This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/qrwmnr0OEc9nAnaMZvs0-umIs9w.roa File: qrwmnr0OEc9nAnaMZvs0-umIs9w.roa (raw, json) Hash identifier: PZB6TM1PU5xxv8QQowAJ7WYR8h3/v/M9wazTIxePSNk= Subject key identifier: AA:BC:26:9E:BD:0E:11:CF:67:02:76:8C:66:FB:34:FA:E9:88:B3:DC Certificate issuer: /CN=0b35acbf30559668ea18ea3f10b297ee64c8e493 Certificate serial: 019B7AC7F8EEFE4D62AE154D7796FCA184AF Authority key identifier: 0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/qrwmnr0OEc9nAnaMZvs0-umIs9w.roa Signing time: Thu 01 Jan 2026 18:18:04 +0000 ROA not before: Thu 01 Jan 2026 18:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212886 IP address blocks: 193.107.76.0/22 maxlen: 22 2a09:99c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 21:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:f8:ee:fe:4d:62:ae:15:4d:77:96:fc:a1:84:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b35acbf30559668ea18ea3f10b297ee64c8e493 Validity Not Before: Jan 1 18:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aabc269ebd0e11cf6702768c66fb34fae988b3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:49:99:ab:b2:85:fc:a2:64:62:02:01:6f:f9: c1:96:69:2b:07:fa:5c:9e:01:04:f2:4c:da:ba:93: a7:b5:43:6d:52:23:60:62:80:4f:4e:e8:d7:31:d4: dc:11:00:f5:db:25:0d:fc:f9:3c:ea:8a:94:4c:e1: f1:82:1b:01:34:65:f0:d4:80:5d:c1:fe:a2:01:f9: fb:8c:4e:71:a8:99:e0:b8:23:b2:57:fd:c5:99:0e: ca:4e:76:1c:78:0d:d9:b8:fb:18:7a:e9:01:89:85: 6c:97:75:5f:a1:e4:7f:56:94:03:ee:4f:d4:27:56: c4:f8:b5:d9:2e:ab:32:44:a8:7b:d0:91:8b:08:e1: 1a:ce:18:d0:3b:6e:e4:2f:c9:fc:28:b7:99:23:bd: e6:37:e3:0c:63:e9:9c:4d:d4:82:29:ae:6a:5c:45: 42:0d:21:6b:29:d6:f4:7a:cb:a3:8d:06:34:af:2e: 18:11:50:09:41:28:67:7c:07:66:a5:78:80:a2:e0: d0:90:3f:5a:ff:64:f2:d3:2e:e7:de:9e:00:51:2c: ea:3d:5a:6a:af:08:ea:b2:68:46:fd:ea:50:65:d9: a8:67:e6:ee:73:21:46:3b:40:35:3d:39:8c:1d:1c: 3e:cd:d3:fe:83:e3:67:4f:c6:2a:95:4d:00:17:72: db:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BC:26:9E:BD:0E:11:CF:67:02:76:8C:66:FB:34:FA:E9:88:B3:DC X509v3 Authority Key Identifier: keyid:0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/qrwmnr0OEc9nAnaMZvs0-umIs9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.107.76.0/22 IPv6: 2a09:99c0::/48 Signature Algorithm: sha256WithRSAEncryption 70:bf:fc:76:ea:26:45:c1:c2:33:f7:6b:d3:12:78:5d:8d:3e: f6:ce:ed:c9:df:ea:0b:2c:35:05:ba:39:cc:7b:84:a9:58:19: 20:0f:39:96:f8:fb:8a:40:9c:7e:20:fe:29:2a:3f:69:ba:46: 93:43:45:07:4a:a2:9d:bd:c5:32:a6:b3:db:87:f3:b1:00:55: 35:81:9f:4e:44:a4:e9:aa:32:fb:57:1a:5d:84:af:4c:3c:03: 38:71:75:ca:bb:93:40:91:76:00:13:1d:9a:ad:04:db:fc:f1: a6:4c:01:00:4f:3a:8f:fc:6f:a0:90:79:e4:86:e3:4a:3d:46: 79:2e:c6:ed:96:e6:af:ed:09:e4:72:97:cf:cc:af:43:de:68: 5f:0a:17:7b:ef:1d:ff:43:78:a2:88:e2:47:80:d5:de:22:21: e6:c5:83:fc:e0:83:cb:6b:0c:c7:d8:b3:7e:5e:9a:2d:db:03: 5e:62:98:36:4f:ae:6a:39:fd:75:68:bb:26:3b:a6:99:48:8c: bf:25:08:a7:f6:84:22:86:72:a6:5d:d6:c1:9b:f4:82:d9:2d: d9:da:d3:dd:be:e9:eb:a7:bf:73:c9:51:26:fa:a8:0d:0d:c4: 90:83:da:68:d2:33:5f:29:ad:95:8c:db:c1:38:18:37:37:34: 22:a9:28:49 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6x/ju/k1irhVNd5b8oYSvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMzVhY2JmMzA1NTk2NjhlYTE4ZWEzZjEwYjI5N2VlNjRj OGU0OTMwHhcNMjYwMTAxMTgxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWJjMjY5ZWJkMGUxMWNmNjcwMjc2OGM2NmZiMzRmYWU5ODhiM2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkmZq7KF/KJkYgIBb/nBlmkrB/pc ngEE8kzaupOntUNtUiNgYoBPTujXMdTcEQD12yUN/Pk86oqUTOHxghsBNGXw1IBd wf6iAfn7jE5xqJnguCOyV/3FmQ7KTnYceA3ZuPsYeukBiYVsl3VfoeR/VpQD7k/U J1bE+LXZLqsyRKh70JGLCOEazhjQO27kL8n8KLeZI73mN+MMY+mcTdSCKa5qXEVC DSFrKdb0esujjQY0ry4YEVAJQShnfAdmpXiAouDQkD9a/2Ty0y7n3p4AUSzqPVpq rwjqsmhG/epQZdmoZ+bucyFGO0A1PTmMHRw+zdP+g+NnT8YqlU0AF3LbgQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKq8Jp69DhHPZwJ2jGb7NPrpiLPcMB8GA1UdIwQY MBaAFAs1rL8wVZZo6hjqPxCyl+5kyOSTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3pXc3Z6QlZsbWpxR09vX0VMS1g3bVRJNUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83MmZiNDUtMzBjNy00YTUzLWEyZGIt YjRjOWUyYjBkMTU2LzEvcXJ3bW5yME9FYzluQW5hTVp2czAtdW1Jczl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC83MmZiNDUtMzBjNy00YTUzLWEyZGItYjRjOWUyYjBkMTU2 LzEvQ3pXc3Z6QlZsbWpxR09vX0VMS1g3bVRJNUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwWtMMA8E AgACMAkDBwAqCZnAAAAwDQYJKoZIhvcNAQELBQADggEBAHC//HbqJkXBwjP3a9MS eF2NPvbO7cnf6gssNQW6Ocx7hKlYGSAPOZb4+4pAnH4g/ikqP2m6RpNDRQdKop29 xTKms9uH87EAVTWBn05EpOmqMvtXGl2Er0w8Azhxdcq7k0CRdgATHZqtBNv88aZM AQBPOo/8b6CQeeSG40o9Rnkuxu2W5q/tCeRyl8/Mr0PeaF8KF3vvHf9DeKKI4keA 1d4iIebFg/zgg8trDMfYs35emi3bA15imDZPrmo5/XVouyY7pplIjL8lCKf2hCKG cqZd1sGb9ILZLdna092+6eunv3PJUSb6qA0NxJCD2mjSM18prZWM28E4GDc3NCKp KEk= -----END CERTIFICATE-----Generated at Tue Jan 13 04:26:17 2026 by rpki-client