This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/qxewd6X7cZwHTA-zQMlA_OAvlN8.roa File: qxewd6X7cZwHTA-zQMlA_OAvlN8.roa (raw, json) Hash identifier: Ry7YnXFLSUjxQaaprtnh0Xvr7Lu/H9g4ex/4yimbRx4= Subject key identifier: AB:17:B0:77:A5:FB:71:9C:07:4C:0F:B3:40:C9:40:FC:E0:2F:94:DF Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 019B79113072915660E121C1BC0B9E3D5E7F Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/qxewd6X7cZwHTA-zQMlA_OAvlN8.roa Signing time: Thu 01 Jan 2026 10:18:48 +0000 ROA not before: Thu 01 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41706 IP address blocks: 185.216.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:30:72:91:56:60:e1:21:c1:bc:0b:9e:3d:5e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: Jan 1 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab17b077a5fb719c074c0fb340c940fce02f94df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5d:48:c8:76:94:f1:f6:2a:9b:b0:6e:24:d1: 91:fd:7f:f2:b7:d6:d0:46:04:19:c7:49:c4:a6:ff: 0c:e6:a5:d7:37:d9:3b:83:fd:32:8c:69:ff:aa:48: 88:00:74:73:d5:b3:81:cc:9e:df:d0:74:f9:14:72: 36:41:ba:f1:26:77:d2:07:9b:05:87:12:60:e1:ad: 19:b5:64:25:df:f5:77:f0:75:62:68:61:7b:82:70: 95:3f:21:92:b7:a7:1d:77:9f:c1:a7:fc:c2:7e:99: ef:fc:ae:34:9a:11:60:5a:40:57:14:1d:63:e9:35: d9:5e:8f:9f:c1:4d:6a:ea:6d:3a:de:5e:aa:16:87: a5:4b:ef:e1:8a:27:6b:27:81:7d:f9:2b:1c:01:6c: 52:cb:84:6b:d7:f2:d5:96:a1:c8:f0:bb:4a:ea:9e: be:8a:e3:87:68:df:88:2b:0d:21:a4:fe:84:de:f2: a2:26:73:be:3b:02:0f:de:8a:66:72:1e:59:4e:68: 4e:8a:ff:2d:ae:45:be:85:ff:b8:0d:d0:46:0f:9b: 11:fa:98:12:9a:bb:0c:7f:14:29:61:ce:fc:7b:c3: 1e:a7:16:f7:b5:a7:ba:87:ac:4b:f0:fa:40:63:bb: c0:99:cf:1a:4c:12:37:26:64:f8:cf:66:f0:44:4a: 0f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:17:B0:77:A5:FB:71:9C:07:4C:0F:B3:40:C9:40:FC:E0:2F:94:DF X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/qxewd6X7cZwHTA-zQMlA_OAvlN8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.216.103.0/24 Signature Algorithm: sha256WithRSAEncryption b7:7f:92:c6:19:1a:ed:8d:1a:a3:bc:38:65:dd:c4:8a:b2:45: de:a6:d6:c1:06:19:53:0d:ee:5e:f8:8e:5a:cd:6e:bc:d4:e5: a3:ee:18:11:59:7c:c8:ec:cb:34:15:59:28:69:0a:67:52:3f: 2d:61:24:f7:0f:4b:21:15:df:8e:cb:81:1b:22:ea:aa:da:cd: 25:bf:6a:2d:0e:db:5a:29:dd:c3:8e:53:ee:1d:4d:f2:f7:ff: 07:8a:5d:89:6f:3f:6d:c7:8f:a0:1f:d3:82:94:ad:2d:f3:e1: 32:6b:92:47:bc:f6:41:86:05:d1:2c:15:49:54:c1:ce:d4:31: fe:96:f2:f3:0a:ab:4d:dc:10:8b:df:2f:e0:cd:50:1c:d5:d4: f6:2d:e6:36:78:f0:7c:27:47:8e:4e:3e:0c:07:4e:92:0f:fe: 5a:34:7a:df:0d:89:80:2f:91:25:69:dc:3d:6f:ec:9a:37:0b: 20:2b:25:b5:a9:1b:e4:e5:f4:96:b9:47:0c:ff:c3:e6:4b:41: 77:19:78:6f:42:de:1f:21:1b:e1:96:b7:62:23:11:d6:1a:84: f2:68:bd:ec:53:31:e8:2e:19:df:00:30:01:4f:f5:ed:d3:7c: 2c:88:f7:0f:c5:94:7d:f7:5c:78:c4:16:9e:b3:18:bb:e2:c7: 36:ad:de:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ETBykVZg4SHBvAuePV5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjYwMTAxMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjE3YjA3N2E1ZmI3MTljMDc0YzBmYjM0MGM5NDBmY2UwMmY5NGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV1IyHaU8fYqm7BuJNGR/X/yt9bQ RgQZx0nEpv8M5qXXN9k7g/0yjGn/qkiIAHRz1bOBzJ7f0HT5FHI2QbrxJnfSB5sF hxJg4a0ZtWQl3/V38HViaGF7gnCVPyGSt6cdd5/Bp/zCfpnv/K40mhFgWkBXFB1j 6TXZXo+fwU1q6m063l6qFoelS+/hiidrJ4F9+SscAWxSy4Rr1/LVlqHI8LtK6p6+ iuOHaN+IKw0hpP6E3vKiJnO+OwIP3opmch5ZTmhOiv8trkW+hf+4DdBGD5sR+pgS mrsMfxQpYc78e8Mepxb3tae6h6xL8PpAY7vAmc8aTBI3JmT4z2bwREoPaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKsXsHel+3GcB0wPs0DJQPzgL5TfMB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvcXhld2Q2WDdjWndIVEEtelFNbEFfT0F2bE44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudhnMA0G CSqGSIb3DQEBCwUAA4IBAQC3f5LGGRrtjRqjvDhl3cSKskXeptbBBhlTDe5e+I5a zW681OWj7hgRWXzI7Ms0FVkoaQpnUj8tYST3D0shFd+Oy4EbIuqq2s0lv2otDtta Kd3DjlPuHU3y9/8Hil2Jbz9tx4+gH9OClK0t8+Eya5JHvPZBhgXRLBVJVMHO1DH+ lvLzCqtN3BCL3y/gzVAc1dT2LeY2ePB8J0eOTj4MB06SD/5aNHrfDYmAL5Eladw9 b+yaNwsgKyW1qRvk5fSWuUcM/8PmS0F3GXhvQt4fIRvhlrdiIxHWGoTyaL3sUzHo LhnfADABT/Xt03wsiPcPxZR991x4xBaesxi74sc2rd5P -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:19 2026 by rpki-client