This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/Qli-_KAiZO--cwXE6BiLVvkXnvE.roa File: Qli-_KAiZO--cwXE6BiLVvkXnvE.roa (raw, json) Hash identifier: XDHHjBldy51jEL7NRWc+r09QR8fWSiNl63GYDTe9i8c= Subject key identifier: 42:58:BE:FC:A0:22:64:EF:BE:73:05:C4:E8:18:8B:56:F9:17:9E:F1 Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9 Certificate serial: 019B79ED00A3DF54555CACFE226AAC3A8E4F Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/Qli-_KAiZO--cwXE6BiLVvkXnvE.roa Signing time: Thu 01 Jan 2026 14:18:53 +0000 ROA not before: Thu 01 Jan 2026 14:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25400 IP address blocks: 185.169.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:00:a3:df:54:55:5c:ac:fe:22:6a:ac:3a:8e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9 Validity Not Before: Jan 1 14:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4258befca02264efbe7305c4e8188b56f9179ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:01:04:a1:7b:d7:74:a4:5a:11:8e:84:38:c0: 84:8c:90:cc:25:8c:58:c1:0c:45:29:7d:91:24:74: ea:88:c4:a7:2b:0b:5d:4d:8a:00:31:c7:97:56:7f: 50:a4:b6:7d:91:7f:03:8f:59:a3:1e:e3:f9:38:c3: 1d:c5:23:6b:a7:c2:b6:9b:9a:c5:28:c1:4e:4f:95: 78:fb:91:53:78:a9:d4:27:d1:22:5d:e5:ba:3c:3d: 6f:6c:5b:f2:40:46:65:1e:84:c5:97:18:da:cd:61: 8b:49:52:a2:67:3b:fe:9a:09:23:e9:90:b8:2a:d6: 99:02:e9:2c:c6:ff:d1:15:bc:3d:0f:0d:b7:da:04: 1c:85:36:10:d7:5d:29:7f:1c:db:d2:94:e1:38:46: 9a:89:c4:7c:c5:a4:5f:28:f8:0d:2f:d5:dc:a8:fb: 9c:f2:2d:48:24:5d:ac:44:de:1b:c6:ee:42:e5:1e: ae:c9:82:d8:02:75:f6:7d:b6:83:2a:8c:cf:d9:17: b2:38:a5:33:07:f5:d5:03:aa:5c:ae:6d:b3:ab:03: 45:6c:1b:55:80:b4:9f:e4:74:73:b0:8b:8f:b6:55: 01:72:74:63:4e:62:f7:18:e0:7e:10:53:7f:04:10: 86:e7:8f:6a:76:19:a3:a2:74:8f:81:a0:56:40:61: 60:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:58:BE:FC:A0:22:64:EF:BE:73:05:C4:E8:18:8B:56:F9:17:9E:F1 X509v3 Authority Key Identifier: keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/Qli-_KAiZO--cwXE6BiLVvkXnvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.174.0/24 Signature Algorithm: sha256WithRSAEncryption cf:23:e9:15:f0:95:67:30:00:8e:0a:13:56:55:2c:55:54:7a: d6:d0:5d:a0:a7:06:fe:7c:9c:ce:88:86:40:63:4c:20:84:c4: d9:06:cd:e1:27:9d:88:f1:ad:d2:99:39:89:a7:45:3c:f6:8f: 40:49:01:59:75:3d:fd:c0:4b:12:95:90:33:72:09:94:a1:01: ab:6d:82:e0:5e:67:be:4e:03:4c:e8:e7:f6:53:53:5a:ba:73: e2:95:c8:aa:4b:50:7c:a5:1d:86:04:65:27:52:0a:0c:0d:f7: 60:b0:74:23:b3:f2:67:8c:a3:41:78:6d:d1:e2:a3:d0:75:b6: 55:59:10:57:83:36:96:7c:28:83:fd:2a:58:ea:e6:c0:71:68: cb:ed:4f:49:27:dc:8c:61:50:98:4f:03:e1:37:80:64:b2:42: bf:4e:f0:8c:24:07:ce:25:7c:32:67:9b:5c:b6:4e:2f:bd:ee: 9d:33:07:dd:5f:ac:63:b3:ee:66:37:1b:de:35:76:44:1f:ab: 4e:4f:2a:d3:d7:3f:84:72:17:22:29:25:b3:57:a2:05:62:40: 8c:7e:7e:60:d2:da:b9:76:8a:44:69:24:a7:96:32:fb:4a:39: 65:72:0e:67:d0:e6:41:dd:25:76:68:00:61:ed:d8:75:d0:02: 48:b4:4d:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57QCj31RVXKz+ImqsOo5PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyODBmZGM5ZTdhODY0MzBjOGUyOGY1ZTM0OWUzMTdmYmI4 YTFjYTkwHhcNMjYwMTAxMTQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjU4YmVmY2EwMjI2NGVmYmU3MzA1YzRlODE4OGI1NmY5MTc5ZWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgEEoXvXdKRaEY6EOMCEjJDMJYxY wQxFKX2RJHTqiMSnKwtdTYoAMceXVn9QpLZ9kX8Dj1mjHuP5OMMdxSNrp8K2m5rF KMFOT5V4+5FTeKnUJ9EiXeW6PD1vbFvyQEZlHoTFlxjazWGLSVKiZzv+mgkj6ZC4 KtaZAuksxv/RFbw9Dw232gQchTYQ110pfxzb0pThOEaaicR8xaRfKPgNL9XcqPuc 8i1IJF2sRN4bxu5C5R6uyYLYAnX2fbaDKozP2ReyOKUzB/XVA6pcrm2zqwNFbBtV gLSf5HRzsIuPtlUBcnRjTmL3GOB+EFN/BBCG549qdhmjonSPgaBWQGFg6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEJYvvygImTvvnMFxOgYi1b5F57xMB8GA1UdIwQY MBaAFJKA/cnnqGQwyOKPXjSeMX+7ihypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jZjQ5NDYtZjVjMi00NWFhLTlhNDEt ZjQ0Mjk5ODY1YTI4LzEvUWxpLV9LQWlaTy0tY3dYRTZCaUxWdmtYbnZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9jZjQ5NDYtZjVjMi00NWFhLTlhNDEtZjQ0Mjk5ODY1YTI4 LzEva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuamuMA0G CSqGSIb3DQEBCwUAA4IBAQDPI+kV8JVnMACOChNWVSxVVHrW0F2gpwb+fJzOiIZA Y0wghMTZBs3hJ52I8a3SmTmJp0U89o9ASQFZdT39wEsSlZAzcgmUoQGrbYLgXme+ TgNM6Of2U1NaunPilciqS1B8pR2GBGUnUgoMDfdgsHQjs/JnjKNBeG3R4qPQdbZV WRBXgzaWfCiD/SpY6ubAcWjL7U9JJ9yMYVCYTwPhN4BkskK/TvCMJAfOJXwyZ5tc tk4vve6dMwfdX6xjs+5mNxveNXZEH6tOTyrT1z+EchciKSWzV6IFYkCMfn5g0tq5 dopEaSSnljL7Sjllcg5n0OZB3SV2aABh7dh10AJItE1b -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:09 2026 by rpki-client