This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/Q2WoaYJ2Mj_7G7I9Y6I4pPLLJi8.roa File: Q2WoaYJ2Mj_7G7I9Y6I4pPLLJi8.roa (raw, json) Hash identifier: heDfoYDNIQ7bB0XJ90BIyZD9NkiqghbSq/mIzF+Kcns= Subject key identifier: 43:65:A8:69:82:76:32:3F:FB:1B:B2:3D:63:A2:38:A4:F2:CB:26:2F Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea Certificate serial: 019B797F43A14E3CD9B10CC42FB8B47994F8 Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/Q2WoaYJ2Mj_7G7I9Y6I4pPLLJi8.roa Signing time: Thu 01 Jan 2026 12:19:02 +0000 ROA not before: Thu 01 Jan 2026 12:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31486 IP address blocks: 185.96.170.0/24 maxlen: 24 2a06:9140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:43:a1:4e:3c:d9:b1:0c:c4:2f:b8:b4:79:94:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea Validity Not Before: Jan 1 12:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4365a8698276323ffb1bb23d63a238a4f2cb262f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:05:23:97:04:3c:3f:5b:ab:60:5f:49:b9:64: d1:9e:c0:26:ff:74:fe:7e:d5:77:37:50:c9:4a:00: b4:94:02:05:31:26:40:46:6a:84:44:50:5e:b4:0b: 04:d1:f4:79:57:89:fb:b3:79:61:29:25:62:59:b0: 0f:fd:28:21:37:85:5f:ee:c7:14:ea:6e:2a:06:8c: 06:ae:41:b8:68:02:7c:e3:b7:09:e3:65:ad:e8:e2: e4:b9:bf:79:8d:30:cd:b6:5c:02:77:87:ed:bd:6f: 5f:aa:fe:6f:b8:40:c2:57:b0:5f:60:6e:37:c0:29: fc:2e:83:b8:9f:c0:71:a9:a0:c4:3d:0f:07:bf:3b: 5e:c5:16:f6:17:df:52:49:46:b9:88:db:31:b8:5d: e3:bc:ff:ed:d3:cf:0d:90:bc:1b:eb:7d:9a:f3:b3: 7a:a2:bb:55:76:68:70:b4:d4:34:72:72:d6:2e:da: bf:c4:7f:08:7d:d9:49:98:6d:36:97:f0:7b:c5:ee: 3b:1e:3b:3b:21:c1:af:ca:bc:96:84:0f:64:af:c4: 0f:0c:b3:af:8b:c8:99:12:3a:86:26:e3:d9:aa:45: 69:5e:4d:41:11:f6:e0:1b:06:89:41:23:84:93:4a: 70:1e:f2:f5:c4:61:fc:72:59:ea:aa:41:2e:3b:cd: 03:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:65:A8:69:82:76:32:3F:FB:1B:B2:3D:63:A2:38:A4:F2:CB:26:2F X509v3 Authority Key Identifier: keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/Q2WoaYJ2Mj_7G7I9Y6I4pPLLJi8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.96.170.0/24 IPv6: 2a06:9140::/29 Signature Algorithm: sha256WithRSAEncryption 4a:26:41:75:3e:67:e1:c0:26:fe:b7:36:c9:75:ea:50:d9:ba: 4e:bc:90:3b:b2:df:3d:42:ad:e3:02:59:bd:97:2a:63:1f:d8: 9e:ed:f7:47:5f:1e:3a:14:3f:6d:ea:d9:7d:60:4d:16:a8:a7: 05:14:26:37:1b:02:37:e9:d5:48:23:ec:4a:99:a3:c4:45:34: 9b:5c:f0:79:e7:35:68:77:25:31:c3:dd:01:3e:9b:c5:87:0c: c1:8b:8c:27:dd:72:f8:76:09:75:13:4e:a8:54:f0:cc:2d:a2: 44:62:ba:36:c2:17:9d:13:03:a0:87:2c:a5:09:51:2e:a5:be: a6:5b:e8:58:c4:c6:23:b2:42:7f:a1:65:a0:bc:9b:79:2f:e0: f3:a9:c3:cd:6a:23:be:55:d1:c1:b7:11:c3:72:d6:2f:87:cb: 95:9e:97:41:2d:c9:f8:9b:1d:9f:f4:7a:bc:56:eb:a9:23:2c: 6e:7d:3e:ff:11:da:f4:2b:c9:3c:60:af:88:8f:a9:c6:a7:a7: f9:4f:93:d5:29:fe:4a:7a:70:73:88:30:82:25:7b:ee:7a:b1: c6:32:47:28:c6:41:55:aa:53:c1:79:6f:9f:85:b4:42:2c:ce: 4b:88:0a:a6:f5:24:57:13:a3:da:12:98:d8:65:9d:93:c0:6f: be:60:44:0c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5f0OhTjzZsQzEL7i0eZT4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MDE4MTVjNmY5OGYzYTJiNjE4NGFmZWJmMThlYTM0MWJl ODgyZWEwHhcNMjYwMTAxMTIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzY1YTg2OTgyNzYzMjNmZmIxYmIyM2Q2M2EyMzhhNGYyY2IyNjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AUjlwQ8P1urYF9JuWTRnsAm/3T+ ftV3N1DJSgC0lAIFMSZARmqERFBetAsE0fR5V4n7s3lhKSViWbAP/SghN4Vf7scU 6m4qBowGrkG4aAJ847cJ42Wt6OLkub95jTDNtlwCd4ftvW9fqv5vuEDCV7BfYG43 wCn8LoO4n8BxqaDEPQ8HvztexRb2F99SSUa5iNsxuF3jvP/t088NkLwb632a87N6 ortVdmhwtNQ0cnLWLtq/xH8IfdlJmG02l/B7xe47Hjs7IcGvyryWhA9kr8QPDLOv i8iZEjqGJuPZqkVpXk1BEfbgGwaJQSOEk0pwHvL1xGH8clnqqkEuO80DcQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFENlqGmCdjI/+xuyPWOiOKTyyyYvMB8GA1UdIwQY MBaAFOUBgVxvmPOithhK/r8Y6jQb6ILqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWIt MDA1OWY3MzdlZjA1LzEvUTJXb2FZSjJNal83RzdJOVk2STRwUExMSmk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWItMDA1OWY3MzdlZjA1 LzEvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuWCqMA0E AgACMAcDBQMqBpFAMA0GCSqGSIb3DQEBCwUAA4IBAQBKJkF1PmfhwCb+tzbJdepQ 2bpOvJA7st89Qq3jAlm9lypjH9ie7fdHXx46FD9t6tl9YE0WqKcFFCY3GwI36dVI I+xKmaPERTSbXPB55zVodyUxw90BPpvFhwzBi4wn3XL4dgl1E06oVPDMLaJEYro2 whedEwOghyylCVEupb6mW+hYxMYjskJ/oWWgvJt5L+DzqcPNaiO+VdHBtxHDctYv h8uVnpdBLcn4mx2f9Hq8VuupIyxufT7/Edr0K8k8YK+Ij6nGp6f5T5PVKf5KenBz iDCCJXvuerHGMkcoxkFVqlPBeW+fhbRCLM5LiAqm9SRXE6PaEpjYZZ2TwG++YEQM -----END CERTIFICATE-----Generated at Wed Jan 21 13:33:54 2026 by rpki-client