This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/1-QtHxqhDRc8Ad39doS8rj57e8O8.roa File: 1-QtHxqhDRc8Ad39doS8rj57e8O8.roa (raw, json) Hash identifier: lx29AojPlQO1dFNnHX1vGuPHztiqJFCtnNtbhP7mv1A= Subject key identifier: F9:0B:47:C6:A8:43:45:CF:00:77:7F:5D:A1:2F:2B:8F:9E:DE:F0:EF Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073 Certificate serial: 019B76EB873D398FC111EC721559F47833B5 Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/1-QtHxqhDRc8Ad39doS8rj57e8O8.roa Signing time: Thu 01 Jan 2026 00:18:25 +0000 ROA not before: Thu 01 Jan 2026 00:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208851 IP address blocks: 185.142.21.0/24 maxlen: 24 185.142.22.0/24 maxlen: 24 185.142.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:87:3d:39:8f:c1:11:ec:72:15:59:f4:78:33:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073 Validity Not Before: Jan 1 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f90b47c6a84345cf00777f5da12f2b8f9edef0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:95:95:e3:76:18:2b:5d:4b:1e:82:95:91:09: 21:6d:52:12:6e:13:16:28:b2:32:e3:42:d1:d8:a0: 9e:34:b4:ee:e1:8e:07:52:c9:41:82:44:d4:41:1b: 67:26:de:a8:5c:43:fe:11:e7:0d:65:4d:da:51:af: 90:35:bd:bd:a1:9f:d5:d9:b5:33:6c:5e:4b:cd:2f: a2:63:69:e1:6c:e3:85:8c:d0:e0:42:f6:b1:df:92: 51:af:56:36:e2:a6:9f:31:fe:de:59:41:a5:f7:ae: 14:a9:54:1e:a3:df:d3:11:d4:e5:17:1e:ff:38:05: 9a:44:c2:22:07:7c:bf:5e:26:0d:58:26:e2:54:be: 0f:80:ec:02:ad:3c:97:84:47:06:97:07:0e:b1:da: 02:de:f9:da:02:b2:1e:6d:b7:9a:e9:93:c7:59:0e: b5:d7:83:81:ef:9c:e3:ba:34:c3:0b:b4:1a:61:9b: 22:b7:4e:b9:fe:b8:f0:87:50:e1:b0:cf:a5:ba:46: 74:75:bb:4b:28:21:8e:06:8b:e6:21:53:c8:c1:8e: 64:18:86:22:74:fd:99:a6:68:18:cf:c1:0f:d3:dc: 4c:b7:7f:26:99:82:6d:14:7b:67:59:21:ad:52:19: e0:a5:83:74:6f:b3:45:1a:16:28:63:c7:dd:6c:11: 91:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0B:47:C6:A8:43:45:CF:00:77:7F:5D:A1:2F:2B:8F:9E:DE:F0:EF X509v3 Authority Key Identifier: keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/1-QtHxqhDRc8Ad39doS8rj57e8O8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.21.0-185.142.23.255 Signature Algorithm: sha256WithRSAEncryption 5f:e2:07:90:3c:1e:1a:50:ac:ad:94:40:62:96:a9:8d:c6:e2: 79:35:33:01:19:1a:f6:54:4e:2b:14:fb:53:fd:8b:07:bd:89: 73:3e:35:2f:92:a3:27:d0:93:be:1b:90:89:83:52:e0:f8:5a: f3:c4:0c:c6:17:40:86:5a:cf:ca:3a:5e:7e:a8:4d:4c:d6:ee: 38:74:5d:49:01:d5:2f:8f:2c:ce:d0:b8:14:50:d5:73:b7:be: 79:79:2c:ce:20:a1:a3:ce:fd:84:27:b5:03:9d:ca:63:00:74: 24:16:ae:29:09:56:b8:3f:45:02:a5:35:61:02:3f:a0:5f:77: 52:63:52:ed:b3:ba:a6:0b:38:ce:5d:32:7c:e6:42:9c:e5:f5: 8c:74:fc:bc:bd:15:98:d7:0d:68:05:e7:73:2e:c6:e7:98:95: 17:6a:08:0c:1d:bd:6d:e7:d5:b7:8c:e3:1a:f6:ac:f9:d8:b9: 46:1a:5a:56:c3:3d:f4:32:97:d4:01:2e:e5:ff:4e:83:3f:07: af:c0:be:28:a0:48:db:89:bc:a7:47:c7:8f:23:94:86:26:d7: 7f:b4:cf:09:6b:73:11:74:56:14:40:3e:10:92:da:eb:7f:ef: d9:95:55:44:92:fa:25:cb:8f:92:c6:f8:26:b6:b3:fc:08:25: e0:01:e5:7d -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt264c9OY/BEexyFVn0eDO1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NDI1Y2Y1NTAxMzQ0YWM1YWNjMzA3YWJkMGFmMDEzZmFj NjcwNzMwHhcNMjYwMTAxMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTBiNDdjNmE4NDM0NWNmMDA3NzdmNWRhMTJmMmI4ZjllZGVmMGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZWV43YYK11LHoKVkQkhbVISbhMW KLIy40LR2KCeNLTu4Y4HUslBgkTUQRtnJt6oXEP+EecNZU3aUa+QNb29oZ/V2bUz bF5LzS+iY2nhbOOFjNDgQvax35JRr1Y24qafMf7eWUGl964UqVQeo9/TEdTlFx7/ OAWaRMIiB3y/XiYNWCbiVL4PgOwCrTyXhEcGlwcOsdoC3vnaArIebbea6ZPHWQ61 14OB75zjujTDC7QaYZsit065/rjwh1DhsM+lukZ0dbtLKCGOBovmIVPIwY5kGIYi dP2ZpmgYz8EP09xMt38mmYJtFHtnWSGtUhngpYN0b7NFGhYoY8fdbBGRgQIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFPkLR8aoQ0XPAHd/XaEvK4+e3vDvMB8GA1UdIwQY MBaAFLRCXPVQE0SsWswwer0K8BP6xnBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82YWMwYTItNWM2Yy00MzU3LTk3ZTQt Y2ViOGFiNmQxMTJlLzEvMS1RdEh4cWhEUmM4QWQzOWRvUzhyajU3ZThPOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWUvNmFjMGEyLTVjNmMtNDM1Ny05N2U0LWNlYjhhYjZkMTEy ZS8xL3RFSmM5VkFUUkt4YXpEQjZ2UXJ3RV9yR2NITS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAuY4V AwQDuY4QMA0GCSqGSIb3DQEBCwUAA4IBAQBf4geQPB4aUKytlEBilqmNxuJ5NTMB GRr2VE4rFPtT/YsHvYlzPjUvkqMn0JO+G5CJg1Lg+FrzxAzGF0CGWs/KOl5+qE1M 1u44dF1JAdUvjyzO0LgUUNVzt755eSzOIKGjzv2EJ7UDncpjAHQkFq4pCVa4P0UC pTVhAj+gX3dSY1Lts7qmCzjOXTJ85kKc5fWMdPy8vRWY1w1oBedzLsbnmJUXaggM Hb1t59W3jOMa9qz52LlGGlpWwz30MpfUAS7l/06DPwevwL4ooEjbibynR8ePI5SG Jtd/tM8Ja3MRdFYUQD4Qktrrf+/ZlVVEkvoly4+SxvgmtrP8CCXgAeV9 -----END CERTIFICATE-----Generated at Mon Jan 26 12:10:50 2026 by rpki-client