This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/qvAyroJETTvqQMM_MVkdoGYncxA.roa File: qvAyroJETTvqQMM_MVkdoGYncxA.roa (raw, json) Hash identifier: nmTwuA7cbFKwFpXIGdTjihs7A1gDgSqO3ta9jqth4L8= Subject key identifier: AA:F0:32:AE:82:44:4D:3B:EA:40:C3:3F:31:59:1D:A0:66:27:73:10 Certificate issuer: /CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea Certificate serial: 019B7F1555BCBCCE91F9998AA921A63D2ED9 Authority key identifier: 65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/qvAyroJETTvqQMM_MVkdoGYncxA.roa Signing time: Fri 02 Jan 2026 14:21:03 +0000 ROA not before: Fri 02 Jan 2026 14:21:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41960 IP address blocks: 185.252.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:55:bc:bc:ce:91:f9:99:8a:a9:21:a6:3d:2e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea Validity Not Before: Jan 2 14:21:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aaf032ae82444d3bea40c33f31591da066277310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ee:e0:4a:c5:18:c9:e8:87:e7:bb:5a:a4:11: 22:dc:34:e9:0d:cd:a5:2b:5c:c6:2f:74:ce:89:d8: 9d:76:ba:0c:6b:0c:95:f3:29:97:c5:7d:d6:53:5d: 81:7c:42:56:2e:2b:fa:f0:98:a7:6a:51:5d:c1:4f: 90:70:1b:0f:5a:51:45:0a:55:48:2c:b4:74:12:d8: 43:17:e5:78:d7:57:90:03:a5:11:5a:b7:cd:1d:d5: 6e:27:80:21:5e:1c:17:39:60:e0:3e:5c:d5:df:ce: 78:3a:cc:33:84:c7:d7:f8:5f:6b:bf:8a:16:2b:07: 75:be:4f:51:d4:00:64:9d:5d:9f:b5:98:51:d2:84: 3b:e1:7e:7a:70:ef:73:77:db:e2:77:83:9e:c7:ae: c9:06:1a:00:d2:26:e7:9d:93:c0:84:89:3e:c1:d5: 13:10:84:1f:4f:9e:ab:c4:f1:ca:0f:87:08:0e:b4: 52:1d:ee:d5:29:93:92:f5:12:0a:40:92:b3:33:2f: b7:18:18:b1:29:50:70:42:e0:f5:d0:6f:66:9a:f3: fc:aa:ad:ef:ec:ee:75:80:79:0d:5c:b0:87:f4:17: 23:49:c0:f2:bf:f7:6e:b0:ac:fc:7b:aa:eb:e1:15: f7:18:aa:41:cc:67:30:2c:ed:a8:5c:46:64:d5:b4: d0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F0:32:AE:82:44:4D:3B:EA:40:C3:3F:31:59:1D:A0:66:27:73:10 X509v3 Authority Key Identifier: keyid:65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/qvAyroJETTvqQMM_MVkdoGYncxA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.194.0/24 Signature Algorithm: sha256WithRSAEncryption 44:65:76:32:a8:72:ac:ff:f8:91:15:c6:b3:9d:0e:3f:ef:11: b5:ad:29:5a:da:7e:5e:6e:9e:77:91:74:68:16:46:1e:a7:82: ba:15:1f:62:d0:b9:8c:71:a7:c1:20:d8:b2:87:dc:47:5c:ae: 09:f5:03:af:0a:1b:29:80:17:a5:fa:24:02:87:45:13:7d:1f: cb:b4:4b:6e:a7:1f:b3:3a:01:77:50:84:d5:aa:8a:4b:3e:56: 2b:0f:95:64:47:d2:1e:1f:f5:e7:ae:ee:48:0e:00:9a:ce:28: 9f:4e:b2:ee:37:e9:00:d6:54:aa:94:92:e8:d8:d3:78:d3:02: de:bf:11:60:11:3a:cd:00:6b:ea:ef:4b:3c:d8:88:ba:0f:88: 85:c8:b5:f4:ee:a0:a4:9e:83:98:37:c9:c9:3a:a4:b1:50:48: e5:75:9d:36:3d:0a:aa:6b:b6:f0:25:d0:01:38:f5:3c:76:b5: 8d:a1:12:47:8c:6d:71:8f:ea:b3:60:ae:71:cb:1b:2e:a3:51: cb:b7:ef:83:ac:8d:c4:51:31:d1:36:66:e4:87:b4:e2:67:eb: 42:3f:f8:b3:6e:af:b0:11:cc:65:b2:9c:9a:e3:88:7e:7a:15: 7b:cc:54:f3:b1:e2:24:7c:7e:fd:65:36:33:95:b8:78:f4:9e: 08:65:6e:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FVW8vM6R+ZmKqSGmPS7ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YzkyMGEyN2UzZTUzYTM2N2Y5ZWE5NmRiN2JhZjdiZDY1 YTgzZWEwHhcNMjYwMTAyMTQyMTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWYwMzJhZTgyNDQ0ZDNiZWE0MGMzM2YzMTU5MWRhMDY2Mjc3MzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou7gSsUYyeiH57tapBEi3DTpDc2l K1zGL3TOididdroMawyV8ymXxX3WU12BfEJWLiv68JinalFdwU+QcBsPWlFFClVI LLR0EthDF+V411eQA6URWrfNHdVuJ4AhXhwXOWDgPlzV3854OswzhMfX+F9rv4oW Kwd1vk9R1ABknV2ftZhR0oQ74X56cO9zd9vid4Oex67JBhoA0ibnnZPAhIk+wdUT EIQfT56rxPHKD4cIDrRSHe7VKZOS9RIKQJKzMy+3GBixKVBwQuD10G9mmvP8qq3v 7O51gHkNXLCH9BcjScDyv/dusKz8e6rr4RX3GKpBzGcwLO2oXEZk1bTQVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKrwMq6CRE076kDDPzFZHaBmJ3MQMB8GA1UdIwQY MBaAFGXJIKJ+PlOjZ/nqltt7r3vWWoPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmNrZ29uNC1VNk5uLWVxVzIzdXZlOVphZy1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iMmRkMDAtYTYyMS00OWE5LWJiYWIt MzdmOWJmNzg2MWI2LzEvcXZBeXJvSkVUVHZxUU1NX01Wa2RvR1luY3hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9iMmRkMDAtYTYyMS00OWE5LWJiYWItMzdmOWJmNzg2MWI2 LzEvWmNrZ29uNC1VNk5uLWVxVzIzdXZlOVphZy1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufzCMA0G CSqGSIb3DQEBCwUAA4IBAQBEZXYyqHKs//iRFcaznQ4/7xG1rSla2n5ebp53kXRo FkYep4K6FR9i0LmMcafBINiyh9xHXK4J9QOvChspgBel+iQCh0UTfR/LtEtupx+z OgF3UITVqopLPlYrD5VkR9IeH/Xnru5IDgCaziifTrLuN+kA1lSqlJLo2NN40wLe vxFgETrNAGvq70s82Ii6D4iFyLX07qCknoOYN8nJOqSxUEjldZ02PQqqa7bwJdAB OPU8drWNoRJHjG1xj+qzYK5xyxsuo1HLt++DrI3EUTHRNmbkh7TiZ+tCP/izbq+w Ecxlspya44h+ehV7zFTzseIkfH79ZTYzlbh49J4IZW61 -----END CERTIFICATE-----Generated at Mon Jan 26 23:44:56 2026 by rpki-client