This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/K_QMKdjdYGYO_K6jBRKDt9oPc-4.roa File: K_QMKdjdYGYO_K6jBRKDt9oPc-4.roa (raw, json) Hash identifier: P33wrBWs2yJaqJ2LTURN/ha1UtuTGC+nJ+QNsu/z4d0= Subject key identifier: 2B:F4:0C:29:D8:DD:60:66:0E:FC:AE:A3:05:12:83:B7:DA:0F:73:EE Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111 Certificate serial: 019B797EE1ACBC053D68116F5982FE40B240 Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/K_QMKdjdYGYO_K6jBRKDt9oPc-4.roa Signing time: Thu 01 Jan 2026 12:18:37 +0000 ROA not before: Thu 01 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200533 IP address blocks: 185.225.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e1:ac:bc:05:3d:68:11:6f:59:82:fe:40:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111 Validity Not Before: Jan 1 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bf40c29d8dd60660efcaea3051283b7da0f73ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:90:3a:43:21:93:84:79:eb:9c:a6:ae:e6:48: 11:0a:7b:d6:09:16:fa:26:50:19:e6:a0:0c:74:2f: 1f:71:cf:3d:cf:5e:59:30:41:0a:92:f6:c1:64:43: 5a:22:06:19:b8:13:4a:b9:bf:5b:4b:a2:21:b7:87: 20:29:d0:98:35:79:7f:a7:f0:6c:f3:0f:79:69:fc: 90:ff:30:df:d7:93:56:77:09:17:f5:5f:d6:d4:60: 46:4c:c0:38:28:3e:36:db:fb:4f:75:57:8c:03:2b: ab:b3:8c:fc:fb:4c:5b:57:be:75:a9:11:f7:17:6c: 9c:c9:07:bb:36:3d:7f:d4:8a:c3:d0:84:4f:20:ba: e9:7e:25:46:dc:2d:0e:d1:81:9a:c7:e8:d9:0d:81: f5:ff:0b:4e:2a:44:a0:62:57:1d:20:f8:9e:b1:79: a0:82:df:5c:dc:c8:1e:ba:08:64:ee:7f:9b:b2:63: 98:cf:fa:4a:1f:9d:d3:cc:ed:cc:ca:fd:28:7c:1a: 4b:6b:b8:2a:ca:4c:a2:60:d9:be:fb:c2:e4:e4:f0: 50:24:4d:6e:5c:e0:cf:80:52:51:58:35:9b:6e:2c: 4e:e6:aa:81:d5:07:5d:12:b3:ae:d9:c9:84:5c:fd: b8:ce:de:8f:0f:14:f3:80:02:3c:ed:6c:96:2e:2e: 75:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F4:0C:29:D8:DD:60:66:0E:FC:AE:A3:05:12:83:B7:DA:0F:73:EE X509v3 Authority Key Identifier: keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/K_QMKdjdYGYO_K6jBRKDt9oPc-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.236.0/24 Signature Algorithm: sha256WithRSAEncryption 96:02:c0:a5:20:ca:a9:a5:37:8d:38:10:5d:80:e8:1d:39:1c: 6d:47:57:0d:8b:4c:f0:ca:65:98:b0:e4:87:83:63:4f:20:f6: 51:ae:d4:96:29:f7:7f:bb:83:69:85:7f:25:51:3b:0a:9b:9e: 22:7f:c9:bf:09:0d:c6:65:52:54:62:8c:22:cf:9d:94:95:0d: 1a:47:9b:9c:cf:5b:6a:64:a3:20:c9:68:27:0a:7f:47:7b:71: 00:e5:45:06:a3:54:90:e5:56:5d:a2:fe:98:b3:8f:4d:7e:3f: f8:57:66:62:a9:59:aa:44:f5:45:95:8d:9b:67:5a:fa:bd:13: 75:05:53:a5:91:b6:ed:13:70:0c:de:87:12:f5:88:c2:73:c6: fb:a5:d7:8f:24:2c:44:e1:27:0c:c2:07:82:3b:99:2a:ba:f2: ad:b1:2d:f2:8c:3c:71:9a:02:a0:df:55:1c:66:16:a8:b1:f1: 9a:8c:38:1c:c8:62:7b:bd:58:04:70:ba:81:30:2f:64:b4:ca: 7f:cb:e1:86:b7:87:7a:b0:ff:82:3b:4f:38:11:e1:f2:27:26: 98:f2:d5:28:87:b5:3d:e7:6b:54:36:ec:95:79:37:91:03:8c: 0b:2e:57:e2:39:c3:21:22:ea:88:6f:e7:3d:48:65:33:39:26: fb:55:75:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fuGsvAU9aBFvWYL+QLJAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkODhlYjczMGFiMWE1MDFlYTM2ZWEzNDgyZDc2NDU0NGUx NDExMTEwHhcNMjYwMTAxMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmY0MGMyOWQ4ZGQ2MDY2MGVmY2FlYTMwNTEyODNiN2RhMGY3M2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JA6QyGThHnrnKau5kgRCnvWCRb6 JlAZ5qAMdC8fcc89z15ZMEEKkvbBZENaIgYZuBNKub9bS6Iht4cgKdCYNXl/p/Bs 8w95afyQ/zDf15NWdwkX9V/W1GBGTMA4KD422/tPdVeMAyurs4z8+0xbV751qRH3 F2ycyQe7Nj1/1IrD0IRPILrpfiVG3C0O0YGax+jZDYH1/wtOKkSgYlcdIPiesXmg gt9c3Mgeughk7n+bsmOYz/pKH53TzO3Myv0ofBpLa7gqykyiYNm++8Lk5PBQJE1u XODPgFJRWDWbbixO5qqB1QddErOu2cmEXP24zt6PDxTzgAI87WyWLi51zQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCv0DCnY3WBmDvyuowUSg7faD3PuMB8GA1UdIwQY MBaAFE2I63MKsaUB6jbqNILXZFROFBERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQt NzI2ZjgzZDIzODkyLzEvS19RTUtkamRZR1lPX0s2akJSS0R0OW9QYy00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQtNzI2ZjgzZDIzODky LzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueHsMA0G CSqGSIb3DQEBCwUAA4IBAQCWAsClIMqppTeNOBBdgOgdORxtR1cNi0zwymWYsOSH g2NPIPZRrtSWKfd/u4NphX8lUTsKm54if8m/CQ3GZVJUYowiz52UlQ0aR5ucz1tq ZKMgyWgnCn9He3EA5UUGo1SQ5VZdov6Ys49Nfj/4V2ZiqVmqRPVFlY2bZ1r6vRN1 BVOlkbbtE3AM3ocS9YjCc8b7pdePJCxE4ScMwgeCO5kquvKtsS3yjDxxmgKg31Uc ZhaosfGajDgcyGJ7vVgEcLqBMC9ktMp/y+GGt4d6sP+CO084EeHyJyaY8tUoh7U9 52tUNuyVeTeRA4wLLlfiOcMhIuqIb+c9SGUzOSb7VXW3 -----END CERTIFICATE-----Generated at Sun Jan 25 18:21:57 2026 by rpki-client