This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/q5nWFGJRWtF973Oh4L4NdFyWU7w.roa File: q5nWFGJRWtF973Oh4L4NdFyWU7w.roa (raw, json) Hash identifier: cPGcwwvhLGFvvVWvZDvkrAQGcbfROxYZMG3UWVyN8E0= Subject key identifier: AB:99:D6:14:62:51:5A:D1:7D:EF:73:A1:E0:BE:0D:74:5C:96:53:BC Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019B7B36C798CD264B0122D5192885B93720 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/q5nWFGJRWtF973Oh4L4NdFyWU7w.roa Signing time: Thu 01 Jan 2026 20:19:06 +0000 ROA not before: Thu 01 Jan 2026 20:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400909 IP address blocks: 185.199.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c7:98:cd:26:4b:01:22:d5:19:28:85:b9:37:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Jan 1 20:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab99d61462515ad17def73a1e0be0d745c9653bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:69:b7:c2:4b:2a:7b:81:0d:ce:f2:63:89:a3: 4a:9e:a9:28:d5:64:ac:40:6e:69:cc:2c:ee:6f:d9: e8:94:51:8b:e9:63:ce:f0:35:f5:69:e2:aa:1b:23: 3c:4d:c1:98:30:27:27:30:7e:00:14:02:e2:0c:43: 2d:7b:d6:2f:06:fa:24:51:25:77:31:95:be:a0:62: 06:32:c4:00:03:f2:e0:92:e2:d9:18:20:4d:8c:f7: 91:cb:3c:05:3f:d2:dc:8e:31:65:c2:6e:c7:6a:8e: b3:9b:03:49:2f:aa:44:52:27:cc:de:de:a4:f8:0e: 21:e5:0a:67:6e:b9:90:c8:38:2e:e1:c2:bc:a9:6a: 4d:49:11:28:f4:49:61:ee:cc:69:39:1d:8d:62:79: ed:fb:64:4d:1f:41:71:d6:88:bf:b5:75:b1:4a:f3: 97:e5:04:7d:7f:42:68:21:67:69:05:89:67:e3:8a: e8:c5:e0:7d:a4:12:23:93:cb:39:e5:7c:7a:20:c2: eb:55:70:fb:84:48:4b:de:c1:96:bc:5e:b9:3e:41: 9f:b4:8a:19:b6:f7:f0:f7:1a:a3:ef:25:37:27:13: a9:0e:d7:c4:66:6f:5d:11:bc:09:83:88:da:40:b8: 91:7f:f8:e7:0f:fb:bd:72:cd:bc:f2:dc:38:66:18: 80:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:99:D6:14:62:51:5A:D1:7D:EF:73:A1:E0:BE:0D:74:5C:96:53:BC X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/q5nWFGJRWtF973Oh4L4NdFyWU7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.199.148.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:38:96:ad:f6:c4:88:36:00:f1:14:69:4a:b8:cd:14:22:e6: b1:e3:fe:d9:09:4b:c1:dc:25:00:14:9f:b4:50:2e:05:bb:79: 72:97:5a:40:fe:e1:de:94:e1:09:35:b0:a6:87:c2:40:24:40: 3f:d3:a3:61:6e:19:0b:6e:94:7b:1b:be:80:7b:f0:97:f3:95: 97:0a:04:80:f1:ea:a0:d2:df:00:49:85:5a:cc:c0:0e:7d:21: 59:69:b6:10:2b:62:41:ec:2c:e5:84:bd:5c:8e:48:4f:a9:23: a5:23:f9:1f:e7:9d:6e:b5:4f:4a:2c:4f:96:f0:f9:3d:5a:84: 5a:c6:ca:d7:00:5d:26:ff:ca:01:84:b6:e5:96:e3:f3:08:17: 3c:b3:a5:25:2f:b7:8f:95:05:c4:e8:7c:59:74:b2:65:2a:ce: bb:fb:89:3a:e5:d7:17:d4:7f:c3:ed:2f:b4:98:57:9f:f4:c2: 28:1a:bf:23:69:b0:4a:a9:cf:3b:27:8e:21:92:d3:42:e2:81: 32:d9:61:44:ab:97:b6:32:12:c4:14:2e:6e:11:30:d2:58:c1: 61:16:e1:c8:1a:ec:55:cb:75:9c:e7:a8:23:8f:c2:eb:43:a1: f8:07:2a:e9:60:a5:db:73:3c:96:7a:bb:67:83:7f:2a:b6:53: c9:1c:c2:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NseYzSZLASLVGSiFuTcgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMTAxMjAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjk5ZDYxNDYyNTE1YWQxN2RlZjczYTFlMGJlMGQ3NDVjOTY1M2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGm3wksqe4ENzvJjiaNKnqko1WSs QG5pzCzub9nolFGL6WPO8DX1aeKqGyM8TcGYMCcnMH4AFALiDEMte9YvBvokUSV3 MZW+oGIGMsQAA/LgkuLZGCBNjPeRyzwFP9LcjjFlwm7Hao6zmwNJL6pEUifM3t6k +A4h5QpnbrmQyDgu4cK8qWpNSREo9Elh7sxpOR2NYnnt+2RNH0Fx1oi/tXWxSvOX 5QR9f0JoIWdpBYln44roxeB9pBIjk8s55Xx6IMLrVXD7hEhL3sGWvF65PkGftIoZ tvfw9xqj7yU3JxOpDtfEZm9dEbwJg4jaQLiRf/jnD/u9cs288tw4ZhiA6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKuZ1hRiUVrRfe9zoeC+DXRcllO8MB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvcTVuV0ZHSlJXdEY5NzNPaDRMNE5kRnlXVTd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuceUMA0G CSqGSIb3DQEBCwUAA4IBAQAOOJat9sSINgDxFGlKuM0UIuax4/7ZCUvB3CUAFJ+0 UC4Fu3lyl1pA/uHelOEJNbCmh8JAJEA/06NhbhkLbpR7G76Ae/CX85WXCgSA8eqg 0t8ASYVazMAOfSFZabYQK2JB7CzlhL1cjkhPqSOlI/kf551utU9KLE+W8Pk9WoRa xsrXAF0m/8oBhLblluPzCBc8s6UlL7ePlQXE6HxZdLJlKs67+4k65dcX1H/D7S+0 mFef9MIoGr8jabBKqc87J44hktNC4oEy2WFEq5e2MhLEFC5uETDSWMFhFuHIGuxV y3Wc56gjj8LrQ6H4ByrpYKXbczyWertng38qtlPJHMKa -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:39 2026 by rpki-client