This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/q04DAUNQ8mmk4frR1pjxhZ9V5q0.roa File: q04DAUNQ8mmk4frR1pjxhZ9V5q0.roa (raw, json) Hash identifier: KQaHhA+OhijKUCpTAoL29fJGLyKeGagBCHKk31Lp+WM= Subject key identifier: AB:4E:03:01:43:50:F2:69:A4:E1:FA:D1:D6:98:F1:85:9F:55:E6:AD Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71 Certificate serial: 019B7834ABA3E1EBDEF73612B9965951D0B2 Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/q04DAUNQ8mmk4frR1pjxhZ9V5q0.roa Signing time: Thu 01 Jan 2026 06:17:56 +0000 ROA not before: Thu 01 Jan 2026 06:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57717 IP address blocks: 185.173.235.0/24 maxlen: 24 185.216.140.0/23 maxlen: 23 185.216.143.0/24 maxlen: 24 2a0b:b7c0::/30 maxlen: 30 2a0b:b7c4::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ab:a3:e1:eb:de:f7:36:12:b9:96:59:51:d0:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71 Validity Not Before: Jan 1 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab4e03014350f269a4e1fad1d698f1859f55e6ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1c:eb:90:fc:46:72:57:14:0f:b2:61:e1:4d: b4:e8:75:07:7b:4a:83:0d:c4:da:fa:4b:82:32:e1: 5d:db:9b:3d:af:1f:85:e1:fc:a9:09:a8:a2:6f:4c: 27:93:3d:d0:27:92:08:02:0f:d6:ea:73:04:eb:32: 39:d8:c5:f7:40:a7:ad:73:00:45:fc:ab:5c:4b:65: d5:54:ae:fc:28:a4:cc:11:3a:ad:e3:cd:a0:74:6e: fc:00:9a:c3:96:09:66:a2:ed:22:05:0f:b3:ee:31: 43:4a:95:28:fb:86:ad:8a:29:09:8f:b4:bd:f1:5b: 5b:76:45:8a:75:64:16:9c:fc:31:86:29:f2:6f:22: c4:80:23:9e:97:7c:2e:c7:f0:85:95:69:40:92:54: d1:57:12:8e:f3:24:28:63:e6:a1:31:d7:a6:82:d1: 1f:da:e8:95:39:d5:c6:47:4f:90:08:4a:37:e2:8e: d8:b6:b1:5d:5b:6f:c0:71:71:74:9e:86:ad:36:b0: 90:dc:3c:2a:dd:30:2c:8d:68:77:f0:1a:5d:83:33: 8d:37:18:c4:47:92:26:27:2a:b9:25:a4:56:7e:b2: d2:74:9d:70:98:28:6b:f9:38:5e:ac:2c:7a:4f:51: ed:00:dc:8a:78:f4:c4:8c:08:e9:d5:2b:91:1d:97: e0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4E:03:01:43:50:F2:69:A4:E1:FA:D1:D6:98:F1:85:9F:55:E6:AD X509v3 Authority Key Identifier: keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/q04DAUNQ8mmk4frR1pjxhZ9V5q0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.173.235.0/24 185.216.140.0/23 185.216.143.0/24 IPv6: 2a0b:b7c0::/29 Signature Algorithm: sha256WithRSAEncryption 79:42:69:9c:7c:c5:72:9b:ee:a5:2a:cf:2a:18:9a:f1:83:6c: fb:83:0c:d9:40:2d:6c:89:c0:f1:52:1e:0c:00:3c:4c:c9:76: 93:55:26:26:14:ff:cf:9b:bc:7d:6b:96:26:f8:10:26:2d:4f: f2:b3:60:11:d1:8e:f0:5a:a6:d1:1d:33:d6:c6:61:4c:5d:03: a6:7d:d8:24:68:89:22:98:75:9f:b4:53:97:9d:07:cf:9d:61: c7:f8:5c:62:93:d5:96:68:37:7e:c8:34:ee:58:e2:64:52:fc: 0e:0e:8e:2a:99:93:0f:46:52:70:b8:03:40:b7:ee:67:ce:86: 46:d7:c4:73:68:f9:62:1e:71:40:a1:f4:76:b3:bd:44:e5:ca: e2:35:49:99:77:2d:2d:bd:fa:d8:df:87:27:15:c3:f2:17:be: 94:51:e0:7b:7b:5b:99:ea:95:d4:f2:d8:7a:4d:91:65:c2:8f: 06:fe:a1:89:5c:50:e0:18:f2:cf:94:44:9c:b4:09:51:ff:3d: b3:be:ed:d7:1f:53:c2:88:60:d1:bf:95:19:4f:0d:41:0f:67: c4:06:fb:07:13:03:b8:15:42:66:e3:ab:aa:66:78:5a:78:89: a4:5f:e6:6c:2d:ec:56:08:ce:4f:8a:a8:32:12:b3:ec:a6:52: 1e:c6:bd:57 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4NKuj4eve9zYSuZZZUdCyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZTVjNGU0YmUzYjhjYmRlMGVhZTk0NjBhMTEwMzJkNmE2 NGFiNzEwHhcNMjYwMTAxMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjRlMDMwMTQzNTBmMjY5YTRlMWZhZDFkNjk4ZjE4NTlmNTVlNmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxzrkPxGclcUD7Jh4U206HUHe0qD DcTa+kuCMuFd25s9rx+F4fypCaiib0wnkz3QJ5IIAg/W6nME6zI52MX3QKetcwBF /KtcS2XVVK78KKTMETqt482gdG78AJrDlglmou0iBQ+z7jFDSpUo+4atiikJj7S9 8VtbdkWKdWQWnPwxhinybyLEgCOel3wux/CFlWlAklTRVxKO8yQoY+ahMdemgtEf 2uiVOdXGR0+QCEo34o7YtrFdW2/AcXF0noatNrCQ3Dwq3TAsjWh38BpdgzONNxjE R5ImJyq5JaRWfrLSdJ1wmChr+TherCx6T1HtANyKePTEjAjp1SuRHZfgKwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKtOAwFDUPJppOH60daY8YWfVeatMB8GA1UdIwQY MBaAFAflxOS+O4y94OrpRgoRAy1qZKtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQi1YRTVMNDdqTDNnNnVsR0NoRURMV3BrcTNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNmIxNzMtOTEyYy00MTUxLWJhYzUt NGM4ODgzMzI3YTJhLzEvcTA0REFVTlE4bW1rNGZyUjFwanhoWjlWNXEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mNmIxNzMtOTEyYy00MTUxLWJhYzUtNGM4ODgzMzI3YTJh LzEvQi1YRTVMNDdqTDNnNnVsR0NoRURMV3BrcTNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAua3rAwQB udiMAwQAudiPMA0EAgACMAcDBQMqC7fAMA0GCSqGSIb3DQEBCwUAA4IBAQB5Qmmc fMVym+6lKs8qGJrxg2z7gwzZQC1sicDxUh4MADxMyXaTVSYmFP/Pm7x9a5Ym+BAm LU/ys2AR0Y7wWqbRHTPWxmFMXQOmfdgkaIkimHWftFOXnQfPnWHH+Fxik9WWaDd+ yDTuWOJkUvwODo4qmZMPRlJwuANAt+5nzoZG18RzaPliHnFAofR2s71E5criNUmZ dy0tvfrY34cnFcPyF76UUeB7e1uZ6pXU8th6TZFlwo8G/qGJXFDgGPLPlESctAlR /z2zvu3XH1PCiGDRv5UZTw1BD2fEBvsHEwO4FUJm46uqZnhaeImkX+ZsLexWCM5P iqgyErPsplIexr1X -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:52 2026 by rpki-client