This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/qsPJeU-C_65tmjEWpGQYQUIEajo.roa File: qsPJeU-C_65tmjEWpGQYQUIEajo.roa (raw, json) Hash identifier: 1cn7hAG7OagxW4P/nzGgq4cV1HKNDko3iBj1s+1Q88U= Subject key identifier: AA:C3:C9:79:4F:82:FF:AE:6D:9A:31:16:A4:64:18:41:42:04:6A:3A Certificate issuer: /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c Certificate serial: 019B7AC8B58792DE9E329A79FF047B380E1D Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/qsPJeU-C_65tmjEWpGQYQUIEajo.roa Signing time: Thu 01 Jan 2026 18:18:52 +0000 ROA not before: Thu 01 Jan 2026 18:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 185.127.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b5:87:92:de:9e:32:9a:79:ff:04:7b:38:0e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c Validity Not Before: Jan 1 18:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aac3c9794f82ffae6d9a3116a464184142046a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:57:36:6f:8a:6e:7a:e9:0b:38:d3:9a:d4:82: 32:c4:7a:c7:02:35:ca:c7:89:d7:8e:e1:c9:51:12: 07:8f:25:d8:52:8e:d7:ec:10:8b:cc:a7:ad:7a:10: 13:c6:1b:f1:d6:3a:44:a2:dd:f5:54:be:e0:1f:dc: c9:59:dc:2b:89:89:c0:c9:ff:f6:cf:2e:94:6d:a3: 45:1b:21:3f:07:76:9b:12:9d:4f:8e:1f:18:ce:9a: b0:5f:ce:e7:5e:d4:23:99:80:83:22:d5:eb:34:ff: 1b:ff:12:41:73:fd:8a:1c:8f:e2:fd:bd:f0:c5:2d: 87:f5:f2:0a:51:f7:62:48:86:88:ef:55:e5:2e:e5: a8:7d:80:b0:ae:75:c2:90:27:7a:41:8f:88:c9:7d: f3:33:72:ae:f8:16:3f:d6:b8:c4:2d:36:a2:b7:72: ce:22:e3:28:ee:d8:44:bc:8b:3d:de:e3:a1:a2:61: 63:e2:c1:13:4c:3f:2f:af:0a:2c:b9:8d:ea:94:ed: bf:9c:a8:c7:52:60:dc:5b:0d:09:c7:57:fc:a8:5c: 8f:97:3d:4d:3c:bc:b5:4d:81:ea:d2:28:e3:cb:10: 5c:86:ce:a5:4f:8e:1a:3f:4b:3b:03:e9:a3:8b:04: 7a:08:f0:64:e6:c8:cc:e8:78:98:bc:1f:ea:1a:1a: 8d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C3:C9:79:4F:82:FF:AE:6D:9A:31:16:A4:64:18:41:42:04:6A:3A X509v3 Authority Key Identifier: keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/qsPJeU-C_65tmjEWpGQYQUIEajo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.127.28.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:10:52:3c:73:84:9a:c8:63:8d:52:c1:9c:c5:70:41:39:e0: ec:6c:62:7e:ca:fd:0e:ec:27:88:67:ba:92:89:18:3c:48:de: 20:fe:6b:fd:8a:be:0a:09:52:d4:3b:eb:a6:da:cb:ca:04:f2: cc:0f:b5:e8:06:a8:ec:6f:31:d7:9c:98:ac:e9:93:a1:f4:90: 0e:8f:d3:93:b3:be:c2:1b:f5:39:53:d1:1b:01:05:a3:5a:60: 1a:42:e6:de:db:6c:a2:56:39:ac:f4:0f:fa:be:18:b0:b5:37: a0:ea:62:af:47:9a:5c:42:a7:fb:3a:14:1f:2f:c6:0a:d8:20: f0:04:91:f8:94:63:e7:92:9d:ff:17:b4:09:5c:cc:8b:b8:40: 2b:d9:7d:eb:b9:a2:cc:36:c4:94:09:a9:d9:e7:f2:3e:ee:42: d1:bc:b4:c3:a3:0e:3b:c8:d4:cf:15:49:21:62:80:97:ca:92: 81:05:cb:88:7f:97:01:f6:2d:7f:c4:a7:9d:0c:1b:bc:bc:73: 5d:51:ea:33:50:1d:d9:95:fd:0b:86:f8:d2:0e:6d:dd:ae:55: 7c:1b:e1:2c:8f:e8:91:2a:5c:34:05:1d:3a:2b:49:11:90:3e: b1:46:ff:29:93:cd:84:61:e0:34:22:85:45:3f:c2:e0:1f:ee: 1a:67:36:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yLWHkt6eMpp5/wR7OA4dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMGIwZGNiNmFkMGNhODE2ZDJiZDIwNGUxM2YxZWFmMTEw NDI3NGMwHhcNMjYwMTAxMTgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWMzYzk3OTRmODJmZmFlNmQ5YTMxMTZhNDY0MTg0MTQyMDQ2YTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVc2b4pueukLONOa1IIyxHrHAjXK x4nXjuHJURIHjyXYUo7X7BCLzKetehATxhvx1jpEot31VL7gH9zJWdwriYnAyf/2 zy6UbaNFGyE/B3abEp1Pjh8YzpqwX87nXtQjmYCDItXrNP8b/xJBc/2KHI/i/b3w xS2H9fIKUfdiSIaI71XlLuWofYCwrnXCkCd6QY+IyX3zM3Ku+BY/1rjELTait3LO IuMo7thEvIs93uOhomFj4sETTD8vrwosuY3qlO2/nKjHUmDcWw0Jx1f8qFyPlz1N PLy1TYHq0ijjyxBchs6lT44aP0s7A+mjiwR6CPBk5sjM6HiYvB/qGhqNLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKrDyXlPgv+ubZoxFqRkGEFCBGo6MB8GA1UdIwQY MBaAFA4LDctq0MqBbSvSBOE/Hq8RBCdMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMt N2ZlMzk1MWE3MzViLzEvcXNQSmVVLUNfNjV0bWpFV3BHUVlRVUlFYWpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMtN2ZlMzk1MWE3MzVi LzEvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX8cMA0G CSqGSIb3DQEBCwUAA4IBAQB7EFI8c4SayGONUsGcxXBBOeDsbGJ+yv0O7CeIZ7qS iRg8SN4g/mv9ir4KCVLUO+um2svKBPLMD7XoBqjsbzHXnJis6ZOh9JAOj9OTs77C G/U5U9EbAQWjWmAaQube22yiVjms9A/6vhiwtTeg6mKvR5pcQqf7OhQfL8YK2CDw BJH4lGPnkp3/F7QJXMyLuEAr2X3ruaLMNsSUCanZ5/I+7kLRvLTDow47yNTPFUkh YoCXypKBBcuIf5cB9i1/xKedDBu8vHNdUeozUB3Zlf0LhvjSDm3drlV8G+Esj+iR Klw0BR06K0kRkD6xRv8pk82EYeA0IoVFP8LgH+4aZzb3 -----END CERTIFICATE-----Generated at Sun Jan 25 07:56:29 2026 by rpki-client