This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/QkiwDdoqGneFxhueC1tYh17gEHY.roa File: QkiwDdoqGneFxhueC1tYh17gEHY.roa (raw, json) Hash identifier: S+EvCH9iwtFs/o9t8OSVI9PK9t1NWkiQ5QvCjj3oEWA= Subject key identifier: 42:48:B0:0D:DA:2A:1A:77:85:C6:1B:9E:0B:5B:58:87:5E:E0:10:76 Certificate issuer: /CN=913836859c6ce1869340edf1f273709b8094d9d4 Certificate serial: 019B78A28EA4BBFAC515F3FC8C663B5397B5 Authority key identifier: 91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/QkiwDdoqGneFxhueC1tYh17gEHY.roa Signing time: Thu 01 Jan 2026 08:17:57 +0000 ROA not before: Thu 01 Jan 2026 08:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200727 IP address blocks: 185.98.68.0/22 maxlen: 22 2a00:7bc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:8e:a4:bb:fa:c5:15:f3:fc:8c:66:3b:53:97:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=913836859c6ce1869340edf1f273709b8094d9d4 Validity Not Before: Jan 1 08:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4248b00dda2a1a7785c61b9e0b5b58875ee01076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8d:b5:d5:c6:08:a1:36:1c:83:3b:a7:06:0f: 3f:bc:97:2b:a1:7d:d1:f5:53:70:7b:a6:eb:02:6e: 1c:d9:52:c7:32:84:10:77:a1:11:10:03:6f:e9:2d: dd:5a:28:ac:ea:04:b9:0c:d5:1e:d6:bc:b2:cc:98: 56:f5:4b:14:f1:3d:24:46:ba:42:6b:6d:c1:36:dd: a5:07:ee:96:42:c6:e9:a8:f1:96:c1:99:b8:1b:79: 0c:d6:66:96:29:41:1a:88:c8:82:ac:2f:fc:97:48: c0:8d:03:b4:ed:ec:9d:36:b7:25:c7:0a:0e:2e:1a: a4:15:7c:59:1a:93:79:44:f9:e6:47:e6:73:ac:b9: 23:73:08:a6:97:aa:f1:2a:99:bd:cf:d0:2f:25:91: 2c:7a:8e:7e:76:fb:58:a7:c5:e7:25:e0:99:1e:36: 44:2c:b1:3f:98:27:6f:16:3c:cc:f5:75:c3:64:d8: a6:d8:56:c7:31:1e:0a:84:e0:05:fc:31:2f:1a:45: 46:92:08:3d:23:95:80:dc:6f:67:43:b8:14:df:33: d9:cb:73:f7:ea:a9:9a:72:71:b6:9b:85:b7:c2:fe: 72:e9:92:cd:63:92:17:da:ef:0c:26:43:7e:f9:d0: 30:0d:25:ca:cd:06:8e:4b:80:73:35:0e:93:93:28: f2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:48:B0:0D:DA:2A:1A:77:85:C6:1B:9E:0B:5B:58:87:5E:E0:10:76 X509v3 Authority Key Identifier: keyid:91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/QkiwDdoqGneFxhueC1tYh17gEHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.98.68.0/22 IPv6: 2a00:7bc0::/32 Signature Algorithm: sha256WithRSAEncryption 15:ce:0d:98:e2:90:c8:9d:7f:a7:a1:e2:95:87:1e:f6:0d:05: 35:2f:e3:2d:83:2c:4e:d8:32:3e:60:f3:29:73:1d:9a:05:08: 24:3a:e8:1c:e7:08:f6:f1:95:af:56:6d:49:32:dd:19:f2:e8: ba:9f:b8:76:e1:b8:6f:f8:60:4e:7f:42:c9:3f:89:19:47:51: 65:d6:19:32:68:41:56:6f:43:b1:a6:5c:4f:b5:83:55:6e:04: fe:b0:07:73:63:f2:f5:b2:f9:e9:c2:67:58:2e:6e:ce:76:49: 74:12:c6:6f:2e:1f:74:bf:de:f3:6b:79:c9:30:84:98:a1:4e: 0e:be:25:a6:e0:7b:92:d0:af:d0:f5:cd:72:51:82:00:fb:7d: 3d:23:31:cb:a8:f1:73:ce:a5:60:8c:df:31:c8:c8:27:6c:b7: fb:ec:b3:44:2b:d0:6d:1d:9c:70:15:e5:1c:72:78:90:46:40: 98:54:11:be:2a:d5:0c:2a:53:de:90:d3:82:71:6d:69:74:17: 7d:64:c6:e9:22:3f:46:7b:cc:bf:aa:fb:bf:4a:bd:d4:7f:02: 19:55:07:c8:36:cb:6a:4b:7a:17:1d:fb:fa:ea:a8:fb:5a:90: 9d:5c:6f:56:05:b8:6c:23:ce:b7:cc:81:cb:9d:a1:b3:9e:19: ae:88:c9:85 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4oo6ku/rFFfP8jGY7U5e1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMzgzNjg1OWM2Y2UxODY5MzQwZWRmMWYyNzM3MDliODA5 NGQ5ZDQwHhcNMjYwMTAxMDgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjQ4YjAwZGRhMmExYTc3ODVjNjFiOWUwYjViNTg4NzVlZTAxMDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Y211cYIoTYcgzunBg8/vJcroX3R 9VNwe6brAm4c2VLHMoQQd6EREANv6S3dWiis6gS5DNUe1ryyzJhW9UsU8T0kRrpC a23BNt2lB+6WQsbpqPGWwZm4G3kM1maWKUEaiMiCrC/8l0jAjQO07eydNrclxwoO LhqkFXxZGpN5RPnmR+ZzrLkjcwiml6rxKpm9z9AvJZEseo5+dvtYp8XnJeCZHjZE LLE/mCdvFjzM9XXDZNim2FbHMR4KhOAF/DEvGkVGkgg9I5WA3G9nQ7gU3zPZy3P3 6qmacnG2m4W3wv5y6ZLNY5IX2u8MJkN++dAwDSXKzQaOS4BzNQ6TkyjyfwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEJIsA3aKhp3hcYbngtbWIde4BB2MB8GA1UdIwQY MBaAFJE4NoWcbOGGk0Dt8fJzcJuAlNnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1RnMmhaeHM0WWFUUU8zeDhuTndtNENVMmRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lOGYzNDQtZWRiMi00NDAwLWIzY2Et NTI3YWM1NGMyMzU3LzEvUWtpd0Rkb3FHbmVGeGh1ZUMxdFloMTdnRUhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9lOGYzNDQtZWRiMi00NDAwLWIzY2EtNTI3YWM1NGMyMzU3 LzEva1RnMmhaeHM0WWFUUU8zeDhuTndtNENVMmRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWJEMA0E AgACMAcDBQAqAHvAMA0GCSqGSIb3DQEBCwUAA4IBAQAVzg2Y4pDInX+noeKVhx72 DQU1L+MtgyxO2DI+YPMpcx2aBQgkOugc5wj28ZWvVm1JMt0Z8ui6n7h24bhv+GBO f0LJP4kZR1Fl1hkyaEFWb0OxplxPtYNVbgT+sAdzY/L1svnpwmdYLm7Odkl0EsZv Lh90v97za3nJMISYoU4OviWm4HuS0K/Q9c1yUYIA+309IzHLqPFzzqVgjN8xyMgn bLf77LNEK9BtHZxwFeUccniQRkCYVBG+KtUMKlPekNOCcW1pdBd9ZMbpIj9Ge8y/ qvu/Sr3UfwIZVQfINstqS3oXHfv66qj7WpCdXG9WBbhsI863zIHLnaGznhmuiMmF -----END CERTIFICATE-----Generated at Mon Feb 9 23:04:09 2026 by rpki-client