This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/QkD6kvbjOFF159SqIoxtVy6uYtw.roa File: QkD6kvbjOFF159SqIoxtVy6uYtw.roa (raw, json) Hash identifier: moRNSt3cT3MEpll0Dp7Um5vSYqeXw33T13RgwrHAltU= Subject key identifier: 42:40:FA:92:F6:E3:38:51:75:E7:D4:AA:22:8C:6D:57:2E:AE:62:DC Certificate issuer: /CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799 Certificate serial: 019B7910BA910B676DF7C44DCB204154EA94 Authority key identifier: B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/QkD6kvbjOFF159SqIoxtVy6uYtw.roa Signing time: Thu 01 Jan 2026 10:18:17 +0000 ROA not before: Thu 01 Jan 2026 10:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204108 IP address blocks: 185.114.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ba:91:0b:67:6d:f7:c4:4d:cb:20:41:54:ea:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799 Validity Not Before: Jan 1 10:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4240fa92f6e3385175e7d4aa228c6d572eae62dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:89:2d:6b:ad:23:aa:13:df:79:be:5c:cb:ef: a3:de:f9:8e:80:67:97:c6:76:3a:5e:da:b6:cf:7d: c2:0e:64:b3:87:06:6a:ec:99:f5:f3:7e:44:0a:42: a7:4a:cf:ee:23:01:bc:e9:84:b6:48:a4:4f:84:7d: 87:1b:aa:3b:24:ab:fd:44:64:ca:fd:c3:9a:a1:a5: c7:52:9d:f8:1a:52:c3:48:fa:73:57:b3:2c:3d:21: 79:22:40:e6:62:46:f6:83:10:75:5e:19:55:c5:11: 2f:97:f2:b3:f8:2c:30:8e:48:a0:cc:e2:de:4c:e5: 12:75:7f:ab:ee:69:25:4e:75:27:86:cf:6d:e5:82: 68:a6:3d:19:b6:0b:6f:0d:61:db:ab:9b:41:be:c8: f4:29:6e:3c:12:e1:b2:35:67:ec:fe:58:83:a4:9b: 92:58:e8:11:f4:36:07:14:70:ed:bf:13:6a:ce:3d: 11:1e:b6:db:5c:bc:b6:8c:96:b4:e5:6d:e2:2a:ca: 96:3a:31:7f:1f:2e:54:02:3e:7c:e9:a1:08:94:3c: f2:2c:55:9b:2b:04:22:6a:de:cb:e0:14:74:eb:b1: 25:0f:36:29:2d:46:b5:26:1b:74:6e:a0:93:fe:57: d2:4b:96:80:04:e2:dc:b6:69:ce:ea:ed:14:95:7b: 6b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:40:FA:92:F6:E3:38:51:75:E7:D4:AA:22:8C:6D:57:2E:AE:62:DC X509v3 Authority Key Identifier: keyid:B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/QkD6kvbjOFF159SqIoxtVy6uYtw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.136.0/22 Signature Algorithm: sha256WithRSAEncryption 29:0a:0e:a1:8f:b5:17:d1:f8:bb:c1:d1:ca:36:5a:d9:69:dd: 34:d7:64:03:7a:43:79:66:ff:3c:e4:c7:7c:f1:07:fb:54:c4: 5d:6e:58:4c:13:d5:1f:cc:ce:52:c4:2a:ee:45:d4:6c:03:0b: 95:1c:94:bc:b7:91:6b:91:34:c5:9a:19:dc:88:e0:7a:dc:0a: 46:2e:3d:81:d5:56:e3:ce:6d:63:5e:5c:21:93:06:e5:9c:c4: c3:c7:d3:5f:c9:92:4d:79:8e:20:c1:3f:4e:fb:24:d1:44:b7: 7f:48:55:69:cf:26:cf:31:19:37:3d:82:50:32:30:4c:dd:1a: d7:c2:eb:12:0c:0b:1e:f8:00:1b:48:4b:fc:7f:06:de:36:a0: 36:f9:ec:34:8b:41:c8:f1:45:ff:44:0b:66:96:6a:c4:1d:ba: bc:53:a2:62:d5:6e:3b:c1:ee:e0:a4:d3:01:78:bb:c1:50:10: 1c:b2:f7:25:6a:ee:57:41:0d:b3:f8:c3:01:76:f5:78:58:46: a1:cf:e7:28:27:09:06:41:99:5f:a9:9d:1e:e4:cc:a3:f0:74: b7:29:e5:ce:83:7b:dc:c0:cc:34:ac:5f:e3:9f:19:69:9e:83: 51:42:72:a4:5a:04:51:55:22:82:72:c0:6b:3d:ac:35:34:ce: 24:2d:81:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ELqRC2dt98RNyyBBVOqUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NGY2M2ZkMGRjMTk3ZTUyYWQyNzIyNzZjNDBkM2VlNGJi MWQ3OTkwHhcNMjYwMTAxMTAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjQwZmE5MmY2ZTMzODUxNzVlN2Q0YWEyMjhjNmQ1NzJlYWU2MmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5okta60jqhPfeb5cy++j3vmOgGeX xnY6Xtq2z33CDmSzhwZq7Jn1835ECkKnSs/uIwG86YS2SKRPhH2HG6o7JKv9RGTK /cOaoaXHUp34GlLDSPpzV7MsPSF5IkDmYkb2gxB1XhlVxREvl/Kz+CwwjkigzOLe TOUSdX+r7mklTnUnhs9t5YJopj0ZtgtvDWHbq5tBvsj0KW48EuGyNWfs/liDpJuS WOgR9DYHFHDtvxNqzj0RHrbbXLy2jJa05W3iKsqWOjF/Hy5UAj586aEIlDzyLFWb KwQiat7L4BR067ElDzYpLUa1Jht0bqCT/lfSS5aABOLctmnO6u0UlXtrcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEJA+pL24zhRdefUqiKMbVcurmLcMB8GA1UdIwQY MBaAFLdPY/0NwZflKtJyJ2xA0+5LsdeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDA5al9RM0JsLVVxMG5JbmJFRFQ3a3V4MTVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85ODExNzYtNGQxMC00ODU5LWJhMGYt MWQyMmIwMmI5YjFiLzEvUWtENmt2YmpPRkYxNTlTcUlveHRWeTZ1WXR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS85ODExNzYtNGQxMC00ODU5LWJhMGYtMWQyMmIwMmI5YjFi LzEvdDA5al9RM0JsLVVxMG5JbmJFRFQ3a3V4MTVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXKIMA0G CSqGSIb3DQEBCwUAA4IBAQApCg6hj7UX0fi7wdHKNlrZad0012QDekN5Zv885Md8 8Qf7VMRdblhME9UfzM5SxCruRdRsAwuVHJS8t5FrkTTFmhnciOB63ApGLj2B1Vbj zm1jXlwhkwblnMTDx9NfyZJNeY4gwT9O+yTRRLd/SFVpzybPMRk3PYJQMjBM3RrX wusSDAse+AAbSEv8fwbeNqA2+ew0i0HI8UX/RAtmlmrEHbq8U6Ji1W47we7gpNMB eLvBUBAcsvclau5XQQ2z+MMBdvV4WEahz+coJwkGQZlfqZ0e5Myj8HS3KeXOg3vc wMw0rF/jnxlpnoNRQnKkWgRRVSKCcsBrPaw1NM4kLYHG -----END CERTIFICATE-----Generated at Mon Jan 26 09:43:20 2026 by rpki-client