This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/KQvSjqYh8xEH5jGSoTapmYBK1v8.roa File: KQvSjqYh8xEH5jGSoTapmYBK1v8.roa (raw, json) Hash identifier: oIhjbUQtq0h2T8RoAxHLxlxqfimGaBYyqjdqBzIaXjs= Subject key identifier: 29:0B:D2:8E:A6:21:F3:11:07:E6:31:92:A1:36:A9:99:80:4A:D6:FF Certificate issuer: /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5 Certificate serial: 019B7BA538735B51E0B8A83C1EC67789B313 Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/KQvSjqYh8xEH5jGSoTapmYBK1v8.roa Signing time: Thu 01 Jan 2026 22:19:44 +0000 ROA not before: Thu 01 Jan 2026 22:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31103 IP address blocks: 195.160.228.0/24 maxlen: 24 195.160.229.0/24 maxlen: 24 195.160.230.0/24 maxlen: 24 195.160.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:38:73:5b:51:e0:b8:a8:3c:1e:c6:77:89:b3:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5 Validity Not Before: Jan 1 22:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=290bd28ea621f31107e63192a136a999804ad6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d2:ae:6a:5a:ec:63:13:b2:80:18:c2:83:fb: bd:60:83:93:d4:74:97:d5:05:1f:99:d2:e9:cf:89: 59:59:57:0c:5e:b0:1a:ff:11:e7:51:ed:9e:ac:df: 83:69:ca:02:55:da:4b:8b:95:4b:05:b6:80:c3:58: e8:c7:3e:84:25:45:e4:67:69:d6:3c:4f:db:f3:60: 0a:6c:08:8e:7c:79:8d:2f:cf:54:2a:88:59:d4:12: fc:72:da:3a:49:19:c8:06:7c:82:50:ba:7a:15:8a: e3:16:1c:5c:0d:a3:23:08:3e:15:ae:31:81:58:05: 65:d9:15:37:c7:65:2f:56:8d:c5:e8:0e:0d:05:71: e6:90:b0:13:24:e7:6b:8f:44:2a:4c:ee:90:02:23: f0:6c:bb:b4:39:a4:5b:d4:a5:c6:e8:b7:42:06:6a: 38:b4:aa:ef:64:33:91:de:c2:cc:e1:8b:5e:be:bf: b5:5f:d4:9d:01:23:b2:66:04:0b:24:c8:3e:63:bb: 95:32:74:d3:a0:b5:1d:45:18:f9:76:96:d6:72:3f: e0:88:37:17:b1:21:30:c3:db:3b:20:0a:27:c6:5c: bf:51:44:9d:6b:3a:b1:af:b2:37:d2:9e:83:ad:dc: 2a:7f:ed:af:15:2f:c8:13:9f:dd:6f:8c:a8:21:1e: fe:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0B:D2:8E:A6:21:F3:11:07:E6:31:92:A1:36:A9:99:80:4A:D6:FF X509v3 Authority Key Identifier: keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/KQvSjqYh8xEH5jGSoTapmYBK1v8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.160.228.0/22 Signature Algorithm: sha256WithRSAEncryption 95:4c:96:ed:1c:b8:39:dc:31:7f:d3:14:a3:a8:db:37:3d:82: 2e:f5:02:ba:39:04:e8:3f:1e:85:f5:a0:98:8e:34:80:5b:94: ad:4d:a6:35:3a:01:6d:d2:0a:18:f7:ce:1a:ae:e6:e8:39:33: 6c:5d:d4:f9:d4:56:04:c4:ad:0d:0c:a5:80:35:f6:e3:46:f7: ff:78:6c:b3:83:35:d8:d4:2a:80:23:c2:72:86:12:d8:df:21: 23:3d:81:fb:99:9f:54:e7:1a:97:5a:be:5f:6d:e5:83:40:db: ed:8c:84:2b:84:e9:2c:46:e9:df:0d:ea:7a:e5:ef:7c:6b:ff: c2:db:22:c3:8e:3c:a6:bc:f7:fd:4c:24:28:14:ce:41:2f:7a: 10:99:2a:33:6e:fd:49:1b:b8:cf:4c:ff:61:39:f5:c9:69:8e: 80:46:91:4a:53:57:83:25:f8:2a:49:f4:c0:a6:76:d2:b1:10: c3:29:e3:c4:b7:5e:dc:3a:db:f2:c3:31:88:37:a3:5d:11:f9: 01:05:16:db:be:d5:ff:8e:1f:d8:6e:a1:5e:d0:7d:b9:bf:86: c7:09:be:86:46:57:80:89:13:d1:03:37:a2:9b:4a:60:a9:af: f2:d2:4c:b6:a6:ce:c8:a3:c3:48:85:c4:20:d5:60:ac:8c:a1: f0:4a:2f:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pThzW1HguKg8HsZ3ibMTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNGE3NThhMmIwYTdlOTM4YTlmMGRlZTY0MmNlYzVlNDEw Mjc2YjUwHhcNMjYwMTAxMjIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTBiZDI4ZWE2MjFmMzExMDdlNjMxOTJhMTM2YTk5OTgwNGFkNmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNKualrsYxOygBjCg/u9YIOT1HSX 1QUfmdLpz4lZWVcMXrAa/xHnUe2erN+DacoCVdpLi5VLBbaAw1joxz6EJUXkZ2nW PE/b82AKbAiOfHmNL89UKohZ1BL8cto6SRnIBnyCULp6FYrjFhxcDaMjCD4VrjGB WAVl2RU3x2UvVo3F6A4NBXHmkLATJOdrj0QqTO6QAiPwbLu0OaRb1KXG6LdCBmo4 tKrvZDOR3sLM4Ytevr+1X9SdASOyZgQLJMg+Y7uVMnTToLUdRRj5dpbWcj/giDcX sSEww9s7IAonxly/UUSdazqxr7I30p6Drdwqf+2vFS/IE5/db4yoIR7+qwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCkL0o6mIfMRB+YxkqE2qZmAStb/MB8GA1UdIwQY MBaAFABKdYorCn6Tip8N7mQs7F5BAna1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZjU5MTUtOTZhYS00ZGFkLWFmMmEt MDExMDI3MmRlYzE3LzEvS1F2U2pxWWg4eEVINWpHU29UYXBtWUJLMXY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9iZjU5MTUtOTZhYS00ZGFkLWFmMmEtMDExMDI3MmRlYzE3 LzEvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw6DkMA0G CSqGSIb3DQEBCwUAA4IBAQCVTJbtHLg53DF/0xSjqNs3PYIu9QK6OQToPx6F9aCY jjSAW5StTaY1OgFt0goY984aruboOTNsXdT51FYExK0NDKWANfbjRvf/eGyzgzXY 1CqAI8JyhhLY3yEjPYH7mZ9U5xqXWr5fbeWDQNvtjIQrhOksRunfDep65e98a//C 2yLDjjymvPf9TCQoFM5BL3oQmSozbv1JG7jPTP9hOfXJaY6ARpFKU1eDJfgqSfTA pnbSsRDDKePEt17cOtvywzGIN6NdEfkBBRbbvtX/jh/YbqFe0H25v4bHCb6GRleA iRPRAzeim0pgqa/y0ky2ps7Io8NIhcQg1WCsjKHwSi+t -----END CERTIFICATE-----Generated at Wed Jan 21 09:41:33 2026 by rpki-client