This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/qcq-5L5ItDTVwFQKgCtK_jcEX4k.roa File: qcq-5L5ItDTVwFQKgCtK_jcEX4k.roa (raw, json) Hash identifier: RVNxPTWiH8kAxJ7TFlnJ6K1cNzawOicZ15SsJo3W/tc= Subject key identifier: A9:CA:BE:E4:BE:48:B4:34:D5:C0:54:0A:80:2B:4A:FE:37:04:5F:89 Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B360EB9E0EA119480B259866B72A9BC Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/qcq-5L5ItDTVwFQKgCtK_jcEX4k.roa Signing time: Thu 01 Jan 2026 20:18:18 +0000 ROA not before: Thu 01 Jan 2026 20:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57142 IP address blocks: 86.107.30.0/24 maxlen: 24 86.107.54.0/24 maxlen: 24 86.107.181.0/24 maxlen: 24 86.107.182.0/24 maxlen: 24 89.32.185.0/24 maxlen: 24 89.32.191.0/24 maxlen: 24 89.43.38.0/24 maxlen: 24 89.44.236.0/24 maxlen: 24 89.47.3.0/24 maxlen: 24 89.47.10.0/24 maxlen: 24 176.126.175.0/24 maxlen: 24 188.240.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:0e:b9:e0:ea:11:94:80:b2:59:86:6b:72:a9:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9cabee4be48b434d5c0540a802b4afe37045f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:28:23:04:41:79:04:b7:d4:7a:c7:9f:9f:d3: ce:fd:b3:43:0a:7f:84:1f:1a:98:c8:22:a5:15:60: 14:3a:a7:f6:f1:6b:da:5f:44:50:61:c0:73:7c:02: a0:ff:12:ad:3e:dd:8c:41:78:18:fe:07:4c:45:e8: ec:c8:f9:5d:09:7a:23:ed:d5:96:8c:80:76:e4:2e: 63:01:50:af:b4:0d:c9:77:76:91:3e:26:16:42:93: 81:df:6f:8b:28:6f:fb:75:2b:52:2c:40:9e:c9:08: 63:8f:21:ed:26:82:e0:9d:f2:71:17:3d:79:48:9e: a0:76:5d:20:aa:88:1f:3f:9a:b8:2a:d0:5b:37:e2: f8:13:b5:c2:ba:58:cd:61:18:16:a2:29:6c:a0:5f: 7c:c1:c4:46:1c:43:9e:5e:5e:80:11:f9:98:b2:08: 21:3d:e9:d9:74:69:f1:1f:23:c9:4b:f2:5e:a6:fa: 2d:85:8b:0e:6d:99:6e:90:e4:2d:d2:b1:5f:df:28: d5:99:71:b0:a2:bd:7d:66:a6:79:11:ba:4f:c3:c4: b2:eb:0a:30:04:14:fc:c3:8d:2a:56:0b:2f:3a:6a: 00:d7:4e:d5:08:5f:9a:d0:c1:c0:5e:7a:35:93:0b: b6:76:d9:de:8c:ec:a5:48:05:55:05:93:3d:d0:a1: 54:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CA:BE:E4:BE:48:B4:34:D5:C0:54:0A:80:2B:4A:FE:37:04:5F:89 X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/qcq-5L5ItDTVwFQKgCtK_jcEX4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.107.30.0/24 86.107.54.0/24 86.107.181.0-86.107.182.255 89.32.185.0/24 89.32.191.0/24 89.43.38.0/24 89.44.236.0/24 89.47.3.0/24 89.47.10.0/24 176.126.175.0/24 188.240.208.0/24 Signature Algorithm: sha256WithRSAEncryption a3:8e:b4:82:3a:6f:3c:86:09:ab:7f:69:8f:3d:fb:d0:67:67: a6:63:05:40:f0:9c:1d:fd:fe:f2:4e:f8:56:16:cb:b9:c4:9b: 3c:b1:f6:78:b1:86:de:8d:2c:4c:1e:72:01:12:df:81:65:31: fe:a7:a3:d9:1b:ba:99:25:56:19:77:02:c9:9e:7a:8a:0c:67: 46:2e:21:8f:91:8e:57:79:7b:42:7f:55:c5:1e:85:d2:ea:50: 44:4e:bd:8e:5b:fb:c6:7f:ff:64:26:04:1f:30:c6:6f:82:a0: 15:e8:f2:e1:82:48:3c:6b:d8:2e:7c:b1:35:15:5e:dc:26:47: 34:01:ef:28:84:14:46:05:a7:fe:79:2d:08:c0:74:2e:a8:13: bf:cb:c1:42:74:08:c3:e6:4f:27:e2:2d:14:c9:4c:64:7d:1a: c7:88:ca:92:45:6d:53:f8:5c:a8:aa:97:97:aa:75:85:c3:da: ea:85:b8:0d:53:8d:eb:75:61:6d:21:1e:48:02:0f:34:fe:a6: e4:5c:34:e1:d9:ca:18:bd:b6:45:91:90:c1:34:77:cd:ad:00: 49:f4:66:5c:ea:84:b7:60:17:09:b8:a6:a7:63:33:9b:48:f2: 88:6a:11:fe:b0:4b:38:95:5e:e9:29:96:d6:5d:c4:bf:eb:d9: 1b:7c:83:f5 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZt7Ng654OoRlICyWYZrcqm8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWNhYmVlNGJlNDhiNDM0ZDVjMDU0MGE4MDJiNGFmZTM3MDQ1Zjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqigjBEF5BLfUesefn9PO/bNDCn+E HxqYyCKlFWAUOqf28WvaX0RQYcBzfAKg/xKtPt2MQXgY/gdMRejsyPldCXoj7dWW jIB25C5jAVCvtA3Jd3aRPiYWQpOB32+LKG/7dStSLECeyQhjjyHtJoLgnfJxFz15 SJ6gdl0gqogfP5q4KtBbN+L4E7XCuljNYRgWoilsoF98wcRGHEOeXl6AEfmYsggh PenZdGnxHyPJS/JepvothYsObZlukOQt0rFf3yjVmXGwor19ZqZ5EbpPw8Sy6wow BBT8w40qVgsvOmoA107VCF+a0MHAXno1kwu2dtnejOylSAVVBZM90KFUyQIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFKnKvuS+SLQ01cBUCoArSv43BF+JMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvcWNxLTVMNUl0RFRWd0ZRS2dDdEtfamNFWDRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQAVmseAwQA Vms2MAwDBABWa7UDBABWa7YDBABZILkDBABZIL8DBABZKyYDBABZLOwDBABZLwMD BABZLwoDBACwfq8DBAC88NAwDQYJKoZIhvcNAQELBQADggEBAKOOtII6bzyGCat/ aY89+9BnZ6ZjBUDwnB39/vJO+FYWy7nEmzyx9nixht6NLEwecgES34FlMf6no9kb upklVhl3AsmeeooMZ0YuIY+Rjld5e0J/VcUehdLqUEROvY5b+8Z//2QmBB8wxm+C oBXo8uGCSDxr2C58sTUVXtwmRzQB7yiEFEYFp/55LQjAdC6oE7/LwUJ0CMPmTyfi LRTJTGR9GseIypJFbVP4XKiql5eqdYXD2uqFuA1Tjet1YW0hHkgCDzT+puRcNOHZ yhi9tkWRkME0d82tAEn0ZlzqhLdgFwm4pqdjM5tI8ohqEf6wSziVXukpltZdxL/r 2Rt8g/U= -----END CERTIFICATE-----Generated at Sun Jan 25 21:24:33 2026 by rpki-client