This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qlsHtfpEvTBey5elHTsRHSLQ41Q.roa File: qlsHtfpEvTBey5elHTsRHSLQ41Q.roa (raw, json) Hash identifier: 0KUEcDBcJ7ce1rjrGO0ed3L+AydibqQ8YMGGOY8IVP4= Subject key identifier: AA:5B:07:B5:FA:44:BD:30:5E:CB:97:A5:1D:3B:11:1D:22:D0:E3:54 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019C08CBF9BA0D82279EE1F275DD49714116 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qlsHtfpEvTBey5elHTsRHSLQ41Q.roa Signing time: Thu 29 Jan 2026 08:08:31 +0000 ROA not before: Thu 29 Jan 2026 08:08:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213887 IP address blocks: 45.128.235.0/24 maxlen: 24 85.31.46.0/24 maxlen: 24 85.208.136.0/24 maxlen: 24 87.120.92.0/24 maxlen: 24 87.120.205.0/24 maxlen: 24 87.120.216.0/24 maxlen: 24 91.92.21.0/24 maxlen: 24 109.206.243.0/24 maxlen: 24 178.215.239.0/24 maxlen: 24 185.218.138.0/24 maxlen: 24 194.113.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 11:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:08:cb:f9:ba:0d:82:27:9e:e1:f2:75:dd:49:71:41:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 29 08:08:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa5b07b5fa44bd305ecb97a51d3b111d22d0e354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0a:a2:17:33:c7:c0:ad:c0:f1:39:b2:41:0b: 33:e2:63:2b:d1:2e:08:66:08:84:14:95:c5:87:9f: a8:ec:31:8a:82:9e:95:c6:f5:41:96:ee:e0:33:ed: 5b:5b:d4:9a:19:32:ba:1a:1a:2d:d7:31:18:25:6b: 0d:04:9f:53:d1:10:d9:66:72:65:87:8f:91:bb:83: 36:b4:04:19:73:01:e4:ae:58:f2:de:a9:b0:40:ad: cc:ff:46:49:1c:ed:9e:da:e8:f8:81:77:0f:02:26: 8e:dc:9f:10:9b:a8:11:00:36:1b:31:8a:d0:a1:27: f8:56:c5:c3:cc:ac:46:e7:b2:67:91:a0:ed:16:a8: c3:d5:cd:41:33:17:54:ad:04:45:5b:69:3c:68:48: 9d:c9:13:5c:b5:44:8e:dd:96:71:dd:45:7a:a3:78: 33:8c:ff:fa:97:cf:ae:bc:01:98:8f:fe:e2:0e:e0: c9:c7:56:cc:0d:4e:5f:10:56:95:61:b2:34:f7:0f: b8:d4:84:05:12:be:3d:f9:8b:9d:cf:d1:68:62:01: 48:66:b9:c5:dd:56:c1:b1:05:ea:db:7c:01:08:0b: d4:37:45:03:81:d4:77:8b:07:77:cb:a4:8f:c9:12: 54:81:1c:ee:39:8d:fa:74:92:b9:72:17:2f:03:fd: 68:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5B:07:B5:FA:44:BD:30:5E:CB:97:A5:1D:3B:11:1D:22:D0:E3:54 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qlsHtfpEvTBey5elHTsRHSLQ41Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.235.0/24 85.31.46.0/24 85.208.136.0/24 87.120.92.0/24 87.120.205.0/24 87.120.216.0/24 91.92.21.0/24 109.206.243.0/24 178.215.239.0/24 185.218.138.0/24 194.113.39.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:09:f4:8b:21:84:5c:f8:a8:e1:25:13:29:05:b0:29:1d:cb: 02:1a:4a:43:6f:65:e4:71:42:2c:60:0a:8d:96:89:17:37:51: 23:67:0b:91:17:1a:18:b8:1d:58:be:27:d6:78:15:51:c4:f9: f7:e7:a7:e8:b5:9c:d5:49:86:df:13:f4:81:bd:50:94:43:ac: 4c:2c:f1:66:47:0c:25:61:1d:44:e3:73:ed:cc:75:04:bd:3d: 57:a7:e2:19:c8:7e:5b:66:18:79:ae:f8:18:84:b3:28:5e:01: 42:66:0f:1a:8e:f3:97:22:f6:19:b8:76:2a:60:de:ce:ae:22: 03:88:0f:90:08:a1:67:14:54:92:12:9f:45:30:d3:e9:fa:1c: 3f:ba:5b:61:95:b0:21:76:d5:24:46:f1:d0:8e:af:8b:4d:d1: 51:11:93:33:fb:fb:c0:bc:cf:92:8d:ec:c0:47:34:e2:31:9b: 11:6f:57:3e:e6:e9:a0:5c:7e:fc:8b:dd:dc:f5:aa:01:87:8c: 7c:9d:07:1a:81:b0:d4:14:f5:7b:b5:17:c0:a1:7e:bf:da:1c: 7b:4d:5e:02:15:d4:fa:51:ee:6a:a5:24:30:17:f3:b4:38:28: 30:b2:e7:77:6f:c7:26:85:e9:38:0e:d1:d5:84:f6:b1:f6:09: d5:af:a7:e3 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZwIy/m6DYInnuHydd1JcUEWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTI5MDgwODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTViMDdiNWZhNDRiZDMwNWVjYjk3YTUxZDNiMTExZDIyZDBlMzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wqiFzPHwK3A8TmyQQsz4mMr0S4I ZgiEFJXFh5+o7DGKgp6VxvVBlu7gM+1bW9SaGTK6Ghot1zEYJWsNBJ9T0RDZZnJl h4+Ru4M2tAQZcwHkrljy3qmwQK3M/0ZJHO2e2uj4gXcPAiaO3J8Qm6gRADYbMYrQ oSf4VsXDzKxG57JnkaDtFqjD1c1BMxdUrQRFW2k8aEidyRNctUSO3ZZx3UV6o3gz jP/6l8+uvAGYj/7iDuDJx1bMDU5fEFaVYbI09w+41IQFEr49+Yudz9FoYgFIZrnF 3VbBsQXq23wBCAvUN0UDgdR3iwd3y6SPyRJUgRzuOY36dJK5chcvA/1oTwIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFKpbB7X6RL0wXsuXpR07ER0i0ONUMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvcWxzSHRmcEV2VEJleTVlbEhUc1JIU0xRNDFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQALYDrAwQA VR8uAwQAVdCIAwQAV3hcAwQAV3jNAwQAV3jYAwQAW1wVAwQAbc7zAwQAstfvAwQA udqKAwQAwnEnMA0GCSqGSIb3DQEBCwUAA4IBAQBdCfSLIYRc+KjhJRMpBbApHcsC GkpDb2XkcUIsYAqNlokXN1EjZwuRFxoYuB1YvifWeBVRxPn356fotZzVSYbfE/SB vVCUQ6xMLPFmRwwlYR1E43PtzHUEvT1Xp+IZyH5bZhh5rvgYhLMoXgFCZg8ajvOX IvYZuHYqYN7OriIDiA+QCKFnFFSSEp9FMNPp+hw/ulthlbAhdtUkRvHQjq+LTdFR EZMz+/vAvM+SjezARzTiMZsRb1c+5umgXH78i93c9aoBh4x8nQcagbDUFPV7tRfA oX6/2hx7TV4CFdT6Ue5qpSQwF/O0OCgwsud3b8cmhek4DtHVhPax9gnVr6fj -----END CERTIFICATE-----Generated at Thu Jan 29 14:47:44 2026 by rpki-client