This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/QjOXLGjz8ds-7sCauorJ8W8aVN4.roa File: QjOXLGjz8ds-7sCauorJ8W8aVN4.roa (raw, json) Hash identifier: BmFWBCryjEjKWhVriCT0YrDHfiFmLKZXY1G064wUhCw= Subject key identifier: 42:33:97:2C:68:F3:F1:DB:3E:EE:C0:9A:BA:8A:C9:F1:6F:1A:54:DE Certificate issuer: /CN=c1db041afabfd8c11f0b10b523799b65cfde3908 Certificate serial: 019B7F145045CD37B6514FACEFD908F66E3D Authority key identifier: C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/QjOXLGjz8ds-7sCauorJ8W8aVN4.roa Signing time: Fri 02 Jan 2026 14:19:56 +0000 ROA not before: Fri 02 Jan 2026 14:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49223 IP address blocks: 185.235.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:50:45:cd:37:b6:51:4f:ac:ef:d9:08:f6:6e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1db041afabfd8c11f0b10b523799b65cfde3908 Validity Not Before: Jan 2 14:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4233972c68f3f1db3eeec09aba8ac9f16f1a54de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f9:64:af:f0:56:9e:5b:58:fd:5e:a0:9e:90: 5c:2e:03:af:cb:61:0d:c8:4c:43:10:0e:a6:01:13: 85:0e:7d:41:68:34:98:54:0d:ca:ee:05:4b:12:cc: 89:21:00:aa:08:77:35:9c:86:18:f6:34:bb:89:84: 8d:56:dd:c0:3c:1d:ce:ef:e3:26:7b:e0:eb:aa:bc: fb:ec:42:5f:bd:74:35:c7:a6:fb:dd:9c:6b:6b:ac: ab:83:c2:f3:a1:e8:47:25:36:94:6a:79:02:67:62: d8:d3:6b:5d:7f:2e:79:83:00:7f:2c:f9:e7:aa:f0: 35:f5:65:97:32:8e:57:00:02:70:9a:e6:9f:52:80: d5:32:ed:2d:30:6e:1a:64:5c:93:13:55:56:dd:22: cf:63:be:27:19:af:a0:9a:40:87:76:8a:9e:d0:8e: 8b:95:f5:66:dd:c8:ab:9b:e2:fc:76:0c:db:a1:80: 35:d7:88:9b:1f:c4:50:4a:3d:f1:4b:e3:7c:bc:d8: 5f:8f:a2:b3:cc:11:e2:1f:6f:1e:f2:6b:52:ea:05: 9b:7d:84:ff:3b:4e:ff:a0:2d:17:f8:47:1d:23:9b: 2d:4f:4b:aa:0a:ab:5f:85:a6:fa:ce:bb:f4:83:2c: c6:62:d9:a8:9e:e3:36:9f:3f:f9:21:de:77:1a:83: e8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:33:97:2C:68:F3:F1:DB:3E:EE:C0:9A:BA:8A:C9:F1:6F:1A:54:DE X509v3 Authority Key Identifier: keyid:C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/QjOXLGjz8ds-7sCauorJ8W8aVN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.172.0/22 Signature Algorithm: sha256WithRSAEncryption 33:6c:f8:f4:30:9a:99:f6:87:81:11:a9:77:aa:3e:71:4c:e7: f8:2e:e7:a0:6b:90:75:d1:20:a1:f4:97:31:28:66:dc:da:bc: b2:f8:e4:d0:2a:c1:da:53:84:d2:9b:55:fa:bd:77:de:de:f0: 00:cc:81:09:e7:ba:f7:1d:aa:9e:e4:2e:0f:74:6f:09:87:db: cd:a1:6a:8f:cd:35:33:b1:2a:4a:6d:f4:43:6a:11:e9:f9:0f: b2:70:03:25:85:db:03:70:f5:32:15:22:31:ef:76:7f:3f:5a: 33:ed:58:41:d3:22:f7:03:86:9a:11:10:cb:6e:d7:80:41:7b: a2:1c:91:ac:07:f0:ec:37:85:8e:0e:cd:db:f4:54:08:05:2b: c0:e2:4d:fa:17:22:f8:e5:cf:38:b7:cb:98:97:1b:3a:d2:17: 84:45:9d:0b:87:8c:e1:83:2f:1b:42:14:71:97:2b:8e:68:fd: 60:6e:8f:1c:a3:40:8b:f5:66:29:76:1c:43:61:ba:2f:27:00: 68:cf:35:8a:90:46:80:06:13:d8:38:0f:00:35:0b:37:b5:84: 34:94:f8:38:f9:2a:de:e4:57:4f:60:29:cb:ab:9e:82:ba:08: 84:1c:f0:d2:79:7d:ce:c0:1b:49:7b:1b:43:de:da:9b:72:0e: ba:20:e5:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FFBFzTe2UU+s79kI9m49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZGIwNDFhZmFiZmQ4YzExZjBiMTBiNTIzNzk5YjY1Y2Zk ZTM5MDgwHhcNMjYwMTAyMTQxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjMzOTcyYzY4ZjNmMWRiM2VlZWMwOWFiYThhYzlmMTZmMWE1NGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/lkr/BWnltY/V6gnpBcLgOvy2EN yExDEA6mAROFDn1BaDSYVA3K7gVLEsyJIQCqCHc1nIYY9jS7iYSNVt3APB3O7+Mm e+Drqrz77EJfvXQ1x6b73Zxra6yrg8LzoehHJTaUankCZ2LY02tdfy55gwB/LPnn qvA19WWXMo5XAAJwmuafUoDVMu0tMG4aZFyTE1VW3SLPY74nGa+gmkCHdoqe0I6L lfVm3cirm+L8dgzboYA114ibH8RQSj3xS+N8vNhfj6KzzBHiH28e8mtS6gWbfYT/ O07/oC0X+EcdI5stT0uqCqtfhab6zrv0gyzGYtmonuM2nz/5Id53GoPotQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEIzlyxo8/HbPu7AmrqKyfFvGlTeMB8GA1UdIwQY MBaAFMHbBBr6v9jBHwsQtSN5m2XP3jkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2RzRUd2cV8yTUVmQ3hDMUkzbWJaY19lT1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81ZTA0ODktMTdjZi00MjJjLWFhNDAt MmZiMDk0NGI1MTk0LzEvUWpPWExHano4ZHMtN3NDYXVvcko4VzhhVk40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC81ZTA0ODktMTdjZi00MjJjLWFhNDAtMmZiMDk0NGI1MTk0 LzEvd2RzRUd2cV8yTUVmQ3hDMUkzbWJaY19lT1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueusMA0G CSqGSIb3DQEBCwUAA4IBAQAzbPj0MJqZ9oeBEal3qj5xTOf4Luega5B10SCh9Jcx KGbc2ryy+OTQKsHaU4TSm1X6vXfe3vAAzIEJ57r3Haqe5C4PdG8Jh9vNoWqPzTUz sSpKbfRDahHp+Q+ycAMlhdsDcPUyFSIx73Z/P1oz7VhB0yL3A4aaERDLbteAQXui HJGsB/DsN4WODs3b9FQIBSvA4k36FyL45c84t8uYlxs60heERZ0Lh4zhgy8bQhRx lyuOaP1gbo8co0CL9WYpdhxDYbovJwBozzWKkEaABhPYOA8ANQs3tYQ0lPg4+Sre 5FdPYCnLq56CugiEHPDSeX3OwBtJextD3tqbcg66IOXB -----END CERTIFICATE-----Generated at Sun Jan 25 23:51:11 2026 by rpki-client