This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/rqNF1I8XEuKDsKwv-z0vODcozOI.roa File: rqNF1I8XEuKDsKwv-z0vODcozOI.roa (raw, json) Hash identifier: XEf3TPaRLCkLG6LuuSH50p5GGro0k1ye4U4n69uzWYI= Subject key identifier: AE:A3:45:D4:8F:17:12:E2:83:B0:AC:2F:FB:3D:2F:38:37:28:CC:E2 Certificate issuer: /CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2 Certificate serial: 019B7A5B18E6816D928756AF9422E144ED96 Authority key identifier: C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/rqNF1I8XEuKDsKwv-z0vODcozOI.roa Signing time: Thu 01 Jan 2026 16:19:09 +0000 ROA not before: Thu 01 Jan 2026 16:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35280 IP address blocks: 194.33.68.0/24 maxlen: 24 194.33.70.0/23 maxlen: 23 2001:67c:2994::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:18:e6:81:6d:92:87:56:af:94:22:e1:44:ed:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2 Validity Not Before: Jan 1 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aea345d48f1712e283b0ac2ffb3d2f383728cce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:82:a0:82:fa:a5:6e:0b:78:82:3b:c0:12:71: c4:bc:4e:51:4f:80:17:a2:15:a5:25:f7:5a:2e:5a: 1f:1d:51:32:5e:f4:e6:30:0c:f2:26:34:31:66:d6: 89:2b:c5:c8:c7:8a:10:02:91:2d:28:d1:d6:8d:d2: 52:3b:68:ab:26:1f:c4:ba:12:c2:23:23:fa:54:f6: 9b:4a:e0:30:05:7b:6c:10:11:b9:3f:d1:cb:e8:48: 02:49:66:c8:02:ac:fb:9a:75:14:86:25:f6:a1:c2: b3:19:23:28:af:3c:4e:a1:82:4b:ca:4a:66:e8:6d: e1:78:63:a9:fa:61:8d:9a:8d:d2:c6:e5:ce:de:8b: 04:08:bc:7c:59:2f:77:d6:4a:70:71:21:56:44:9d: 3a:d5:07:2c:d5:39:ac:b3:d7:c3:5d:1b:e8:a5:ed: db:1e:17:ed:ed:e0:e2:97:aa:58:0d:31:60:ab:ab: a6:6b:95:dc:8b:ca:4c:27:82:f6:a3:44:f8:3a:36: ab:1a:d8:4f:e1:05:e7:2a:33:7a:46:40:49:25:1c: cc:1b:d1:41:97:b7:f4:bd:2a:95:0b:88:54:ea:12: ac:f6:52:47:c6:5b:6f:cb:de:fb:a2:0a:e3:87:d8: e1:f5:17:9d:83:1d:df:22:f5:dd:dd:2f:96:08:e0: 66:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A3:45:D4:8F:17:12:E2:83:B0:AC:2F:FB:3D:2F:38:37:28:CC:E2 X509v3 Authority Key Identifier: keyid:C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/rqNF1I8XEuKDsKwv-z0vODcozOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.68.0/24 194.33.70.0/23 IPv6: 2001:67c:2994::/48 Signature Algorithm: sha256WithRSAEncryption 66:4f:9e:23:57:79:89:fc:1a:1b:1a:60:c8:7f:f4:10:9f:f3: 75:e2:bc:b2:ea:b6:4e:c5:9c:e9:99:ef:1c:7a:1f:2d:f6:3e: 38:15:12:03:66:71:9d:a8:04:c3:02:01:df:ac:43:ec:0c:d4: 54:a8:4e:44:cc:97:45:cb:bf:c1:37:b6:f9:92:82:b5:37:c9: 6a:6f:c1:bb:e7:b8:28:60:e2:bc:e6:78:69:3e:90:2d:40:3f: 10:4f:0f:85:41:d9:bd:fc:3d:83:02:9c:db:96:b7:02:38:47: 50:47:29:8d:68:62:b5:b3:b4:7b:e1:8d:d8:52:ad:12:63:28: 39:f3:d4:ba:23:45:9a:ff:34:f3:26:ed:78:0f:36:ee:be:18: ac:4c:db:23:5a:8f:09:7e:d8:78:8e:4e:97:19:21:bc:70:a8: f3:ac:06:01:86:2a:29:b4:85:e5:6e:0a:d5:4c:a7:e6:dd:98: db:53:34:de:3f:47:f9:8c:fd:df:23:7e:bc:49:88:3a:18:05: 88:32:f3:d3:23:ed:58:6f:fb:0a:30:49:d4:b7:a1:e9:1f:10: b0:06:b5:0a:2e:4d:01:a9:30:d1:77:4b:24:6e:f6:8c:a3:b5: d2:dd:f4:da:b7:7a:ca:0f:d8:cf:ab:e6:34:0e:24:01:de:9e: 0f:5e:38:6e -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6WxjmgW2Sh1avlCLhRO2WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YTJlNGViOWZkM2NjZDFiYTQ0YTM2MmY3NmY5ODliN2I0 NGQ1ZjIwHhcNMjYwMTAxMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWEzNDVkNDhmMTcxMmUyODNiMGFjMmZmYjNkMmYzODM3MjhjY2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4Kggvqlbgt4gjvAEnHEvE5RT4AX ohWlJfdaLlofHVEyXvTmMAzyJjQxZtaJK8XIx4oQApEtKNHWjdJSO2irJh/EuhLC IyP6VPabSuAwBXtsEBG5P9HL6EgCSWbIAqz7mnUUhiX2ocKzGSMorzxOoYJLykpm 6G3heGOp+mGNmo3SxuXO3osECLx8WS931kpwcSFWRJ061Qcs1Tmss9fDXRvope3b Hhft7eDil6pYDTFgq6uma5Xci8pMJ4L2o0T4OjarGthP4QXnKjN6RkBJJRzMG9FB l7f0vSqVC4hU6hKs9lJHxltvy977ogrjh9jh9Redgx3fIvXd3S+WCOBmOQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFK6jRdSPFxLig7CsL/s9Lzg3KMziMB8GA1UdIwQY MBaAFMei5Ouf08zRukSjYvdvmJt7RNXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDZMazY1X1R6Tkc2UktOaTkyLVltM3RFMWZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wZTQ5NzYtZTc1MC00NTY4LTg1ODMt ZGU2ZWY3Yzk1NTI2LzEvcnFORjFJOFhFdUtEc0t3di16MHZPRGNvek9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wZTQ5NzYtZTc1MC00NTY4LTg1ODMtZGU2ZWY3Yzk1NTI2 LzEveDZMazY1X1R6Tkc2UktOaTkyLVltM3RFMWZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwiFEAwQB wiFGMA8EAgACMAkDBwAgAQZ8KZQwDQYJKoZIhvcNAQELBQADggEBAGZPniNXeYn8 GhsaYMh/9BCf83XivLLqtk7FnOmZ7xx6Hy32PjgVEgNmcZ2oBMMCAd+sQ+wM1FSo TkTMl0XLv8E3tvmSgrU3yWpvwbvnuChg4rzmeGk+kC1APxBPD4VB2b38PYMCnNuW twI4R1BHKY1oYrWztHvhjdhSrRJjKDnz1LojRZr/NPMm7XgPNu6+GKxM2yNajwl+ 2HiOTpcZIbxwqPOsBgGGKim0heVuCtVMp+bdmNtTNN4/R/mM/d8jfrxJiDoYBYgy 89Mj7Vhv+wowSdS3oekfELAGtQouTQGpMNF3SyRu9oyjtdLd9Nq3esoP2M+r5jQO JAHeng9eOG4= -----END CERTIFICATE-----Generated at Wed Jan 7 16:23:37 2026 by rpki-client