This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/QSgiyH11wyAURvatj9-ZAc4hYVY.roa File: QSgiyH11wyAURvatj9-ZAc4hYVY.roa (raw, json) Hash identifier: clDL8JVxHAo7Ey2O322dbo1WNKZNfLWVEI2vSjSdkIA= Subject key identifier: 41:28:22:C8:7D:75:C3:20:14:46:F6:AD:8F:DF:99:01:CE:21:61:56 Certificate issuer: /CN=625b5cf9e29912448cbbbc86d20561899cdb104d Certificate serial: 019B7AC8BC2C7EA63775B318038DF4C60CEE Authority key identifier: 62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/QSgiyH11wyAURvatj9-ZAc4hYVY.roa Signing time: Thu 01 Jan 2026 18:18:54 +0000 ROA not before: Thu 01 Jan 2026 18:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49173 IP address blocks: 185.141.240.0/22 maxlen: 22 194.146.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:bc:2c:7e:a6:37:75:b3:18:03:8d:f4:c6:0c:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=625b5cf9e29912448cbbbc86d20561899cdb104d Validity Not Before: Jan 1 18:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=412822c87d75c3201446f6ad8fdf9901ce216156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d0:76:09:94:44:f8:d9:b5:43:cf:26:e8:fc: 0e:c4:65:c8:71:12:45:9d:42:8f:19:76:79:f5:c6: 92:fa:3e:67:71:1f:4a:de:4a:0b:2e:a7:a4:6e:82: fe:c7:4a:d0:1e:75:b4:eb:a4:5b:d7:03:c2:35:a9: 58:92:2e:be:d8:84:b5:c6:48:a7:b3:95:11:ce:a3: a3:4c:70:2a:e7:4b:1c:02:f1:1a:8a:3b:82:c5:76: 38:a4:e1:a1:47:3f:8c:e6:36:8c:de:15:96:e0:32: f3:b8:a8:cd:bc:5a:be:b1:fb:c3:ca:6d:bf:bc:60: 92:82:37:e6:a7:7c:ba:73:d2:7c:00:c3:fd:1c:2c: 1a:df:a7:3f:9c:fa:52:eb:29:b1:75:dc:32:7b:19: cd:a2:55:ce:cc:83:9e:0d:03:14:00:8f:64:8b:a5: e7:1f:67:a9:82:9e:d7:01:b2:e4:96:dd:0d:42:87: 2d:0c:18:0b:70:e9:6a:66:49:72:ab:b7:70:60:80: 7e:bc:58:1a:fb:b4:b4:ae:4f:80:90:ab:a0:76:b2: fa:b2:cf:02:c1:97:6f:02:26:59:fb:74:54:dc:5b: a6:b1:96:8f:06:5a:ec:88:21:a9:36:c3:01:40:be: 0d:47:9a:26:68:11:85:96:63:f6:60:b4:a5:c8:8f: f4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:28:22:C8:7D:75:C3:20:14:46:F6:AD:8F:DF:99:01:CE:21:61:56 X509v3 Authority Key Identifier: keyid:62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/QSgiyH11wyAURvatj9-ZAc4hYVY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.240.0/22 194.146.28.0/22 Signature Algorithm: sha256WithRSAEncryption 73:31:98:b6:12:91:11:5b:68:d5:f1:75:bf:35:37:c5:68:f3: 1c:d3:51:f0:5d:30:d5:09:fa:19:93:07:8f:ce:58:98:e8:76: d5:0e:a4:6d:c7:be:e5:71:81:84:9b:6d:90:90:4d:a2:7d:b4: 42:39:82:79:d8:5b:f3:b2:5a:a0:dc:83:da:68:e5:c9:63:fb: ef:82:ac:0f:e1:58:e8:da:d7:69:77:16:90:f4:28:2a:18:36: 13:e1:be:64:5a:b6:e4:f4:d9:2f:1d:8d:92:37:e6:fe:a1:25: 59:22:8d:a6:97:c8:e3:a6:d2:d1:9e:47:d8:fd:86:fb:97:89: 0f:34:9d:d9:b3:41:80:4c:0b:04:00:62:a7:8b:76:bf:a3:56: 86:80:d3:42:28:ba:36:73:6e:5b:3a:68:c3:34:6e:60:19:6c: 1a:f5:8d:4d:92:e2:7d:07:13:69:7d:96:98:c1:35:fb:6a:0e: be:0c:4d:a2:ff:82:47:06:be:15:6e:3d:20:f0:f7:41:3f:bb: 48:21:7a:bc:9b:50:36:20:03:09:b3:8a:ee:ae:fb:5a:83:63: b6:06:af:1b:e1:28:db:62:f1:67:c2:a7:91:33:94:0e:91:4f: f0:9f:e7:25:74:f2:d6:a5:e5:5e:ce:86:e0:5f:65:ae:09:03: 47:ad:d7:16 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yLwsfqY3dbMYA430xgzuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNWI1Y2Y5ZTI5OTEyNDQ4Y2JiYmM4NmQyMDU2MTg5OWNk YjEwNGQwHhcNMjYwMTAxMTgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTI4MjJjODdkNzVjMzIwMTQ0NmY2YWQ4ZmRmOTkwMWNlMjE2MTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9B2CZRE+Nm1Q88m6PwOxGXIcRJF nUKPGXZ59caS+j5ncR9K3koLLqekboL+x0rQHnW066Rb1wPCNalYki6+2IS1xkin s5URzqOjTHAq50scAvEaijuCxXY4pOGhRz+M5jaM3hWW4DLzuKjNvFq+sfvDym2/ vGCSgjfmp3y6c9J8AMP9HCwa36c/nPpS6ymxddwyexnNolXOzIOeDQMUAI9ki6Xn H2epgp7XAbLklt0NQoctDBgLcOlqZklyq7dwYIB+vFga+7S0rk+AkKugdrL6ss8C wZdvAiZZ+3RU3FumsZaPBlrsiCGpNsMBQL4NR5omaBGFlmP2YLSlyI/0SwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEEoIsh9dcMgFEb2rY/fmQHOIWFWMB8GA1UdIwQY MBaAFGJbXPnimRJEjLu8htIFYYmc2xBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85N2NjYWItZDBjOC00MmU4LTg3MjUt YTU4NmIwN2FkZDcyLzEvUVNnaXlIMTF3eUFVUnZhdGo5LVpBYzRoWVZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy85N2NjYWItZDBjOC00MmU4LTg3MjUtYTU4NmIwN2FkZDcy LzEvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuY3wAwQC wpIcMA0GCSqGSIb3DQEBCwUAA4IBAQBzMZi2EpERW2jV8XW/NTfFaPMc01HwXTDV CfoZkwePzliY6HbVDqRtx77lcYGEm22QkE2ifbRCOYJ52Fvzslqg3IPaaOXJY/vv gqwP4Vjo2tdpdxaQ9CgqGDYT4b5kWrbk9NkvHY2SN+b+oSVZIo2ml8jjptLRnkfY /Yb7l4kPNJ3Zs0GATAsEAGKni3a/o1aGgNNCKLo2c25bOmjDNG5gGWwa9Y1NkuJ9 BxNpfZaYwTX7ag6+DE2i/4JHBr4Vbj0g8PdBP7tIIXq8m1A2IAMJs4rurvtag2O2 Bq8b4SjbYvFnwqeRM5QOkU/wn+cldPLWpeVezobgX2WuCQNHrdcW -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:10 2026 by rpki-client