVBhuF6JbVsnMG4j7FyIplWO+ Q7aQLlmzY7CUb1MKBd30bVhKfVX//FWnZN+TlQl4YQwZm8BXS3Ft7h4atDhPLY4w WIVz3VU57lfVSKMx5DqXEK90A103kPyJesc72eoEOH7BFZ4KIpCM03h0FvHuMBaA +KjcBPqg9Y7E1/lxHW9gm197efXXqD/LSs9Sgtb7e+7FgGAaoitYfGKszQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKmzSxs1D83Xnv85oTSYafVY1SJBMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvcWJOTEd6VVB6ZGVlX3ptaE5KaHA5VmpWSWtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZekMA0G CSqGSIb3DQEBCwUAA4IBAQBLITyw9RhhLio1C3sA/Dw2X/clLWYUV8Hj6YD7Oeup AMDj7tH6G+EOe4KF7STUDgwKlkxC2VDCWd5BzOZ4vuF9/lO5vs5fSydhZIhXfuUl /iqm81JSFz3LoabxwBrb2kdFfZ4UR1VPPKAOVCZiR4nEekDwrrKYZdED4bHn9PyT 3KaPPSDkhi31gL+0Owx0eaXS5stj6bHCkGjQ/vQSA32yHsnYtTil7xSFdgFhaD8p xn7TOkMjvFvvM+s1HYDHmj4Z5x8AvCYZcIp9z5WNdFOG1Hiie9QNOVghYKY4S59Q QtU92iTDHvhfNI/Z2qdX1+9vlCKezy8uSjZgJRKHgXZ5 -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:27 2026 by rpki-client