This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/qQLv7uOVYz32Fa-HCYFsduryaUY.roa File: qQLv7uOVYz32Fa-HCYFsduryaUY.roa (raw, json) Hash identifier: msrPJ+vS8iPsGg0xQfm9cnyh8JOxajlO3J5ownd6l7I= Subject key identifier: A9:02:EF:EE:E3:95:63:3D:F6:15:AF:87:09:81:6C:76:EA:F2:69:46 Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1 Certificate serial: 019B7C11E915C770162F83A8D968B046B414 Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/qQLv7uOVYz32Fa-HCYFsduryaUY.roa Signing time: Fri 02 Jan 2026 00:18:27 +0000 ROA not before: Fri 02 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42703 IP address blocks: 185.106.224.0/22 maxlen: 22 185.106.224.0/24 maxlen: 24 185.106.225.0/24 maxlen: 24 185.106.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:e9:15:c7:70:16:2f:83:a8:d9:68:b0:46:b4:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1 Validity Not Before: Jan 2 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a902efeee395633df615af8709816c76eaf26946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:34:ee:21:23:1c:8d:29:26:53:c0:fc:20:4e: 98:b5:a6:c7:0e:22:28:2d:fd:4d:e8:96:a7:f1:16: d7:9e:10:0e:fc:68:63:ce:70:63:81:7c:7c:f2:33: 7d:92:e5:75:69:74:04:36:f2:74:14:48:e9:74:f8: db:f3:39:fb:22:dc:be:98:a8:75:85:2a:e7:10:28: f2:df:6e:d5:dc:51:6f:c3:35:9d:1e:d8:db:e6:06: 38:2c:6e:00:20:24:a1:30:57:ee:9f:ba:eb:0d:c1: 3b:cb:a3:68:a4:4d:94:67:d8:3e:9a:76:c4:44:8e: 61:4a:da:29:ad:45:97:b0:2f:50:06:8e:f8:a2:17: 8c:85:98:c8:19:a2:c8:f2:3c:89:91:20:57:03:a5: 11:af:0c:f4:6d:87:8e:5e:20:db:5b:2a:76:c1:61: 4f:4a:13:b8:71:6b:9c:5e:f9:89:b5:7d:6f:6b:04: d4:02:ad:38:c7:00:27:ae:12:84:ee:35:0e:98:52: f7:25:42:02:bc:67:7b:42:37:8b:cb:4b:50:d9:dd: e6:9c:3c:d1:f1:39:3c:67:6f:b7:41:71:39:26:07: dd:bc:e6:d3:f4:b4:68:01:2b:52:ee:54:3f:57:1c: bd:7e:40:e5:ea:26:91:38:b7:ce:9b:0d:43:3c:8e: 08:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:02:EF:EE:E3:95:63:3D:F6:15:AF:87:09:81:6C:76:EA:F2:69:46 X509v3 Authority Key Identifier: keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/qQLv7uOVYz32Fa-HCYFsduryaUY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.106.224.0/22 Signature Algorithm: sha256WithRSAEncryption 70:c6:83:79:bc:e6:20:9f:24:17:0b:d8:0a:2c:67:44:6f:af: 60:e0:6d:a8:43:72:55:74:d9:41:69:b8:e0:f2:77:f3:4a:04: 7b:94:de:f9:3e:89:a3:a1:26:75:0b:58:d7:84:a0:58:3a:5c: 84:11:bd:ac:7f:a2:3a:69:18:7d:0f:3a:37:08:51:1e:78:68: eb:d5:34:0f:50:a6:f8:86:9a:e0:41:59:86:78:c9:1a:02:67: c7:62:b8:4f:80:28:6d:6c:73:4a:3f:d2:77:85:ae:10:d8:2c: f9:47:18:f9:0d:d6:56:2e:8f:bd:4e:fc:a4:65:b1:f6:38:cb: 63:0e:f6:81:a7:25:f3:f0:df:b3:85:b2:94:4a:e7:3e:91:90: 47:25:7b:55:8f:11:26:94:65:34:69:e6:0f:57:41:92:4f:30: 45:fc:ff:a0:50:e9:48:97:e4:93:4e:6c:cf:80:32:71:6b:4f: ce:42:0e:28:80:51:cc:75:f6:8b:9f:09:fa:6e:b9:db:d7:57: 0d:4a:66:20:d8:19:56:14:14:c3:59:ac:de:24:78:ef:b5:d5: 4c:06:c3:df:7b:3b:20:ee:63:8a:a2:15:99:7d:cb:e4:e5:a9: 83:06:10:e9:32:83:1a:ab:27:1b:a9:8c:74:5d:a7:68:64:80: 1a:57:a6:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EekVx3AWL4Oo2WiwRrQUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OGExODZlOGVlYjg3MTRlZGNhNWIwZDcxNmU1MWQ2NmMx NjhjZTEwHhcNMjYwMTAyMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTAyZWZlZWUzOTU2MzNkZjYxNWFmODcwOTgxNmM3NmVhZjI2OTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zTuISMcjSkmU8D8IE6YtabHDiIo Lf1N6Jan8RbXnhAO/GhjznBjgXx88jN9kuV1aXQENvJ0FEjpdPjb8zn7Ity+mKh1 hSrnECjy327V3FFvwzWdHtjb5gY4LG4AICShMFfun7rrDcE7y6NopE2UZ9g+mnbE RI5hStoprUWXsC9QBo74oheMhZjIGaLI8jyJkSBXA6URrwz0bYeOXiDbWyp2wWFP ShO4cWucXvmJtX1vawTUAq04xwAnrhKE7jUOmFL3JUICvGd7QjeLy0tQ2d3mnDzR 8Tk8Z2+3QXE5JgfdvObT9LRoAStS7lQ/Vxy9fkDl6iaROLfOmw1DPI4IcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKkC7+7jlWM99hWvhwmBbHbq8mlGMB8GA1UdIwQY MBaAFMmKGG6O64cU7cpbDXFuUdZsFozhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iYTcyMTQtNTU2OC00YTQyLWE5OTkt N2E1YThkMDk2N2M4LzEvcVFMdjd1T1ZZejMyRmEtSENZRnNkdXJ5YVVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iYTcyMTQtNTU2OC00YTQyLWE5OTktN2E1YThkMDk2N2M4 LzEveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWrgMA0G CSqGSIb3DQEBCwUAA4IBAQBwxoN5vOYgnyQXC9gKLGdEb69g4G2oQ3JVdNlBabjg 8nfzSgR7lN75PomjoSZ1C1jXhKBYOlyEEb2sf6I6aRh9Dzo3CFEeeGjr1TQPUKb4 hprgQVmGeMkaAmfHYrhPgChtbHNKP9J3ha4Q2Cz5Rxj5DdZWLo+9TvykZbH2OMtj DvaBpyXz8N+zhbKUSuc+kZBHJXtVjxEmlGU0aeYPV0GSTzBF/P+gUOlIl+STTmzP gDJxa0/OQg4ogFHMdfaLnwn6brnb11cNSmYg2BlWFBTDWazeJHjvtdVMBsPfezsg 7mOKohWZfcvk5amDBhDpMoMaqycbqYx0XadoZIAaV6bR -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:03 2026 by rpki-client