This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/qTb1hfW2cZsJLmGnL2cnlmiyFfY.roa File: qTb1hfW2cZsJLmGnL2cnlmiyFfY.roa (raw, json) Hash identifier: hklYadmGWp1kEGK+jtsPBwTIyJolTP2I0OScsQI8ZQI= Subject key identifier: A9:36:F5:85:F5:B6:71:9B:09:2E:61:A7:2F:67:27:96:68:B2:15:F6 Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7 Certificate serial: 019B78A2A2FBF2FE0939AD88AFB32BEDEC5B Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/qTb1hfW2cZsJLmGnL2cnlmiyFfY.roa Signing time: Thu 01 Jan 2026 08:18:02 +0000 ROA not before: Thu 01 Jan 2026 08:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 194.35.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a2:fb:f2:fe:09:39:ad:88:af:b3:2b:ed:ec:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7 Validity Not Before: Jan 1 08:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a936f585f5b6719b092e61a72f67279668b215f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4a:df:72:c7:e3:bc:02:a5:ad:30:33:03:d7: 37:98:92:62:a3:18:23:64:e2:6c:83:64:55:97:48: e0:15:8f:ca:6c:3e:91:2e:68:1c:d1:2d:36:d9:b6: 95:ed:a2:38:93:fc:f1:81:22:46:66:8c:7c:38:36: 46:13:1e:91:33:06:08:10:71:f4:f7:f1:c6:39:39: 03:a1:a2:d5:a5:e7:d3:f5:63:a2:2f:ce:91:e8:72: ee:cf:1f:20:8c:ab:e7:88:c6:42:04:3f:64:40:9c: 1b:06:83:93:58:37:e1:6f:e5:25:9e:3e:d7:3a:09: f9:36:31:d8:75:1b:39:a6:d9:8f:da:4d:71:6d:79: c7:12:91:a3:15:d3:5c:61:59:11:2c:8d:7c:59:92: e5:1e:08:ab:86:0d:1b:89:b0:5a:e3:4f:26:f2:29: 64:84:91:a4:88:dd:b8:a5:54:64:32:ff:01:0e:ab: 9c:ce:93:b7:d0:95:e7:93:cb:a9:fc:a1:1a:c2:5a: 35:c4:0a:66:f7:7e:94:a3:85:43:82:91:9b:92:14: b4:89:e6:d0:19:ac:b3:85:ff:b9:5e:db:b0:40:c0: 0e:35:ab:e0:b2:16:95:ac:6f:3a:ee:29:3b:f9:2f: 9d:31:5d:00:34:ee:d9:70:31:86:e2:9e:65:8f:02: 6c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:36:F5:85:F5:B6:71:9B:09:2E:61:A7:2F:67:27:96:68:B2:15:F6 X509v3 Authority Key Identifier: keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/qTb1hfW2cZsJLmGnL2cnlmiyFfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.240.0/24 Signature Algorithm: sha256WithRSAEncryption 36:06:aa:94:ef:38:09:92:61:8d:95:9d:c4:b3:c0:a8:45:c8: 7e:f8:b5:03:28:ac:31:9a:36:a9:e0:c4:35:31:29:11:3e:5e: ef:97:28:bf:50:48:e6:9d:fb:6b:4d:c2:83:cd:68:8e:f1:39: ec:55:f8:fe:a9:38:60:09:a6:69:9a:3d:f5:f0:40:a3:69:6c: a3:30:19:e1:22:2f:fa:73:af:2b:d1:c8:15:e5:d4:14:8a:33: 2b:6f:f2:42:51:3b:d6:e8:ea:13:22:e8:6d:c9:9c:c4:ad:fd: d2:09:bd:6f:a8:37:f5:84:e6:ed:23:25:87:42:75:25:77:93: ce:b3:ce:9f:78:69:10:9f:89:29:6c:dc:a1:1c:0d:4f:1f:8c: a6:1c:51:2b:d9:75:d9:5e:a7:fd:55:23:5b:c3:4e:dd:b0:24: 49:fb:71:a3:00:d6:cf:f9:2c:b3:f3:87:09:88:79:af:7c:c6: 75:c8:e5:09:27:2d:0a:31:8d:ca:24:b0:9c:ff:62:5c:a9:6d: 57:ab:a3:8f:58:21:8a:f3:ec:d7:ee:4f:f7:c7:41:a5:25:49: c7:25:4c:3e:2c:a0:2e:f4:a2:29:1e:62:77:96:dd:ea:23:58: 60:ce:2f:f0:27:83:9f:47:dc:8a:4f:ed:22:0a:b2:33:94:38: 98:1a:a8:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oqL78v4JOa2Ir7Mr7exbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjOTJiOWE5MmM3ZWI5MTNjM2RhNTU4MDAyYzY3M2U4MjM4 ZGIxYzcwHhcNMjYwMTAxMDgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTM2ZjU4NWY1YjY3MTliMDkyZTYxYTcyZjY3Mjc5NjY4YjIxNWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UrfcsfjvAKlrTAzA9c3mJJioxgj ZOJsg2RVl0jgFY/KbD6RLmgc0S022baV7aI4k/zxgSJGZox8ODZGEx6RMwYIEHH0 9/HGOTkDoaLVpefT9WOiL86R6HLuzx8gjKvniMZCBD9kQJwbBoOTWDfhb+Ulnj7X Ogn5NjHYdRs5ptmP2k1xbXnHEpGjFdNcYVkRLI18WZLlHgirhg0bibBa408m8ilk hJGkiN24pVRkMv8BDquczpO30JXnk8up/KEawlo1xApm936Uo4VDgpGbkhS0iebQ Gayzhf+5XtuwQMAONavgshaVrG867ik7+S+dMV0ANO7ZcDGG4p5ljwJsuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKk29YX1tnGbCS5hpy9nJ5ZoshX2MB8GA1UdIwQY MBaAFFySuaksfrkTw9pVgALGc+gjjbHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85Njk0NjMtN2Y2YS00NTAzLWFiYzQt ZDZiNTZhYmEzZWI3LzEvcVRiMWhmVzJjWnNKTG1HbkwyY25sbWl5RmZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85Njk0NjMtN2Y2YS00NTAzLWFiYzQtZDZiNTZhYmEzZWI3 LzEvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiPwMA0G CSqGSIb3DQEBCwUAA4IBAQA2BqqU7zgJkmGNlZ3Es8CoRch++LUDKKwxmjap4MQ1 MSkRPl7vlyi/UEjmnftrTcKDzWiO8TnsVfj+qThgCaZpmj318ECjaWyjMBnhIi/6 c68r0cgV5dQUijMrb/JCUTvW6OoTIuhtyZzErf3SCb1vqDf1hObtIyWHQnUld5PO s86feGkQn4kpbNyhHA1PH4ymHFEr2XXZXqf9VSNbw07dsCRJ+3GjANbP+Syz84cJ iHmvfMZ1yOUJJy0KMY3KJLCc/2JcqW1Xq6OPWCGK8+zX7k/3x0GlJUnHJUw+LKAu 9KIpHmJ3lt3qI1hgzi/wJ4OfR9yKT+0iCrIzlDiYGqi6 -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:26 2026 by rpki-client