This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/QXeF25OGbnuOr9uEGYLmi4333us.roa File: QXeF25OGbnuOr9uEGYLmi4333us.roa (raw, json) Hash identifier: U+NoM5p+waivy224E792G2Ok6L+Fx75yI08TqzKALMY= Subject key identifier: 41:77:85:DB:93:86:6E:7B:8E:AF:DB:84:19:82:E6:8B:8D:F7:DE:EB Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C8014884C279A32ABD90361284804E7 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/QXeF25OGbnuOr9uEGYLmi4333us.roa Signing time: Fri 02 Jan 2026 02:18:47 +0000 ROA not before: Fri 02 Jan 2026 02:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 27822 IP address blocks: 194.2.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:14:88:4c:27:9a:32:ab:d9:03:61:28:48:04:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=417785db93866e7b8eafdb841982e68b8df7deeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8a:3d:07:2e:fd:69:1b:90:a7:71:10:68:80: f1:13:b2:8f:ef:de:74:3e:cd:af:60:ae:5f:86:88: 44:6d:a6:51:4e:91:81:18:4d:e6:47:cf:c2:86:fb: 38:6b:e3:a9:a5:1c:ec:33:fd:b4:1a:2e:3f:28:9b: 63:2a:ff:3b:79:4c:09:ab:9a:8c:d2:e6:f4:d0:20: f1:1f:16:44:bf:ab:e8:63:6c:40:9d:14:62:c8:0b: d4:f7:30:b0:b5:c8:e2:83:55:bb:c4:52:e5:84:95: fb:da:7f:46:7e:11:ae:81:54:8d:45:d5:e8:df:36: 89:8c:aa:5b:32:9d:3d:e8:fb:8a:01:97:e3:7f:7c: 57:e8:3f:b9:ce:0e:90:16:28:62:48:4c:7d:16:ab: ec:e8:3c:c5:be:22:22:a7:e5:13:ab:75:da:a1:df: 43:13:82:4b:09:a9:c0:01:08:5b:d3:7e:29:4b:83: 88:7e:e0:1f:fb:c0:5a:5c:98:0b:16:53:c9:ea:f3: 30:ca:e9:5e:3e:ff:b7:ea:d5:95:cf:92:28:3f:73: fb:21:81:35:c7:f8:ae:23:b6:ba:f1:fb:20:4d:df: f3:ec:80:50:31:2d:db:03:10:26:51:90:1b:a1:c3: 70:0b:2f:0f:00:67:14:b9:94:15:aa:4c:35:11:63: 99:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:77:85:DB:93:86:6E:7B:8E:AF:DB:84:19:82:E6:8B:8D:F7:DE:EB X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/QXeF25OGbnuOr9uEGYLmi4333us.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.2.69.0/24 Signature Algorithm: sha256WithRSAEncryption 64:77:b4:e6:24:0f:90:d3:d5:e5:fe:bc:7d:83:16:94:ac:fe: dd:27:fd:61:99:ba:ad:12:42:30:a2:16:02:a6:4a:9c:cc:62: d1:b6:75:2f:1c:d4:ad:c8:a3:9d:6f:38:0a:b6:d2:23:e1:42: c8:80:86:fb:a4:40:f8:a8:a8:48:0a:c1:b3:5f:2e:9b:36:f2: 4e:d6:c2:99:ec:b9:6e:c2:65:24:1c:be:6b:35:d9:74:07:82: 5a:ee:fd:a8:6d:6e:a7:46:b4:24:50:e9:e4:30:60:eb:dc:43: fc:db:5a:62:9c:5c:9a:e8:e4:0f:4b:73:c1:0f:2b:d0:91:d3: bf:f4:61:60:2d:27:0d:fe:8e:6e:21:81:2a:cd:74:22:ba:68: 8a:27:f3:db:57:d3:a3:ad:30:57:03:09:e8:2e:0b:14:aa:c2: 55:3f:d8:9d:cc:4d:8c:bb:a7:57:a6:e2:7e:14:1d:9d:e9:36: 03:c5:51:5c:fd:a2:4a:4d:d9:34:4d:50:3b:dd:51:f7:07:41: e4:cd:7f:e3:5a:73:06:5b:80:5c:58:f2:b8:36:62:2e:ec:60: 3e:cc:65:39:2e:96:81:96:07:c5:83:b8:75:47:29:01:c2:f4: 18:79:a0:fa:df:dc:9b:27:f8:fe:cd:01:ba:f4:f6:26:4e:9c: aa:d3:c7:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gBSITCeaMqvZA2EoSATnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTc3ODVkYjkzODY2ZTdiOGVhZmRiODQxOTgyZTY4YjhkZjdkZWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4o9By79aRuQp3EQaIDxE7KP7950 Ps2vYK5fhohEbaZRTpGBGE3mR8/Chvs4a+OppRzsM/20Gi4/KJtjKv87eUwJq5qM 0ub00CDxHxZEv6voY2xAnRRiyAvU9zCwtcjig1W7xFLlhJX72n9GfhGugVSNRdXo 3zaJjKpbMp096PuKAZfjf3xX6D+5zg6QFihiSEx9Fqvs6DzFviIip+UTq3Xaod9D E4JLCanAAQhb034pS4OIfuAf+8BaXJgLFlPJ6vMwyulePv+36tWVz5IoP3P7IYE1 x/iuI7a68fsgTd/z7IBQMS3bAxAmUZAbocNwCy8PAGcUuZQVqkw1EWOZ4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEF3hduThm57jq/bhBmC5ouN997rMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvUVhlRjI1T0dibnVPcjl1RUdZTG1pNDMzM3VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgJFMA0G CSqGSIb3DQEBCwUAA4IBAQBkd7TmJA+Q09Xl/rx9gxaUrP7dJ/1hmbqtEkIwohYC pkqczGLRtnUvHNStyKOdbzgKttIj4ULIgIb7pED4qKhICsGzXy6bNvJO1sKZ7Llu wmUkHL5rNdl0B4Ja7v2obW6nRrQkUOnkMGDr3EP821pinFya6OQPS3PBDyvQkdO/ 9GFgLScN/o5uIYEqzXQiumiKJ/PbV9OjrTBXAwnoLgsUqsJVP9idzE2Mu6dXpuJ+ FB2d6TYDxVFc/aJKTdk0TVA73VH3B0HkzX/jWnMGW4BcWPK4NmIu7GA+zGU5LpaB lgfFg7h1RykBwvQYeaD639ybJ/j+zQG69PYmTpyq08dN -----END CERTIFICATE-----Generated at Sat Jan 10 04:00:43 2026 by rpki-client