This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/qRXAdJp0xbYo0FT6eucc0rsG8Yw.roa File: qRXAdJp0xbYo0FT6eucc0rsG8Yw.roa (raw, json) Hash identifier: fUKa/Z+tq+35Z3GUfMU3rii79affOtxwZwlAfn3uJ6U= Subject key identifier: A9:15:C0:74:9A:74:C5:B6:28:D0:54:FA:7A:E7:1C:D2:BB:06:F1:8C Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424 Certificate serial: 019B7A5B9AAA9825F3E9CD3D6C50E9A6C31D Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/qRXAdJp0xbYo0FT6eucc0rsG8Yw.roa Signing time: Thu 01 Jan 2026 16:19:42 +0000 ROA not before: Thu 01 Jan 2026 16:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205185 IP address blocks: 185.142.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9a:aa:98:25:f3:e9:cd:3d:6c:50:e9:a6:c3:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424 Validity Not Before: Jan 1 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a915c0749a74c5b628d054fa7ae71cd2bb06f18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:93:33:77:dd:9f:77:90:9e:69:72:d1:a2:0a: 46:1b:a1:c2:35:cc:b9:c9:49:20:fd:b8:2d:50:24: e8:c8:33:07:ad:4a:99:7f:6a:50:f8:b5:01:09:81: 48:76:ea:ee:7d:88:e3:07:69:91:c5:1a:f0:65:33: 27:c2:40:b2:42:9a:8a:16:76:0e:c0:56:0e:7a:ff: ee:a7:f5:37:4f:51:67:00:08:f2:ec:79:5f:f0:fd: d3:50:9c:ec:18:63:aa:d8:dd:f4:f8:5f:4c:f9:22: ab:4a:36:ae:d7:76:85:75:ff:6f:28:78:4a:33:fa: f9:d1:57:89:87:87:62:f2:27:95:78:7a:f2:d9:dd: b0:02:3d:26:09:fb:00:a4:0e:6c:10:e0:89:ad:7b: dd:f8:38:45:bd:41:99:e8:99:27:bc:72:3f:ad:e5: 84:0e:12:c1:8a:ad:91:96:93:31:46:55:f1:e0:a7: 80:1f:21:49:f8:cf:5f:e8:d6:7b:ca:df:fc:5f:06: 0b:fc:dc:a1:ec:10:12:bf:20:1f:70:a6:0f:af:1b: 9d:c6:b9:a7:55:41:2b:3e:8d:63:4c:22:55:88:05: 69:da:fc:4a:72:37:a1:01:2d:d2:94:1c:bd:2f:3a: bd:98:1b:73:c2:68:d9:04:dc:42:c4:ac:5c:dd:11: 15:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:15:C0:74:9A:74:C5:B6:28:D0:54:FA:7A:E7:1C:D2:BB:06:F1:8C X509v3 Authority Key Identifier: keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/qRXAdJp0xbYo0FT6eucc0rsG8Yw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.79.0/24 Signature Algorithm: sha256WithRSAEncryption 74:f1:fd:d7:7f:1c:7c:04:ae:57:8c:69:f0:82:03:85:c4:cb: 26:49:0a:3c:80:67:ca:b7:b7:56:8e:4b:64:84:e3:ad:f8:f1: 79:f1:94:11:bc:77:e1:9d:8d:b4:b7:d8:b6:05:6d:b7:78:58: 51:23:ae:22:6d:aa:fd:72:5a:d2:66:f8:d0:16:1f:0b:cb:59: 7d:6e:d1:0c:2d:d2:43:8b:71:6e:92:05:95:de:51:8f:9a:a4: f6:cb:6b:27:1f:1e:50:7f:4b:c7:09:04:9a:cf:ec:3b:06:ac: 40:46:66:50:2d:73:3f:e8:09:15:f0:4e:78:11:d1:24:8f:6d: 87:ac:68:12:74:fe:c7:94:c4:98:08:29:30:41:29:66:f0:ec: 54:d4:3f:40:7e:94:ae:97:97:2f:bd:2c:44:79:45:c9:8b:48: 78:10:a2:b5:5d:71:37:70:5c:6c:0a:47:98:5b:73:22:51:f1: 89:56:5a:d7:7e:5c:e6:e5:90:fe:63:e9:e8:de:70:18:8e:e3: 17:3b:54:65:4f:09:13:94:73:04:ee:47:57:e3:b7:7d:d0:bf: 21:83:6a:31:cd:78:5f:29:2e:75:c8:f9:ef:e4:27:22:b0:c5: 2d:7f:d1:74:08:8d:8c:cc:d0:67:b2:da:63:11:c8:99:cf:71: 6d:cd:02:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W5qqmCXz6c09bFDppsMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NTQ0Yzc3ODE1MmYwZmQ4NWU1ZGNiNDQ5MDRmMDAxZTU5 ODc0MjQwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTE1YzA3NDlhNzRjNWI2MjhkMDU0ZmE3YWU3MWNkMmJiMDZmMThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspMzd92fd5CeaXLRogpGG6HCNcy5 yUkg/bgtUCToyDMHrUqZf2pQ+LUBCYFIdurufYjjB2mRxRrwZTMnwkCyQpqKFnYO wFYOev/up/U3T1FnAAjy7Hlf8P3TUJzsGGOq2N30+F9M+SKrSjau13aFdf9vKHhK M/r50VeJh4di8ieVeHry2d2wAj0mCfsApA5sEOCJrXvd+DhFvUGZ6JknvHI/reWE DhLBiq2RlpMxRlXx4KeAHyFJ+M9f6NZ7yt/8XwYL/Nyh7BASvyAfcKYPrxudxrmn VUErPo1jTCJViAVp2vxKcjehAS3SlBy9Lzq9mBtzwmjZBNxCxKxc3REVuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKkVwHSadMW2KNBU+nrnHNK7BvGMMB8GA1UdIwQY MBaAFMhUTHeBUvD9heXctEkE8AHlmHQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUZSTWQ0RlM4UDJGNWR5MFNRVHdBZVdZZENRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hMWYzNTEtNDJmZC00ZDQ0LWE5YjMt ZDk0MDA1MGU1NmNhLzEvcVJYQWRKcDB4YllvMEZUNmV1Y2MwcnNHOFl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9hMWYzNTEtNDJmZC00ZDQ0LWE5YjMtZDk0MDA1MGU1NmNh LzEveUZSTWQ0RlM4UDJGNWR5MFNRVHdBZVdZZENRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY5PMA0G CSqGSIb3DQEBCwUAA4IBAQB08f3Xfxx8BK5XjGnwggOFxMsmSQo8gGfKt7dWjktk hOOt+PF58ZQRvHfhnY20t9i2BW23eFhRI64ibar9clrSZvjQFh8Ly1l9btEMLdJD i3FukgWV3lGPmqT2y2snHx5Qf0vHCQSaz+w7BqxARmZQLXM/6AkV8E54EdEkj22H rGgSdP7HlMSYCCkwQSlm8OxU1D9AfpSul5cvvSxEeUXJi0h4EKK1XXE3cFxsCkeY W3MiUfGJVlrXflzm5ZD+Y+no3nAYjuMXO1RlTwkTlHME7kdX47d90L8hg2oxzXhf KS51yPnv5CcisMUtf9F0CI2MzNBnstpjEciZz3FtzQK5 -----END CERTIFICATE-----Generated at Mon Jan 26 09:54:16 2026 by rpki-client