This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/Q5LeXJAR5nv8pnxIZARZWuAM-YY.roa File: Q5LeXJAR5nv8pnxIZARZWuAM-YY.roa (raw, json) Hash identifier: W5ivVLyzbxcE+HpeC9koFj+JQtU4yM66sZ1hanJqHv0= Subject key identifier: 43:92:DE:5C:90:11:E6:7B:FC:A6:7C:48:64:04:59:5A:E0:0C:F9:86 Certificate issuer: /CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2 Certificate serial: 019B7E37B23400B9B6E388BB6547D3CC8715 Authority key identifier: 73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/Q5LeXJAR5nv8pnxIZARZWuAM-YY.roa Signing time: Fri 02 Jan 2026 10:18:57 +0000 ROA not before: Fri 02 Jan 2026 10:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43260 IP address blocks: 93.190.218.0/24 maxlen: 24 93.190.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:b2:34:00:b9:b6:e3:88:bb:65:47:d3:cc:87:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2 Validity Not Before: Jan 2 10:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4392de5c9011e67bfca67c486404595ae00cf986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e8:6d:1a:da:4a:6d:bc:3d:2a:35:a7:f9:d4: 41:a7:3f:4a:8d:60:dc:59:48:d3:4d:de:e1:fd:42: 06:28:1d:a1:99:76:f7:64:72:2d:6b:d8:79:aa:aa: bf:78:ba:b5:9b:5b:fc:12:92:0b:6a:af:4b:24:19: d8:18:0c:23:d8:83:9e:fd:7b:2b:b9:b8:7f:8d:56: 7f:2e:30:be:0d:c8:18:84:f0:40:69:19:2d:79:c5: 2f:45:5b:ef:2c:77:e0:61:db:ee:9d:10:ba:32:f4: 14:2c:a6:45:b0:01:fd:b3:14:d4:bf:b3:4f:e6:56: 09:17:21:25:89:ea:8c:33:96:55:58:73:55:4b:24: 1a:0b:da:19:b3:b1:9d:bf:72:4a:22:9a:8c:ed:dc: 6d:29:ff:e8:4f:b5:b3:99:41:52:6b:de:84:26:4b: ef:93:7d:e5:32:4b:4a:bf:94:e7:9c:dd:44:dd:17: 04:c4:1a:7c:af:d4:dc:04:00:47:8a:00:9f:29:f6: 8e:76:c5:00:ef:21:1b:f2:dc:de:91:12:81:fc:d2: 7f:08:27:2b:71:d8:a0:22:b9:2c:f1:fe:de:4a:f9: 60:07:76:f0:5a:40:d8:7b:e5:75:6e:24:e5:14:13: 0f:9a:f9:4e:57:46:5e:cf:8f:8e:10:02:ee:4e:6f: 46:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:92:DE:5C:90:11:E6:7B:FC:A6:7C:48:64:04:59:5A:E0:0C:F9:86 X509v3 Authority Key Identifier: keyid:73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/Q5LeXJAR5nv8pnxIZARZWuAM-YY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.190.218.0/23 Signature Algorithm: sha256WithRSAEncryption d3:a9:5b:77:bb:98:fa:ea:35:c9:4d:e8:c6:ee:21:14:dc:6f: d9:16:46:c8:92:ba:95:62:6e:3c:7f:db:c2:2f:9b:84:39:06: 07:6e:32:3a:9e:80:6d:0d:2e:32:e0:97:42:cb:2f:70:b0:f5: 87:70:52:be:cb:da:40:68:01:03:df:2e:2a:42:a3:5b:60:a4: 03:9d:f8:02:7b:69:46:a0:c5:eb:2c:c1:54:85:ec:76:09:68: 78:a2:e6:1a:ee:a9:30:d4:c8:27:4e:7b:36:46:cc:07:d2:07: b2:11:bb:b1:86:67:93:0f:97:82:ef:a5:8c:29:9a:a4:8f:52: 43:e9:69:cc:4f:85:08:13:40:64:90:07:63:10:f0:ce:33:9c: 8b:fe:f2:fa:d1:e0:dc:6c:2d:dc:cd:2a:7a:0f:4b:d7:02:b6: aa:d9:5f:7f:2d:16:43:c9:21:8c:3f:76:ce:09:4e:21:31:4d: 14:29:c2:ac:f4:74:a8:6c:fa:96:55:69:56:c0:ec:3d:46:c9: 32:83:70:e3:7a:1d:8c:e6:79:b1:51:a2:f3:05:04:1b:05:4f: f3:93:34:c2:56:df:82:36:6e:80:46:9c:00:8c:65:5c:4b:92: b8:2a:9d:6e:7c:41:29:20:2b:0b:6d:be:23:2b:b0:80:34:31: 2f:50:81:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N7I0ALm244i7ZUfTzIcVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMGUxOWJmMmYyZmRiNzMwMjMyZGEyYzQ1NTFhMzEyYmEz ZTJlZTIwHhcNMjYwMTAyMTAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzkyZGU1YzkwMTFlNjdiZmNhNjdjNDg2NDA0NTk1YWUwMGNmOTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuhtGtpKbbw9KjWn+dRBpz9KjWDc WUjTTd7h/UIGKB2hmXb3ZHIta9h5qqq/eLq1m1v8EpILaq9LJBnYGAwj2IOe/Xsr ubh/jVZ/LjC+DcgYhPBAaRktecUvRVvvLHfgYdvunRC6MvQULKZFsAH9sxTUv7NP 5lYJFyElieqMM5ZVWHNVSyQaC9oZs7Gdv3JKIpqM7dxtKf/oT7WzmUFSa96EJkvv k33lMktKv5TnnN1E3RcExBp8r9TcBABHigCfKfaOdsUA7yEb8tzekRKB/NJ/CCcr cdigIrks8f7eSvlgB3bwWkDYe+V1biTlFBMPmvlOV0Zez4+OEALuTm9GfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEOS3lyQEeZ7/KZ8SGQEWVrgDPmGMB8GA1UdIwQY MBaAFHMOGb8vL9tzAjLaLEVRoxK6Pi7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3c0WnZ5OHYyM01DTXRvc1JWR2pFcm8tTHVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lODE3NTUtNDU5Mi00ZjIwLWFmNzAt Y2FmOTUxZTE1MzFkLzEvUTVMZVhKQVI1bnY4cG54SVpBUlpXdUFNLVlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lODE3NTUtNDU5Mi00ZjIwLWFmNzAtY2FmOTUxZTE1MzFk LzEvY3c0WnZ5OHYyM01DTXRvc1JWR2pFcm8tTHVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXb7aMA0G CSqGSIb3DQEBCwUAA4IBAQDTqVt3u5j66jXJTejG7iEU3G/ZFkbIkrqVYm48f9vC L5uEOQYHbjI6noBtDS4y4JdCyy9wsPWHcFK+y9pAaAED3y4qQqNbYKQDnfgCe2lG oMXrLMFUhex2CWh4ouYa7qkw1MgnTns2RswH0geyEbuxhmeTD5eC76WMKZqkj1JD 6WnMT4UIE0BkkAdjEPDOM5yL/vL60eDcbC3czSp6D0vXAraq2V9/LRZDySGMP3bO CU4hMU0UKcKs9HSobPqWVWlWwOw9Rskyg3Djeh2M5nmxUaLzBQQbBU/zkzTCVt+C Nm6ARpwAjGVcS5K4Kp1ufEEpICsLbb4jK7CANDEvUIFc -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:19 2026 by rpki-client