This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/qVEqTtkKfrVc5YzchSUNgfDRorc.roa File: qVEqTtkKfrVc5YzchSUNgfDRorc.roa (raw, json) Hash identifier: K5fpw+GM90GMUvrPrbhqWZwOZsGaqvdsEI7pyNmXxYI= Subject key identifier: A9:51:2A:4E:D9:0A:7E:B5:5C:E5:8C:DC:85:25:0D:81:F0:D1:A2:B7 Certificate issuer: /CN=3fda630213cd423880f9fef16d78fb436e08f247 Certificate serial: 019B797F26B2AA22159DEBA20B99086685C0 Authority key identifier: 3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/qVEqTtkKfrVc5YzchSUNgfDRorc.roa Signing time: Thu 01 Jan 2026 12:18:54 +0000 ROA not before: Thu 01 Jan 2026 12:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34794 IP address blocks: 193.194.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 12:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:26:b2:aa:22:15:9d:eb:a2:0b:99:08:66:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fda630213cd423880f9fef16d78fb436e08f247 Validity Not Before: Jan 1 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9512a4ed90a7eb55ce58cdc85250d81f0d1a2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ac:40:0a:59:6b:19:b4:52:e0:16:ee:2a:fc: ea:79:13:47:01:4d:0e:e4:1e:45:8b:54:ae:7b:4a: 77:a4:c7:2b:a9:74:06:6d:c8:ac:38:02:9a:7c:9e: c9:9f:fe:01:0e:e7:ed:28:4d:f6:01:08:55:0d:cd: fc:a4:4d:78:6c:cc:13:d6:f6:96:8d:63:29:ba:6c: f0:da:70:d3:1c:0c:37:b8:83:9e:3a:fa:4c:e9:4d: a8:64:8d:e9:cf:9f:4f:a2:02:2e:4d:bf:7f:03:66: e2:ec:e7:eb:00:e6:48:a8:9d:49:74:9d:f9:87:4f: 9a:44:39:16:d5:e5:ad:c1:2f:ea:02:12:a1:65:3e: 37:6c:7e:e8:11:58:4a:46:e5:2d:bb:00:28:16:7b: bf:09:7e:55:c7:d5:84:50:df:e6:20:83:90:f4:6d: 14:95:47:c0:bd:9e:f5:86:a3:73:28:7e:b3:49:25: 09:ce:a3:92:cc:7d:c2:f0:f6:27:e3:c3:cd:12:3a: eb:c4:f2:e2:23:ef:93:54:9f:c7:60:a3:be:60:76: 65:9d:53:7c:f1:61:0e:d6:2a:6e:a9:ce:74:6b:8c: 22:05:a9:b4:64:6c:2b:bf:61:aa:9d:9f:e1:cc:c7: 31:23:75:bd:3d:8f:4e:81:4e:d0:29:2d:14:15:e7: 19:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:51:2A:4E:D9:0A:7E:B5:5C:E5:8C:DC:85:25:0D:81:F0:D1:A2:B7 X509v3 Authority Key Identifier: keyid:3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/qVEqTtkKfrVc5YzchSUNgfDRorc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.194.0.0/24 Signature Algorithm: sha256WithRSAEncryption a7:55:50:52:b1:51:a1:b6:f7:93:79:00:f3:70:56:00:2e:8a: a5:5b:a0:4d:0a:dd:e5:2b:5f:97:a7:ef:d8:6b:16:6c:27:94: 11:c0:3c:50:7a:73:02:42:f7:b5:5a:0e:e8:52:bf:83:d4:f7: f6:99:de:2a:7e:ca:e0:34:42:7a:66:97:86:88:d5:1f:e8:3d: 62:2e:a2:36:99:b5:ac:30:fb:4a:bc:ba:27:8c:0c:a0:22:b3: 41:78:73:9d:d5:a6:c5:24:d9:87:99:48:07:8d:38:4e:24:c0: 3f:d0:de:07:1f:78:22:67:6e:c5:7b:f3:b6:10:c1:af:fb:18: e4:67:d4:96:79:1b:82:e4:68:9a:fc:76:8c:dc:04:6d:16:91: 36:e7:35:94:1b:63:58:48:a4:73:29:6c:42:20:d0:58:58:f6: 03:16:5a:ab:d8:7c:81:cb:57:b7:51:13:7c:ca:33:37:b9:59: 66:f4:fa:9d:aa:20:9d:f5:56:15:11:67:a5:b0:d5:f2:b3:4f: c2:e3:fb:0c:49:be:ce:40:9f:2a:21:57:e6:07:c8:b5:d8:ff: 36:28:ec:d6:60:54:45:97:d5:8c:9f:d9:d3:1f:e7:a8:bd:5f: 22:66:c4:e0:b5:c7:3d:08:36:d7:e5:37:3f:6c:53:19:ba:43: 7e:9b:9c:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fyayqiIVneuiC5kIZoXAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZGE2MzAyMTNjZDQyMzg4MGY5ZmVmMTZkNzhmYjQzNmUw OGYyNDcwHhcNMjYwMTAxMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTUxMmE0ZWQ5MGE3ZWI1NWNlNThjZGM4NTI1MGQ4MWYwZDFhMmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraxACllrGbRS4BbuKvzqeRNHAU0O 5B5Fi1Sue0p3pMcrqXQGbcisOAKafJ7Jn/4BDuftKE32AQhVDc38pE14bMwT1vaW jWMpumzw2nDTHAw3uIOeOvpM6U2oZI3pz59PogIuTb9/A2bi7OfrAOZIqJ1JdJ35 h0+aRDkW1eWtwS/qAhKhZT43bH7oEVhKRuUtuwAoFnu/CX5Vx9WEUN/mIIOQ9G0U lUfAvZ71hqNzKH6zSSUJzqOSzH3C8PYn48PNEjrrxPLiI++TVJ/HYKO+YHZlnVN8 8WEO1ipuqc50a4wiBam0ZGwrv2GqnZ/hzMcxI3W9PY9OgU7QKS0UFecZiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKlRKk7ZCn61XOWM3IUlDYHw0aK3MB8GA1UdIwQY MBaAFD/aYwITzUI4gPn+8W14+0NuCPJHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My81NGM2OTEtOWZiYi00MzhhLWE1NWYt MzgyMzdmZTRlNDE0LzEvcVZFcVR0a0tmclZjNVl6Y2hTVU5nZkRSb3JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My81NGM2OTEtOWZiYi00MzhhLWE1NWYtMzgyMzdmZTRlNDE0 LzEvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcIAMA0G CSqGSIb3DQEBCwUAA4IBAQCnVVBSsVGhtveTeQDzcFYALoqlW6BNCt3lK1+Xp+/Y axZsJ5QRwDxQenMCQve1Wg7oUr+D1Pf2md4qfsrgNEJ6ZpeGiNUf6D1iLqI2mbWs MPtKvLonjAygIrNBeHOd1abFJNmHmUgHjThOJMA/0N4HH3giZ27Fe/O2EMGv+xjk Z9SWeRuC5Gia/HaM3ARtFpE25zWUG2NYSKRzKWxCINBYWPYDFlqr2HyBy1e3URN8 yjM3uVlm9PqdqiCd9VYVEWelsNXys0/C4/sMSb7OQJ8qIVfmB8i12P82KOzWYFRF l9WMn9nTH+eovV8iZsTgtcc9CDbX5Tc/bFMZukN+m5xg -----END CERTIFICATE-----Generated at Thu Jan 1 21:24:03 2026 by rpki-client