This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/Qs5aQVIRmNwQTTAz2KPYUQwI290.roa File: Qs5aQVIRmNwQTTAz2KPYUQwI290.roa (raw, json) Hash identifier: HTCONoxkAHOIEm4u3dHI3SAMwZlvU666BuYb+Y9SBcQ= Subject key identifier: 42:CE:5A:41:52:11:98:DC:10:4D:30:33:D8:A3:D8:51:0C:08:DB:DD Certificate issuer: /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5 Certificate serial: 019B7D5C06C9A79CE10DD393BDCF96C459F6 Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/Qs5aQVIRmNwQTTAz2KPYUQwI290.roa Signing time: Fri 02 Jan 2026 06:19:01 +0000 ROA not before: Fri 02 Jan 2026 06:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212939 IP address blocks: 185.66.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:06:c9:a7:9c:e1:0d:d3:93:bd:cf:96:c4:59:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5 Validity Not Before: Jan 2 06:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42ce5a41521198dc104d3033d8a3d8510c08dbdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:82:de:af:b2:cc:53:ba:17:e3:4a:23:f6:7c: d1:a0:7d:e1:15:9a:26:92:5a:07:e1:2b:e9:8b:19: f6:db:8f:f4:19:07:98:d1:05:bc:2c:57:95:c8:bc: 24:00:90:c7:da:ce:a5:8f:a9:73:e2:41:12:ee:e5: 27:c3:38:27:c7:93:a2:18:ae:bd:ed:e3:8c:d7:91: 6c:b9:89:9d:7e:6a:3b:c6:44:df:7b:0a:4e:eb:3b: a7:63:4e:35:f2:da:b5:e0:5d:2c:73:26:07:51:0a: 6a:e4:e0:3f:10:72:11:72:86:d4:d6:dc:88:e2:80: 78:c1:1a:1f:af:ab:9a:a5:22:f5:b6:24:ab:64:48: 52:36:d0:e0:95:a1:d6:a4:7b:98:70:8a:de:28:e9: 0d:53:53:20:93:f2:54:5b:9d:74:8f:08:ac:e7:44: 58:e8:1b:98:48:a6:ec:95:56:ff:ef:29:90:dd:c7: 8d:d1:79:49:82:00:f2:ec:12:03:dd:18:ea:43:e1: 5b:58:99:95:4e:c7:17:a1:15:9a:3e:e0:e7:69:a5: 41:a6:ad:2a:fb:e3:26:3b:c0:01:5d:b3:e9:01:21: 4c:a5:f3:15:6b:62:9c:e0:0a:47:36:0a:c6:af:10: 85:81:87:ed:e3:b9:58:85:9e:80:e1:5b:61:67:78: 72:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CE:5A:41:52:11:98:DC:10:4D:30:33:D8:A3:D8:51:0C:08:DB:DD X509v3 Authority Key Identifier: keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/Qs5aQVIRmNwQTTAz2KPYUQwI290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.66.230.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:42:31:42:73:aa:c2:b3:a3:86:ee:79:dd:60:0b:56:1e:06: 2a:bf:f7:26:ad:95:5a:ec:1f:ae:13:9a:c5:dc:d2:4d:4f:0b: 8e:95:7d:ec:e2:59:01:1a:d1:de:25:1a:09:7c:e8:5f:50:7d: ac:6f:75:63:b8:16:81:49:b9:a6:1b:e1:d9:35:dc:0e:08:06: 25:b2:28:91:e0:1e:cb:5e:f2:dd:ce:9b:cb:ff:c7:fb:5a:dd: b3:3c:3f:f2:5c:2c:a7:19:0a:bb:20:11:c8:18:68:77:45:15: b9:90:4f:a9:45:9c:53:96:02:63:68:ea:33:62:69:ce:38:63: 99:3d:ed:6b:e1:57:c9:c5:72:5c:d7:f6:cb:83:c6:f2:dd:40: 56:03:34:37:c8:c5:3a:92:3c:8d:26:34:48:d0:a0:42:ba:3e: f0:53:4e:c1:0c:b8:31:50:44:78:89:ac:23:3d:fa:4d:c5:7b: a2:7f:97:1f:42:6e:d4:14:2f:c1:52:e1:de:69:fa:60:62:3c: 02:07:ba:0b:09:c2:a0:91:8e:74:6f:e1:40:62:39:cf:2e:d7: 93:fd:13:b6:ad:c5:19:b2:50:89:a1:ff:b5:e1:32:b9:fb:ae: 47:ed:7c:fd:35:c1:58:e3:6b:0b:88:2f:2c:6e:54:3a:fd:b1: ce:d7:41:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XAbJp5zhDdOTvc+WxFn2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNWRiODExYjVkNWQwNWJlYzM3ZWU5ZDA5YTRlYzUyZWVl ZDFhZDUwHhcNMjYwMTAyMDYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmNlNWE0MTUyMTE5OGRjMTA0ZDMwMzNkOGEzZDg1MTBjMDhkYmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArILer7LMU7oX40oj9nzRoH3hFZom kloH4Svpixn224/0GQeY0QW8LFeVyLwkAJDH2s6lj6lz4kES7uUnwzgnx5OiGK69 7eOM15FsuYmdfmo7xkTfewpO6zunY0418tq14F0scyYHUQpq5OA/EHIRcobU1tyI 4oB4wRofr6uapSL1tiSrZEhSNtDglaHWpHuYcIreKOkNU1Mgk/JUW510jwis50RY 6BuYSKbslVb/7ymQ3ceN0XlJggDy7BID3RjqQ+FbWJmVTscXoRWaPuDnaaVBpq0q ++MmO8ABXbPpASFMpfMVa2Kc4ApHNgrGrxCFgYft47lYhZ6A4VthZ3hyzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFELOWkFSEZjcEE0wM9ij2FEMCNvdMB8GA1UdIwQY MBaAFL9duBG11dBb7DfunQmk7FLu7RrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2Mt NzE1ZjA5ODE3MzQxLzEvUXM1YVFWSVJtTndRVFRBejJLUFlVUXdJMjkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2MtNzE1ZjA5ODE3MzQx LzEvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuULmMA0G CSqGSIb3DQEBCwUAA4IBAQAeQjFCc6rCs6OG7nndYAtWHgYqv/cmrZVa7B+uE5rF 3NJNTwuOlX3s4lkBGtHeJRoJfOhfUH2sb3VjuBaBSbmmG+HZNdwOCAYlsiiR4B7L XvLdzpvL/8f7Wt2zPD/yXCynGQq7IBHIGGh3RRW5kE+pRZxTlgJjaOozYmnOOGOZ Pe1r4VfJxXJc1/bLg8by3UBWAzQ3yMU6kjyNJjRI0KBCuj7wU07BDLgxUER4iawj PfpNxXuif5cfQm7UFC/BUuHeafpgYjwCB7oLCcKgkY50b+FAYjnPLteT/RO2rcUZ slCJof+14TK5+65H7Xz9NcFY42sLiC8sblQ6/bHO10Ht -----END CERTIFICATE-----Generated at Mon Jan 26 05:55:36 2026 by rpki-client