This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qlZL4R6B8L-wWnyfd151fJQKWFU.roa File: qlZL4R6B8L-wWnyfd151fJQKWFU.roa (raw, json) Hash identifier: FanMbZvoNc+KL+OvHBlbDFOdeSmBrNwqD/1cCrR88AU= Subject key identifier: AA:56:4B:E1:1E:81:F0:BF:B0:5A:7C:9F:77:5E:75:7C:94:0A:58:55 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12ECA4174C3E168F9EF135637AE88A Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qlZL4R6B8L-wWnyfd151fJQKWFU.roa Signing time: Fri 02 Jan 2026 00:19:33 +0000 ROA not before: Fri 02 Jan 2026 00:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204579 IP address blocks: 185.13.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ec:a4:17:4c:3e:16:8f:9e:f1:35:63:7a:e8:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa564be11e81f0bfb05a7c9f775e757c940a5855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:84:0b:3f:69:1b:0f:5f:45:22:ea:68:a4:77: 92:dc:d6:bf:7e:cf:e0:70:60:b3:d7:cc:af:11:55: d0:42:f1:cf:7e:ed:aa:22:d8:51:4e:d0:ec:ef:52: c7:7e:74:a1:4d:d4:5a:8c:c0:fe:ba:31:fc:f4:88: 94:0d:ff:75:ce:f0:47:d1:13:44:a1:45:e5:20:68: 53:1e:50:40:0f:99:7a:0b:c8:3b:51:4e:7e:68:89: 30:3d:be:93:fd:2c:95:aa:d2:81:5c:c8:19:a6:10: 06:6a:02:e3:ef:ba:82:f3:73:9b:c1:90:de:c5:da: b7:80:d7:cd:36:47:57:07:a0:86:85:df:6a:16:99: 09:69:4e:39:66:7c:65:d8:f8:44:1c:b1:64:c4:ee: 1a:63:b1:a4:2f:8d:9f:03:83:31:52:01:52:ca:2d: 04:6e:97:bd:ca:48:83:3b:d9:bc:3a:b9:af:d8:c6: cc:24:d5:5a:2e:af:37:e8:68:77:02:ed:bc:56:fe: 7f:76:e2:5e:8e:e5:92:a2:ca:5b:c9:f5:af:fa:3a: 43:ae:80:95:8a:d2:d5:f3:de:f0:6b:0f:3d:bc:3a: e3:54:09:a6:1c:ce:43:a8:ba:ec:62:d0:03:f2:aa: f9:aa:25:6d:48:42:69:3a:57:b4:a1:b1:d3:92:e1: ca:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:56:4B:E1:1E:81:F0:BF:B0:5A:7C:9F:77:5E:75:7C:94:0A:58:55 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qlZL4R6B8L-wWnyfd151fJQKWFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.13.158.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:91:58:96:a2:4f:6a:76:3f:5d:98:22:ed:f0:f6:b8:a1:7d: d4:f2:30:9e:e1:f1:83:c0:72:c9:56:2e:96:34:79:04:00:f2: 7b:b9:06:98:37:f8:43:af:ab:ff:10:5d:2c:69:f2:a4:ed:60: dc:35:54:7d:92:68:06:53:6a:37:ab:3f:ee:4c:a7:00:75:b2: 2e:eb:dd:85:25:69:a0:d9:90:79:c6:6e:8b:bf:fd:59:4a:86: 51:2c:36:52:5d:69:13:80:ff:f9:6a:fa:0b:e4:06:e3:60:19: e9:3c:8c:4d:36:ce:b1:82:71:c4:de:8f:ea:51:05:5f:17:0c: 0b:d8:66:a2:66:e4:bc:bc:86:1c:a5:23:3b:ab:58:a3:65:79: 3b:c2:b7:a2:e2:a0:ba:85:0a:86:c7:2e:b4:6f:fb:ca:a9:8b: 72:da:1b:c3:03:61:eb:33:d2:b4:5a:00:6a:46:99:13:c5:30: c1:43:08:83:c0:ad:d2:f5:34:ef:c8:83:7e:f1:58:87:49:50: f2:6c:b7:59:c8:63:f7:52:bc:56:98:37:5b:78:2e:d1:68:9c: 7b:58:fd:ca:e6:77:e9:23:72:70:2a:15:00:ec:46:21:b9:b7: ef:3d:d8:11:cb:3f:18:4c:3c:81:ac:3d:0c:39:b6:77:4b:47: d8:45:98:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EuykF0w+Fo+e8TVjeuiKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTU2NGJlMTFlODFmMGJmYjA1YTdjOWY3NzVlNzU3Yzk0MGE1ODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIQLP2kbD19FIupopHeS3Na/fs/g cGCz18yvEVXQQvHPfu2qIthRTtDs71LHfnShTdRajMD+ujH89IiUDf91zvBH0RNE oUXlIGhTHlBAD5l6C8g7UU5+aIkwPb6T/SyVqtKBXMgZphAGagLj77qC83ObwZDe xdq3gNfNNkdXB6CGhd9qFpkJaU45Znxl2PhEHLFkxO4aY7GkL42fA4MxUgFSyi0E bpe9ykiDO9m8Ormv2MbMJNVaLq836Gh3Au28Vv5/duJejuWSospbyfWv+jpDroCV itLV897waw89vDrjVAmmHM5DqLrsYtAD8qr5qiVtSEJpOle0obHTkuHKGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKpWS+EegfC/sFp8n3dedXyUClhVMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvcWxaTDRSNkI4TC13V255ZmQxNTFmSlFLV0ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ2eMA0G CSqGSIb3DQEBCwUAA4IBAQAPkViWok9qdj9dmCLt8Pa4oX3U8jCe4fGDwHLJVi6W NHkEAPJ7uQaYN/hDr6v/EF0safKk7WDcNVR9kmgGU2o3qz/uTKcAdbIu692FJWmg 2ZB5xm6Lv/1ZSoZRLDZSXWkTgP/5avoL5AbjYBnpPIxNNs6xgnHE3o/qUQVfFwwL 2GaiZuS8vIYcpSM7q1ijZXk7wrei4qC6hQqGxy60b/vKqYty2hvDA2HrM9K0WgBq RpkTxTDBQwiDwK3S9TTvyIN+8ViHSVDybLdZyGP3UrxWmDdbeC7RaJx7WP3K5nfp I3JwKhUA7EYhubfvPdgRyz8YTDyBrD0MObZ3S0fYRZh/ -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:24 2026 by rpki-client