This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/qr3Na9k4dEq-BltyNe_Y-J5z6Xg.roa File: qr3Na9k4dEq-BltyNe_Y-J5z6Xg.roa (raw, json) Hash identifier: WKJf5bBFt3vRZjUBsw0y9RXB09W0E9StehXTEF8mDn0= Subject key identifier: AA:BD:CD:6B:D9:38:74:4A:BE:06:5B:72:35:EF:D8:F8:9E:73:E9:78 Certificate issuer: /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495 Certificate serial: 019B7B36E764BE20AFD4BB14263509E66649 Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/qr3Na9k4dEq-BltyNe_Y-J5z6Xg.roa Signing time: Thu 01 Jan 2026 20:19:14 +0000 ROA not before: Thu 01 Jan 2026 20:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58282 IP address blocks: 185.49.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:e7:64:be:20:af:d4:bb:14:26:35:09:e6:66:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495 Validity Not Before: Jan 1 20:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aabdcd6bd938744abe065b7235efd8f89e73e978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:14:7f:37:fb:4d:90:36:6c:3c:2d:dd:9c:74: 58:18:4c:2f:cb:f2:7c:a9:00:27:b4:61:47:c9:2c: 6d:00:9c:78:b5:72:57:98:af:e5:b5:96:25:3b:ec: 18:78:0f:5d:55:f5:54:c6:88:49:b5:fc:e1:4a:c7: 6a:1d:42:bc:3e:dd:20:34:5c:7f:e9:70:1f:f0:da: 65:45:4d:81:27:fc:7d:c8:cb:a5:99:9e:fc:33:ab: bf:ee:07:7a:1b:83:68:48:fe:f4:45:8c:a1:e1:4e: 3c:85:bb:f3:71:4f:8e:b6:1e:95:c3:be:b1:2c:e0: 10:fc:a7:16:12:05:b2:bf:a1:1c:53:37:24:3d:3e: 0f:5a:20:3c:19:0a:92:32:3b:9a:b9:59:3d:ed:91: 0e:67:6e:d3:93:a1:72:41:4d:b2:4b:b6:1c:92:bb: 9a:74:68:1d:e1:eb:3b:a8:cb:08:cc:9b:b6:c1:48: f5:52:4c:c5:df:6f:7d:0b:12:94:22:d7:12:65:95: 75:b4:f7:0a:7e:3c:3a:db:62:48:aa:d4:11:34:de: 62:35:07:70:d4:f7:fb:0e:db:c8:af:09:4e:c7:3a: 3c:62:21:55:d9:8e:4a:09:f3:81:b5:59:33:00:cf: 18:c9:e2:c6:73:7b:6c:00:c4:61:bd:c4:9c:fe:a0: 64:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BD:CD:6B:D9:38:74:4A:BE:06:5B:72:35:EF:D8:F8:9E:73:E9:78 X509v3 Authority Key Identifier: keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/qr3Na9k4dEq-BltyNe_Y-J5z6Xg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.252.0/22 Signature Algorithm: sha256WithRSAEncryption 53:c3:8b:73:eb:b6:b8:34:73:0a:f2:e5:c7:66:a7:17:95:d6: a2:fb:c7:8f:74:27:51:3c:65:ab:60:b9:9d:12:83:4d:1a:e9: fd:91:cd:de:d4:4c:6f:d8:12:0a:09:27:f8:4a:ac:62:de:1a: c9:67:f6:1b:12:51:d1:55:45:fa:7c:b8:85:80:fa:1b:d1:98: b6:fe:09:8a:92:28:dc:30:05:56:08:b5:e2:d2:59:a9:b3:e4: e1:22:d7:b0:f8:d6:4c:4f:16:6c:b8:7c:95:8c:70:11:56:34: 94:3b:15:7f:80:02:98:9e:3c:70:f0:cb:85:59:18:8a:62:e9: 6e:f8:2e:58:7f:de:d6:5c:70:04:6f:83:5b:e0:f1:c7:a4:0f: ce:e5:36:76:e0:38:7b:49:fd:82:b9:85:fb:cb:bb:04:b0:ab: 6e:cf:a3:94:53:ed:0a:98:70:7a:f6:b7:ba:37:b5:38:32:21: 33:e7:f4:7a:be:d8:dd:c3:d3:17:ef:f3:38:b6:23:19:71:0b: 67:07:4d:a1:e1:6e:c4:f2:91:ff:96:14:3a:1d:c4:d9:55:86: ac:40:e3:4d:66:60:10:bd:ce:40:6a:fa:e1:cc:82:b0:22:44: f5:b3:0d:11:84:55:1f:e1:a9:a5:d9:4b:04:dc:f0:15:af:67: cd:f9:e5:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NudkviCv1LsUJjUJ5mZJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZjg1NjIyZTIyZmM5NmNlYWNmNzMxMTRkODkwZjRmM2Fh N2Q0OTUwHhcNMjYwMTAxMjAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWJkY2Q2YmQ5Mzg3NDRhYmUwNjViNzIzNWVmZDhmODllNzNlOTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RR/N/tNkDZsPC3dnHRYGEwvy/J8 qQAntGFHySxtAJx4tXJXmK/ltZYlO+wYeA9dVfVUxohJtfzhSsdqHUK8Pt0gNFx/ 6XAf8NplRU2BJ/x9yMulmZ78M6u/7gd6G4NoSP70RYyh4U48hbvzcU+Oth6Vw76x LOAQ/KcWEgWyv6EcUzckPT4PWiA8GQqSMjuauVk97ZEOZ27Tk6FyQU2yS7Yckrua dGgd4es7qMsIzJu2wUj1UkzF3299CxKUItcSZZV1tPcKfjw622JIqtQRNN5iNQdw 1Pf7DtvIrwlOxzo8YiFV2Y5KCfOBtVkzAM8YyeLGc3tsAMRhvcSc/qBkNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKq9zWvZOHRKvgZbcjXv2Piec+l4MB8GA1UdIwQY MBaAFJL4ViLiL8ls6s9zEU2JD086p9SVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ZoV0l1SXZ5V3pxejNNUlRZa1BUenFuMUpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8xMDAwZWItZmZkMC00ZmUzLWI3YWYt MDczOGMyMzM0ZTdmLzEvcXIzTmE5azRkRXEtQmx0eU5lX1ktSjV6NlhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8xMDAwZWItZmZkMC00ZmUzLWI3YWYtMDczOGMyMzM0ZTdm LzEva3ZoV0l1SXZ5V3pxejNNUlRZa1BUenFuMUpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTH8MA0G CSqGSIb3DQEBCwUAA4IBAQBTw4tz67a4NHMK8uXHZqcXldai+8ePdCdRPGWrYLmd EoNNGun9kc3e1Exv2BIKCSf4Sqxi3hrJZ/YbElHRVUX6fLiFgPob0Zi2/gmKkijc MAVWCLXi0lmps+ThItew+NZMTxZsuHyVjHARVjSUOxV/gAKYnjxw8MuFWRiKYulu +C5Yf97WXHAEb4Nb4PHHpA/O5TZ24Dh7Sf2CuYX7y7sEsKtuz6OUU+0KmHB69re6 N7U4MiEz5/R6vtjdw9MX7/M4tiMZcQtnB02h4W7E8pH/lhQ6HcTZVYasQONNZmAQ vc5AavrhzIKwIkT1sw0RhFUf4aml2UsE3PAVr2fN+eVY -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:22 2026 by rpki-client