This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/qFN4BBxdmHy_3BcnNOupfLTZLMo.roa File: qFN4BBxdmHy_3BcnNOupfLTZLMo.roa (raw, json) Hash identifier: BnnmcXeCam4+KhT/CdouCX5HwDOQfbwphY/d8ikHz1E= Subject key identifier: A8:53:78:04:1C:5D:98:7C:BF:DC:17:27:34:EB:A9:7C:B4:D9:2C:CA Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995 Certificate serial: 019B7AC91D218DBD0C5198BE928FEC418F2E Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/qFN4BBxdmHy_3BcnNOupfLTZLMo.roa Signing time: Thu 01 Jan 2026 18:19:19 +0000 ROA not before: Thu 01 Jan 2026 18:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47796 IP address blocks: 185.110.236.0/24 maxlen: 24 185.110.237.0/24 maxlen: 24 185.110.238.0/24 maxlen: 24 185.110.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:1d:21:8d:bd:0c:51:98:be:92:8f:ec:41:8f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995 Validity Not Before: Jan 1 18:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a85378041c5d987cbfdc172734eba97cb4d92cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0b:75:f2:4d:5d:51:38:4a:33:fd:74:d4:1c: 5f:ef:97:c8:24:fe:1a:a1:c9:62:d7:2e:e5:22:16: 03:89:12:e9:92:c3:b2:6d:c9:7e:7c:59:b4:c1:da: cb:a6:7b:74:be:77:ca:4c:af:2d:9b:b7:b0:1b:90: e9:39:6a:fd:73:4b:a0:6e:bb:f4:2f:72:b1:96:cf: 87:73:b7:26:a6:3c:7e:ba:5c:22:45:57:e5:85:5e: 57:e5:83:54:37:11:79:30:a7:97:8e:2f:ed:d7:71: 4f:2f:5c:7f:06:88:83:f7:0a:f9:cc:72:dc:1c:ec: da:46:32:02:93:43:b2:eb:35:41:58:51:af:78:62: 1e:34:ed:e2:14:55:e5:06:11:3e:90:db:b1:0a:34: 44:ce:06:8a:04:ec:62:43:7c:76:e8:32:72:ca:97: db:1e:d4:c5:2e:0c:8c:36:7b:4f:4f:df:c5:67:78: 24:b8:f6:ad:e0:79:71:73:73:df:d3:a4:a8:38:e7: fd:c3:95:bb:0c:1b:da:3e:c8:de:a3:85:a7:9b:78: f6:6c:66:b4:a2:0b:a8:a1:0f:83:fc:7a:09:cb:82: d8:7c:20:6b:6a:86:6d:d0:91:5b:6c:34:41:27:c6: 96:ae:ef:dd:9c:ce:78:ae:f4:cd:41:f8:5e:e4:d0: 4a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:53:78:04:1C:5D:98:7C:BF:DC:17:27:34:EB:A9:7C:B4:D9:2C:CA X509v3 Authority Key Identifier: keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/qFN4BBxdmHy_3BcnNOupfLTZLMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.110.236.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:c4:c7:be:73:2a:7c:c1:c6:9b:5e:a9:f9:29:11:47:d9:38: 37:7b:cb:83:6a:a3:82:3e:55:d2:35:15:7b:41:7f:85:f7:11: 8a:07:08:47:6f:f3:f0:22:6c:6b:52:ef:6d:fd:36:e1:5a:18: e0:e8:61:02:42:bc:12:7c:8b:37:17:03:2a:d3:26:b4:de:58: eb:3a:b7:11:f6:4f:07:02:11:74:20:ea:c4:ce:55:f4:75:78: 8b:56:39:01:a0:41:c8:45:d0:6d:d9:d1:6f:27:5f:06:26:ec: 9b:89:df:c6:11:96:54:30:92:31:e5:05:8f:84:ba:5b:6f:72: 0b:ea:5f:fb:80:62:d5:84:7b:82:71:8c:2b:c7:33:db:e2:bf: 18:e6:bc:0a:17:42:1a:e9:27:f9:70:e0:69:75:6a:12:4b:b7: 12:65:ff:31:85:bc:55:8b:85:f4:87:f2:68:60:43:96:c9:c5: 0a:e5:f4:cc:fb:d6:3e:91:91:39:ba:34:84:b6:e1:6d:53:be: b7:c8:21:d5:71:02:d0:a7:f7:f1:4c:2c:6a:9e:aa:5d:b7:cb: d5:dc:57:a6:23:df:e7:8b:23:be:39:eb:74:a5:56:cf:d0:24: 2a:15:62:52:1b:ad:2f:46:a2:24:e4:68:18:e1:51:4a:7e:b0: 13:ff:b8:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yR0hjb0MUZi+ko/sQY8uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZjVlNDg2NmJhMDk4MjAxMjRhNmU1MTExMDRmYzQxZmE1 NDE5OTUwHhcNMjYwMTAxMTgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODUzNzgwNDFjNWQ5ODdjYmZkYzE3MjczNGViYTk3Y2I0ZDkyY2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gt18k1dUThKM/101Bxf75fIJP4a ocli1y7lIhYDiRLpksOybcl+fFm0wdrLpnt0vnfKTK8tm7ewG5DpOWr9c0ugbrv0 L3Kxls+Hc7cmpjx+ulwiRVflhV5X5YNUNxF5MKeXji/t13FPL1x/BoiD9wr5zHLc HOzaRjICk0Oy6zVBWFGveGIeNO3iFFXlBhE+kNuxCjREzgaKBOxiQ3x26DJyypfb HtTFLgyMNntPT9/FZ3gkuPat4Hlxc3Pf06SoOOf9w5W7DBvaPsjeo4Wnm3j2bGa0 oguooQ+D/HoJy4LYfCBraoZt0JFbbDRBJ8aWru/dnM54rvTNQfhe5NBKXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKhTeAQcXZh8v9wXJzTrqXy02SzKMB8GA1UdIwQY MBaAFCr15IZroJggEkpuUREE/EH6VBmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3ZYa2htdWdtQ0FTU201UkVRVDhRZnBVR1pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNTI3NjEtMDE5YS00ZGU1LTk1N2Qt YzMyMGU1MGEzYzc5LzEvcUZONEJCeGRtSHlfM0Jjbk5PdXBmTFRaTE1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yNTI3NjEtMDE5YS00ZGU1LTk1N2QtYzMyMGU1MGEzYzc5 LzEvS3ZYa2htdWdtQ0FTU201UkVRVDhRZnBVR1pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW7sMA0G CSqGSIb3DQEBCwUAA4IBAQBKxMe+cyp8wcabXqn5KRFH2Tg3e8uDaqOCPlXSNRV7 QX+F9xGKBwhHb/PwImxrUu9t/TbhWhjg6GECQrwSfIs3FwMq0ya03ljrOrcR9k8H AhF0IOrEzlX0dXiLVjkBoEHIRdBt2dFvJ18GJuybid/GEZZUMJIx5QWPhLpbb3IL 6l/7gGLVhHuCcYwrxzPb4r8Y5rwKF0Ia6Sf5cOBpdWoSS7cSZf8xhbxVi4X0h/Jo YEOWycUK5fTM+9Y+kZE5ujSEtuFtU763yCHVcQLQp/fxTCxqnqpdt8vV3FemI9/n iyO+Oet0pVbP0CQqFWJSG60vRqIk5GgY4VFKfrAT/7hf -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:40 2026 by rpki-client