This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/QWziBGJKT97GaU5TsJ0WTnA3UaQ.roa File: QWziBGJKT97GaU5TsJ0WTnA3UaQ.roa (raw, json) Hash identifier: cg/5v5qKfRj2142sZSNTSinM09isCzKzLrAye6kCxYw= Subject key identifier: 41:6C:E2:04:62:4A:4F:DE:C6:69:4E:53:B0:9D:16:4E:70:37:51:A4 Certificate issuer: /CN=36319bcd4747ed5b202bb578acb390d16fc411a5 Certificate serial: 019B7D5AAED82ACDD7C07DC1C776C60F2EEB Authority key identifier: 36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/QWziBGJKT97GaU5TsJ0WTnA3UaQ.roa Signing time: Fri 02 Jan 2026 06:17:33 +0000 ROA not before: Fri 02 Jan 2026 06:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20740 IP address blocks: 193.109.4.0/22 maxlen: 22 194.29.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ae:d8:2a:cd:d7:c0:7d:c1:c7:76:c6:0f:2e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36319bcd4747ed5b202bb578acb390d16fc411a5 Validity Not Before: Jan 2 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=416ce204624a4fdec6694e53b09d164e703751a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:48:ee:1c:c3:d1:e6:90:48:a6:3a:cd:20:db: 63:46:98:14:4a:9a:0a:3f:6f:5a:7a:b2:16:28:8f: 07:e9:5b:83:00:0b:1c:a4:b1:ea:b5:90:af:e0:3e: 2f:51:ea:d2:4e:ca:33:74:3d:17:a4:08:2c:bd:25: 77:30:4f:f6:93:32:d7:7b:a4:27:8e:47:2e:f8:93: d0:83:cf:43:52:1f:f0:79:63:bb:1a:04:6c:b5:62: 62:3e:47:8b:26:fd:dd:5f:92:e9:ad:55:36:e8:62: 54:9f:38:ea:0f:ab:08:fc:20:23:0d:ea:06:d1:7d: c0:58:ec:ca:c0:f8:ce:6a:72:6c:ad:62:28:ad:3b: eb:0a:6d:b0:94:5f:db:bb:05:51:60:6f:ea:66:f3: 51:69:86:96:27:60:b3:1a:48:bd:c7:b4:7e:e5:f6: 65:d2:ef:c9:f6:57:e1:56:29:e4:01:16:af:de:7b: 78:80:e5:5a:5f:bc:af:39:3e:fc:a8:77:90:d5:16: b2:dd:04:ee:65:7b:29:d2:88:e7:72:02:d7:cc:a3: 96:97:6d:88:a2:8e:03:33:39:f6:3d:1e:5d:ab:af: 49:f3:a8:4e:48:f3:2c:15:1e:28:5e:8b:30:e2:10: 33:3f:9c:97:a4:4b:dd:91:ff:79:14:c3:bc:25:c6: 0d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6C:E2:04:62:4A:4F:DE:C6:69:4E:53:B0:9D:16:4E:70:37:51:A4 X509v3 Authority Key Identifier: keyid:36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/QWziBGJKT97GaU5TsJ0WTnA3UaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.4.0/22 194.29.188.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:9c:b3:85:64:52:82:2f:e9:84:57:e8:f8:7b:54:62:26:68: ac:75:36:70:d0:9a:28:7f:3a:3b:d0:24:cc:c3:a4:fe:ee:e7: 30:58:0a:f2:8d:e4:64:ae:d7:c1:00:c9:6f:3c:c4:08:0d:f7: fa:8d:52:f5:64:1c:1b:19:ed:2d:df:a8:ec:61:e4:2d:fd:76: d7:14:ae:d5:2d:52:02:2a:0c:e3:40:8f:ec:c4:be:bc:08:96: 32:d3:c9:cf:89:ac:e4:e3:f7:c7:bb:9c:02:55:67:f9:7e:98: 80:15:2f:45:b5:3e:1a:31:ee:27:85:bb:fa:a0:8a:f1:8e:32: 9b:d2:26:13:85:8d:3b:cd:38:26:02:da:6d:55:4b:0c:75:74: 93:03:d4:58:1f:59:81:90:b1:f1:3c:c5:d4:0e:25:25:5f:5f: 11:e9:f0:cf:69:27:fb:8d:fc:7c:69:1f:55:96:06:d1:7a:7a: 09:8d:5e:ba:94:7d:ab:4d:71:e0:19:32:2f:e9:f9:5f:01:c7: ad:96:ad:bc:6f:a6:9d:70:65:f8:39:e5:ed:13:19:4d:df:46: a3:c7:fe:b2:5e:58:b6:7f:5e:a1:26:73:9e:97:86:16:40:e4: c6:cd:0e:54:5b:9a:f8:bd:3f:55:0f:6c:b9:af:97:0f:a0:ae: 23:2f:53:7d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9Wq7YKs3XwH3Bx3bGDy7rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MzE5YmNkNDc0N2VkNWIyMDJiYjU3OGFjYjM5MGQxNmZj NDExYTUwHhcNMjYwMTAyMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTZjZTIwNDYyNGE0ZmRlYzY2OTRlNTNiMDlkMTY0ZTcwMzc1MWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEjuHMPR5pBIpjrNINtjRpgUSpoK P29aerIWKI8H6VuDAAscpLHqtZCv4D4vUerSTsozdD0XpAgsvSV3ME/2kzLXe6Qn jkcu+JPQg89DUh/weWO7GgRstWJiPkeLJv3dX5LprVU26GJUnzjqD6sI/CAjDeoG 0X3AWOzKwPjOanJsrWIorTvrCm2wlF/buwVRYG/qZvNRaYaWJ2CzGki9x7R+5fZl 0u/J9lfhVinkARav3nt4gOVaX7yvOT78qHeQ1Ray3QTuZXsp0ojncgLXzKOWl22I oo4DMzn2PR5dq69J86hOSPMsFR4oXosw4hAzP5yXpEvdkf95FMO8JcYN7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEFs4gRiSk/exmlOU7CdFk5wN1GkMB8GA1UdIwQY MBaAFDYxm81HR+1bICu1eKyzkNFvxBGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpHYnpVZEg3VnNnSzdWNHJMT1EwV19FRWFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iYTI0ZDgtZDQ4NC00ZTliLTg3YmEt MjQ1NWY5ZjUyMTZmLzEvUVd6aUJHSktUOTdHYVU1VHNKMFdUbkEzVWFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9iYTI0ZDgtZDQ4NC00ZTliLTg3YmEtMjQ1NWY5ZjUyMTZm LzEvTmpHYnpVZEg3VnNnSzdWNHJMT1EwV19FRWFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwW0EAwQC wh28MA0GCSqGSIb3DQEBCwUAA4IBAQBKnLOFZFKCL+mEV+j4e1RiJmisdTZw0Joo fzo70CTMw6T+7ucwWAryjeRkrtfBAMlvPMQIDff6jVL1ZBwbGe0t36jsYeQt/XbX FK7VLVICKgzjQI/sxL68CJYy08nPiazk4/fHu5wCVWf5fpiAFS9FtT4aMe4nhbv6 oIrxjjKb0iYThY07zTgmAtptVUsMdXSTA9RYH1mBkLHxPMXUDiUlX18R6fDPaSf7 jfx8aR9VlgbRenoJjV66lH2rTXHgGTIv6flfAcetlq28b6adcGX4OeXtExlN30aj x/6yXli2f16hJnOel4YWQOTGzQ5UW5r4vT9VD2y5r5cPoK4jL1N9 -----END CERTIFICATE-----Generated at Fri Jan 9 09:49:15 2026 by rpki-client