This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QXAXKQse-zxsNeZcBW31eN8iK4A.roa File: QXAXKQse-zxsNeZcBW31eN8iK4A.roa (raw, json) Hash identifier: f3ylgAsAECBTPC68DpHhP++oWirLHR/7JnZ++PmB7MY= Subject key identifier: 41:70:17:29:0B:1E:FB:3C:6C:35:E6:5C:05:6D:F5:78:DF:22:2B:80 Certificate issuer: /CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa Certificate serial: 019B7EA73DF53CA02242246C43263D9F69F8 Authority key identifier: 9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QXAXKQse-zxsNeZcBW31eN8iK4A.roa Signing time: Fri 02 Jan 2026 12:20:48 +0000 ROA not before: Fri 02 Jan 2026 12:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22168 IP address blocks: 185.91.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:3d:f5:3c:a0:22:42:24:6c:43:26:3d:9f:69:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa Validity Not Before: Jan 2 12:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=417017290b1efb3c6c35e65c056df578df222b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:40:5d:c2:85:9a:f4:10:90:a8:ad:a2:9f:5a: 09:8f:cb:a9:59:43:da:02:a0:78:c3:1a:d2:0f:b8: da:88:51:09:20:03:ad:c0:ef:a4:13:21:ce:91:25: fd:74:89:4c:8f:6c:b4:67:ee:52:bc:ef:f4:98:e2: c4:0b:e3:8d:30:d0:67:ab:7a:86:5f:d4:9e:91:ac: 80:09:ec:4f:d2:d5:54:0e:d0:91:a1:b7:32:48:db: cb:eb:80:68:f5:46:b4:d2:4a:13:68:4c:c0:df:02: d1:fc:bd:af:8e:84:ec:f4:0a:e5:39:b3:6e:a1:e1: 9d:5a:fd:23:fa:e8:c5:e8:92:d8:8a:51:62:15:9f: 5b:9c:14:cb:33:68:50:b6:63:7c:50:82:75:ef:fb: 77:ce:6e:54:5a:d9:58:eb:24:ce:f0:8a:5b:bd:66: 3d:57:9b:c0:ab:f1:4c:79:26:f2:fb:c5:38:88:47: a4:37:89:52:18:9f:76:9a:5d:59:dd:20:fb:1e:87: af:83:d5:cf:08:99:a5:2e:8d:cc:46:ac:7f:99:dd: e0:ec:9a:45:57:c1:b8:5a:c9:78:2f:4c:c6:93:3a: 40:1f:a7:4b:6c:d4:08:d3:35:fa:20:f3:73:1c:48: 72:63:87:5d:04:12:a3:73:0a:89:5d:15:78:91:7c: bf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:70:17:29:0B:1E:FB:3C:6C:35:E6:5C:05:6D:F5:78:DF:22:2B:80 X509v3 Authority Key Identifier: keyid:9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QXAXKQse-zxsNeZcBW31eN8iK4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.91.204.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:59:8c:9e:0d:0e:5c:65:2f:f9:ac:f6:6e:c4:6f:86:82:3c: 0b:54:7b:b2:ea:34:35:df:ef:4b:96:8d:6e:58:50:2d:91:da: ad:31:b2:7f:93:f4:b9:20:76:18:22:be:60:6d:88:2b:0b:3c: 95:e2:f8:f7:a0:5a:a6:97:e6:0a:c8:e9:c1:47:46:dc:5e:3f: 20:c8:e2:29:69:63:fd:c6:77:ef:36:d2:ca:cd:f3:88:e5:40: 5d:34:4e:5d:0c:f8:12:b8:ee:a4:ab:09:74:5a:7c:71:2d:7d: ff:6d:ba:57:df:59:67:38:5f:dd:31:09:ba:b1:b1:46:48:28: 38:8d:ff:8f:9e:3c:a5:d9:4a:0f:fb:8e:a2:b7:8b:66:2e:1a: fc:bb:95:92:c9:e2:86:a7:cc:aa:06:06:8f:13:d4:06:a8:55: b4:10:6e:2d:6f:b8:32:44:80:94:a6:5f:28:85:e9:03:df:32: c8:1f:93:2c:e0:1b:bd:a4:5b:96:7d:e8:e9:02:a8:8f:91:59: 4d:1c:09:3f:2e:2f:62:fa:e6:45:2c:05:0f:d1:3e:cf:9c:3b: 29:50:6d:da:1b:7d:b7:39:f8:ec:31:1d:16:88:91:b0:fa:c0: 0e:51:c7:79:07:c1:a5:e4:b5:23:59:65:58:c7:a0:99:cb:35: ff:91:80:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pz31PKAiQiRsQyY9n2n4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYWYwYmY5M2ZjNDM4MWZmZjdlN2FhODZiNDA3NmMwMzMy NDJmZmEwHhcNMjYwMTAyMTIyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTcwMTcyOTBiMWVmYjNjNmMzNWU2NWMwNTZkZjU3OGRmMjIyYjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskBdwoWa9BCQqK2in1oJj8upWUPa AqB4wxrSD7jaiFEJIAOtwO+kEyHOkSX9dIlMj2y0Z+5SvO/0mOLEC+ONMNBnq3qG X9SekayACexP0tVUDtCRobcySNvL64Bo9Ua00koTaEzA3wLR/L2vjoTs9ArlObNu oeGdWv0j+ujF6JLYilFiFZ9bnBTLM2hQtmN8UIJ17/t3zm5UWtlY6yTO8IpbvWY9 V5vAq/FMeSby+8U4iEekN4lSGJ92ml1Z3SD7Hoevg9XPCJmlLo3MRqx/md3g7JpF V8G4Wsl4L0zGkzpAH6dLbNQI0zX6IPNzHEhyY4ddBBKjcwqJXRV4kXy/jwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEFwFykLHvs8bDXmXAVt9XjfIiuAMB8GA1UdIwQY MBaAFJ+vC/k/xDgf/356qGtAdsAzJC/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjY4TC1UX0VPQl9fZm5xb2EwQjJ3RE1rTF9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hNGZmMzMtYjI5MC00MzA3LWFmYzgt ZjUyMGE3ZDcxZWY1LzEvUVhBWEtRc2UtenhzTmVaY0JXMzFlTjhpSzRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9hNGZmMzMtYjI5MC00MzA3LWFmYzgtZjUyMGE3ZDcxZWY1 LzEvbjY4TC1UX0VPQl9fZm5xb2EwQjJ3RE1rTF9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVvMMA0G CSqGSIb3DQEBCwUAA4IBAQCbWYyeDQ5cZS/5rPZuxG+GgjwLVHuy6jQ13+9Llo1u WFAtkdqtMbJ/k/S5IHYYIr5gbYgrCzyV4vj3oFqml+YKyOnBR0bcXj8gyOIpaWP9 xnfvNtLKzfOI5UBdNE5dDPgSuO6kqwl0WnxxLX3/bbpX31lnOF/dMQm6sbFGSCg4 jf+Pnjyl2UoP+46it4tmLhr8u5WSyeKGp8yqBgaPE9QGqFW0EG4tb7gyRICUpl8o hekD3zLIH5Ms4Bu9pFuWfejpAqiPkVlNHAk/Li9i+uZFLAUP0T7PnDspUG3aG323 OfjsMR0WiJGw+sAOUcd5B8Gl5LUjWWVYx6CZyzX/kYAJ -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:32 2026 by rpki-client