This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/q6jiQ8kIIOAVEl2Xp2qX5_pMoSI.roa File: q6jiQ8kIIOAVEl2Xp2qX5_pMoSI.roa (raw, json) Hash identifier: nTyqp5QiWNzkKcVcQsp2jGxyBaOXuQpq1p5YA426WVE= Subject key identifier: AB:A8:E2:43:C9:08:20:E0:15:12:5D:97:A7:6A:97:E7:FA:4C:A1:22 Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778 Certificate serial: 019B7C80782990BFAF5693307A3E3DDBEA28 Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/q6jiQ8kIIOAVEl2Xp2qX5_pMoSI.roa Signing time: Fri 02 Jan 2026 02:19:12 +0000 ROA not before: Fri 02 Jan 2026 02:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20813 IP address blocks: 193.108.160.0/23 maxlen: 23 194.24.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:78:29:90:bf:af:56:93:30:7a:3e:3d:db:ea:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778 Validity Not Before: Jan 2 02:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aba8e243c90820e015125d97a76a97e7fa4ca122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:53:1c:fe:63:b8:5e:2d:8a:0f:1c:f1:9f:eb: fe:86:3c:c0:00:58:75:ff:6c:15:bf:ba:74:4b:68: ca:3f:cc:76:d1:97:a2:b5:e1:42:89:be:af:bc:3d: fd:86:7f:60:11:8b:0f:48:cc:e2:12:a5:38:5b:93: 43:f8:69:37:c1:36:4f:de:95:8b:67:a8:dd:f7:cb: a6:15:9e:4c:57:a5:15:ad:ab:3e:8b:94:9e:cb:38: 0f:66:c4:92:6d:46:81:c1:d8:12:3f:8e:4d:d6:3d: e2:9e:9a:7b:18:eb:f8:72:5c:76:13:b5:12:c6:d7: c3:dc:39:ed:69:7c:27:cb:0f:fa:52:8c:13:d7:3d: 5f:b7:17:26:80:df:48:e5:c9:c4:2c:5a:6e:b9:24: 5c:ad:c5:71:99:28:74:b2:94:6b:a9:21:ce:f8:ed: 9f:11:6a:2e:a0:ef:cf:af:7c:19:56:76:cb:d6:35: 8e:4a:ae:7e:bf:e9:e8:11:a3:74:bd:2c:87:4a:96: 43:cf:81:62:16:08:01:ef:40:ad:33:9d:02:4a:ee: 1e:30:91:62:be:70:5b:ab:b6:40:ac:2e:80:03:b7: 6c:f6:a7:4d:b1:fc:0d:c3:ab:e5:00:1f:6a:f9:af: 94:40:9f:9c:76:82:9b:75:74:4d:df:b1:b9:78:e6: 37:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A8:E2:43:C9:08:20:E0:15:12:5D:97:A7:6A:97:E7:FA:4C:A1:22 X509v3 Authority Key Identifier: keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/q6jiQ8kIIOAVEl2Xp2qX5_pMoSI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.160.0/23 194.24.226.0/23 Signature Algorithm: sha256WithRSAEncryption 00:ed:c1:be:ed:62:d9:c5:ed:cd:f9:be:7e:2d:b5:4d:fb:c9: 34:e1:a9:e8:cc:60:d5:e8:6c:f1:d5:51:d4:36:5a:d2:bf:d1: 67:4c:57:0c:b8:99:41:fe:9d:8e:3e:3e:bb:52:d3:b3:63:6a: 05:95:17:10:18:c7:72:65:8e:f5:98:54:72:14:7f:06:3d:60: 1e:1f:72:fa:8f:79:56:67:c4:15:07:ff:55:b1:94:fe:48:3c: ae:a1:1e:c8:e1:c1:37:6a:76:1b:d6:89:d7:f6:8c:49:6c:76: 2f:fe:15:82:a3:27:56:54:9e:be:8f:63:4c:cb:af:08:6f:fd: 85:3e:f9:30:66:38:0c:d5:1b:90:1e:03:95:97:31:0e:34:b4: ab:83:76:c4:4d:77:85:b7:12:73:7e:dd:c5:9f:65:f0:ed:f9: 9b:83:6a:6e:e0:8d:a0:01:c8:d4:f7:05:91:9f:8d:92:fb:38: fd:be:db:f4:ac:1f:a8:26:2f:66:93:83:7a:c3:f0:09:12:ef: 84:2b:3b:50:00:08:08:3c:16:ee:86:ac:35:07:30:0d:c8:d1: 81:c7:94:b1:d1:82:84:3a:af:af:b7:69:1c:1a:52:8f:9f:c3: bf:4f:5f:d3:c9:5c:17:a9:75:2c:dc:27:45:dc:57:55:b8:55: 88:6c:2c:7d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gHgpkL+vVpMwej492+ooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NDRlMjY2ZDRlYjljYzdkZWQyOTJjMTJiMDZiMWNhN2Jj ZWE3NzgwHhcNMjYwMTAyMDIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmE4ZTI0M2M5MDgyMGUwMTUxMjVkOTdhNzZhOTdlN2ZhNGNhMTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlMc/mO4Xi2KDxzxn+v+hjzAAFh1 /2wVv7p0S2jKP8x20ZeiteFCib6vvD39hn9gEYsPSMziEqU4W5ND+Gk3wTZP3pWL Z6jd98umFZ5MV6UVras+i5SeyzgPZsSSbUaBwdgSP45N1j3inpp7GOv4clx2E7US xtfD3DntaXwnyw/6UowT1z1ftxcmgN9I5cnELFpuuSRcrcVxmSh0spRrqSHO+O2f EWouoO/Pr3wZVnbL1jWOSq5+v+noEaN0vSyHSpZDz4FiFggB70CtM50CSu4eMJFi vnBbq7ZArC6AA7ds9qdNsfwNw6vlAB9q+a+UQJ+cdoKbdXRN37G5eOY3xQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKuo4kPJCCDgFRJdl6dql+f6TKEiMB8GA1UdIwQY MBaAFOVE4mbU65zH3tKSwSsGscp7zqd4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iZmY3OTktOWUzMi00M2JlLTg1Y2Qt ODI0NzYwNzE0ZGZiLzEvcTZqaVE4a0lJT0FWRWwyWHAycVg1X3BNb1NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9iZmY3OTktOWUzMi00M2JlLTg1Y2QtODI0NzYwNzE0ZGZi LzEvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwWygAwQB whjiMA0GCSqGSIb3DQEBCwUAA4IBAQAA7cG+7WLZxe3N+b5+LbVN+8k04anozGDV 6Gzx1VHUNlrSv9FnTFcMuJlB/p2OPj67UtOzY2oFlRcQGMdyZY71mFRyFH8GPWAe H3L6j3lWZ8QVB/9VsZT+SDyuoR7I4cE3anYb1onX9oxJbHYv/hWCoydWVJ6+j2NM y68Ib/2FPvkwZjgM1RuQHgOVlzEONLSrg3bETXeFtxJzft3Fn2Xw7fmbg2pu4I2g AcjU9wWRn42S+zj9vtv0rB+oJi9mk4N6w/AJEu+EKztQAAgIPBbuhqw1BzANyNGB x5Sx0YKEOq+vt2kcGlKPn8O/T1/TyVwXqXUs3CdF3FdVuFWIbCx9 -----END CERTIFICATE-----Generated at Sun Jan 11 23:47:28 2026 by rpki-client