This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/QlMsfkJfSm0fUcxiYGVPGdGD4fA.roa File: QlMsfkJfSm0fUcxiYGVPGdGD4fA.roa (raw, json) Hash identifier: CRz3lsPjoW3JZTtpME0HEZ/likjgfqyzP+ZOWT4Oi2k= Subject key identifier: 42:53:2C:7E:42:5F:4A:6D:1F:51:CC:62:60:65:4F:19:D1:83:E1:F0 Certificate issuer: /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390 Certificate serial: 019B7F8482B0E9A74CC99007680433DF764F Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/QlMsfkJfSm0fUcxiYGVPGdGD4fA.roa Signing time: Fri 02 Jan 2026 16:22:29 +0000 ROA not before: Fri 02 Jan 2026 16:22:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213753 IP address blocks: 185.28.38.0/24 maxlen: 24 2a00:9c20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:82:b0:e9:a7:4c:c9:90:07:68:04:33:df:76:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390 Validity Not Before: Jan 2 16:22:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42532c7e425f4a6d1f51cc6260654f19d183e1f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:96:35:8a:f7:a4:cc:f3:cb:16:10:24:7e:83: f0:25:67:13:26:94:0c:24:af:9a:89:d7:71:05:6e: 3f:9c:b1:91:f9:1b:9d:98:ec:c5:4a:55:eb:2a:fa: 95:a1:d1:6c:a4:f1:68:d7:02:86:9a:b9:a3:d2:bc: 2b:28:a2:eb:54:22:7f:7f:48:25:dd:7f:56:06:01: 2b:d8:32:c4:3a:a6:a4:3a:9a:a2:4b:12:32:2e:e2: 91:a8:e0:83:94:ef:e8:13:e8:56:d9:c4:d4:cd:b3: f5:30:e0:8c:8a:49:c7:1a:80:9b:69:03:84:7f:bb: 9e:d3:05:7a:f0:a5:a8:5d:4d:0f:b7:6e:f2:3f:31: 48:64:52:b6:48:4e:f1:a1:bb:0d:86:35:be:83:23: 65:2a:2d:5f:a7:47:1f:cf:13:f6:cb:06:65:cd:5d: fe:95:49:bf:6d:bb:c4:b6:ae:3d:2a:71:a4:a5:1c: 69:bd:8c:6b:79:c5:2c:d9:1e:b1:e5:1c:4e:c5:fc: 5a:ba:29:53:9d:9c:1a:4c:94:85:e4:74:92:44:10: df:46:d9:9e:7b:d0:0c:6e:b0:29:1c:68:d4:e6:9b: 93:ae:1c:e3:c7:48:53:bf:72:84:18:c2:58:09:11: 93:0a:28:02:c1:66:f0:f6:41:39:76:d9:be:63:e7: d4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:53:2C:7E:42:5F:4A:6D:1F:51:CC:62:60:65:4F:19:D1:83:E1:F0 X509v3 Authority Key Identifier: keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/QlMsfkJfSm0fUcxiYGVPGdGD4fA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.28.38.0/24 IPv6: 2a00:9c20::/32 Signature Algorithm: sha256WithRSAEncryption 8b:b4:a5:49:06:c8:44:f8:c8:dd:d9:9c:2c:26:1e:c7:72:72: 26:28:7c:80:bc:33:3f:57:f0:ae:83:d1:b4:2f:c0:2a:e6:3c: e2:36:f6:04:00:8f:9b:98:88:d4:ac:fb:2c:4b:ec:d3:62:c8: a3:92:ef:d0:59:5a:55:3c:b3:fd:ca:da:fb:98:e9:e9:5c:9a: f7:40:d4:a7:b4:46:ce:71:b2:85:8d:2b:4f:b1:f5:80:23:3a: 7e:3c:e4:e8:4d:16:cb:a8:c7:d4:a4:7d:4d:9f:c7:62:0d:af: 5a:35:35:6e:4f:53:a9:69:df:85:a9:ec:3e:ab:b4:2d:8d:3e: bf:cb:13:fa:2a:99:63:42:bb:69:a4:ae:2c:af:12:64:c7:86: 9b:b8:31:f5:b7:42:ed:00:5e:7f:4b:f9:e7:00:38:b0:ad:42: 1e:38:fc:fc:62:dd:c2:15:df:36:02:51:b1:90:4b:b5:d5:e2: 1d:b1:ea:ea:63:4a:4f:79:09:19:8b:06:e7:bf:1b:0b:81:86: 41:86:43:3c:70:de:75:f7:23:65:9d:b1:98:8e:9d:6e:e0:59: b6:73:d1:6c:aa:68:48:8a:4d:73:ae:fb:6c:99:b5:a0:bf:53: b5:0a:6d:95:41:56:6b:f0:6e:9f:98:27:4d:30:82:e9:a5:03: a2:de:14:85 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/hIKw6adMyZAHaAQz33ZPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliOTdjMjJkMGIzMzhhOGE0NWFhMTM0NWIwOTE3YmEwZGM5 NzMzOTAwHhcNMjYwMTAyMTYyMjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjUzMmM3ZTQyNWY0YTZkMWY1MWNjNjI2MDY1NGYxOWQxODNlMWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZY1ivekzPPLFhAkfoPwJWcTJpQM JK+aiddxBW4/nLGR+RudmOzFSlXrKvqVodFspPFo1wKGmrmj0rwrKKLrVCJ/f0gl 3X9WBgEr2DLEOqakOpqiSxIyLuKRqOCDlO/oE+hW2cTUzbP1MOCMiknHGoCbaQOE f7ue0wV68KWoXU0Pt27yPzFIZFK2SE7xobsNhjW+gyNlKi1fp0cfzxP2ywZlzV3+ lUm/bbvEtq49KnGkpRxpvYxrecUs2R6x5RxOxfxauilTnZwaTJSF5HSSRBDfRtme e9AMbrApHGjU5puTrhzjx0hTv3KEGMJYCRGTCigCwWbw9kE5dtm+Y+fU7QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEJTLH5CX0ptH1HMYmBlTxnRg+HwMB8GA1UdIwQY MBaAFJuXwi0LM4qKRaoTRbCRe6DclzOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTVmQ0xRc3ppb3BGcWhORnNKRjdvTnlYTTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lMjI1OGQtOGJjNS00NGVkLTgwNzMt YWU5OTllZDdjNWQ0LzEvUWxNc2ZrSmZTbTBmVWN4aVlHVlBHZEdENGZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9lMjI1OGQtOGJjNS00NGVkLTgwNzMtYWU5OTllZDdjNWQ0 LzEvbTVmQ0xRc3ppb3BGcWhORnNKRjdvTnlYTTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuRwmMA0E AgACMAcDBQAqAJwgMA0GCSqGSIb3DQEBCwUAA4IBAQCLtKVJBshE+Mjd2ZwsJh7H cnImKHyAvDM/V/Cug9G0L8Aq5jziNvYEAI+bmIjUrPssS+zTYsijku/QWVpVPLP9 ytr7mOnpXJr3QNSntEbOcbKFjStPsfWAIzp+POToTRbLqMfUpH1Nn8diDa9aNTVu T1Opad+Fqew+q7QtjT6/yxP6KpljQrtppK4srxJkx4abuDH1t0LtAF5/S/nnADiw rUIeOPz8Yt3CFd82AlGxkEu11eIdserqY0pPeQkZiwbnvxsLgYZBhkM8cN519yNl nbGYjp1u4Fm2c9FsqmhIik1zrvtsmbWgv1O1Cm2VQVZr8G6fmCdNMILppQOi3hSF -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:10 2026 by rpki-client