This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/1-Qe3s-1rznU2RrPTRXbYx2Bx5z8.roa File: 1-Qe3s-1rznU2RrPTRXbYx2Bx5z8.roa (raw, json) Hash identifier: fRzTkPN8a27bua2wzuTpxH2x1y519ujmqn10IN10rFw= Subject key identifier: F9:07:B7:B3:ED:6B:CE:75:36:46:B3:D3:45:76:D8:C7:60:71:E7:3F Certificate issuer: /CN=58bb6e2938a2251dc4384daf65efa520dc1a5882 Certificate serial: 019B78345E95376A0BA7FC120348D98792E9 Authority key identifier: 58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/1-Qe3s-1rznU2RrPTRXbYx2Bx5z8.roa Signing time: Thu 01 Jan 2026 06:17:36 +0000 ROA not before: Thu 01 Jan 2026 06:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137 IP address blocks: 130.136.0.0/16 maxlen: 16 137.204.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5e:95:37:6a:0b:a7:fc:12:03:48:d9:87:92:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58bb6e2938a2251dc4384daf65efa520dc1a5882 Validity Not Before: Jan 1 06:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f907b7b3ed6bce753646b3d34576d8c76071e73f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9a:16:43:19:ea:54:23:e4:27:fc:84:62:8f: 4f:f9:32:06:a6:00:13:54:a1:5c:49:6f:f2:f6:6e: a8:15:d3:15:fe:cc:98:1d:fa:76:c5:6d:5d:8a:52: f9:7c:0c:27:62:a9:b3:00:2d:9c:67:b0:9c:ae:fd: 3e:60:37:7a:44:29:14:4c:ec:74:c8:ca:d5:60:c8: 8c:f9:f2:18:5b:4d:b6:b9:0a:7a:12:21:dc:5b:b7: d0:87:df:a5:5b:64:9d:b9:73:19:0f:c1:c8:d0:cf: 1f:f8:5b:80:ac:ad:ea:eb:9c:c1:42:5c:ba:1c:f3: 7a:fb:f1:ad:8f:59:d3:ab:ae:2f:a5:14:00:0a:02: aa:e2:e8:6b:ad:3b:8d:ba:92:df:c9:20:d6:98:84: 61:4c:cb:12:0e:97:7a:00:08:a6:23:83:a1:8e:3d: 06:32:aa:be:8a:3e:40:3a:d0:12:4c:78:6b:29:33: d0:d3:1a:3f:f9:98:33:86:5d:22:03:f4:ce:71:e1: 52:ba:cf:76:fe:e4:25:85:04:85:f0:62:fe:51:93: 24:09:39:0e:af:76:d1:21:56:a2:d3:27:07:46:aa: 10:c2:6b:28:4b:40:3c:b9:60:4e:92:03:b1:60:78: b4:7a:59:7c:6a:4c:1f:75:0a:c9:54:1b:0e:c4:a9: f3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:07:B7:B3:ED:6B:CE:75:36:46:B3:D3:45:76:D8:C7:60:71:E7:3F X509v3 Authority Key Identifier: keyid:58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/1-Qe3s-1rznU2RrPTRXbYx2Bx5z8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.136.0.0/16 137.204.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3d:3f:4f:98:90:df:ea:99:17:26:20:a4:45:e5:ef:f8:ff:c7: dd:eb:90:8d:29:5c:af:fa:d7:4a:5e:c3:16:c9:36:a1:8a:f0: 17:54:20:fb:29:9e:d1:86:12:59:20:b0:64:67:91:4c:75:f1: ac:aa:b8:35:cb:9d:e4:01:23:e2:df:58:94:b7:25:87:0f:11: ea:77:2c:27:19:15:3c:db:89:dc:24:2e:cd:49:3d:54:f6:34: f8:b0:bd:ff:93:49:12:22:a0:71:89:f0:51:b0:95:fd:ec:8e: 65:9e:6f:32:5b:ae:67:8a:ea:3e:2c:d0:d4:80:c9:8c:7b:3b: 87:72:c2:f0:c6:96:08:c9:ca:a1:c6:b4:da:3f:a8:1a:e1:63: 7f:92:aa:60:4a:6d:80:19:26:90:51:f6:45:38:d2:76:94:59: 6b:ba:6b:02:3b:54:fc:ad:5f:de:8a:ed:c4:53:e5:01:fb:61: cc:91:cd:7f:c8:26:61:1a:bc:c7:87:04:3a:78:0a:aa:45:d2: a5:93:0a:95:cb:f5:7b:c1:30:46:88:bb:f5:0b:47:43:82:56: e2:ef:56:fe:27:9b:9b:ef:7f:58:31:56:b9:26:a9:cc:f8:43: 47:e1:eb:20:41:8c:bc:69:84:44:cd:7a:17:2c:41:88:48:66: 9b:d0:57:f8 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt4NF6VN2oLp/wSA0jZh5LpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YmI2ZTI5MzhhMjI1MWRjNDM4NGRhZjY1ZWZhNTIwZGMx YTU4ODIwHhcNMjYwMTAxMDYxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTA3YjdiM2VkNmJjZTc1MzY0NmIzZDM0NTc2ZDhjNzYwNzFlNzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJoWQxnqVCPkJ/yEYo9P+TIGpgAT VKFcSW/y9m6oFdMV/syYHfp2xW1dilL5fAwnYqmzAC2cZ7Ccrv0+YDd6RCkUTOx0 yMrVYMiM+fIYW022uQp6EiHcW7fQh9+lW2SduXMZD8HI0M8f+FuArK3q65zBQly6 HPN6+/Gtj1nTq64vpRQACgKq4uhrrTuNupLfySDWmIRhTMsSDpd6AAimI4Ohjj0G Mqq+ij5AOtASTHhrKTPQ0xo/+Zgzhl0iA/TOceFSus92/uQlhQSF8GL+UZMkCTkO r3bRIVai0ycHRqoQwmsoS0A8uWBOkgOxYHi0ell8akwfdQrJVBsOxKnzPQIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFPkHt7Pta851Nkaz00V22Mdgcec/MB8GA1UdIwQY MBaAFFi7bik4oiUdxDhNr2XvpSDcGliCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0x0dUtUaWlKUjNFT0UydlplLWxJTndhV0lJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yMGRkMDQtYWJlYy00NGMzLTk1ZWIt NWUzN2Q1NTg3YmU1LzEvMS1RZTNzLTFyem5VMlJyUFRSWGJZeDJCeDV6OC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZTUvMjBkZDA0LWFiZWMtNDRjMy05NWViLTVlMzdkNTU4N2Jl NS8xL1dMdHVLVGlpSlIzRU9FMnZaZS1sSU53YVdJSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAjBggrBgEFBQcBBwEB/wQUMBIwEAQCAAEwCgMDAIKIAwMA icwwDQYJKoZIhvcNAQELBQADggEBAD0/T5iQ3+qZFyYgpEXl7/j/x93rkI0pXK/6 10pewxbJNqGK8BdUIPspntGGElkgsGRnkUx18ayquDXLneQBI+LfWJS3JYcPEep3 LCcZFTzbidwkLs1JPVT2NPiwvf+TSRIioHGJ8FGwlf3sjmWebzJbrmeK6j4s0NSA yYx7O4dywvDGlgjJyqHGtNo/qBrhY3+SqmBKbYAZJpBR9kU40naUWWu6awI7VPyt X96K7cRT5QH7YcyRzX/IJmEavMeHBDp4CqpF0qWTCpXL9XvBMEaIu/ULR0OCVuLv Vv4nm5vvf1gxVrkmqcz4Q0fh6yBBjLxphETNehcsQYhIZpvQV/g= -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:48 2026 by rpki-client