This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/qMa40C2bwbsuAhlKHVj7zBev3Sk.roa File: qMa40C2bwbsuAhlKHVj7zBev3Sk.roa (raw, json) Hash identifier: Q1yI4h86YGsQR3DwWZlfSBoYmM0cIR/AXm0wW8+aF5g= Subject key identifier: A8:C6:B8:D0:2D:9B:C1:BB:2E:02:19:4A:1D:58:FB:CC:17:AF:DD:29 Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496 Certificate serial: 019B7A599F73BD4F69844990A413DEC660CD Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/qMa40C2bwbsuAhlKHVj7zBev3Sk.roa Signing time: Thu 01 Jan 2026 16:17:32 +0000 ROA not before: Thu 01 Jan 2026 16:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 193.189.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 22:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:9f:73:bd:4f:69:84:49:90:a4:13:de:c6:60:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496 Validity Not Before: Jan 1 16:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8c6b8d02d9bc1bb2e02194a1d58fbcc17afdd29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ab:d6:0a:9e:53:07:df:f4:56:a1:a6:d7:8b: fc:d3:76:96:79:f0:06:7a:12:a3:21:1e:99:ce:bc: 7c:a2:77:68:35:7f:7d:a3:ab:5f:7c:26:7c:68:59: 56:db:b0:a4:5c:be:c9:29:54:c8:8c:d8:0e:12:65: b8:63:e1:60:5e:4e:0f:11:16:d9:05:3e:8d:ba:00: 27:88:fb:a1:ad:da:72:20:71:6a:56:d8:d5:39:3a: 9b:d4:f2:16:0b:45:5e:82:50:32:ec:1e:30:22:05: 91:16:78:c6:3a:6e:87:aa:a0:78:9e:5a:92:03:23: ae:82:39:8e:f7:b2:66:3c:9f:97:31:51:12:f6:3a: 14:c4:52:5c:e7:8b:bc:d1:61:1d:93:c5:0f:2a:80: 8e:3f:61:2e:a8:39:b1:c1:7b:f0:7f:b8:b6:a7:36: 6c:4c:a0:9e:8a:06:90:34:84:24:04:2f:c0:40:b6: 2c:f0:d6:9b:0d:45:4c:55:c6:8c:9b:00:ae:d7:c4: fc:dd:28:7a:cd:84:5b:4b:69:94:8e:89:e3:67:e5: 6e:d3:f4:19:0b:a4:20:b0:f1:b6:26:ce:ec:05:f3: f2:b9:71:c3:ff:77:49:b8:c8:2c:2c:82:27:d3:b7: 57:3e:67:3f:5d:cf:01:7e:d2:01:55:f4:fc:65:37: b7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C6:B8:D0:2D:9B:C1:BB:2E:02:19:4A:1D:58:FB:CC:17:AF:DD:29 X509v3 Authority Key Identifier: keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/qMa40C2bwbsuAhlKHVj7zBev3Sk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.189.114.0/23 Signature Algorithm: sha256WithRSAEncryption 19:6c:d5:60:f6:3e:59:4f:4e:94:4c:0a:77:b0:1a:b0:28:e5: 16:91:2e:2a:a1:e1:4d:2c:38:92:64:98:f3:7f:ab:0c:24:84: d7:42:17:b4:64:a1:4d:48:53:8b:c0:c9:9c:91:fc:44:71:4d: 59:8e:28:0b:cc:b4:e4:0a:0c:ac:c1:37:d0:39:98:fd:55:96: a3:4a:b7:a1:06:25:62:79:f3:f4:0b:c4:e9:e8:e4:f8:28:97: 62:d0:d5:3a:b9:1d:eb:a3:d8:c3:a3:23:f3:e4:2d:77:f1:6f: d2:90:28:90:ab:99:de:13:f3:24:20:2b:42:50:b9:90:e7:29: d4:61:6b:68:6f:31:ac:7a:9e:de:c2:1b:ca:bb:dc:06:3a:51: c5:9f:39:35:85:50:e4:9e:5a:9b:ef:25:76:3a:21:d4:b2:f0: da:ca:31:50:40:be:43:2a:26:7e:c3:a9:f6:d4:11:37:76:fd: 94:b2:e0:4c:2a:af:46:d4:cb:72:b2:17:29:b2:71:63:e9:ea: ef:23:35:37:09:30:b2:ae:f2:bc:fa:27:d8:85:8d:98:11:13: de:69:36:a5:37:5a:73:15:27:4d:67:7f:e1:23:b5:86:9c:29: 85:ed:85:53:d0:0f:2b:95:01:08:0e:96:fe:5b:72:93:12:f7: 8d:83:b1:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WZ9zvU9phEmQpBPexmDNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MTA3MjkyMGQ4YzlhMmI0MGViM2EwNDVmMWYyYTZlMzM0 YTQ0OTYwHhcNMjYwMTAxMTYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGM2YjhkMDJkOWJjMWJiMmUwMjE5NGExZDU4ZmJjYzE3YWZkZDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqvWCp5TB9/0VqGm14v803aWefAG ehKjIR6Zzrx8ondoNX99o6tffCZ8aFlW27CkXL7JKVTIjNgOEmW4Y+FgXk4PERbZ BT6NugAniPuhrdpyIHFqVtjVOTqb1PIWC0VeglAy7B4wIgWRFnjGOm6HqqB4nlqS AyOugjmO97JmPJ+XMVES9joUxFJc54u80WEdk8UPKoCOP2EuqDmxwXvwf7i2pzZs TKCeigaQNIQkBC/AQLYs8NabDUVMVcaMmwCu18T83Sh6zYRbS2mUjonjZ+Vu0/QZ C6QgsPG2Js7sBfPyuXHD/3dJuMgsLIIn07dXPmc/Xc8BftIBVfT8ZTe3kQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKjGuNAtm8G7LgIZSh1Y+8wXr90pMB8GA1UdIwQY MBaAFHcQcpINjJorQOs6BF8fKm4zSkSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHhCeWtnMk1taXRBNnpvRVh4OHFiak5LUkpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC85ZWMxMzQtZjA0Zi00NDIzLThiZTUt N2Y1ZTE3NTlmODRlLzEvcU1hNDBDMmJ3YnN1QWhsS0hWajd6QmV2M1NrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC85ZWMxMzQtZjA0Zi00NDIzLThiZTUtN2Y1ZTE3NTlmODRl LzEvZHhCeWtnMk1taXRBNnpvRVh4OHFiak5LUkpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwb1yMA0G CSqGSIb3DQEBCwUAA4IBAQAZbNVg9j5ZT06UTAp3sBqwKOUWkS4qoeFNLDiSZJjz f6sMJITXQhe0ZKFNSFOLwMmckfxEcU1ZjigLzLTkCgyswTfQOZj9VZajSrehBiVi efP0C8Tp6OT4KJdi0NU6uR3ro9jDoyPz5C138W/SkCiQq5neE/MkICtCULmQ5ynU YWtobzGsep7ewhvKu9wGOlHFnzk1hVDknlqb7yV2OiHUsvDayjFQQL5DKiZ+w6n2 1BE3dv2UsuBMKq9G1MtyshcpsnFj6ervIzU3CTCyrvK8+ifYhY2YERPeaTalN1pz FSdNZ3/hI7WGnCmF7YVT0A8rlQEIDpb+W3KTEveNg7Gn -----END CERTIFICATE-----Generated at Wed Jan 7 07:16:28 2026 by rpki-client