This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/JQHrdWqlz2UqGKCLzlTiY4SvfH4.roa File: JQHrdWqlz2UqGKCLzlTiY4SvfH4.roa (raw, json) Hash identifier: bwaVBJc44mNBjusS1vQzeOwmOeBHHl10XyVb8yiVdpw= Subject key identifier: 25:01:EB:75:6A:A5:CF:65:2A:18:A0:8B:CE:54:E2:63:84:AF:7C:7E Certificate issuer: /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f Certificate serial: 019B7A5B40DE1EF9C805290A9ECAB3F0EBBF Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/JQHrdWqlz2UqGKCLzlTiY4SvfH4.roa Signing time: Thu 01 Jan 2026 16:19:19 +0000 ROA not before: Thu 01 Jan 2026 16:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209834 IP address blocks: 176.53.188.0/22 maxlen: 24 2a09:e100::/29 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:40:de:1e:f9:c8:05:29:0a:9e:ca:b3:f0:eb:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f Validity Not Before: Jan 1 16:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2501eb756aa5cf652a18a08bce54e26384af7c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f8:61:38:27:e6:e2:38:74:03:35:4a:e7:d9: b6:49:82:65:1a:ae:00:aa:af:8b:63:56:15:9a:56: 93:c0:38:72:a9:7d:fb:a7:6a:10:be:c9:7b:55:e3: 9b:be:8c:19:d5:20:49:5a:64:c3:3d:b9:19:12:5b: 23:01:d1:61:a9:45:9c:96:4f:9f:2c:a5:02:6b:9c: 6c:e9:f0:c5:30:45:0c:84:6b:c7:79:1a:65:50:74: 1a:77:7e:78:74:78:3b:d7:01:35:92:57:a1:c8:c8: d1:36:55:23:ed:3c:a4:67:49:fc:58:97:3c:d6:38: 1f:db:bd:ce:92:c9:70:cf:50:39:82:99:f3:fb:8d: 4b:8b:72:44:6c:a6:6c:09:6a:ab:cf:3a:18:a3:2b: 2d:0f:c2:42:61:1e:b4:e1:11:2d:f8:6e:42:ea:e9: df:1e:65:ac:b3:6d:9d:bb:17:c9:2a:86:38:55:fa: 26:e3:f6:90:d4:77:b1:a3:f5:d7:96:8b:2d:c2:34: ec:93:d5:2b:bf:a2:d8:69:37:bf:90:6a:b1:d1:f9: 58:fc:4a:d1:43:d8:e7:61:56:68:91:9a:21:73:16: 5a:4c:60:aa:be:ae:c0:6a:e9:78:80:a8:e7:74:f9: e7:8c:1e:db:4b:42:96:cb:24:be:fb:94:4c:09:13: 6b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:01:EB:75:6A:A5:CF:65:2A:18:A0:8B:CE:54:E2:63:84:AF:7C:7E X509v3 Authority Key Identifier: keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/JQHrdWqlz2UqGKCLzlTiY4SvfH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.53.188.0/22 IPv6: 2a09:e100::/29 Signature Algorithm: sha256WithRSAEncryption 6e:9d:a2:14:51:93:d8:66:7b:57:0a:75:da:fb:c5:58:b7:c0: 08:43:6b:87:6a:ac:49:ec:de:ad:f1:78:bb:61:4b:8c:19:88: aa:83:8b:2f:a6:d7:de:d7:9a:d3:16:ee:73:f8:20:a2:73:21: aa:41:0a:7d:31:7e:64:25:5b:e3:f4:25:6c:59:1d:c4:81:b4: ed:33:46:07:73:7e:e5:3a:db:d1:75:41:17:a7:42:2b:cd:6d: 88:f2:0b:9e:1b:b9:d7:09:87:e6:6b:a9:c8:9c:ca:af:23:35: ef:02:a2:2e:ab:12:0a:e9:88:ed:4b:1b:76:37:28:b1:5c:bb: 4a:d1:c3:83:a9:bf:e1:de:25:32:bf:df:de:66:b5:34:3c:d2: 78:e8:af:29:ec:99:12:47:43:2e:c6:95:4e:45:e4:31:b1:d8: 42:c4:23:d2:fd:0c:0c:20:f6:59:72:b2:9a:f0:da:4a:5c:e0: d2:3c:78:90:6f:42:ca:09:0b:21:86:0d:f8:35:46:61:3e:2a: 00:29:c7:3c:31:21:20:91:87:38:33:a4:35:3a:4b:dd:90:d8: 31:2e:4e:cb:26:35:fb:df:3c:93:f5:39:f0:10:3a:ae:dd:ed: 23:db:dc:a7:ed:5d:d8:bc:42:fa:8d:7b:72:8c:0e:24:f8:1f: d5:44:53:25 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6W0DeHvnIBSkKnsqz8Ou/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMWQ0MDYwZmQ1MDFlYmFlOTNlZDQ0ZGE2YjdhNzllNjY3 MDViMmYwHhcNMjYwMTAxMTYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTAxZWI3NTZhYTVjZjY1MmExOGEwOGJjZTU0ZTI2Mzg0YWY3YzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vhhOCfm4jh0AzVK59m2SYJlGq4A qq+LY1YVmlaTwDhyqX37p2oQvsl7VeObvowZ1SBJWmTDPbkZElsjAdFhqUWclk+f LKUCa5xs6fDFMEUMhGvHeRplUHQad354dHg71wE1klehyMjRNlUj7TykZ0n8WJc8 1jgf273Okslwz1A5gpnz+41Li3JEbKZsCWqrzzoYoystD8JCYR604REt+G5C6unf HmWss22duxfJKoY4Vfom4/aQ1Hexo/XXlostwjTsk9Urv6LYaTe/kGqx0flY/ErR Q9jnYVZokZohcxZaTGCqvq7Aaul4gKjndPnnjB7bS0KWyyS++5RMCRNrxwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCUB63Vqpc9lKhigi85U4mOEr3x+MB8GA1UdIwQY MBaAFF4dQGD9UB666T7UTaa3p55mcFsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hNzBhODQtZjU1Mi00MzU0LWExMDQt MGUxZGI5OGFkMjMxLzEvSlFIcmRXcWx6MlVxR0tDTHpsVGlZNFN2Zkg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hNzBhODQtZjU1Mi00MzU0LWExMDQtMGUxZGI5OGFkMjMx LzEvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCsDW8MA0E AgACMAcDBQMqCeEAMA0GCSqGSIb3DQEBCwUAA4IBAQBunaIUUZPYZntXCnXa+8VY t8AIQ2uHaqxJ7N6t8Xi7YUuMGYiqg4svptfe15rTFu5z+CCicyGqQQp9MX5kJVvj 9CVsWR3EgbTtM0YHc37lOtvRdUEXp0IrzW2I8gueG7nXCYfma6nInMqvIzXvAqIu qxIK6YjtSxt2NyixXLtK0cODqb/h3iUyv9/eZrU0PNJ46K8p7JkSR0MuxpVOReQx sdhCxCPS/QwMIPZZcrKa8NpKXODSPHiQb0LKCQshhg34NUZhPioAKcc8MSEgkYc4 M6Q1OkvdkNgxLk7LJjX73zyT9TnwEDqu3e0j29yn7V3YvEL6jXtyjA4k+B/VRFMl -----END CERTIFICATE-----Generated at Fri Jan 2 11:34:41 2026 by rpki-client