This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/qWNtslR5VeuzsdBANHUyp5ZAUOU.roa File: qWNtslR5VeuzsdBANHUyp5ZAUOU.roa (raw, json) Hash identifier: rgvLkD6mm+PX1WOuRNNO3Ee9uRmn0UljGpNc3jlNEWI= Subject key identifier: A9:63:6D:B2:54:79:55:EB:B3:B1:D0:40:34:75:32:A7:96:40:50:E5 Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9 Certificate serial: 019B7AC7F62B5CD6607AA32500C9AD94DE5D Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/qWNtslR5VeuzsdBANHUyp5ZAUOU.roa Signing time: Thu 01 Jan 2026 18:18:03 +0000 ROA not before: Thu 01 Jan 2026 18:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39537 IP address blocks: 185.202.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:f6:2b:5c:d6:60:7a:a3:25:00:c9:ad:94:de:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9 Validity Not Before: Jan 1 18:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9636db2547955ebb3b1d040347532a7964050e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:10:01:c2:9c:e7:c0:5e:b2:6a:02:85:37:0c: 3b:e4:fb:b3:e3:b6:52:b2:82:7a:59:4e:16:df:ad: 2a:5d:9c:3e:b0:c1:a3:be:6f:d5:f7:51:bc:5c:22: f6:8f:4f:ea:bd:d1:92:e6:16:10:0b:5b:dd:59:25: 7e:99:38:4d:99:26:69:fa:0f:65:52:6c:c7:dd:6a: d0:4f:23:5c:23:3b:0c:bd:de:ee:ff:3d:ee:b2:cc: cf:74:c6:1a:30:a0:4a:cc:87:81:5c:9d:b6:42:1f: 05:ce:8b:2c:df:2d:d7:af:d6:5d:eb:d3:72:f7:c2: 02:aa:7b:a3:44:d9:2d:42:25:3f:de:47:ec:90:d9: e4:9e:ae:7b:a8:3e:5e:3e:8e:67:55:60:3d:90:b7: d6:a1:87:0c:76:ce:70:12:65:b3:db:87:60:66:41: b0:e5:b1:53:f8:49:70:18:84:d8:6a:e0:1c:bc:99: 56:d7:3e:4f:d6:ab:77:ca:e6:fe:63:ff:0d:ea:c9: 07:a8:d5:04:4d:95:34:f1:d1:d2:c4:14:11:64:95: 4f:ae:24:9b:1f:6e:7c:b4:d9:70:7f:c7:59:ae:f4: bb:46:38:e2:f7:ef:eb:65:4f:3a:c8:ad:ff:a1:16: 30:1d:4e:52:ad:62:84:ce:32:13:ec:af:5e:1d:65: 8b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:63:6D:B2:54:79:55:EB:B3:B1:D0:40:34:75:32:A7:96:40:50:E5 X509v3 Authority Key Identifier: keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/qWNtslR5VeuzsdBANHUyp5ZAUOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.202.115.0/24 Signature Algorithm: sha256WithRSAEncryption 19:b4:c6:66:6b:9d:30:2f:7b:2e:ac:9a:44:29:86:2b:94:cb: 15:42:2a:9f:ec:3b:4a:85:21:fc:8b:f6:df:6b:3e:f5:56:38: 86:c4:b6:10:fc:20:af:74:3c:73:a7:b5:69:c4:2a:47:e2:fd: 18:7c:37:e3:5d:82:43:8e:bc:af:d4:8f:51:04:8d:a9:1e:69: 8f:2d:a6:8a:b9:9e:ba:0a:af:19:ac:8a:6f:7d:e6:b0:21:d5: 78:da:b2:01:e2:65:59:b9:a5:e6:18:5f:c8:c5:cb:6d:0e:c9: 5d:96:c9:9e:ee:c8:23:ca:5f:eb:48:23:ec:6e:c6:c8:72:61: 7c:39:cb:11:33:d8:8b:44:ac:37:91:42:79:ba:00:83:b6:98: 23:87:49:c2:ff:78:02:bc:c4:6b:73:ad:22:08:c8:0b:1a:e2: a2:dd:3b:e2:25:91:b8:df:34:6c:5d:36:d8:c1:a6:55:12:f3: 34:47:ef:1e:dd:a4:87:64:f2:d0:03:d6:36:51:4b:06:b6:98: ac:cd:1c:96:9f:e9:6d:58:7b:aa:3b:aa:1a:55:e9:89:31:f3: b7:9c:d1:3d:28:f4:a3:9b:14:8f:dc:9b:67:e3:fb:81:64:da: c3:fd:c2:5a:18:44:eb:70:98:e4:5e:ce:a8:63:38:89:0c:ee: 0e:95:c6:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x/YrXNZgeqMlAMmtlN5dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YzVkYWQ1NDRkZjQ5NzE2MDg1ZWJlODBkYmU4MmViNjhh MjA5YzkwHhcNMjYwMTAxMTgxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTYzNmRiMjU0Nzk1NWViYjNiMWQwNDAzNDc1MzJhNzk2NDA1MGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRABwpznwF6yagKFNww75Puz47ZS soJ6WU4W360qXZw+sMGjvm/V91G8XCL2j0/qvdGS5hYQC1vdWSV+mThNmSZp+g9l UmzH3WrQTyNcIzsMvd7u/z3usszPdMYaMKBKzIeBXJ22Qh8Fzoss3y3Xr9Zd69Ny 98ICqnujRNktQiU/3kfskNnknq57qD5ePo5nVWA9kLfWoYcMds5wEmWz24dgZkGw 5bFT+ElwGITYauAcvJlW1z5P1qt3yub+Y/8N6skHqNUETZU08dHSxBQRZJVPriSb H258tNlwf8dZrvS7Rjji9+/rZU86yK3/oRYwHU5SrWKEzjIT7K9eHWWLiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKljbbJUeVXrs7HQQDR1MqeWQFDlMB8GA1UdIwQY MBaAFGXF2tVE30lxYIXr6A2+gutoognJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmNYYTFVVGZTWEZnaGV2b0RiNkM2MmlpQ2NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny81Y2ZkMzgtNWUzNy00M2FmLWExYjAt YWQwMTJhZmY1MTcyLzEvcVdOdHNsUjVWZXV6c2RCQU5IVXlwNVpBVU9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny81Y2ZkMzgtNWUzNy00M2FmLWExYjAtYWQwMTJhZmY1MTcy LzEvWmNYYTFVVGZTWEZnaGV2b0RiNkM2MmlpQ2NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucpzMA0G CSqGSIb3DQEBCwUAA4IBAQAZtMZma50wL3surJpEKYYrlMsVQiqf7DtKhSH8i/bf az71VjiGxLYQ/CCvdDxzp7VpxCpH4v0YfDfjXYJDjryv1I9RBI2pHmmPLaaKuZ66 Cq8ZrIpvfeawIdV42rIB4mVZuaXmGF/IxcttDsldlsme7sgjyl/rSCPsbsbIcmF8 OcsRM9iLRKw3kUJ5ugCDtpgjh0nC/3gCvMRrc60iCMgLGuKi3TviJZG43zRsXTbY waZVEvM0R+8e3aSHZPLQA9Y2UUsGtpiszRyWn+ltWHuqO6oaVemJMfO3nNE9KPSj mxSP3Jtn4/uBZNrD/cJaGETrcJjkXs6oYziJDO4OlcYN -----END CERTIFICATE-----Generated at Mon Jan 26 04:19:51 2026 by rpki-client