This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/q3KyzHaSe2kvbjeAyrJ6xilqOcs.roa File: q3KyzHaSe2kvbjeAyrJ6xilqOcs.roa (raw, json) Hash identifier: HuGnxltcUOelJB4yz5mBBFw+8XNpy2937+oYWbglU3Q= Subject key identifier: AB:72:B2:CC:76:92:7B:69:2F:6E:37:80:CA:B2:7A:C6:29:6A:39:CB Certificate issuer: /CN=e7739db90c1ce98431df348a1376e53ac6e0523c Certificate serial: 019B7D5CA8638A0E84E2CFE49D38058B407E Authority key identifier: E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/q3KyzHaSe2kvbjeAyrJ6xilqOcs.roa Signing time: Fri 02 Jan 2026 06:19:42 +0000 ROA not before: Fri 02 Jan 2026 06:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203257 IP address blocks: 185.140.192.0/24 maxlen: 24 185.140.193.0/24 maxlen: 24 185.140.194.0/24 maxlen: 24 185.140.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a8:63:8a:0e:84:e2:cf:e4:9d:38:05:8b:40:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7739db90c1ce98431df348a1376e53ac6e0523c Validity Not Before: Jan 2 06:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab72b2cc76927b692f6e3780cab27ac6296a39cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dc:40:b3:c5:7b:26:0e:21:fa:8c:e7:0c:dc: e1:62:10:3a:da:2e:cc:b7:96:33:96:c7:ed:5d:22: d7:72:98:01:66:64:fd:e7:6d:55:45:29:85:a4:1b: 0c:c1:15:46:03:1f:8d:18:59:5b:99:9d:3c:da:18: 57:4c:50:6c:27:62:c3:80:45:6e:a8:1b:e6:88:42: f8:de:33:de:11:d7:30:0c:1d:01:5e:3b:5a:59:1f: 29:57:1b:52:59:10:05:af:6c:9d:b9:df:c1:d0:05: ae:28:1f:b0:9c:cc:38:72:c3:62:b2:62:7e:2c:16: ed:e7:4e:b5:12:69:18:d8:8e:4e:cc:3d:7e:af:55: c9:71:5d:e8:ca:44:6c:ba:84:38:4d:2c:4b:46:8c: 54:65:95:da:ec:b8:02:ed:cc:4b:35:81:81:b3:78: fd:c8:e0:78:2c:03:c9:f6:98:62:32:4f:95:36:b3: fa:22:26:19:2e:18:9b:82:01:ba:99:48:bc:9a:e5: e0:d4:5f:04:2f:e4:c2:55:a9:9e:d9:51:ef:54:db: 31:1c:b1:aa:eb:17:62:de:2d:73:f7:c9:66:8a:9e: 09:62:56:d8:f1:9a:6d:08:67:39:fb:7d:db:f6:d0: 74:8a:ee:3c:eb:56:1d:29:b2:6d:11:aa:5c:68:1a: e6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:72:B2:CC:76:92:7B:69:2F:6E:37:80:CA:B2:7A:C6:29:6A:39:CB X509v3 Authority Key Identifier: keyid:E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/q3KyzHaSe2kvbjeAyrJ6xilqOcs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.192.0/22 Signature Algorithm: sha256WithRSAEncryption ac:5a:8c:67:63:0c:a5:f9:ed:94:5c:fc:c9:98:65:25:7b:2a: ee:5a:68:b5:28:3d:b8:c6:4c:22:76:aa:12:42:86:30:10:a3: ee:33:34:26:86:87:cf:76:0f:6e:dc:09:c1:ed:1b:c4:54:58: 84:1f:51:8b:f5:2d:d8:5c:bb:4c:d1:12:d4:9d:da:9e:d4:0c: 35:43:c5:d3:5a:41:47:4e:b8:0c:20:8b:1f:c0:e6:28:97:f0: 9d:fa:02:00:8b:67:c2:07:2c:c3:4e:a9:0c:c1:4a:87:cf:38: b6:7f:20:e1:d3:88:63:e7:c9:05:02:e0:74:a8:c4:fe:1d:51: 5b:b4:27:2e:bd:da:6b:aa:25:80:40:a5:aa:9b:ab:2d:19:c8: 67:6b:46:b4:1e:5b:06:5b:d4:20:6f:e0:18:e0:d3:66:79:9c: bf:b4:63:79:bd:3d:bc:da:42:6d:9b:7b:4e:0c:17:6e:4a:71: e3:00:58:1b:0b:a3:77:2f:1a:b3:60:6d:03:f5:bb:04:ef:97: b4:eb:5a:40:92:c8:fa:89:d7:2c:03:ad:35:2e:dc:c4:27:b8: 60:78:05:bb:56:0c:6f:3e:0b:3e:68:f6:07:23:67:db:3f:f0: 1c:8c:33:c2:70:0a:8a:ed:fc:28:4f:b4:6f:80:27:8e:9c:9b: fd:b7:24:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XKhjig6E4s/knTgFi0B+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NzM5ZGI5MGMxY2U5ODQzMWRmMzQ4YTEzNzZlNTNhYzZl MDUyM2MwHhcNMjYwMTAyMDYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjcyYjJjYzc2OTI3YjY5MmY2ZTM3ODBjYWIyN2FjNjI5NmEzOWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtxAs8V7Jg4h+oznDNzhYhA62i7M t5YzlsftXSLXcpgBZmT9521VRSmFpBsMwRVGAx+NGFlbmZ082hhXTFBsJ2LDgEVu qBvmiEL43jPeEdcwDB0BXjtaWR8pVxtSWRAFr2ydud/B0AWuKB+wnMw4csNismJ+ LBbt5061EmkY2I5OzD1+r1XJcV3oykRsuoQ4TSxLRoxUZZXa7LgC7cxLNYGBs3j9 yOB4LAPJ9phiMk+VNrP6IiYZLhibggG6mUi8muXg1F8EL+TCVame2VHvVNsxHLGq 6xdi3i1z98lmip4JYlbY8ZptCGc5+33b9tB0iu4861YdKbJtEapcaBrmiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKtyssx2kntpL243gMqyesYpajnLMB8GA1UdIwQY MBaAFOdznbkMHOmEMd80ihN25TrG4FI8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTNPZHVRd2M2WVF4M3pTS0UzYmxPc2JnVWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC81NDcwMzQtMzk1Yy00M2YwLWEzNGMt MTk0MjhmOTJjMWNjLzEvcTNLeXpIYVNlMmt2YmplQXlySjZ4aWxxT2NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC81NDcwMzQtMzk1Yy00M2YwLWEzNGMtMTk0MjhmOTJjMWNj LzEvNTNPZHVRd2M2WVF4M3pTS0UzYmxPc2JnVWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYzAMA0G CSqGSIb3DQEBCwUAA4IBAQCsWoxnYwyl+e2UXPzJmGUleyruWmi1KD24xkwidqoS QoYwEKPuMzQmhofPdg9u3AnB7RvEVFiEH1GL9S3YXLtM0RLUndqe1Aw1Q8XTWkFH TrgMIIsfwOYol/Cd+gIAi2fCByzDTqkMwUqHzzi2fyDh04hj58kFAuB0qMT+HVFb tCcuvdprqiWAQKWqm6stGchna0a0HlsGW9Qgb+AY4NNmeZy/tGN5vT282kJtm3tO DBduSnHjAFgbC6N3LxqzYG0D9bsE75e061pAksj6idcsA601LtzEJ7hgeAW7Vgxv Pgs+aPYHI2fbP/AcjDPCcAqK7fwoT7RvgCeOnJv9tyRg -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:30 2026 by rpki-client