This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/QViCpxHL7TeWgNCiZk4rKUO-8KU.roa File: QViCpxHL7TeWgNCiZk4rKUO-8KU.roa (raw, json) Hash identifier: lHQxRnJhPCjs1WHfqXj6jxi3Fa+6Jf53oEHyU2j2aik= Subject key identifier: 41:58:82:A7:11:CB:ED:37:96:80:D0:A2:66:4E:2B:29:43:BE:F0:A5 Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Certificate serial: 019B7F8416BE3B2211AC776E6F506611E475 Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/QViCpxHL7TeWgNCiZk4rKUO-8KU.roa Signing time: Fri 02 Jan 2026 16:22:01 +0000 ROA not before: Fri 02 Jan 2026 16:22:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200590 IP address blocks: 37.32.73.0/24 maxlen: 24 185.129.93.0/24 maxlen: 24 185.129.94.0/24 maxlen: 24 185.129.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:16:be:3b:22:11:ac:77:6e:6f:50:66:11:e4:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Validity Not Before: Jan 2 16:22:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=415882a711cbed379680d0a2664e2b2943bef0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d7:76:da:95:6b:1e:ac:4d:5a:4b:4d:e9:01: 9c:95:3f:5d:44:70:a2:ee:9d:86:82:94:6a:f2:60: e1:17:5e:ad:cf:b6:75:b1:c0:17:33:d7:93:f0:00: a4:7d:9b:03:b5:0e:89:e2:e0:2b:b3:5c:18:4b:ba: 5c:6c:f0:b6:68:5d:09:5a:ae:e4:ff:b7:0a:79:47: d3:b1:bc:05:85:86:2c:bd:54:da:c5:84:9c:e6:cd: 78:76:cf:47:9f:a6:b7:b2:92:40:00:cf:fc:38:bd: 79:69:39:7d:ea:27:0c:97:0b:c4:c7:c8:fd:10:7c: f1:47:1b:c1:cb:c5:97:c7:67:3f:2b:5f:e5:13:30: 51:a9:64:22:24:72:1e:59:8b:bd:d7:47:8a:18:a7: fc:6b:6e:e2:a7:ef:24:fd:40:ca:fb:f2:26:dd:7f: 14:64:99:8e:6f:01:1e:df:df:77:33:31:41:34:d3: e8:1b:47:d5:77:7c:a5:3e:28:99:b9:d4:87:59:7a: 4f:f7:e3:c6:01:8a:74:47:92:b5:ba:d3:5c:99:04: f2:c6:15:f4:05:14:bc:81:ea:32:ab:1d:64:c7:1e: 62:cd:e5:51:e9:2b:e2:8e:3a:66:81:0c:10:3e:6e: 8d:96:41:6b:d1:65:cf:8e:36:60:2c:e4:df:f5:92: 63:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:58:82:A7:11:CB:ED:37:96:80:D0:A2:66:4E:2B:29:43:BE:F0:A5 X509v3 Authority Key Identifier: keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/QViCpxHL7TeWgNCiZk4rKUO-8KU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.32.73.0/24 185.129.93.0-185.129.95.255 Signature Algorithm: sha256WithRSAEncryption 0f:50:85:05:e9:ad:c1:65:71:7b:19:23:23:51:c5:d9:81:eb: 32:72:81:af:36:e7:90:4c:ba:98:8e:37:33:8e:b4:3c:72:6b: 01:12:8d:9f:c5:b9:2e:72:d3:8c:0d:0d:e2:ae:af:a2:4b:a3: a7:3d:8f:c2:b7:4a:19:37:3c:76:ec:c4:6e:b9:cc:05:e6:4a: 42:c1:9d:2f:3b:e9:00:85:d1:e2:00:ce:fb:79:93:fc:fa:24: 6e:e3:11:e9:50:7a:ff:af:7d:81:6f:71:26:ca:44:b0:1a:15: 22:57:ee:8a:e8:48:29:8d:12:48:45:f1:2d:e5:7d:09:21:9f: 42:e6:7b:14:da:09:fa:cf:c1:04:1c:d0:16:94:99:65:ff:dc: 5b:b9:ab:1e:8b:e5:46:c9:a6:16:2d:93:de:dd:e3:f2:a6:db: 6e:2b:c3:96:61:c1:f5:b4:55:8f:06:8c:08:87:95:0c:c6:2d: 97:96:21:c0:68:a7:06:5a:d8:93:5c:9d:db:e8:49:43:e1:42: f7:f7:3c:dd:d0:23:7c:ea:67:7c:c3:5d:95:18:4b:80:da:4d: 23:05:30:ac:f1:87:7a:05:fa:38:3b:dc:e6:d6:ac:b2:cb:1b: 10:63:9e:25:b3:45:c1:1b:18:38:f7:34:69:b6:b1:b1:3e:1b: 2f:ec:a4:31 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/hBa+OyIRrHdub1BmEeR1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3 MzVkN2QwHhcNMjYwMTAyMTYyMjAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTU4ODJhNzExY2JlZDM3OTY4MGQwYTI2NjRlMmIyOTQzYmVmMGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdd22pVrHqxNWktN6QGclT9dRHCi 7p2GgpRq8mDhF16tz7Z1scAXM9eT8ACkfZsDtQ6J4uArs1wYS7pcbPC2aF0JWq7k /7cKeUfTsbwFhYYsvVTaxYSc5s14ds9Hn6a3spJAAM/8OL15aTl96icMlwvEx8j9 EHzxRxvBy8WXx2c/K1/lEzBRqWQiJHIeWYu910eKGKf8a27ip+8k/UDK+/Im3X8U ZJmObwEe3993MzFBNNPoG0fVd3ylPiiZudSHWXpP9+PGAYp0R5K1utNcmQTyxhX0 BRS8geoyqx1kxx5izeVR6SvijjpmgQwQPm6NlkFr0WXPjjZgLOTf9ZJjOQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFEFYgqcRy+03loDQomZOKylDvvClMB8GA1UdIwQY MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt YzdkMTk5MzBkNjZkLzEvUVZpQ3B4SEw3VGVXZ05DaVprNHJLVU8tOEtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAJSBJMAwD BAC5gV0DBAW5gUAwDQYJKoZIhvcNAQELBQADggEBAA9QhQXprcFlcXsZIyNRxdmB 6zJyga8255BMupiONzOOtDxyawESjZ/FuS5y04wNDeKur6JLo6c9j8K3Shk3PHbs xG65zAXmSkLBnS876QCF0eIAzvt5k/z6JG7jEelQev+vfYFvcSbKRLAaFSJX7oro SCmNEkhF8S3lfQkhn0LmexTaCfrPwQQc0BaUmWX/3Fu5qx6L5UbJphYtk97d4/Km 224rw5ZhwfW0VY8GjAiHlQzGLZeWIcBopwZa2JNcndvoSUPhQvf3PN3QI3zqZ3zD XZUYS4DaTSMFMKzxh3oF+jg73ObWrLLLGxBjniWzRcEbGDj3NGm2sbE+Gy/spDE= -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:19 2026 by rpki-client