This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/QxRT0q4FzTnTcacN8tWvzsCAarc.roa File: QxRT0q4FzTnTcacN8tWvzsCAarc.roa (raw, json) Hash identifier: XiEdwKLVvGeQdfVFaF47mebbaJXtp25EOB5RwY48keA= Subject key identifier: 43:14:53:D2:AE:05:CD:39:D3:71:A7:0D:F2:D5:AF:CE:C0:80:6A:B7 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 019B7D5C95192C1F7C458EE250D664520B68 Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/QxRT0q4FzTnTcacN8tWvzsCAarc.roa Signing time: Fri 02 Jan 2026 06:19:38 +0000 ROA not before: Fri 02 Jan 2026 06:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.148.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:95:19:2c:1f:7c:45:8e:e2:50:d6:64:52:0b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Jan 2 06:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=431453d2ae05cd39d371a70df2d5afcec0806ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a0:30:55:06:ce:f8:69:ea:cf:cd:13:c2:d7: 12:53:57:77:e9:68:b5:af:25:0b:98:a6:bb:1a:11: 4b:be:1b:da:f9:dc:e4:59:e2:d7:19:2f:33:3f:fa: 14:8f:6e:dc:8a:b6:13:9c:68:0d:8d:10:17:e5:35: fd:37:94:df:96:87:52:f6:9b:b5:5d:2d:b9:fb:b4: 65:36:fe:72:3e:f3:c7:09:7f:8d:fd:0b:0e:f3:aa: 2a:0d:4c:c1:4f:6f:a9:fd:d2:5c:40:ff:07:8f:d2: 5f:6b:2a:a6:14:95:e1:56:65:84:5b:8e:f6:0c:d4: 80:7a:ae:62:29:1b:2c:56:b4:47:30:18:96:a3:20: 6c:fd:cd:7c:13:d1:9a:a2:d5:54:a0:b9:eb:a1:e3: ce:ea:12:84:49:28:4d:f8:69:fe:1e:49:b0:9b:9a: 44:cf:a7:94:e9:8b:32:38:3c:82:db:da:4b:7a:f7: 6f:68:1a:7a:29:9f:88:9e:0e:e7:15:4b:2b:db:f4: 45:b4:22:70:fe:a3:69:74:10:20:64:4b:73:f4:a8: e2:4c:5f:df:f5:c1:57:a2:6c:91:f6:6e:4a:9f:4c: ff:91:e5:f0:01:21:57:8e:fb:5e:00:03:4d:5a:14: a7:ec:b9:21:ba:f0:0b:a3:5c:5e:06:77:bc:64:ab: 45:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:14:53:D2:AE:05:CD:39:D3:71:A7:0D:F2:D5:AF:CE:C0:80:6A:B7 X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/QxRT0q4FzTnTcacN8tWvzsCAarc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.148.68.0/23 Signature Algorithm: sha256WithRSAEncryption 05:a5:4a:c7:ba:26:26:d5:a7:48:ad:54:8c:77:f2:61:b6:b2: 07:8e:c8:58:52:6c:6f:80:e8:11:28:d8:ed:9b:fb:19:e7:0b: 51:e9:cb:78:22:9a:5b:e9:0e:09:84:d5:eb:e3:b7:b7:f0:14: 79:14:6c:ca:e1:9a:25:be:28:66:3e:fc:32:f4:78:1a:60:51: 5b:65:69:4d:c3:c5:e3:2a:e9:74:f0:e5:9c:55:49:92:41:d8: b5:35:bb:31:de:53:5e:a9:2a:53:6d:85:dd:fa:ad:ae:f1:f0: 01:26:f7:45:09:b3:d8:78:5a:79:5d:6a:29:4f:94:b7:d0:1b: 25:8f:3f:09:80:fc:b8:59:bb:99:e6:1b:8f:e9:bf:6d:5e:12: f1:90:c9:4e:21:32:87:bd:7b:e3:0e:68:f1:1f:c2:1a:ea:78: 2a:92:45:9d:47:8b:65:75:6e:a7:9e:a6:0c:28:33:5b:af:e7: 0e:04:4b:dd:db:6a:e0:e3:d5:9b:21:f3:05:a8:51:87:0e:67: 38:af:d6:62:a4:d5:af:0c:7a:d5:45:c9:ff:f6:94:9e:31:13: 8b:b0:d1:f2:ef:cc:a2:dc:0a:74:90:16:d6:7f:73:14:26:1f: a8:dd:ae:e6:91:a3:8a:0b:7b:0b:33:33:54:f2:ea:f8:47:c9: f5:ad:40:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XJUZLB98RY7iUNZkUgtoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjYwMTAyMDYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzE0NTNkMmFlMDVjZDM5ZDM3MWE3MGRmMmQ1YWZjZWMwODA2YWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqAwVQbO+Gnqz80TwtcSU1d36Wi1 ryULmKa7GhFLvhva+dzkWeLXGS8zP/oUj27cirYTnGgNjRAX5TX9N5TflodS9pu1 XS25+7RlNv5yPvPHCX+N/QsO86oqDUzBT2+p/dJcQP8Hj9JfayqmFJXhVmWEW472 DNSAeq5iKRssVrRHMBiWoyBs/c18E9GaotVUoLnroePO6hKESShN+Gn+Hkmwm5pE z6eU6YsyODyC29pLevdvaBp6KZ+Ing7nFUsr2/RFtCJw/qNpdBAgZEtz9KjiTF/f 9cFXomyR9m5Kn0z/keXwASFXjvteAANNWhSn7LkhuvALo1xeBne8ZKtFEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEMUU9KuBc0503GnDfLVr87AgGq3MB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvUXhSVDBxNEZ6VG5UY2FjTjh0V3Z6c0NBYXJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZREMA0G CSqGSIb3DQEBCwUAA4IBAQAFpUrHuiYm1adIrVSMd/JhtrIHjshYUmxvgOgRKNjt m/sZ5wtR6ct4Ippb6Q4JhNXr47e38BR5FGzK4ZolvihmPvwy9HgaYFFbZWlNw8Xj Kul08OWcVUmSQdi1Nbsx3lNeqSpTbYXd+q2u8fABJvdFCbPYeFp5XWopT5S30Bsl jz8JgPy4WbuZ5huP6b9tXhLxkMlOITKHvXvjDmjxH8Ia6ngqkkWdR4tldW6nnqYM KDNbr+cOBEvd22rg49WbIfMFqFGHDmc4r9ZipNWvDHrVRcn/9pSeMROLsNHy78yi 3Ap0kBbWf3MUJh+o3a7mkaOKC3sLMzNU8ur4R8n1rUAj -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:46 2026 by rpki-client