This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/rqJldLN-S-H8DV7_BXB9c6fFRDg.roa File: rqJldLN-S-H8DV7_BXB9c6fFRDg.roa (raw, json) Hash identifier: 8ct3OMMYCUQEAyF1g7DbkXYuvpJT+cTHy+wjPP6qYuw= Subject key identifier: AE:A2:65:74:B3:7E:4B:E1:FC:0D:5E:FF:05:70:7D:73:A7:C5:44:38 Certificate issuer: /CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016 Certificate serial: 019B7DCB4FA6D65E79CECF9C303CB117B281 Authority key identifier: 66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/rqJldLN-S-H8DV7_BXB9c6fFRDg.roa Signing time: Fri 02 Jan 2026 08:20:34 +0000 ROA not before: Fri 02 Jan 2026 08:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207992 IP address blocks: 185.152.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4f:a6:d6:5e:79:ce:cf:9c:30:3c:b1:17:b2:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016 Validity Not Before: Jan 2 08:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aea26574b37e4be1fc0d5eff05707d73a7c54438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d8:14:8a:3f:7e:7c:61:e6:b9:2e:9f:dc:48: 9f:23:d1:49:99:aa:31:4f:f1:f8:39:e0:c2:d3:c1: df:af:40:1c:16:cb:7e:ed:37:17:f0:b4:ae:53:27: be:80:93:f6:c8:9a:69:6c:8f:e6:7a:b1:6f:43:ae: a7:df:4d:7a:dd:df:e7:d1:60:57:25:6b:35:75:b3: 00:68:24:82:eb:3d:07:8c:14:30:a7:40:a9:f3:cb: bc:b0:39:49:20:61:f1:5a:e2:d9:29:12:d8:75:69: a2:16:9d:af:9b:db:5c:bf:53:bd:f1:b3:b8:ec:cc: 8c:3b:03:57:6d:a4:89:74:8d:81:fe:59:67:f5:ad: ae:37:4a:aa:50:01:35:86:4e:20:53:e0:14:dd:46: 02:4d:94:31:9b:16:9c:06:48:4a:71:e8:0d:5e:77: 82:95:76:78:7c:49:8d:68:ba:a3:02:06:06:f6:7d: 38:2f:83:34:f6:81:84:10:db:38:3e:04:a2:0b:37: 9d:57:60:6a:de:f8:ef:7e:54:48:2d:05:db:da:f9: f7:d8:21:d1:21:03:ac:e3:76:8f:f3:21:3f:ea:9a: 6d:5f:30:58:57:5e:6d:ba:4a:77:97:7e:a6:d6:1d: af:0b:0a:0c:7f:5f:59:60:47:29:42:d7:92:87:af: 42:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A2:65:74:B3:7E:4B:E1:FC:0D:5E:FF:05:70:7D:73:A7:C5:44:38 X509v3 Authority Key Identifier: keyid:66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/rqJldLN-S-H8DV7_BXB9c6fFRDg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.152.52.0/22 Signature Algorithm: sha256WithRSAEncryption 97:0f:86:66:ae:0e:d1:57:4d:c7:45:c0:1a:cb:86:e0:dd:a3: 82:8d:f9:be:58:98:88:9e:b9:70:a7:ec:ae:e3:ce:04:a6:ef: 3d:3a:71:8b:a1:a8:1f:2b:61:c0:67:cb:d4:bc:a7:5f:a6:8c: 9d:74:d4:19:3f:0b:f9:98:2f:a1:4d:9e:fc:15:d4:db:04:68: c1:7c:9c:27:02:74:36:45:f7:1d:74:a8:25:b0:57:56:ae:62: da:0e:ef:47:74:02:6d:6f:b5:90:8b:60:88:a9:30:e9:36:1e: d1:a8:b0:ec:63:23:3a:5c:04:e1:6a:d4:0e:93:2e:60:d1:83: 72:a3:d4:af:10:d7:32:1f:91:a6:b6:14:f6:06:fe:48:50:58: 63:0a:2b:7d:67:37:1c:fa:53:8f:e1:8a:5a:16:97:8e:10:1c: 7a:27:ae:c0:63:36:d4:a9:fe:ee:89:17:a9:52:34:6e:ac:95: ca:1e:ed:69:77:a1:04:05:47:fb:9c:46:31:c2:fe:7a:02:1e: ae:0d:33:bf:03:59:31:0c:c7:fb:f1:1d:a1:84:79:90:57:3c: 47:b3:18:22:65:78:26:35:19:8c:7f:dd:0c:d3:9a:55:d3:55: 94:5d:9a:0e:0f:1f:d4:d0:b6:7a:fa:a8:b3:be:66:93:b3:ea: 48:31:04:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0+m1l55zs+cMDyxF7KBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2Y2QzNTk0NjhjOGJhYTk4ZmMzY2EyZWYyZDkwNTgzYTY5 ZTAwMTYwHhcNMjYwMTAyMDgyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWEyNjU3NGIzN2U0YmUxZmMwZDVlZmYwNTcwN2Q3M2E3YzU0NDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNgUij9+fGHmuS6f3EifI9FJmaox T/H4OeDC08Hfr0AcFst+7TcX8LSuUye+gJP2yJppbI/merFvQ66n30163d/n0WBX JWs1dbMAaCSC6z0HjBQwp0Cp88u8sDlJIGHxWuLZKRLYdWmiFp2vm9tcv1O98bO4 7MyMOwNXbaSJdI2B/lln9a2uN0qqUAE1hk4gU+AU3UYCTZQxmxacBkhKcegNXneC lXZ4fEmNaLqjAgYG9n04L4M09oGEENs4PgSiCzedV2Bq3vjvflRILQXb2vn32CHR IQOs43aP8yE/6pptXzBYV15tukp3l36m1h2vCwoMf19ZYEcpQteSh69CTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK6iZXSzfkvh/A1e/wVwfXOnxUQ4MB8GA1UdIwQY MBaAFGbNNZRoyLqpj8PKLvLZBYOmngAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnMwMWxHakl1cW1QdzhvdTh0a0ZnNmFlQUJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83MzcwYzQtZTRjZC00ZGIzLTliODYt ZTM1OWFlMGE2ODM4LzEvcnFKbGRMTi1TLUg4RFY3X0JYQjljNmZGUkRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni83MzcwYzQtZTRjZC00ZGIzLTliODYtZTM1OWFlMGE2ODM4 LzEvWnMwMWxHakl1cW1QdzhvdTh0a0ZnNmFlQUJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZg0MA0G CSqGSIb3DQEBCwUAA4IBAQCXD4Zmrg7RV03HRcAay4bg3aOCjfm+WJiInrlwp+yu 484Epu89OnGLoagfK2HAZ8vUvKdfpoyddNQZPwv5mC+hTZ78FdTbBGjBfJwnAnQ2 RfcddKglsFdWrmLaDu9HdAJtb7WQi2CIqTDpNh7RqLDsYyM6XAThatQOky5g0YNy o9SvENcyH5GmthT2Bv5IUFhjCit9Zzcc+lOP4YpaFpeOEBx6J67AYzbUqf7uiRep UjRurJXKHu1pd6EEBUf7nEYxwv56Ah6uDTO/A1kxDMf78R2hhHmQVzxHsxgiZXgm NRmMf90M05pV01WUXZoODx/U0LZ6+qizvmaTs+pIMQRW -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:10 2026 by rpki-client