This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/QWYP1a7mE-901Npm0STCw-0_494.roa File: QWYP1a7mE-901Npm0STCw-0_494.roa (raw, json) Hash identifier: GGXXSRYOhg9nYn3L4Ohy/bvCK7SIobkN33noxERxNSE= Subject key identifier: 41:66:0F:D5:AE:E6:13:EF:74:D4:DA:66:D1:24:C2:C3:ED:3F:E3:DE Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 019B7911316E7EAF7BB096C2372C6C08077E Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/QWYP1a7mE-901Npm0STCw-0_494.roa Signing time: Thu 01 Jan 2026 10:18:48 +0000 ROA not before: Thu 01 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49063 IP address blocks: 185.216.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:31:6e:7e:af:7b:b0:96:c2:37:2c:6c:08:07:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: Jan 1 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41660fd5aee613ef74d4da66d124c2c3ed3fe3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:67:27:20:a0:97:ff:a3:bc:4c:5d:48:c3:66: 99:f1:d8:b1:75:88:4a:89:37:e2:e8:b5:bf:12:12: 76:39:4d:27:9e:90:ef:da:ed:5e:3c:80:95:8f:8c: a5:19:c5:e6:19:8c:19:05:2f:eb:32:cc:c6:82:ba: 29:c8:b1:a5:d1:45:1d:f2:13:fb:19:cf:ed:c0:05: 9c:d3:84:03:67:71:78:e6:85:77:3a:7f:e5:96:a5: 66:88:30:26:4b:46:4a:5c:6d:fc:59:90:d2:12:cb: 43:c7:46:9c:8b:6b:66:94:9a:55:5f:80:f0:4f:07: 39:a9:a0:77:97:16:90:aa:82:75:40:ef:0d:33:33: 35:84:d0:1a:74:84:ad:c2:ee:39:6a:c2:96:56:bf: 38:f4:0a:34:e5:45:a2:e9:bb:5e:d4:4e:95:5c:9a: aa:cf:37:b9:b3:40:6d:c4:d2:ec:f8:0e:7d:32:d2: 3c:fa:cb:d8:80:9a:a9:25:d4:e7:e6:cc:c0:2f:01: 5f:db:13:d0:34:67:06:95:84:ef:75:39:e6:00:53: 9f:01:18:34:a5:9f:18:91:57:a7:fc:89:27:a9:51: 85:ae:40:bf:dc:f2:1a:73:8d:f1:e9:f6:59:c3:4c: b6:1c:77:62:4c:32:cf:2f:3d:8b:4f:1b:ec:d3:42: 02:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:66:0F:D5:AE:E6:13:EF:74:D4:DA:66:D1:24:C2:C3:ED:3F:E3:DE X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/QWYP1a7mE-901Npm0STCw-0_494.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.216.102.0/24 Signature Algorithm: sha256WithRSAEncryption 28:a4:4e:39:8a:bb:9b:1a:8b:a9:50:ce:c1:c0:0b:7e:28:01: f5:fd:d6:16:20:f2:d8:7f:b4:52:0a:20:c6:9b:8d:e2:ff:bd: 6d:36:5b:85:d7:ca:d6:fc:dd:a8:1b:78:e0:27:d5:ea:e5:38: 3e:89:3b:9f:5c:90:6f:80:f0:ba:03:0a:5c:ad:26:7b:43:97: 09:b8:d2:f7:3a:27:af:d8:56:3e:73:21:db:93:08:6b:97:7d: d2:a5:c2:a3:4b:3f:e4:b4:15:69:4b:5f:28:8a:d7:dd:da:b2: 99:9a:fc:cc:2f:6a:1b:95:52:80:d5:be:67:0e:08:c4:0c:a7: 05:6b:d6:e6:a5:0a:34:de:d1:00:23:f7:44:bd:31:50:1e:38: 00:ea:98:f8:a7:6a:2b:7c:7c:22:86:ba:c0:39:1d:db:55:f6: 2e:84:b1:19:f5:4e:d5:73:f8:df:93:02:10:bb:c9:5b:d4:49: a3:48:62:0a:88:19:ab:74:27:9c:82:0c:c9:ba:bc:69:d3:7d: 48:dc:36:fe:52:d3:df:98:70:9c:83:56:26:ab:0c:22:c1:53: 79:58:2d:e8:70:f1:b4:1e:b7:72:4f:01:fc:6f:57:04:69:dd: 71:6e:11:94:c9:85:67:8d:cf:5d:7d:57:01:c2:da:dd:a3:96: c9:56:1d:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ETFufq97sJbCNyxsCAd+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjYwMTAxMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTY2MGZkNWFlZTYxM2VmNzRkNGRhNjZkMTI0YzJjM2VkM2ZlM2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2cnIKCX/6O8TF1Iw2aZ8dixdYhK iTfi6LW/EhJ2OU0nnpDv2u1ePICVj4ylGcXmGYwZBS/rMszGgropyLGl0UUd8hP7 Gc/twAWc04QDZ3F45oV3On/llqVmiDAmS0ZKXG38WZDSEstDx0aci2tmlJpVX4Dw Twc5qaB3lxaQqoJ1QO8NMzM1hNAadIStwu45asKWVr849Ao05UWi6bte1E6VXJqq zze5s0BtxNLs+A59MtI8+svYgJqpJdTn5szALwFf2xPQNGcGlYTvdTnmAFOfARg0 pZ8YkVen/IknqVGFrkC/3PIac43x6fZZw0y2HHdiTDLPLz2LTxvs00ICqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEFmD9Wu5hPvdNTaZtEkwsPtP+PeMB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvUVdZUDFhN21FLTkwMU5wbTBTVEN3LTBfNDk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudhmMA0G CSqGSIb3DQEBCwUAA4IBAQAopE45irubGoupUM7BwAt+KAH1/dYWIPLYf7RSCiDG m43i/71tNluF18rW/N2oG3jgJ9Xq5Tg+iTufXJBvgPC6AwpcrSZ7Q5cJuNL3Oiev 2FY+cyHbkwhrl33SpcKjSz/ktBVpS18oitfd2rKZmvzML2oblVKA1b5nDgjEDKcF a9bmpQo03tEAI/dEvTFQHjgA6pj4p2orfHwihrrAOR3bVfYuhLEZ9U7Vc/jfkwIQ u8lb1EmjSGIKiBmrdCecggzJurxp031I3Db+UtPfmHCcg1YmqwwiwVN5WC3ocPG0 HrdyTwH8b1cEad1xbhGUyYVnjc9dfVcBwtrdo5bJVh0k -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:28 2026 by rpki-client