This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/quAV4eYcasGlgRODEpBGamYZ6h0.roa File: quAV4eYcasGlgRODEpBGamYZ6h0.roa (raw, json) Hash identifier: xcRHN39YJK/QeKfoe37h6fY7xr+CzjZ9Q02OAtdg1cY= Subject key identifier: AA:E0:15:E1:E6:1C:6A:C1:A5:81:13:83:12:90:46:6A:66:19:EA:1D Certificate issuer: /CN=fc470eecb1f1be052525142f60a0b59da5f18156 Certificate serial: 019B7F151D87E6F83C856CF66B5C9BFFF5BA Authority key identifier: FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/quAV4eYcasGlgRODEpBGamYZ6h0.roa Signing time: Fri 02 Jan 2026 14:20:48 +0000 ROA not before: Fri 02 Jan 2026 14:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60631 IP address blocks: 185.19.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:1d:87:e6:f8:3c:85:6c:f6:6b:5c:9b:ff:f5:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc470eecb1f1be052525142f60a0b59da5f18156 Validity Not Before: Jan 2 14:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aae015e1e61c6ac1a58113831290466a6619ea1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7b:70:3c:fc:1b:25:a8:99:ed:a8:6b:85:04: 1c:80:2f:47:a0:a6:d6:a9:2d:b6:5b:0b:c1:8e:26: 15:73:8b:04:04:4e:9f:7f:45:8f:56:2b:75:48:3f: a5:fc:20:99:44:a7:4f:e0:e1:57:bc:6f:1c:2a:bb: bd:1b:9f:0d:b0:c2:8f:b8:cc:c7:29:df:d4:82:75: ac:5d:a6:3a:40:1a:64:13:6d:16:3b:43:3b:e0:29: cc:1e:a7:24:27:9c:f7:d0:ed:ba:4d:a9:3c:ba:59: 70:35:70:ba:5a:ea:23:7c:08:72:8b:45:3a:43:42: a7:70:ab:d0:c5:7a:4e:2e:fc:da:c0:4c:f2:7a:81: 65:f1:48:9e:c9:40:41:78:fe:10:94:25:70:4e:2f: 5e:a8:67:eb:e7:94:07:16:a1:f5:1f:35:1f:c1:ed: 89:cc:72:b0:5d:7d:52:c5:a6:f0:77:ff:da:a2:64: ed:41:45:35:e7:63:e5:44:84:6f:78:57:5d:d5:1d: 69:0b:e3:c6:de:ea:a8:13:32:21:32:dc:86:d1:9b: fa:f3:35:a0:17:33:dc:cf:92:b6:86:21:d0:a5:b6: 37:31:b6:2a:74:ca:43:7f:8f:36:59:a5:02:d9:d8: f4:86:35:ea:51:c9:a8:34:75:a0:51:96:47:42:e0: c1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E0:15:E1:E6:1C:6A:C1:A5:81:13:83:12:90:46:6A:66:19:EA:1D X509v3 Authority Key Identifier: keyid:FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/quAV4eYcasGlgRODEpBGamYZ6h0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.19.201.0/24 Signature Algorithm: sha256WithRSAEncryption ba:70:94:57:39:4d:2b:82:c4:ad:1b:c3:c5:42:a3:a4:68:e2: 2b:ff:0d:36:7c:fc:6a:01:69:51:60:a7:87:7e:dc:f2:05:a4: 77:3b:f3:52:47:1e:49:a5:a8:1f:2f:3f:bb:01:bb:c4:f9:e2: 4c:eb:96:1c:57:19:1b:57:44:63:f3:cf:a0:16:1d:3b:00:6c: 32:9e:e8:d4:32:1f:20:68:8c:c2:b2:d2:10:59:1a:c0:db:b7: e8:e8:85:0a:f6:1e:b2:1e:fd:ae:c3:cc:34:db:75:50:81:8d: 23:5e:1b:88:13:3b:3c:02:92:cc:07:01:b3:39:c6:6a:28:85: 0a:3f:ce:0c:6d:0e:89:f6:98:5e:ea:da:ef:20:1d:31:e6:51: f5:d2:ab:e8:8e:3c:2f:b7:05:f1:45:05:71:56:60:75:b6:4b: fe:b8:7c:1f:b9:c7:95:4c:1e:6c:a6:e8:16:9c:10:8b:28:f9: 60:49:53:5c:25:f8:42:3c:1d:88:47:fa:68:23:c7:1e:8a:f7: 10:70:8b:fa:18:91:c8:39:6b:72:d0:91:fe:f1:67:78:8c:d4: e8:c6:5a:ff:8b:41:38:af:d8:be:3f:3b:7c:19:28:27:36:a2: 2c:52:8e:b6:dc:df:d5:30:93:0d:db:cc:d0:1b:40:18:ab:e4: e1:1b:ed:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FR2H5vg8hWz2a1yb//W6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDcwZWVjYjFmMWJlMDUyNTI1MTQyZjYwYTBiNTlkYTVm MTgxNTYwHhcNMjYwMTAyMTQyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWUwMTVlMWU2MWM2YWMxYTU4MTEzODMxMjkwNDY2YTY2MTllYTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHtwPPwbJaiZ7ahrhQQcgC9HoKbW qS22WwvBjiYVc4sEBE6ff0WPVit1SD+l/CCZRKdP4OFXvG8cKru9G58NsMKPuMzH Kd/UgnWsXaY6QBpkE20WO0M74CnMHqckJ5z30O26Tak8ullwNXC6WuojfAhyi0U6 Q0KncKvQxXpOLvzawEzyeoFl8UieyUBBeP4QlCVwTi9eqGfr55QHFqH1HzUfwe2J zHKwXX1Sxabwd//aomTtQUU152PlRIRveFdd1R1pC+PG3uqoEzIhMtyG0Zv68zWg FzPcz5K2hiHQpbY3MbYqdMpDf482WaUC2dj0hjXqUcmoNHWgUZZHQuDBqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKrgFeHmHGrBpYETgxKQRmpmGeodMB8GA1UdIwQY MBaAFPxHDuyx8b4FJSUUL2CgtZ2l8YFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ZjgyZDQtMmVjMy00NGE1LThkYjUt Y2E3ZDA0ZTI5MTZjLzEvcXVBVjRlWWNhc0dsZ1JPREVwQkdhbVlaNmgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS82ZjgyZDQtMmVjMy00NGE1LThkYjUtY2E3ZDA0ZTI5MTZj LzEvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRPJMA0G CSqGSIb3DQEBCwUAA4IBAQC6cJRXOU0rgsStG8PFQqOkaOIr/w02fPxqAWlRYKeH ftzyBaR3O/NSRx5JpagfLz+7AbvE+eJM65YcVxkbV0Rj88+gFh07AGwynujUMh8g aIzCstIQWRrA27fo6IUK9h6yHv2uw8w023VQgY0jXhuIEzs8ApLMBwGzOcZqKIUK P84MbQ6J9phe6trvIB0x5lH10qvojjwvtwXxRQVxVmB1tkv+uHwfuceVTB5spugW nBCLKPlgSVNcJfhCPB2IR/poI8ceivcQcIv6GJHIOWty0JH+8Wd4jNToxlr/i0E4 r9i+Pzt8GSgnNqIsUo623N/VMJMN28zQG0AYq+ThG+1z -----END CERTIFICATE-----Generated at Mon Jan 26 22:57:24 2026 by rpki-client