This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/Q_2dI4MAgteIfC8fliTVnwdDpEo.roa File: Q_2dI4MAgteIfC8fliTVnwdDpEo.roa (raw, json) Hash identifier: FeIbDHDY5bISxy8cTg5A5vpLXI7Ze/YbhEveF3uIwyw= Subject key identifier: 43:FD:9D:23:83:00:82:D7:88:7C:2F:1F:96:24:D5:9F:07:43:A4:4A Certificate issuer: /CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b Certificate serial: 019B7BA52CBFC51AF9A913FE2A1DFECB5468 Authority key identifier: FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/Q_2dI4MAgteIfC8fliTVnwdDpEo.roa Signing time: Thu 01 Jan 2026 22:19:41 +0000 ROA not before: Thu 01 Jan 2026 22:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20746 IP address blocks: 185.86.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:2c:bf:c5:1a:f9:a9:13:fe:2a:1d:fe:cb:54:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b Validity Not Before: Jan 1 22:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43fd9d23830082d7887c2f1f9624d59f0743a44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:39:47:08:85:84:a8:cc:5b:ee:a7:ac:db:b7: 8d:70:50:d5:b3:b8:cc:61:ed:46:29:56:c1:e7:17: 5f:4f:b2:29:c5:56:98:22:78:9e:c1:9c:97:7e:16: f0:1f:f4:3f:b5:38:b6:58:e6:44:40:93:ec:7d:96: a1:7f:77:1e:60:53:7e:34:8f:0c:4e:5c:f5:83:69: 9d:b3:bb:93:cc:25:86:a6:8c:db:e5:77:19:71:2e: 5e:6c:7c:39:70:ed:24:8f:b8:2e:84:34:b2:7f:c8: b3:bd:cc:07:77:d0:75:54:2c:62:cf:f8:07:48:12: ec:32:1f:a6:69:6a:4a:6e:1e:42:76:e3:e5:8d:ed: 16:01:f5:de:e3:10:98:20:ca:4b:fd:bb:c5:f5:d7: 3d:a5:51:ab:e5:9e:38:57:ab:5b:57:e2:f0:a1:9b: ab:a2:13:03:56:d8:eb:53:67:af:fa:10:4e:f8:a2: de:a3:c2:2d:0e:fc:9a:12:90:83:a1:11:5a:94:4d: 79:ce:2e:e4:eb:a0:83:61:fd:c8:e0:d6:7f:a1:59: ff:2d:f9:51:0a:79:02:d9:29:28:b4:52:a9:98:a5: cc:a8:99:7e:d6:72:a5:b9:6b:47:46:4f:6e:07:f3: 53:df:b8:df:0e:a9:b9:d2:53:c1:d2:9c:12:cd:9c: f2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FD:9D:23:83:00:82:D7:88:7C:2F:1F:96:24:D5:9F:07:43:A4:4A X509v3 Authority Key Identifier: keyid:FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/Q_2dI4MAgteIfC8fliTVnwdDpEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.60.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:58:a5:33:8f:84:2a:5f:f2:0e:d9:63:52:14:3e:cc:72:4c: 4f:8e:af:2b:f0:9a:22:66:66:cd:30:cf:09:d9:bb:86:23:12: c9:f4:26:66:c4:00:63:07:80:00:52:2c:a8:7c:45:1b:ad:24: 6a:b6:d9:7f:8d:36:1b:62:6e:5c:16:44:c8:fa:de:86:68:9e: 40:d4:5d:14:c0:9c:d3:31:88:f6:c2:e2:ba:b0:08:a4:07:9b: 9b:a9:53:95:d6:35:56:5d:ca:12:5e:4b:74:32:ac:60:0e:5a: 82:45:fd:dd:23:52:c2:05:d1:a0:ca:0b:1b:04:b9:9f:c2:4b: b9:63:36:82:ae:cc:f7:7c:f8:fd:62:cc:58:81:bf:58:5f:ca: 6f:d6:f0:6b:e7:d7:56:d3:e0:55:1b:af:c7:09:0a:b1:ea:57: 9a:6d:a5:65:cb:8b:b6:96:98:bf:57:a3:ad:7f:38:e2:8d:64: 87:9f:95:d1:54:2d:8f:40:36:d5:7f:d1:33:ff:fc:93:ab:dd: d5:ae:6c:14:79:4a:c8:eb:d5:5a:a5:0a:8c:ae:dd:77:8f:57: b2:57:5d:e8:c4:49:17:e9:5e:1c:40:7d:08:8d:09:cd:19:66: cc:49:d8:45:23:1c:d3:69:1f:89:17:a3:a0:d6:8e:44:09:d0: cd:01:ef:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pSy/xRr5qRP+Kh3+y1RoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMGRkZjNmZTU3NzIyMDFhZmY3OGMyNGU5N2Y5NDRjMzgw NWZmNmIwHhcNMjYwMTAxMjIxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2ZkOWQyMzgzMDA4MmQ3ODg3YzJmMWY5NjI0ZDU5ZjA3NDNhNDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjlHCIWEqMxb7qes27eNcFDVs7jM Ye1GKVbB5xdfT7IpxVaYIniewZyXfhbwH/Q/tTi2WOZEQJPsfZahf3ceYFN+NI8M Tlz1g2mds7uTzCWGpozb5XcZcS5ebHw5cO0kj7guhDSyf8izvcwHd9B1VCxiz/gH SBLsMh+maWpKbh5CduPlje0WAfXe4xCYIMpL/bvF9dc9pVGr5Z44V6tbV+LwoZur ohMDVtjrU2ev+hBO+KLeo8ItDvyaEpCDoRFalE15zi7k66CDYf3I4NZ/oVn/LflR CnkC2SkotFKpmKXMqJl+1nKluWtHRk9uB/NT37jfDqm50lPB0pwSzZzyewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEP9nSODAILXiHwvH5Yk1Z8HQ6RKMB8GA1UdIwQY MBaAFP8N3z/ldyIBr/eMJOl/lEw4Bf9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3czZlAtVjNJZ0d2OTR3azZYLVVURGdGXzJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jNDU1YmQtYjgyNS00OTAxLTgzODEt MDRkMTI0N2U1ZDBhLzEvUV8yZEk0TUFndGVJZkM4ZmxpVFZud2REcEVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9jNDU1YmQtYjgyNS00OTAxLTgzODEtMDRkMTI0N2U1ZDBh LzEvX3czZlAtVjNJZ0d2OTR3azZYLVVURGdGXzJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVY8MA0G CSqGSIb3DQEBCwUAA4IBAQBOWKUzj4QqX/IO2WNSFD7MckxPjq8r8JoiZmbNMM8J 2buGIxLJ9CZmxABjB4AAUiyofEUbrSRqttl/jTYbYm5cFkTI+t6GaJ5A1F0UwJzT MYj2wuK6sAikB5ubqVOV1jVWXcoSXkt0MqxgDlqCRf3dI1LCBdGgygsbBLmfwku5 YzaCrsz3fPj9YsxYgb9YX8pv1vBr59dW0+BVG6/HCQqx6leabaVly4u2lpi/V6Ot fzjijWSHn5XRVC2PQDbVf9Ez//yTq93VrmwUeUrI69VapQqMrt13j1eyV13oxEkX 6V4cQH0IjQnNGWbMSdhFIxzTaR+JF6Og1o5ECdDNAe+I -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:00 2026 by rpki-client