This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/0qaV7J9RK3kRvbrwOrLwGL-59is.roa File: 0qaV7J9RK3kRvbrwOrLwGL-59is.roa (raw, json) Hash identifier: UvPJ59WZ0VSeeSOBjE40xguTq+GAWfJ5QMJ5cMTtGWE= Subject key identifier: D2:A6:95:EC:9F:51:2B:79:11:BD:BA:F0:3A:B2:F0:18:BF:B9:F6:2B Certificate issuer: /CN=46369dc5da5e4e70c735b235704d9ebc58259349 Certificate serial: 019B797E8BF32F5344D2B143E3F9D1916126 Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/0qaV7J9RK3kRvbrwOrLwGL-59is.roa Signing time: Thu 01 Jan 2026 12:18:14 +0000 ROA not before: Thu 01 Jan 2026 12:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 193.203.196.0/23 maxlen: 24 193.203.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:8b:f3:2f:53:44:d2:b1:43:e3:f9:d1:91:61:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349 Validity Not Before: Jan 1 12:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2a695ec9f512b7911bdbaf03ab2f018bfb9f62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3a:39:18:83:86:39:e7:c3:a8:de:92:68:b2: 6f:11:49:e5:99:c2:c0:e4:10:e4:6a:43:f2:e8:02: 37:25:ac:0e:40:9a:e0:62:09:29:98:5b:2b:78:44: 12:76:3b:99:58:c2:c0:c3:af:f3:01:99:00:1d:cc: 77:7d:60:42:4a:23:71:97:42:4d:3d:c2:78:d6:32: 05:c2:bd:40:38:14:f3:11:55:ec:60:88:02:5a:d8: c3:24:9e:3b:34:a8:b2:02:e8:02:85:df:94:91:f6: 4b:31:3f:6b:81:d0:99:da:e5:25:fc:35:ee:07:37: 49:c1:84:03:40:7f:c2:ea:6d:e5:af:6d:cb:26:0d: c4:e0:d6:be:28:1c:4b:d5:86:a9:1f:5e:97:1e:f9: a4:58:12:5c:1d:8b:33:13:fe:5f:65:e9:4b:ea:d7: a4:03:aa:96:f4:69:94:6d:f8:5b:bc:c7:16:46:d2: 6d:cf:d1:c4:99:c5:8f:16:f0:ca:f7:92:e5:b2:18: 13:b2:ae:57:f4:a4:c1:1e:a1:38:8c:02:a1:0e:9b: f2:04:ef:42:c4:dc:08:2f:a5:e2:87:2c:89:ca:37: a1:1f:49:10:ec:7c:7d:a1:cd:22:10:a7:af:57:93: ba:34:04:c5:af:44:51:80:62:19:e7:bf:82:bd:3e: f8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A6:95:EC:9F:51:2B:79:11:BD:BA:F0:3A:B2:F0:18:BF:B9:F6:2B X509v3 Authority Key Identifier: keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/0qaV7J9RK3kRvbrwOrLwGL-59is.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.196.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:f8:6a:e3:30:a2:12:dd:15:44:b1:3d:9b:52:d2:d9:1c:4f: b5:ad:ce:72:c3:9d:79:e6:17:c1:f9:b8:b3:8b:77:3e:82:6d: b8:a6:70:3d:ae:0e:2e:27:02:6e:61:3e:7f:22:5e:37:cd:8c: 5c:c4:a0:63:2a:62:f4:0c:19:16:39:38:f8:48:92:8a:e1:97: 24:c0:55:b7:00:48:b3:01:f4:8e:4b:cb:75:88:7c:10:63:3a: 57:88:75:96:24:60:54:3a:fe:cd:63:f3:74:c5:28:21:54:db: a6:a8:c3:3a:31:7c:74:18:23:85:a5:b2:74:15:4e:c7:08:b5: 49:41:eb:0c:2d:c0:c0:0b:57:86:c5:40:cc:c8:56:7a:62:bd: cb:b8:9f:eb:5a:d0:73:7c:83:d1:d1:b4:06:bb:68:05:1a:cf: 32:8c:3a:aa:c0:f6:40:8b:32:75:73:7d:04:55:9d:41:f8:f1: f2:16:2b:14:e2:4e:0b:ed:e2:84:c9:bc:72:b3:8b:3b:60:bf: a4:f9:2e:08:04:f7:93:c1:6f:3f:86:d7:79:8a:0d:94:30:cb: d3:6d:c6:86:6c:20:46:17:01:16:34:7a:05:59:f6:8a:cf:80: bf:6c:71:44:2e:48:38:44:80:6f:27:3d:d3:8a:01:a0:73:b9: 3d:c1:14:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fovzL1NE0rFD4/nRkWEmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MzY5ZGM1ZGE1ZTRlNzBjNzM1YjIzNTcwNGQ5ZWJjNTgy NTkzNDkwHhcNMjYwMTAxMTIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmE2OTVlYzlmNTEyYjc5MTFiZGJhZjAzYWIyZjAxOGJmYjlmNjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTo5GIOGOefDqN6SaLJvEUnlmcLA 5BDkakPy6AI3JawOQJrgYgkpmFsreEQSdjuZWMLAw6/zAZkAHcx3fWBCSiNxl0JN PcJ41jIFwr1AOBTzEVXsYIgCWtjDJJ47NKiyAugChd+UkfZLMT9rgdCZ2uUl/DXu BzdJwYQDQH/C6m3lr23LJg3E4Na+KBxL1YapH16XHvmkWBJcHYszE/5fZelL6tek A6qW9GmUbfhbvMcWRtJtz9HEmcWPFvDK95LlshgTsq5X9KTBHqE4jAKhDpvyBO9C xNwIL6XihyyJyjehH0kQ7Hx9oc0iEKevV5O6NATFr0RRgGIZ57+CvT74yQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNKmleyfUSt5Eb268Dqy8Bi/ufYrMB8GA1UdIwQY MBaAFEY2ncXaXk5wxzWyNXBNnrxYJZNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmphZHhkcGVUbkRITmJJMWNFMmV2RmdsazBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mZTY5YjItMGFiYi00ZTU1LThiMzgt YTkxNjM0ZDJhODA4LzEvMHFhVjdKOVJLM2tSdmJyd09yTHdHTC01OWlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9mZTY5YjItMGFiYi00ZTU1LThiMzgtYTkxNjM0ZDJhODA4 LzEvUmphZHhkcGVUbkRITmJJMWNFMmV2RmdsazBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcvEMA0G CSqGSIb3DQEBCwUAA4IBAQAK+GrjMKIS3RVEsT2bUtLZHE+1rc5yw5155hfB+biz i3c+gm24pnA9rg4uJwJuYT5/Il43zYxcxKBjKmL0DBkWOTj4SJKK4ZckwFW3AEiz AfSOS8t1iHwQYzpXiHWWJGBUOv7NY/N0xSghVNumqMM6MXx0GCOFpbJ0FU7HCLVJ QesMLcDAC1eGxUDMyFZ6Yr3LuJ/rWtBzfIPR0bQGu2gFGs8yjDqqwPZAizJ1c30E VZ1B+PHyFisU4k4L7eKEybxys4s7YL+k+S4IBPeTwW8/htd5ig2UMMvTbcaGbCBG FwEWNHoFWfaKz4C/bHFELkg4RIBvJz3TigGgc7k9wRSd -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:50 2026 by rpki-client