This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/kqNTY8751og8kN19fxFeigG4e98.roa File: kqNTY8751og8kN19fxFeigG4e98.roa (raw, json) Hash identifier: b8fVv0NMLEzs/3BCKjCTfnvYfb1zU98CSy6bYESkj4U= Subject key identifier: 92:A3:53:63:CE:F9:D6:88:3C:90:DD:7D:7F:11:5E:8A:01:B8:7B:DF Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b Certificate serial: 019B797E2F24CD9076C709B3475686D5CFB3 Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/kqNTY8751og8kN19fxFeigG4e98.roa Signing time: Thu 01 Jan 2026 12:17:51 +0000 ROA not before: Thu 01 Jan 2026 12:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216066 IP address blocks: 185.187.101.0/24 maxlen: 24 2a0a:47c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:2f:24:cd:90:76:c7:09:b3:47:56:86:d5:cf:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b Validity Not Before: Jan 1 12:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92a35363cef9d6883c90dd7d7f115e8a01b87bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e0:c8:74:c2:ae:2f:79:df:af:6b:60:59:0c: b2:2f:29:4a:57:57:88:ce:90:08:48:6f:2e:50:03: b2:df:b2:b0:35:f0:8d:12:84:16:da:50:e2:0c:f9: 23:10:52:88:e1:f3:05:f2:84:2e:54:d0:dc:39:65: f2:5b:af:44:1d:b0:cc:79:24:60:22:3f:76:c1:fb: cb:2f:a5:a0:cf:9c:37:25:0b:fb:33:1a:dd:c7:ae: 09:f2:14:42:b5:5d:cf:49:f3:44:45:75:d8:48:fa: 1e:f1:60:2c:49:12:08:58:e3:42:f5:fa:cf:81:d3: ed:c4:c5:4c:2f:a4:ab:69:87:c0:0c:13:12:b4:b1: 6d:a3:09:1b:5e:cc:d2:43:30:d9:fd:4e:db:ed:35: 3d:62:18:05:8c:61:8a:be:6b:88:71:99:ee:b3:76: d0:83:ed:6c:e5:45:c9:f9:94:fb:ef:f6:16:a1:71: 96:73:ee:5d:bf:64:84:3a:59:f8:eb:da:76:c6:3c: 26:46:23:14:4d:54:a7:00:47:0b:b0:49:ea:70:2b: 19:b8:7e:01:cb:a2:3e:04:5c:4d:b2:e4:fc:7d:0a: 26:fb:41:51:ae:e9:09:88:f4:36:52:a2:ee:35:b7: 44:67:0b:5a:94:8e:ed:4a:ea:cf:8b:b7:44:e0:02: 77:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A3:53:63:CE:F9:D6:88:3C:90:DD:7D:7F:11:5E:8A:01:B8:7B:DF X509v3 Authority Key Identifier: keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/kqNTY8751og8kN19fxFeigG4e98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.101.0/24 IPv6: 2a0a:47c0::/29 Signature Algorithm: sha256WithRSAEncryption 7f:b7:f5:c1:6a:31:4f:4b:91:80:17:d5:9e:f7:dd:64:86:0e: 1f:8e:56:4c:24:5d:f1:55:e7:43:eb:11:22:5a:21:41:58:53: 93:5e:48:8e:22:2c:b0:1c:1e:9d:f6:47:5e:58:7a:c0:32:6a: 59:1c:a3:ef:18:6e:c3:a6:18:b4:db:2f:d9:c9:d7:c6:b6:03: 9c:50:c9:91:71:44:40:71:13:29:3a:20:62:c5:87:88:11:d3: 4d:23:5e:cb:c1:fb:8a:5c:85:24:0e:a8:f0:5f:98:27:85:52: 88:4a:06:47:7d:61:bb:17:fe:39:2d:1d:23:3d:e3:44:0c:dd: 2b:68:18:c1:2f:68:f9:b0:ea:f8:32:e4:5c:39:77:90:48:e7: 8f:bc:d6:e8:92:29:cb:32:cd:15:a3:87:ba:32:e5:1f:72:a4: c0:a7:b7:17:8e:f5:2b:dd:3e:db:22:9a:63:de:14:61:87:48: 3e:fd:71:87:e0:c3:7b:eb:60:27:83:9b:81:4e:2e:f9:54:88: 42:48:09:1f:28:c6:32:c1:63:ec:9a:dc:17:bb:a0:85:55:56: 1f:a9:0f:dc:9a:34:55:d0:cd:51:75:d8:82:6a:5b:1a:28:91: e1:8d:6b:4a:77:6e:04:76:a2:85:00:1c:a7:09:9f:68:66:73: c2:d4:48:fe -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fi8kzZB2xwmzR1aG1c+zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOWY4NGM2YTQ4ZDVjNmRmZTY0MTQ5ODczYjE0OGQxMTIw YjAwOWIwHhcNMjYwMTAxMTIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmEzNTM2M2NlZjlkNjg4M2M5MGRkN2Q3ZjExNWU4YTAxYjg3YmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuDIdMKuL3nfr2tgWQyyLylKV1eI zpAISG8uUAOy37KwNfCNEoQW2lDiDPkjEFKI4fMF8oQuVNDcOWXyW69EHbDMeSRg Ij92wfvLL6Wgz5w3JQv7Mxrdx64J8hRCtV3PSfNERXXYSPoe8WAsSRIIWONC9frP gdPtxMVML6SraYfADBMStLFtowkbXszSQzDZ/U7b7TU9YhgFjGGKvmuIcZnus3bQ g+1s5UXJ+ZT77/YWoXGWc+5dv2SEOln469p2xjwmRiMUTVSnAEcLsEnqcCsZuH4B y6I+BFxNsuT8fQom+0FRrukJiPQ2UqLuNbdEZwtalI7tSurPi7dE4AJ3BwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJKjU2PO+daIPJDdfX8RXooBuHvfMB8GA1UdIwQY MBaAFKufhMakjVxt/mQUmHOxSNESCwCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODkt MjEzZDY0YmVmZjcxLzEva3FOVFk4NzUxb2c4a04xOWZ4RmVpZ0c0ZTk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODktMjEzZDY0YmVmZjcx LzEvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAubtlMA0E AgACMAcDBQMqCkfAMA0GCSqGSIb3DQEBCwUAA4IBAQB/t/XBajFPS5GAF9We991k hg4fjlZMJF3xVedD6xEiWiFBWFOTXkiOIiywHB6d9kdeWHrAMmpZHKPvGG7Dphi0 2y/ZydfGtgOcUMmRcURAcRMpOiBixYeIEdNNI17LwfuKXIUkDqjwX5gnhVKISgZH fWG7F/45LR0jPeNEDN0raBjBL2j5sOr4MuRcOXeQSOePvNbokinLMs0Vo4e6MuUf cqTAp7cXjvUr3T7bIppj3hRhh0g+/XGH4MN762Ang5uBTi75VIhCSAkfKMYywWPs mtwXu6CFVVYfqQ/cmjRV0M1RddiCalsaKJHhjWtKd24EdqKFABynCZ9oZnPC1Ej+ -----END CERTIFICATE-----Generated at Mon Jan 26 15:16:41 2026 by rpki-client