This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/QFuike-stdBR2Qti952hl6TV8BU.roa File: QFuike-stdBR2Qti952hl6TV8BU.roa (raw, json) Hash identifier: 07OxG0G/dsZ56bfjY4mosLLZF6mhYFWxF2zJxp/iqzM= Subject key identifier: 40:5B:A2:91:EF:AC:B5:D0:51:D9:0B:62:F7:9D:A1:97:A4:D5:F0:15 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 019B76EB7C281157274648872876D7E903EC Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/QFuike-stdBR2Qti952hl6TV8BU.roa Signing time: Thu 01 Jan 2026 00:18:22 +0000 ROA not before: Thu 01 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203192 IP address blocks: 185.143.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7c:28:11:57:27:46:48:87:28:76:d7:e9:03:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=405ba291efacb5d051d90b62f79da197a4d5f015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bb:60:da:16:a7:e8:25:40:f2:80:e5:e5:df: 55:2b:b5:d5:b5:08:3a:50:30:31:47:ba:31:51:35: b5:77:5c:c5:77:59:7b:1e:15:ef:9e:da:ca:d2:c5: c5:0e:9b:49:69:ed:3e:23:23:21:f0:d4:90:27:2b: cd:37:e2:4d:3b:71:05:17:38:57:01:6b:f7:75:10: a2:15:47:d3:ed:1f:ae:a1:9f:05:e5:76:e2:0f:88: 9e:86:22:41:f2:4b:c2:81:bb:88:57:30:3f:c7:e1: 41:80:e1:39:96:54:13:5a:b1:79:2c:8c:93:3a:f3: d6:66:be:7e:15:89:3d:c2:11:75:dc:bd:38:f2:1d: 3d:a1:c1:be:d2:31:3a:20:dd:3b:1b:9a:02:dc:9e: af:eb:c9:c7:ec:df:b3:05:b8:be:0a:74:a9:8c:86: e4:43:c6:ba:a8:49:c1:f2:cb:f7:5f:91:f8:61:1b: e3:0f:4d:13:4b:05:c9:d7:01:92:85:d8:73:25:a9: 15:2b:99:01:a2:76:f7:6b:69:a5:86:bc:7b:c8:ae: 88:d6:0e:0a:ef:21:c6:9f:b7:e9:b6:26:e4:2b:6f: 9b:a0:a1:41:d7:10:2f:39:40:0d:53:9c:38:a1:70: f7:ef:55:19:76:09:e9:cd:31:76:35:e4:e1:8f:f3: 5a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5B:A2:91:EF:AC:B5:D0:51:D9:0B:62:F7:9D:A1:97:A4:D5:F0:15 X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/QFuike-stdBR2Qti952hl6TV8BU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.8.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:f0:6a:bc:14:6d:57:8a:41:59:1d:28:86:39:cd:36:21:a7: fa:f4:f3:ed:17:3d:8e:0f:fc:34:4e:41:e0:2d:43:23:27:a4: 1d:f6:4d:67:b2:47:ac:e2:6c:70:be:43:77:5f:6c:1a:e9:f3: 55:b0:f9:ea:98:3d:77:27:6e:5a:4f:a1:24:2e:e0:ac:89:e5: a4:56:76:06:24:ce:98:d6:cc:85:b6:33:8a:c8:ce:a2:41:92: 30:74:4a:23:21:4e:37:08:9b:6d:e4:7d:93:c4:fd:5e:b5:5b: 90:b1:65:16:bc:6b:40:d7:34:e6:d3:93:c4:a3:62:77:3a:cb: a7:bf:39:a3:15:4d:72:a4:48:ae:99:db:c1:bf:2d:74:d3:48: 5a:0c:a6:a9:55:ce:96:52:52:66:1f:c3:2a:3a:18:c5:4b:6d: 96:93:4f:fd:55:5a:9e:0b:b6:06:f2:31:40:a0:88:8d:e3:02: 23:8f:1a:3f:eb:ec:93:d0:85:11:dd:2f:a1:c5:8f:6a:22:43: c6:84:02:f5:25:c6:33:ba:09:ec:e9:df:17:aa:0b:61:03:11: b5:59:42:40:38:09:66:81:55:66:62:e7:f8:63:57:15:29:5d: f4:e4:11:bd:1b:c8:56:40:18:5c:7f:f9:73:62:81:d7:73:e5: 90:c1:54:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt263woEVcnRkiHKHbX6QPsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDViYTI5MWVmYWNiNWQwNTFkOTBiNjJmNzlkYTE5N2E0ZDVmMDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobtg2han6CVA8oDl5d9VK7XVtQg6 UDAxR7oxUTW1d1zFd1l7HhXvntrK0sXFDptJae0+IyMh8NSQJyvNN+JNO3EFFzhX AWv3dRCiFUfT7R+uoZ8F5XbiD4iehiJB8kvCgbuIVzA/x+FBgOE5llQTWrF5LIyT OvPWZr5+FYk9whF13L048h09ocG+0jE6IN07G5oC3J6v68nH7N+zBbi+CnSpjIbk Q8a6qEnB8sv3X5H4YRvjD00TSwXJ1wGShdhzJakVK5kBonb3a2mlhrx7yK6I1g4K 7yHGn7fptibkK2+boKFB1xAvOUANU5w4oXD371UZdgnpzTF2NeThj/NamwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEBbopHvrLXQUdkLYvedoZek1fAVMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvUUZ1aWtlLXN0ZEJSMlF0aTk1MmhsNlRWOEJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuY8IMA0G CSqGSIb3DQEBCwUAA4IBAQCd8Gq8FG1XikFZHSiGOc02Iaf69PPtFz2OD/w0TkHg LUMjJ6Qd9k1nskes4mxwvkN3X2wa6fNVsPnqmD13J25aT6EkLuCsieWkVnYGJM6Y 1syFtjOKyM6iQZIwdEojIU43CJtt5H2TxP1etVuQsWUWvGtA1zTm05PEo2J3Osun vzmjFU1ypEiumdvBvy1000haDKapVc6WUlJmH8MqOhjFS22Wk0/9VVqeC7YG8jFA oIiN4wIjjxo/6+yT0IUR3S+hxY9qIkPGhAL1JcYzugns6d8XqgthAxG1WUJAOAlm gVVmYuf4Y1cVKV305BG9G8hWQBhcf/lzYoHXc+WQwVT1 -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:07 2026 by rpki-client