This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/qg0FwZYThoJPEEVuEPuXUoqRZhQ.roa File: qg0FwZYThoJPEEVuEPuXUoqRZhQ.roa (raw, json) Hash identifier: vLVUscpAnWQjrZiBQs7cgVM6cDYZNsv2RGlwep1lIic= Subject key identifier: AA:0D:05:C1:96:13:86:82:4F:10:45:6E:10:FB:97:52:8A:91:66:14 Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Certificate serial: 019B7F1585E6AF767EBC516A3E32BA25927F Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/qg0FwZYThoJPEEVuEPuXUoqRZhQ.roa Signing time: Fri 02 Jan 2026 14:21:15 +0000 ROA not before: Fri 02 Jan 2026 14:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216003 IP address blocks: 89.29.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:85:e6:af:76:7e:bc:51:6a:3e:32:ba:25:92:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Validity Not Before: Jan 2 14:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa0d05c1961386824f10456e10fb97528a916614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e9:9c:88:3f:1e:25:19:e9:7e:ce:35:07:aa: ea:62:c8:b6:7f:1d:0f:7e:5f:3d:66:04:45:3a:e7: 61:36:93:30:34:4e:35:a9:a6:86:e3:92:5a:1b:d5: 97:a9:98:bb:03:37:1d:39:bb:a1:a1:4a:47:78:30: 56:4d:72:54:eb:a3:0b:ad:be:e6:ed:a3:91:11:18: db:93:01:04:69:5b:8b:c1:7c:62:90:b7:47:40:36: e0:a5:ba:26:02:bd:d3:5c:1c:cb:f6:0e:05:63:51: e9:9e:c6:b4:2b:83:9b:89:89:ee:4b:99:b2:44:31: 10:53:a4:9d:b3:10:81:46:6a:51:19:fe:a4:3d:68: 86:74:fc:58:32:c3:a8:1f:6e:50:b0:24:0d:c6:58: 0e:0a:3b:e3:fc:04:fa:d6:8a:d5:9b:39:1f:93:f0: 2a:f6:59:43:0a:8a:98:98:ab:f0:b6:c8:ad:87:6b: d9:50:d6:c1:d7:91:60:6a:d6:3a:9c:20:ca:44:6e: 5e:aa:a0:34:07:88:e2:b3:de:35:e4:18:6b:bf:7e: 9b:f5:2c:d2:49:59:ab:4b:5c:ce:4f:c1:fa:41:39: 3a:6c:e9:52:17:c3:45:f1:32:ae:0c:87:9a:61:68: dc:43:fa:a0:94:d7:f5:f0:07:f3:41:8b:9a:70:91: da:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0D:05:C1:96:13:86:82:4F:10:45:6E:10:FB:97:52:8A:91:66:14 X509v3 Authority Key Identifier: keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/qg0FwZYThoJPEEVuEPuXUoqRZhQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.29.252.0/24 Signature Algorithm: sha256WithRSAEncryption a5:19:b1:18:18:1a:11:cd:62:5d:ac:0a:a4:aa:10:7b:d0:90: d4:ea:3c:cb:57:4b:18:f5:c3:df:f8:e4:03:2c:cc:9e:f9:1c: 3f:58:50:82:5f:9e:da:86:3b:86:28:4b:a6:96:f6:43:02:78: 72:ec:16:e3:92:32:22:e2:7e:08:31:f3:5e:d3:0c:9d:21:cb: 6b:95:2b:f3:90:e8:43:5e:dd:01:e6:17:72:27:bf:3f:38:48: 05:0a:61:8c:89:de:3a:f3:d3:de:3a:0a:db:89:32:2c:af:dd: 56:70:ed:cf:76:46:fb:ea:61:9c:77:62:9d:01:b2:24:9d:94: 92:d8:d1:a2:77:9d:a7:b2:d9:ff:c6:29:30:0e:16:94:52:94: 53:bc:eb:7b:4c:ff:f2:79:a1:c9:e0:33:6e:a3:d5:cc:6f:54: 9d:88:07:4f:1f:01:89:20:a8:09:08:d6:52:30:e9:4b:fd:a4: 6a:d3:d5:0d:e4:5f:ba:39:cc:7d:8c:df:c2:d4:3a:a9:f3:08: 0e:8e:8e:4c:7d:d3:2c:4a:4d:07:39:0f:51:c9:ab:bc:08:be: 24:e5:5e:20:5c:62:02:96:14:9e:65:c1:ed:2f:3d:a4:70:f2: 15:32:e5:05:c8:88:e5:de:73:61:3b:4f:e3:cc:1a:84:bc:db: 85:31:7f:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FYXmr3Z+vFFqPjK6JZJ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MmM0MTVkMTc3NWFlOTk5M2U5MDBhNzUzNmI0NmFiMTQ0 YTlhYTIwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTBkMDVjMTk2MTM4NjgyNGYxMDQ1NmUxMGZiOTc1MjhhOTE2NjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOmciD8eJRnpfs41B6rqYsi2fx0P fl89ZgRFOudhNpMwNE41qaaG45JaG9WXqZi7AzcdObuhoUpHeDBWTXJU66MLrb7m 7aORERjbkwEEaVuLwXxikLdHQDbgpbomAr3TXBzL9g4FY1Hpnsa0K4ObiYnuS5my RDEQU6SdsxCBRmpRGf6kPWiGdPxYMsOoH25QsCQNxlgOCjvj/AT61orVmzkfk/Aq 9llDCoqYmKvwtsith2vZUNbB15FgatY6nCDKRG5eqqA0B4jis9415Bhrv36b9SzS SVmrS1zOT8H6QTk6bOlSF8NF8TKuDIeaYWjcQ/qglNf18AfzQYuacJHa+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKoNBcGWE4aCTxBFbhD7l1KKkWYUMB8GA1UdIwQY MBaAFOksQV0Xda6Zk+kAp1NrRqsUSpqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQt MWQ5MzRhMDQ4NDc0LzEvcWcwRndaWVRob0pQRUVWdUVQdVhVb3FSWmhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQtMWQ5MzRhMDQ4NDc0 LzEvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWR38MA0G CSqGSIb3DQEBCwUAA4IBAQClGbEYGBoRzWJdrAqkqhB70JDU6jzLV0sY9cPf+OQD LMye+Rw/WFCCX57ahjuGKEumlvZDAnhy7BbjkjIi4n4IMfNe0wydIctrlSvzkOhD Xt0B5hdyJ78/OEgFCmGMid4689PeOgrbiTIsr91WcO3Pdkb76mGcd2KdAbIknZSS 2NGid52nstn/xikwDhaUUpRTvOt7TP/yeaHJ4DNuo9XMb1SdiAdPHwGJIKgJCNZS MOlL/aRq09UN5F+6Ocx9jN/C1Dqp8wgOjo5MfdMsSk0HOQ9Ryau8CL4k5V4gXGIC lhSeZcHtLz2kcPIVMuUFyIjl3nNhO0/jzBqEvNuFMX8+ -----END CERTIFICATE-----Generated at Sat Jan 3 06:28:54 2026 by rpki-client