This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/QE-p0DolLSe1YcERFi4pB7qqbME.roa File: QE-p0DolLSe1YcERFi4pB7qqbME.roa (raw, json) Hash identifier: tSsxRvUgtqlAtlXCTQBKtK0rsPOfdoX05ytqnptRrgY= Subject key identifier: 40:4F:A9:D0:3A:25:2D:27:B5:61:C1:11:16:2E:29:07:BA:AA:6C:C1 Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e Certificate serial: 019BE9EB4D232BAD2D4C447E079CF5E820B9 Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/QE-p0DolLSe1YcERFi4pB7qqbME.roa Signing time: Fri 23 Jan 2026 08:14:30 +0000 ROA not before: Fri 23 Jan 2026 08:14:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210853 IP address blocks: 185.122.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e9:eb:4d:23:2b:ad:2d:4c:44:7e:07:9c:f5:e8:20:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e Validity Not Before: Jan 23 08:14:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=404fa9d03a252d27b561c111162e2907baaa6cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:79:c4:b4:6d:d6:27:3b:e2:7f:cf:84:ff:3d: d6:cb:da:b7:a5:ba:8d:b0:d2:73:50:91:7e:c3:a6: b1:d1:f6:a7:bb:c0:83:b1:ec:6f:ae:44:33:97:52: a9:cd:93:c8:0e:f3:ab:12:62:d4:1f:57:f8:f9:43: 5c:ef:a5:53:6b:c5:9f:84:f3:18:43:81:38:7a:93: d3:2b:dd:11:8f:dd:90:2c:51:c8:f1:cf:d5:2d:aa: 9c:fc:84:85:d7:54:54:30:9f:1c:81:8f:10:01:b7: 0a:5f:fd:ee:36:66:26:99:7c:7b:6d:87:40:b3:6c: 1c:7c:0c:80:5f:c8:58:30:fc:25:99:cd:30:23:de: 42:6a:0b:8d:61:59:a3:89:7e:19:e6:22:2f:9d:bc: 86:99:ab:99:f7:46:35:2e:d7:98:bf:77:0b:c6:53: 9a:35:c8:e5:ed:d3:26:1b:24:b7:eb:0f:d5:f0:2e: cc:b2:30:c4:95:91:92:6f:60:e0:56:7a:88:70:ad: bd:2d:67:64:bf:da:81:9b:16:95:3d:0d:ea:3e:8a: e3:72:eb:57:c3:73:1c:b1:9c:e9:42:5f:af:47:ca: 34:78:56:61:de:88:75:a1:2e:03:f9:81:11:3c:39: 27:f8:90:4e:7b:81:9f:39:e7:ca:34:9a:8d:ad:7b: c0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4F:A9:D0:3A:25:2D:27:B5:61:C1:11:16:2E:29:07:BA:AA:6C:C1 X509v3 Authority Key Identifier: keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/QE-p0DolLSe1YcERFi4pB7qqbME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.122.15.0/24 Signature Algorithm: sha256WithRSAEncryption a4:63:9a:ef:a3:ae:10:49:6b:0b:ac:dc:c7:5d:5f:71:3a:0b: 42:e2:9b:4a:32:f6:ee:80:5e:fc:f5:ca:0d:0e:a8:76:23:39: ad:35:42:ff:38:70:b6:3c:85:7e:b0:3c:b9:cf:68:e8:cf:ae: 9e:88:de:6a:d2:b0:4a:30:2c:3e:f6:1c:e7:1c:12:88:b1:a6: e6:c3:6d:ea:5d:6c:59:a0:00:a3:0a:f3:3f:ee:41:6b:65:55: 6d:01:c6:d6:8b:df:8a:d6:49:5d:cf:0f:93:31:60:7f:7a:26: 45:eb:a0:ed:95:9a:f0:ce:a1:6a:86:f1:bd:92:7d:77:bd:ce: 2a:37:fa:18:46:fa:f6:a0:aa:0e:d6:cc:bc:01:12:a8:c0:35: a1:b9:93:4e:e8:85:f1:c1:d4:60:30:8c:55:a6:01:d9:0c:01: e2:ad:ba:15:4e:1d:c0:ab:57:9a:51:e9:a5:ca:c0:b0:1f:c6: ca:4b:ee:c2:65:d1:d0:2a:cb:3a:50:a3:a8:90:ea:e6:94:88: d8:c7:13:d1:cd:bd:64:ed:03:15:01:a4:db:46:ef:a0:cd:46: d0:53:0f:b3:9c:c5:5a:7e:83:81:cb:5d:cf:91:39:cb:34:e6: 98:cf:86:17:65:f3:43:4f:9b:bb:67:a3:72:8c:1b:35:22:f9: 18:9e:5c:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvp600jK60tTER+B5z16CC5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Y2NkNzM1MDhhOWI1OTk4NWQ1NTk3ODY4ZTNhNWQ1ZWM3 NDVmNWUwHhcNMjYwMTIzMDgxNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDRmYTlkMDNhMjUyZDI3YjU2MWMxMTExNjJlMjkwN2JhYWE2Y2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnnEtG3WJzvif8+E/z3Wy9q3pbqN sNJzUJF+w6ax0fanu8CDsexvrkQzl1KpzZPIDvOrEmLUH1f4+UNc76VTa8WfhPMY Q4E4epPTK90Rj92QLFHI8c/VLaqc/ISF11RUMJ8cgY8QAbcKX/3uNmYmmXx7bYdA s2wcfAyAX8hYMPwlmc0wI95CaguNYVmjiX4Z5iIvnbyGmauZ90Y1LteYv3cLxlOa Ncjl7dMmGyS36w/V8C7MsjDElZGSb2DgVnqIcK29LWdkv9qBmxaVPQ3qPorjcutX w3McsZzpQl+vR8o0eFZh3oh1oS4D+YERPDkn+JBOe4GfOefKNJqNrXvAYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEBPqdA6JS0ntWHBERYuKQe6qmzBMB8GA1UdIwQY MBaAFOTM1zUIqbWZhdVZeGjjpdXsdF9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgt ODVkODBhNTQ0YmViLzEvUUUtcDBEb2xMU2UxWWNFUkZpNHBCN3FxYk1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgtODVkODBhNTQ0YmVi LzEvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXoPMA0G CSqGSIb3DQEBCwUAA4IBAQCkY5rvo64QSWsLrNzHXV9xOgtC4ptKMvbugF789coN Dqh2IzmtNUL/OHC2PIV+sDy5z2joz66eiN5q0rBKMCw+9hznHBKIsabmw23qXWxZ oACjCvM/7kFrZVVtAcbWi9+K1kldzw+TMWB/eiZF66DtlZrwzqFqhvG9kn13vc4q N/oYRvr2oKoO1sy8ARKowDWhuZNO6IXxwdRgMIxVpgHZDAHirboVTh3Aq1eaUeml ysCwH8bKS+7CZdHQKss6UKOokOrmlIjYxxPRzb1k7QMVAaTbRu+gzUbQUw+znMVa foOBy13PkTnLNOaYz4YXZfNDT5u7Z6NyjBs1IvkYnlyW -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:03 2026 by rpki-client