This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/QicJb4tBJvgYwQclT6wKiWs8OUY.roa File: QicJb4tBJvgYwQclT6wKiWs8OUY.roa (raw, json) Hash identifier: yjvitWfW4JWqjrdicd13TaiYp4fgxWdS63juZbv/qJI= Subject key identifier: 42:27:09:6F:8B:41:26:F8:18:C1:07:25:4F:AC:0A:89:6B:3C:39:46 Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189 Certificate serial: 019B7CED565C036DE87B15DD933439542A3C Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/QicJb4tBJvgYwQclT6wKiWs8OUY.roa Signing time: Fri 02 Jan 2026 04:18:07 +0000 ROA not before: Fri 02 Jan 2026 04:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48314 IP address blocks: 185.62.150.0/23 maxlen: 23 185.248.148.0/22 maxlen: 22 2a03:567::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:56:5c:03:6d:e8:7b:15:dd:93:34:39:54:2a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189 Validity Not Before: Jan 2 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4227096f8b4126f818c107254fac0a896b3c3946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ab:18:8d:9b:f2:f9:89:10:a9:87:5b:b8:ad: cb:1a:38:7d:9c:7a:c7:91:16:1f:07:3a:da:4b:2b: 90:6e:65:95:e5:c2:bc:ef:58:67:a0:a5:7a:49:dc: 72:cc:fd:6b:f7:a9:15:26:73:95:8e:ba:72:4e:6b: f8:82:b4:47:d2:f2:aa:68:2c:85:3b:a4:2f:cd:72: bb:78:d1:56:ca:3c:a7:49:f9:d7:a2:8d:eb:45:5b: ad:b2:5b:41:f3:3c:03:61:54:d3:1e:a7:ef:02:5e: 1f:12:80:89:f7:53:85:7e:0e:e1:a1:bd:c6:4e:a0: 4e:f8:8f:06:33:e1:79:3b:18:83:36:84:22:49:d2: 6e:86:e0:52:08:eb:83:ad:c3:00:aa:fe:55:bd:3f: 74:0c:97:08:c3:e5:fa:55:b4:b5:93:42:ad:21:94: 72:10:38:22:70:33:ce:58:65:f7:f3:52:59:c7:9f: 43:96:6e:98:bf:f1:c4:99:03:f6:1d:b1:9f:c4:26: ff:48:6e:12:4a:17:24:4c:f7:d1:52:84:8a:dd:01: c4:59:9c:58:09:aa:83:ba:b6:c1:ad:99:bb:61:26: f1:22:0f:2a:6c:64:8f:8c:6c:66:69:a8:a1:cd:d6: 64:7d:09:c8:8c:93:44:d6:d3:9a:d8:3c:19:f5:69: 94:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:27:09:6F:8B:41:26:F8:18:C1:07:25:4F:AC:0A:89:6B:3C:39:46 X509v3 Authority Key Identifier: keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/QicJb4tBJvgYwQclT6wKiWs8OUY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.150.0/23 185.248.148.0/22 IPv6: 2a03:567::/32 Signature Algorithm: sha256WithRSAEncryption 95:08:cb:3c:cc:56:36:1b:50:1b:2a:88:59:32:b0:76:61:78: ca:c8:b8:1c:2c:36:a8:56:5a:df:81:b7:7d:dc:6b:bb:74:04: e6:32:e3:b8:0d:3d:38:e8:9d:a3:aa:39:49:16:a9:d9:b4:22: 36:18:a1:5f:b5:14:7a:45:54:17:37:3d:a0:4a:78:93:53:03: 68:a6:d9:ac:23:a2:a8:84:66:56:33:cd:28:b0:55:24:73:fa: f0:5b:82:75:a1:fc:4d:e6:56:4c:0e:06:fd:37:da:18:e9:4a: d7:71:99:bd:15:fe:db:f0:ae:ee:70:c8:4c:11:68:cf:d1:98: b2:ff:e8:14:12:d8:e8:43:02:43:5f:0a:9e:36:ec:74:df:c0: ee:13:2c:fa:6b:c0:54:23:79:e4:8c:b0:09:38:54:e5:27:82: 56:f2:a8:cc:17:a5:8a:e9:05:b1:c0:03:96:88:77:45:74:8e: fc:73:9f:49:b8:38:7b:bf:84:0c:ad:1b:14:21:29:9f:39:0b: 61:f8:8c:8a:c1:7c:83:3c:91:f1:11:8c:61:a8:52:e7:84:b1: c2:a7:73:e0:ef:da:e2:91:7d:ea:df:73:f6:47:64:29:d8:19: f7:49:65:a1:b8:d6:76:30:c9:ff:42:65:10:6d:f6:cb:e7:a0: 8c:a9:06:38 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87VZcA23oexXdkzQ5VCo8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNzViYzczNzlmMTE1YjA2NzE1NTJjOWJhZjJiZWQ4NWJk ZTgxODkwHhcNMjYwMTAyMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjI3MDk2ZjhiNDEyNmY4MThjMTA3MjU0ZmFjMGE4OTZiM2MzOTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qsYjZvy+YkQqYdbuK3LGjh9nHrH kRYfBzraSyuQbmWV5cK871hnoKV6SdxyzP1r96kVJnOVjrpyTmv4grRH0vKqaCyF O6QvzXK7eNFWyjynSfnXoo3rRVutsltB8zwDYVTTHqfvAl4fEoCJ91OFfg7hob3G TqBO+I8GM+F5OxiDNoQiSdJuhuBSCOuDrcMAqv5VvT90DJcIw+X6VbS1k0KtIZRy EDgicDPOWGX381JZx59Dlm6Yv/HEmQP2HbGfxCb/SG4SShckTPfRUoSK3QHEWZxY CaqDurbBrZm7YSbxIg8qbGSPjGxmaaihzdZkfQnIjJNE1tOa2DwZ9WmU0QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEInCW+LQSb4GMEHJU+sColrPDlGMB8GA1UdIwQY MBaAFC91vHN58RWwZxVSybryvthb3oGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84MTBkMjktMGM4NS00MDU3LWI2MjYt YWYwZTQxN2Q0YzNhLzEvUWljSmI0dEJKdmdZd1FjbFQ2d0tpV3M4T1VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi84MTBkMjktMGM4NS00MDU3LWI2MjYtYWYwZTQxN2Q0YzNh LzEvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBuT6WAwQC ufiUMA0EAgACMAcDBQAqAwVnMA0GCSqGSIb3DQEBCwUAA4IBAQCVCMs8zFY2G1Ab KohZMrB2YXjKyLgcLDaoVlrfgbd93Gu7dATmMuO4DT046J2jqjlJFqnZtCI2GKFf tRR6RVQXNz2gSniTUwNoptmsI6KohGZWM80osFUkc/rwW4J1ofxN5lZMDgb9N9oY 6UrXcZm9Ff7b8K7ucMhMEWjP0Ziy/+gUEtjoQwJDXwqeNux038DuEyz6a8BUI3nk jLAJOFTlJ4JW8qjMF6WK6QWxwAOWiHdFdI78c59JuDh7v4QMrRsUISmfOQth+IyK wXyDPJHxEYxhqFLnhLHCp3Pg79rikX3q33P2R2Qp2Bn3SWWhuNZ2MMn/QmUQbfbL 56CMqQY4 -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:17 2026 by rpki-client