This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Q_cKojzZsCR7sHqcACX5_Xsszdg.roa File: Q_cKojzZsCR7sHqcACX5_Xsszdg.roa (raw, json) Hash identifier: 13DJN0AYMyq7FKRePbvdklWh/SNv0jTV2Z45dv8uucM= Subject key identifier: 43:F7:0A:A2:3C:D9:B0:24:7B:B0:7A:9C:00:25:F9:FD:7B:2C:CD:D8 Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8 Certificate serial: 019B7EA5A0F41F12F2A5424FFC4E27B81572 Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Q_cKojzZsCR7sHqcACX5_Xsszdg.roa Signing time: Fri 02 Jan 2026 12:19:02 +0000 ROA not before: Fri 02 Jan 2026 12:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51392 IP address blocks: 185.157.208.0/24 maxlen: 24 185.157.209.0/24 maxlen: 24 185.157.210.0/24 maxlen: 24 185.157.211.0/24 maxlen: 24 2a03:afe1::/32 maxlen: 32 2a03:afe2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:a0:f4:1f:12:f2:a5:42:4f:fc:4e:27:b8:15:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8 Validity Not Before: Jan 2 12:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43f70aa23cd9b0247bb07a9c0025f9fd7b2ccdd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a7:cb:1e:9d:48:b3:6c:cb:41:9d:8c:76:29: f1:c1:cc:48:19:80:f6:3c:10:41:99:96:2e:f4:7f: 1b:98:5b:a5:47:3b:88:09:1a:a1:25:e5:2b:bd:37: 7a:d2:dd:bb:21:c5:4e:19:9f:ca:dd:ff:b7:e9:ff: 1a:bd:f7:89:96:13:83:8d:02:d5:a5:87:0d:21:ff: 0c:28:71:2f:25:57:27:b4:ee:b7:fb:39:ec:ef:43: 1f:ee:fb:8c:e0:3e:9d:c7:0f:9b:c1:82:9d:4e:a2: 9b:60:25:dd:20:cb:10:7a:b5:29:6b:1a:eb:65:3b: e1:5c:2f:b8:47:fa:de:ee:15:4a:55:66:c0:b2:20: 60:0a:86:6d:5d:1a:5d:74:a0:41:3d:44:06:9d:23: a4:74:8d:03:70:f9:64:2a:c2:98:51:8d:61:9d:ce: bf:5c:46:a2:cd:da:37:37:dc:f6:b3:95:08:54:89: 9b:9c:77:00:0e:f6:ab:d9:b6:e2:4c:4f:ed:34:1e: 6a:e3:b0:ef:f3:ee:d5:0e:fa:a7:a1:30:a0:f4:74: 84:44:80:49:cd:f0:22:27:8f:15:6c:6d:c6:e8:3d: f9:96:54:ce:3f:77:24:d0:5d:1b:a2:92:f0:f0:2f: 03:08:23:13:4b:b8:b4:59:70:7e:cb:cc:6d:72:04: 46:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F7:0A:A2:3C:D9:B0:24:7B:B0:7A:9C:00:25:F9:FD:7B:2C:CD:D8 X509v3 Authority Key Identifier: keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Q_cKojzZsCR7sHqcACX5_Xsszdg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.208.0/22 IPv6: 2a03:afe1::-2a03:afe2:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 5f:ab:c4:c2:1f:85:a9:a9:6e:c9:e5:3b:50:e2:e3:9a:88:f5: 14:c5:a5:66:1b:3b:88:0f:0f:e0:fc:ba:56:46:7e:2c:47:0b: cb:02:7b:fe:41:5a:df:65:61:0c:e8:1e:fa:44:c2:a9:50:27: 3b:a1:57:b4:ee:39:2f:57:fd:23:d5:aa:d1:f5:c4:31:77:65: 6b:55:57:6f:24:42:a3:26:e0:13:1c:96:d3:6d:b9:9c:f8:35: 0f:ee:14:0a:39:a6:ee:36:e0:b0:5b:80:e8:e1:21:b8:2b:94: 4d:92:e9:78:f8:bc:ec:e0:ae:66:ff:0c:64:98:6c:96:3d:56: cf:1c:d9:56:ce:a3:a6:a6:69:05:c6:01:dc:98:9a:6c:8a:32: d3:3c:1f:76:4b:7e:9c:fe:48:7a:92:c8:8d:3a:b2:ae:2f:4f: 96:82:50:8e:08:34:20:11:3a:39:db:c9:95:32:a6:40:93:bf: c8:d8:52:58:1f:ce:bb:1a:16:42:bd:27:37:57:8d:36:c9:52: 94:c7:d2:f8:0f:72:0d:79:3e:39:40:47:66:a7:5e:e8:cd:4a: 87:fa:b3:e3:95:45:b5:93:14:9a:fe:aa:a0:39:aa:46:7f:61: 05:38:87:62:6d:f2:ec:9a:26:9e:da:b7:9c:bb:47:a6:ab:3f: ad:56:cd:90 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+paD0HxLypUJP/E4nuBVyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMGYzOWUyY2FhZThlMmNmMTRiY2M0MWIyM2YzYzg2ZTFh NzIwZjgwHhcNMjYwMTAyMTIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2Y3MGFhMjNjZDliMDI0N2JiMDdhOWMwMDI1ZjlmZDdiMmNjZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqfLHp1Is2zLQZ2MdinxwcxIGYD2 PBBBmZYu9H8bmFulRzuICRqhJeUrvTd60t27IcVOGZ/K3f+36f8avfeJlhODjQLV pYcNIf8MKHEvJVcntO63+zns70Mf7vuM4D6dxw+bwYKdTqKbYCXdIMsQerUpaxrr ZTvhXC+4R/re7hVKVWbAsiBgCoZtXRpddKBBPUQGnSOkdI0DcPlkKsKYUY1hnc6/ XEaizdo3N9z2s5UIVImbnHcADvar2bbiTE/tNB5q47Dv8+7VDvqnoTCg9HSERIBJ zfAiJ48VbG3G6D35llTOP3ck0F0bopLw8C8DCCMTS7i0WXB+y8xtcgRG+QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFEP3CqI82bAke7B6nAAl+f17LM3YMB8GA1UdIwQY MBaAFE4POeLKro4s8UvMQbI/PIbhpyD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNWUzY2MtYzFjZC00ZDY4LWJlYzMt MWIwOGY3ZjUwMTVkLzEvUV9jS29qelpzQ1I3c0hxY0FDWDVfWHNzemRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kNWUzY2MtYzFjZC00ZDY4LWJlYzMtMWIwOGY3ZjUwMTVk LzEvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQCuZ3QMBYE AgACMBAwDgMFACoDr+EDBQAqA6/iMA0GCSqGSIb3DQEBCwUAA4IBAQBfq8TCH4Wp qW7J5TtQ4uOaiPUUxaVmGzuIDw/g/LpWRn4sRwvLAnv+QVrfZWEM6B76RMKpUCc7 oVe07jkvV/0j1arR9cQxd2VrVVdvJEKjJuATHJbTbbmc+DUP7hQKOabuNuCwW4Do 4SG4K5RNkul4+Lzs4K5m/wxkmGyWPVbPHNlWzqOmpmkFxgHcmJpsijLTPB92S36c /kh6ksiNOrKuL0+WglCOCDQgETo528mVMqZAk7/I2FJYH867GhZCvSc3V402yVKU x9L4D3INeT45QEdmp17ozUqH+rPjlUW1kxSa/qqgOapGf2EFOIdibfLsmiae2rec u0emqz+tVs2Q -----END CERTIFICATE-----Generated at Mon Jan 26 17:56:31 2026 by rpki-client