This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/QaLldwyWCNmsJuYxanxijJENiro.roa File: QaLldwyWCNmsJuYxanxijJENiro.roa (raw, json) Hash identifier: zZJuFSJ24SLOyuCH72+V4rIHBfJPcOF4kPyYmAT7g5s= Subject key identifier: 41:A2:E5:77:0C:96:08:D9:AC:26:E6:31:6A:7C:62:8C:91:0D:8A:BA Certificate issuer: /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d Certificate serial: 019B7BA4F519919A62053C13D9E60C42709B Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/QaLldwyWCNmsJuYxanxijJENiro.roa Signing time: Thu 01 Jan 2026 22:19:26 +0000 ROA not before: Thu 01 Jan 2026 22:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39151 IP address blocks: 185.27.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f5:19:91:9a:62:05:3c:13:d9:e6:0c:42:70:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d Validity Not Before: Jan 1 22:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41a2e5770c9608d9ac26e6316a7c628c910d8aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:81:c3:83:eb:eb:56:d1:4e:4a:6e:5c:42:19: 3a:b6:57:58:71:cd:84:65:54:af:69:be:b4:3f:9b: 6a:48:d3:0a:9b:cc:70:1e:d2:b9:60:85:be:78:19: 79:59:29:73:63:97:41:22:b4:1b:1c:3e:32:7f:fa: 21:5a:60:73:33:e0:f0:22:fa:7a:87:30:1d:95:f8: 98:d0:30:85:cf:2a:01:b4:fe:75:20:c3:98:eb:82: 8d:3a:58:bb:1b:32:f9:a2:c2:48:a9:50:55:52:c8: 73:eb:1c:6d:0f:36:4f:82:cf:eb:2b:a3:9e:3e:0b: d3:9e:87:dc:2a:03:f2:a3:7a:17:30:17:41:da:f9: 49:6d:bf:3b:50:93:23:17:39:43:fe:c4:a3:f5:4e: 9a:7f:34:32:28:40:d7:ef:3f:93:3d:d5:c3:a7:87: 87:f5:a5:48:52:a1:97:fe:0a:9d:0d:b0:5e:90:70: 48:70:1a:17:b5:38:7e:9c:91:bc:73:7d:14:7b:1b: b6:91:1a:04:15:c3:2f:13:a6:c4:06:13:d0:24:a4: 4b:5e:01:0e:ce:21:0a:f0:cb:e2:53:50:f3:1e:4a: 34:8a:31:c3:99:65:d0:44:9a:85:cd:70:82:c5:8d: 4b:f6:f1:c5:3d:69:a8:cc:b0:b7:30:10:0b:f6:81: 27:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A2:E5:77:0C:96:08:D9:AC:26:E6:31:6A:7C:62:8C:91:0D:8A:BA X509v3 Authority Key Identifier: keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/QaLldwyWCNmsJuYxanxijJENiro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.27.249.0/24 Signature Algorithm: sha256WithRSAEncryption 64:04:31:b7:e2:2b:1a:74:85:2b:b5:34:cf:88:36:a4:5f:d5: 58:68:ab:bf:53:4c:6e:e8:f0:3d:88:ec:3b:ab:47:12:d5:88: 17:79:a7:35:a0:f5:99:a7:85:1b:5a:b3:c7:87:0b:e4:4d:d7: 6a:3c:c0:5c:c3:69:30:d7:7a:24:21:19:17:86:a4:12:64:cf: 47:da:7d:09:c3:93:ff:50:57:a1:a9:dd:fd:0a:cd:a0:57:46: e4:5c:8c:26:9b:7a:e8:b3:83:cf:97:c6:ec:51:57:7a:4c:64: 5e:51:fe:02:5c:af:86:1d:98:a7:89:00:aa:92:e4:10:92:55: 67:fd:86:b3:94:88:2c:92:26:fd:6a:52:47:fa:7e:e2:3a:ad: db:07:e8:d2:2f:18:72:58:2f:46:63:e6:83:74:76:a3:5d:3e: 52:06:0b:96:0d:49:b5:3b:4d:9f:f0:2d:ac:fa:f5:61:72:09: 31:48:ae:7d:de:32:b8:37:44:84:69:8d:f4:a1:d1:ca:6f:d5: a7:58:8d:c4:83:12:99:25:d4:8b:48:93:02:b3:26:14:88:b7: 1e:dd:15:60:ae:eb:cb:b0:ce:13:b0:9e:57:30:83:84:a2:e0: 75:52:c5:d9:67:f9:87:82:f4:e9:b7:f8:0c:3f:51:46:36:ff: aa:63:10:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pPUZkZpiBTwT2eYMQnCbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYTVkMjE3NzU5ZTg2MTY5NmZjNzdlZDlhYTYzYjk0ZWRi M2JlN2QwHhcNMjYwMTAxMjIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWEyZTU3NzBjOTYwOGQ5YWMyNmU2MzE2YTdjNjI4YzkxMGQ4YWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YHDg+vrVtFOSm5cQhk6tldYcc2E ZVSvab60P5tqSNMKm8xwHtK5YIW+eBl5WSlzY5dBIrQbHD4yf/ohWmBzM+DwIvp6 hzAdlfiY0DCFzyoBtP51IMOY64KNOli7GzL5osJIqVBVUshz6xxtDzZPgs/rK6Oe PgvTnofcKgPyo3oXMBdB2vlJbb87UJMjFzlD/sSj9U6afzQyKEDX7z+TPdXDp4eH 9aVIUqGX/gqdDbBekHBIcBoXtTh+nJG8c30Uexu2kRoEFcMvE6bEBhPQJKRLXgEO ziEK8MviU1DzHko0ijHDmWXQRJqFzXCCxY1L9vHFPWmozLC3MBAL9oEn1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEGi5XcMlgjZrCbmMWp8YoyRDYq6MB8GA1UdIwQY MBaAFGGl0hd1noYWlvx37ZqmO5Tts759MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83MmY2Y2YtOWJkNC00NjdhLWE5MmEt NWE2NGE1ZmM4YTY0LzEvUWFMbGR3eVdDTm1zSnVZeGFueGlqSkVOaXJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS83MmY2Y2YtOWJkNC00NjdhLWE5MmEtNWE2NGE1ZmM4YTY0 LzEvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRv5MA0G CSqGSIb3DQEBCwUAA4IBAQBkBDG34isadIUrtTTPiDakX9VYaKu/U0xu6PA9iOw7 q0cS1YgXeac1oPWZp4UbWrPHhwvkTddqPMBcw2kw13okIRkXhqQSZM9H2n0Jw5P/ UFehqd39Cs2gV0bkXIwmm3ros4PPl8bsUVd6TGReUf4CXK+GHZiniQCqkuQQklVn /YazlIgskib9alJH+n7iOq3bB+jSLxhyWC9GY+aDdHajXT5SBguWDUm1O02f8C2s +vVhcgkxSK593jK4N0SEaY30odHKb9WnWI3EgxKZJdSLSJMCsyYUiLce3RVgruvL sM4TsJ5XMIOEouB1UsXZZ/mHgvTpt/gMP1FGNv+qYxBT -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:36 2026 by rpki-client